last executing test programs: 50.830930643s ago: executing program 1 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f00000000c0)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000180)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0x720, 0x12) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000002000000001000000ffffffff40") r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000240)={@empty, @loopback}, 0x5) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 50.830334378s ago: executing program 1 (id=99): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0000, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x121800) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r4, 0x84, 0x7d, &(0x7f00000002c0)={0x2, 0x3ff}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000580)={r8, 0x4}, 0x8) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000240)={0x200, 0x6, @value=0xe3c}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r7) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0x280, 0x0, 0x1000, 0x3, 0x8001, 0x18, 0x0, {0x21a, 0xffff, 0x1}, {0x742, 0x1}, {0x5, 0x6}, {0x6, 0xfffffb02, 0x1000}, 0x1, 0x10, 0xc, 0x6, 0x1, 0x8, 0x6, 0x6, 0x1000, 0x1, 0x2, 0x1, 0x60, 0x200, 0x3, 0x4}) r9 = accept(0xffffffffffffffff, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x15895c4c2356f706}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) 50.699531408s ago: executing program 1 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x2c, 0x41, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0xc00, 0x4048011}, 0xc000) 50.650577975s ago: executing program 1 (id=104): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000880)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000008c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000900)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000940)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000980)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa07, &(0x7f00000009c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000280)='./bus\x00') unlink(&(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0x4, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x200008d2, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x5, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0xa83c, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x10, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x10001, 0x0, 0x0, 0x5, 0x1f, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x6, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x3, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d695, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0x8]}, 0x45c) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ppoll(&(0x7f0000000840)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x104) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$mtd(r3, &(0x7f0000000340)='n', 0x1) 50.52805916s ago: executing program 1 (id=109): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000540)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000580)={0x0, 0x1, @raw_data=[0x8, 0xff, 0x3, 0x6, 0xffffffff, 0x5, 0x0, 0xff, 0x2, 0x1000, 0x3, 0x68, 0x7a, 0x5fb1, 0x8a, 0x7fff]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x80000001, 0x4) r3 = creat(&(0x7f0000000600)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000640)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="8ef34bb2bac8dd"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000008c0)={0x1, 0x1, @raw_data=[0xe4, 0x7, 0x8, 0x2, 0x3, 0x4, 0x8, 0x9, 0x2, 0x0, 0x9, 0x58aba1d1, 0xa9b, 0x3ff, 0xe281, 0x101]}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r6, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r2, 0x1}, 0x20) r8 = syz_open_dev$dvb_frontend(&(0x7f0000001680), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000016c0)={0x3, &(0x7f0000001700)=[{0xa, '\x00', @data=0x8001, 0x7a7ce1c2}, {0x29, '\x00', @st={0x4, [{0x1, @svalue}, {0x3, @uvalue=0x85}, {0x2, @svalue=0x7}, {0x2, @uvalue=0x5}]}, 0x7ff}, {0x11, '\x00', @data, 0x800}]}) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000180)={0x34, &(0x7f0000000000)=[{0x38, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @svalue=0x7}, {0x3, @uvalue=0x1}, {0x2, @svalue=0xf16}]}}, {0x1f, '\x00', @buffer={"6de9cf8dd7b515949f03480e44db837d55a7106dcc08bd020cddabfa9e9d75ae", 0x20}, 0x8000}, {0x2f, '\x00', @st={0x4, [{0x1, @svalue=0x5}, {0x0, @svalue=0x3}, {0x0, @uvalue=0xffff}, {0x2, @svalue=0x400}]}, 0x3}, {0x3c, '\x00', @data=0x4b, 0x6}, {0x20, '\x00', @data=0x5, 0x8}]}) 50.280475591s ago: executing program 1 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x20004014) 50.224959642s ago: executing program 32 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x20004014) 44.49738388s ago: executing program 0 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES64=r0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002", @ANYRES8=r0], 0x40}}, 0x8080) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80c0}, 0x20048080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES64=r0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002", @ANYRES8=r0], 0x40}}, 0x8080) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80c0}, 0x20048080) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 44.43942385s ago: executing program 0 (id=205): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000079b0480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 44.318041534s ago: executing program 0 (id=207): creat(&(0x7f0000000780)='./file0\x00', 0x0) r0 = open(&(0x7f00000007c0)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r1 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000500)={0x1ff, 0x6b, 0x3, {0x5, @vbi={0x5, 0x10001, 0x3, 0x50323234, [0x2, 0x8], [0x10001, 0x5], 0x108}}, 0x4}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000010c0)=[@rdmsr={0x66, 0x18, {0x572}}], 0x18}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_create_resource$futex(&(0x7f0000000340)=0x1) r7 = syz_create_resource$futex(&(0x7f0000000380)=0x1) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) futex(r6, 0xb, 0x1, &(0x7f00000003c0), r7, 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x989046, 0x0) futex(r7, 0xc, 0x2, &(0x7f0000000480)={0x0, 0x989680}, r6, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x2080021, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x2) mount$bpf(0x200000000000, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x265000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x0, 0x3, {0xffffffffffffffff}, {0xee01}, 0x3, 0x7}) 43.858011248s ago: executing program 0 (id=217): r0 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000200)=""/153, 0x99, 0x0, &(0x7f00000002c0)=""/218, 0xda}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000140), 0x8) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, 0x0) 43.800062448s ago: executing program 0 (id=219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 42.99076577s ago: executing program 0 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2586dd60ffde2a004d0640fe8000000001000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="50180ffc90"], 0x0) 42.949447626s ago: executing program 33 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2586dd60ffde2a004d0640fe8000000001000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="50180ffc90"], 0x0) 13.100388404s ago: executing program 5 (id=596): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x444000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB="000018d1a0c05b2a9ff7e20000000000172c8509d2764b6ca26bff74e9", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004094) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000580)="0503e5fdd3fc14f9fd004788031c09102c28", 0x12, 0x4, &(0x7f00000005c0)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000700001002cbd7000fbdbdf2508000000", @ANYRES32=r10, @ANYBLOB="0c0001800800010066000200"], 0x24}, 0x1, 0x0, 0x0, 0x4400d}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x54, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0x5, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0xce}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x840) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) connect$inet6(r11, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000680)='bridge0\x00', 0x10) sendmmsg$inet6(r11, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r11, &(0x7f0000000780), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) 12.900756213s ago: executing program 5 (id=599): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900801f00000800"], 0x11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xcf) 10.239750255s ago: executing program 5 (id=631): setns(0xc9, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') read(r0, &(0x7f0000000300)=""/4096, 0x4f) (async) read$msr(r0, &(0x7f0000001300)=""/167, 0xa7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x25219}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0xf0) (async) write$mtd(0xffffffffffffffff, &(0x7f0000000000)="ac5d7b3c00145bd8", 0x8) 10.239576117s ago: executing program 5 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x80000001) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000340)='./bus\x00') unlink(&(0x7f0000000380)='./file0\x00') mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/console\x00', 0x1, 0x0) write$cgroup_pressure(r0, &(0x7f0000000240)={'full', 0x20, 0x7fffffffffffffff, 0x20, 0x6}, 0x2f) 10.168360894s ago: executing program 5 (id=633): r0 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x7, &(0x7f00000003c0)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x90) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = socket(0x1d, 0x2, 0x6) timer_create(0x4, &(0x7f0000000500)={0x0, 0x6, 0x0, @thr={&(0x7f0000000040)="c1e2f6f1a61336ef", &(0x7f0000000480)="148202ecfd0a1300bd1d078f4810d655894fe66be9439f127a81b290c42dd653ea718d396db8738f2e17c5df92b8a58f0c60ca980dc12eb2c4ff3b990565536e367df579e4c00cb58de61d9439"}}, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f00000005c0)="723a732f70202e2f66696c65303a300c5c22b9", 0x13) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000640)={{0x5, 0x4, 0x10, 0x9, '\x00', 0x100}, 0x4, 0x400, 0x6, r0, 0x1, 0x6, 'syz0\x00', &(0x7f0000000600)=['\x00'], 0x1}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000007c0)={&(0x7f0000000800)=@hci, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$sock(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)='1U', 0x2}], 0x1}, 0x1) close(r5) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98e47438", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf250d00000008003c00ff0f0000050038000000000008003900030000000800310008000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 9.860039846s ago: executing program 5 (id=635): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001", 0x29) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xf800000000000000) 9.812059172s ago: executing program 34 (id=635): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001", 0x29) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xf800000000000000) 1.920340834s ago: executing program 4 (id=723): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61) write$cgroup_int(r1, &(0x7f0000000100)=0x100000001, 0x12) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000440)=0x3b) 1.858679497s ago: executing program 4 (id=725): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fcntl$notify(0xffffffffffffffff, 0x402, 0x31) 1.858096631s ago: executing program 4 (id=727): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x4}, 0x4) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31, 0x4}, 0x50) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000180)) (async, rerun: 32) openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x300, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) 1.729955039s ago: executing program 3 (id=729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cifs\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000004c0)='./cifs\x00', &(0x7f0000000500)='cifs\x00', 0x40020000, &(0x7f0000000540)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000005c0)="00000080fe534d424000010000000000000001000100"/33, 0x21, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000680)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/120, 0x78, 0x0, 0x0, 0x0) 1.650270376s ago: executing program 4 (id=730): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="ea6c11362d4f752b0cda19582e4d02dae15ce806731548339f6f2709880cb25809f697d548fb2afd9f1c3828b2345494e3c88748308e3ff52d3a8c9197868e1cb650bdaab7d5627078c6ed78c234563e0461ae9d345a58f6e2536404dbf34049213c53d9a85d0170a09b17b935835ddfb0df6fdf72ac2fff8775046bb67ce931b08956cb1469652bb8c1d9bbdf2b104eaece821fbb4d9f2fc76756eded8f83246f7651b55d263040d54fa4685208a2f9fe", @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x40) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.53824514s ago: executing program 2 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x4000000}, 0x24004884) 1.538074302s ago: executing program 2 (id=733): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000440)=@sr0, &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600)='ntfs3\x00', 0x221000d, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x40) chdir(&(0x7f0000001b80)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='fuse\x00', 0x100001, 0x0) symlinkat(&(0x7f0000000100)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./drv\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf5}}, 0x7}, 0x1c) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e16120000c90001ce5c665fbabe0d64974ba4de1e9506783a388ec7a6591c2010b9bc0f171036658802710e56aee8d9b8617c1c6cffbe0b49b4c7aab9049e"], 0x9) syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x782) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f00000003c0), 0x5, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000740)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000780)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0xd66a, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000006c0)={{0x1, 0x0, 0xa63}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000440), 0xe09) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./drv/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='0000:00:1f.3', 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x100010, 0xffffffffffffffff, 0xdcfa7000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800007, 0x10, 0xffffffffffffffff, 0xd8b59000) 920.3638ms ago: executing program 2 (id=734): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020) 920.224107ms ago: executing program 2 (id=735): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="281effe935fdca24ffffff556ea6e5000020006c00797a81621071b300000000", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x18}}], 0x18}}], 0x2, 0x4800) 840.064829ms ago: executing program 2 (id=736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) sendmmsg(r0, &(0x7f00000079c0)=[{{&(0x7f0000002540)=@l2={0x1f, 0x885d, @any, 0x1, 0x2}, 0x80, &(0x7f0000003980)=[{&(0x7f00000025c0)="7738b1f349d81cb1eac9bce9c80f7dff720af64d00d1b733920c01610b62425b9364ed3b653115f15ce151d6e5536d3af92c036699c4ce9c4037a06e223b9edf842f0e7155644d9969709c2ece2fdc5915b1ada6b5bf3d75c291af99b1cf23f1ccc4c7c2497f760ad980238d0b5110b91ef5ec0377783fb738056937adf47bbf6cc889bf91a63840404d1e65e9c4ccd003042fc8b61a65e2171e3041dd5006e3f5b67d8b4b58bb29d1fa3f2c65170a3678e5ca03980d49dfdb3a481343752f15c47f8f75957f4c5247e057ca91c0ab66a3e8a595d44f6891", 0xd8}, {&(0x7f00000026c0)="149823d4b9409763e9c75b92fcb8f8737d5d3ca767e07a8e80c29d0d6a81c746885886aaa6778c640d518c44605c0e25004244ef9c80b3c75b501c93330e875d850d80f0cc5f73267bd42b87abd01d5cbd136ce904aa9c2ea6ca34cf8940ceb91ca4bbda14ec83f03a19cae161baa482b1a2b6d0b3b3df6938aca1ad46537a8e9c57c605b9c8d4ed84", 0x89}, {&(0x7f0000002780)="c20e1956d642b74a082e7fcd065ab335dcab7060576c1b8fa74ba3aaaf1fab39ecd4d31e700cefcb6269325d09d00c3d6f29428f2fdfd893db6791b20abf4877c3c59673793c6af6d840660626e0cde07e12b2cd52f6172754b6", 0x5a}, {&(0x7f0000002800)="f399688689020857dc2119774be9337b456b205af2b55c95153d2a5d6d35328b29a1f5fdd245c47901fc74b26f8de4e0ce134ecc31d70df7a0963f2bfa55df810c8a75c427242ae22f0686", 0x4b}, {&(0x7f0000002880)="81cab4a9dcd00edd2bfaa43183e05f12fe874da6b35aae7c96fdcedcff4caf3b5c940430ec06a18a618e5e164fe375d1ed8fd6b5b23df5c05ad96882a64c56a64db703d9ed56079a7cb9b05f8e47eb64d3b310c9529810106356abd5c577c3bf22ee55452eedce107b61398512dd6d1bbb333770a591bdfc4646aada5588d34e094474ee477923744240abaace509277a4b26d1ea5a6e0c6715d5fbc31", 0x9d}, {&(0x7f0000002940)="3868cafcbe3954752f25485f5bc29d07294fa556d8", 0x15}, {&(0x7f0000002980)="40d9a407d0454aa3be2dc43251a18bf239b64c57e1853fd5a8c5227eab60a7111a465ae10e2d629cfde8a58e830c1b0387a1ca07df6a69ed192f398a3c1fc77104730fabccb810c458788e556a51ff6f376e585f1b4a60ef13174901fb24b065a8bdbb509827c805a7d3d7b637688938902f21a29540e3132424ef972da4fe1408bfcb057e305e0352af2ce31f33043b49b26012291dd9bab49f43473a49642d9abefd9ffc0ffbb2c023d0a4fc611f6d9571d69ba125ebea3af619dcf0fe0a2acd8fcd2289bd7a9bc2856707f9e65f7719eb0284ee420bc489230e554f021ea626e5f77c5d822ffcaf51531b65f9216e62c9246575fa7e7b99c66325becc53ab4c72dc93688a426a0e8403db328329608dadf433ae1ce9f552ded9fd1e2575aa6245a517b94ab89cde79d160edd5a23641fa1eeebd75bf15a7bd301d5249a28e7cc30cc0df20d06f13f9fd19084fd294c4fb8b37ff8372c7104b11f7dcf35308c7148f71d66633936b5882695beed90dfbbdfae5ad055cfb90d074ccb30aae4db2912b955505cec8f4f3383e645f7c0c0ca9550a3179863d855e3aa2a847582f1e79b9e6f389bb5b8568482018482790283ff0807f5b21fa3a0dc983feabddb66b634dd6e85161487e3f2706e392896cb82ca61d06fe8f672b993b1944eea6ba50816ea9d044e8597b8cfdfbab579c9a5fd74586c349e702afc01aa6b3760a85c40d9ee9dc39b9a069ee0b91128dddcf0c85f7ef70d6a6fd9d46f4a96cf0806fa6378749bb826bf239c6cc2177429ab7ea0ef074684cc25d4e4c987707cd9c1494a1b64f974b8af77d71b9ee57a7bed2b3c52367837d27fabfb94fd5d20885126d68035c7d4a2631f4d57e629868e68cbe136b70f7163cdc588dd72ec903fff353569f081310a15ae3365ff7d8ce0d35ef7c990b00bef2e7f72d7d745d2bd1807f1b5422c2423ddeb514b4a4f3a7b7909d76d8d4305479ce72ce6a4344c9aecf4de38f88a74860c8cd11c301ec87e46ee68c06e316cc64856d6ed755aae2a6912b8332244d6402e216587c5b4d492af06db19498c7aaff9df8bfd437450f8537595d774195bffca7267f641707d3e39ff79ba9400fc824f49783cbfc8f1db8aa5edaa781aceb726883054ded90cc67995ba8bb768bc646f416481b1c2395e8c09de28a4ef7974871aea267fd70283bfeddb8062c4915c623bde19778bbaa520a448f588cf1c5e7367ec2948259fb6812bf619cb178663f790fcdd29c880e1249d2642b25bbb0b21a552aedc5046c3a41ee71445d7ed22649171353b2417b5c8af9fb3d792cd12d05e0f54686c32fc0957c0a5253a535094e2ac70b909847b07ea42de8af3b64e8e427f538c5311dd6aa8d48c93d8d0443f19942de770c9ad4960012225be8e4945878a5ac3cb426eeb23a818e639dd3a2874050fa25a2a5784969269788218205850541dfed806c9fad7649def69db6b937b5ef0362c2e58a4f03457192917010a234be89ae8e198971d704f7ae803c529d02be1f92dc3786b71bc9518cbb7420c2811444c773c0304897e2684e97de9af732c8481b737aae000c7ca2e36603b63012c972a90598795f903c7ec96298c2857c736c0172da6b0e4947ab5734e359793fdbee49df22c5fd57c2d993717d0d0166eda1f492a081cee3a4c1dca809caa3bad102aa59004d104f1c62c0f654cbecbf30cb188e48422dfe7f66cf9dcc66fe23a929a4f87ed46f920f9de0c577404172ff2302c9311129002d50dc4e2f5e2627f93ab64519d0c412991e221adacb8c85f6190a6785a76ece8fa350a6dbb2579bf4f5eecd593515bf42fbc8dc9a517754708523b62e3bec9106d1863ffe7f874978f1efeaa65370dc0a28885ef6f57d110b13339135aab5f50a284512821e69f57f196cdb0627f368af611936bb111981554b89d6f8f789a50e23fd0d9486c07797df50ee571aa59cb6bcb1ab8af84db3dec602c7be43d83938be2bb4d401468aca60fccdd973c6b704be371e7bd76fc15bf712dfc7e263dfe211d02bb9efbca4cdeb121dce9e5f87e9d10bf26e2d88855249bd55ac0b92a0a8a95485de8a4aaf54b22414f65a028f9a31df36dd4575cbf546b1b20ac7a6d3bd3559917892966b60c4276f0373ff9b458acfaf7478753a7aab7b31a2a4c9bf4f134af348e0ac81cc7cdd39281b237920e34985af29dd1fa7858d357dd7da42a8f1362cc57f796c8c35b7418cd8c9345a445f8a83ef19c927f0fd8abf3d5382ff66106df34e6e22bd47c85a7fe7e537836ec619b50a5fb9f0a4bc12544f90190038839b3b40175a6042cbf576a66ed38305c0b4c7cb3bb07afaa23579a71eea0e484e22bc2c2c0c3c8d541b512f1adc31e63e6707720304a95d3c3354918e90099079ac3e3d588405226bd2100f7a454730a9afc6b12184ede95f8ccbcfabdb29cd380ea89f3f52f7fb4f55ce0c9bce1e720bec486307bd1b5525fe7f05a4493bf266c28f568450ba3f25d377081f69ac51a6d69f79f8840d5457c7f0d256a45d2233d87a1833473c24057b7fb2f3e62210099ebf349fdc4de50a257b5619a3e0f08116ebad4d87484b7e0c09ec6ae9e089b6ae6d06f179908ffee953b6d9f68537928fe8aa171203dd35175a8350eda02280eb3880d4643cc7af4e01eeb675dbd314a2cc0da654afde7115486a0fd315c8151eedb29487e084f9fa31623774a50945be344f14b4a269e44989e983291296a74418393d381f701e8ac60624240576f9c1867067821e1639435b47fa3ef222c735bd57bfaecf8ff864ca99b58969453e3d368628b8643dd7b7a7706b6197db79c207f5521e18fac30e98a746d38c4a27e0ed8eedd11d1823ff7246bda9087211e19aff18e048cc1fedb6dae7017b7d7c60c55b1ec66f1f7225664f5940766814a205039d8591f979b28611529c8f7795e82809e4f48e72f901807de5b4d4bf265e5b607943cdfafd89d4b0c0281f3a1a2f400372513db7fe025c53521f8155e706085ee491be7f0fd8bb2442a000ea16c9cbe502a0e11901d7692567d7582459c3ccaa2c4dd93d14efed22acb8c44cf5da9d671f21bd97c686d3fa9792b80493c8ae4e183ba49ff4a386dc6c828f23039a92865cfb80e8cb9e72ac3ea792cc90aecbe52a5827da288d93ec61fb7775be0275d5b220f19b856e0a386d388f29fa05097237a3b20773505ec65b79a9e5fd35ef34028fab6d16143db38377bacbb22e52f193972e5a4c779101d6c63a821e4f1ff3831e02b39f2ffc30202f32242d4312e7e00bafcfac3ef5112a830dae77bd4145559581e14f48be22e0710e9b64dd4b2fc7004ab470790625c721a63a82b6b4e0b13482f2ce7591f31a6d79c510b9a939877fa6947fefd4b2f7af41b42d611e3ba521b6c4fa8e8aaf0b64b00a89d5fd6bc14f86eb3f7c2d82c847c7d93b44711931749858491edb570c8d417bfa63e08fe0afb0bc801a3dadf01dc94a947c72c5601c19dab74e27d7ca0ca4100f3c1a67eb99c32f36cd8c2821197ba76e5cbb7239da3798ef70f7a3bf76c48c94acb5095d92a4ea96b6d142ad1241d4e82e541d27d90d9750fd3ae1ef6d105029156e2d6c2200c9f7dd1b61d889eeb38c389fba73b1ae689ea7bf8b40c8e901b7dca7dea153adfb1869c9b2ba8974706163ca3ba04548878653ae6073c25e86707eb393636d8f45efe7f005f56dbb357b516c3901e5186eb3e3bfc4cecf93b71c1cb5cdc0fa00a2e0845079f495eaf626d615c700f79e18bae53e2df26e1755563364bbc1371a3076819fdd4b9adb45f2b1dfe15f50c17fedc0fa13379d06ee3796a5eb5cfe6f96e11ecf9c7f2bc75baa3b6653e01d67afbedd6d8fcc7172b0519cdb56571f9b28b272736977caf7bad9db211c07ccb3c4079ff2f3ff793ed46b3a06e7bf13174b87dd93a45b83c2b9673113d42a1a2a6b706ab069d46617d59c967c6d59cb79013bd7daa6647e9113ebbc9ccb28ec0acb67698959096b557f62581dca129a8bd6f632932186b73ea8032cb259ff92ee326a23a136ea49b36e766ad501de534cbcd8e4190ada1da85cbb60b2b5230fdba6592c9b737cb0386d64ce43ffd1304065e644e4958b0851b2073b0f38ebc3aea0d1ddb570a826b9173939bef5d2b0c64a57aff769b1ff1c8f129879b95043186a7935a37f4f59363f233ee1a6e2aa0432f8f3e6c234ddd789a5ec77571fdff13e0b7311e909f9f1d8155375eed287b2e69e938f643f0d26a0116fd880780de396b73d217ece27d58090d746e36b8eb8f3413522bb3ac7537919dc53385c586b616963349f329cffbd1c48c1f384dbd7aa85ae17a1869db1ab510f5cdd8a73a6304f62aea4b3098fa05005238864eb1c4098f491ab728412c4db1eca57a449337b47edd553984a44d254b9360feca47d85e83b654e482b1d9b9dcb88fcdbebea9db913c60978ea6ed2712a8d1fd723d9d283748d73fd6b63c4a60388b7b07f98de0ca5d0255e7409088eaf1ab18b98bec6099a8f70fa1d971b7b03745e3a1b384d9e06106a2c0f868d0dc52cdd27e0880751693a99ec0b8fb2919077e38bfa18b815b8b8b492c895f4a55ab937512081d1c25cec067ff4ef18ae2b1b76e671a06cccddc182d356627dd4762b9ab8923e5a17571b6d19aa6dc7326fb9a6332d0da5b43c485a5841b68a0fbfc7b036ccee4c7f39ffb4cafaf8a9f9839ba111eb8a9688f23de313f94e02482c66b3fd259c58a3c3cc266eaac3687b71222b5418b023e08ae79125b0587dffe2068a6abb95bb58db9230d65b04ab04678d602a160feeef99a539b46001ba321a38e2c855ec267493b92a8709fe598e0df6b60ce1ee403c0dce96df53eac61dc3cd9b513c558e11a0c757dc9c1c0d3541091a437aca29e9abd179b9ad8c0d85500553b187d81131b810ea88d56c42edc07a4fec0286e233edddb7492579f480d58f4813cb60fefcfa4d43bde47a9d2fb593a4fbffc053ae78cc942d390b29516d20ed26adbcf71cc4467282efe575154d307cddd0fcb790bad76ac74fea910514169b50385f06999afe7d3730ca5b778716e68f280afabf902309aebcd20efd6f726d29c3d2282917577cf03a9a607120addec1e1bb5396c5419a4e442b5340c2558eb90d0bf15803462258782a725a531a63e2d51dfe1f8d7ac4cdd51921f3c55b123b01c1959c063b2cd7650b52c98ff8c2556f853c8823386c3317aa4e5fb2955aa228228735ceb8401bf117c5e4e71b72e485b89d7ce6f45fa2206e71c66b50f5bec1ffb3644efa1aa5d64929d80e4de13e9c249224f8c188d5f6a7dd6c7bdf5173c5d50a56c161da22adea1ff7098c40c7acaa6da4cd1facb7c7ed094c4a661f3dbac6c9ed3de8c6b1c454872dc5cb5b095ffa5afd2c2e7382087df33a412b575c66d74e21ca54c47656017c217df7a19669f075be514e9045cd2470b531bf680710facd56ab97a2fd9ed4813919e558dec9309e05ea992ad353b76ed69dba6571ff3bd2aab1325a44bc0b5ec3f96989bbc7b3bf2ea15d9e640e0339312103512fd1219c381f4245bec67f12a58e676cfec5974988d9e94e252668547f2f42f5e8f1c82900544aa717f78026c081deea73524c03121c5fdef1746f16a8eb71852d794110780e17cabaa6cc72d954cc7b0ccdafef4d0a88af7aa6917c4411f016362bc29826de224992d34f36eb6231eb33620612172558402d0c7307e3c5a4de7d1d3bbb0e6b24fc48d4d5224a5564aa9908e3af74bfb7a2743dd1dad733197de2e1702b130d16b748", 0x1000}], 0x7, &(0x7f0000003a00)=[{0x100, 0x113, 0x4191d3a0, "4a8151b1c60b6df667ed700c950c75c06a542549d6ba68c763a8462340c4dc09c725ee5a070c069ac04c624c5c1c1ab9c8ccbc061998356eb6cc8d821cf9a92f4d1172d994bac11bcd4d592c1e95cf2f697ac14808927a3acce12d5b28f00191d47d8218fb9030d0eec161df56da88bf86da742c0d03d6a3455eee41ef98eb424bc0e9151097f87e44a506583fb7561be6c969c34e545a4b78609ef3d3e5a0d3c8bf383467077ccd634bf58836601586f95a0b3cd44585bc684bbc5e4a56613c21aee981bdd31455e93ce0cf66733245d258eefe37896335bbb7a202cac61db7469c8d9a4a226b99bc48fe6ed95c79bd"}, {0x10, 0x111, 0x3}, {0xa8, 0x3a, 0x9, "0704de30ed9fcc9dd8a44ad30f428bddf28db718630bba90b84cd362c9b69e8c6813742e9051e62feaf2883090f5ebb9b6106b00f5bd7991c0de2498ac030ee85e75fe0dbdd797e1469350abab6f8f6a7b2a23b2908c9fa8bd6463f3a01fab80b10fa27408238dc5fd258ed6120d966771da59616ff3abfb0a2a2d402e5d772f927f031276ef10209c3354f6a00fb9529ecc5f"}], 0x1b8}}, {{&(0x7f0000003bc0)=@qipcrtr={0x2a, 0x0, 0x4000}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="ebc10a3f3a8611be3b4726ba8c2357dc673c721b91ac46d82cc8db3544304052fb25ce37ee45d26210a81751f8ff8ae492bd811c355d5dc1b134804fb016ef78cea50051120e44bebc8e64ec9e699fc810f83e3d8948490c051bc18a", 0x5c}], 0x2, &(0x7f0000004d00)=[{0xe0, 0x10c, 0xfffffff2, "bbf2b8c87c24dbcd94cbec80f9724263cd433a8fdbcdf34573b90a963109b2f5551c111abddce458141ae403f53d9e731f20598514667ac826d8f690e7d2cb4a221df868aa20dc8c83c232b424c0dea8db75a778882f7521f7679f86a03e1d1f1febffde3be80e14f0032c0c6bb97421f14f4bafff2807eb4f578eb83cd4a9bafc8b8233935c3f067d27d13d961ac0a336a89d4b34a750168d609610203a0fa8c76a2d73af53f9ff6c00b7a4149ab32edd556453d668d8934adeea04b20e922942d66714137dc5fc19c949df"}, {0x18, 0x11, 0x8, "65ee04b01279"}, {0x80, 0x10e, 0x280000, "26814f54cd5bc3b522a7c055d2679e35518d75f33e6ecf46dce1a08ba3ed05ecac422a7ab2f42a979b2d2779f3df1252525f71d0a8317d693119cb8e3e2bcc4502bdc04749ab4ee0bcad8ac1fe136eea426e031ad9345c4c8cbf67e3d35f1525c6ac80f72db4acdf6664fd502aec88"}, {0x1010, 0x10e, 0xfff, "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"}, {0x10, 0x102, 0x7b9d}, {0x58, 0x119, 0xf, "aa3555b945f68e9dbd90e8bbbfc09d40fbb82bf82d8512d0055981b5b587e2cb6f2bf8b69d163b399704afcb8e4fe82ea50fd621e119f9c781b80806df97c31851"}], 0x11f0}}, {{&(0x7f0000005fc0)=@xdp={0x2c, 0x6, 0x0, 0x1e}, 0x80, &(0x7f0000006340)=[{&(0x7f0000006040)="9aba339258683d3f43a0edeac9f4322022982cfba6a29982cf4cf857da7670f4aaa016ceacac118ead2b03c5154f3c2b06f53d1e7cc4f2eb2aa2b2d667baac403eca1b2a2c67a1dc41edb849fe808e3e966151ca21e98ed0b6df1b7c448c6c3932fb1c3146896f1c99840897f50dc28ced21e343e626b4045a02763c9872337befbbea6469fdf03cec41f4139f2e5bcd8f33798b82ebee8624cf81e507a9f2a09c33173685bc16621c65731726c87aefe36624d97cdfae79099d89c87561e3d4a2949d8e308624fb3e3d819e84a2a0b30e396885dcaf3846f8c84d8045d13c0b00077373b2854ea160b69ab5a5", 0xed}, {&(0x7f0000006140)="ce319229813728154c117a37985158", 0xf}, {&(0x7f0000006180)="b312eba3b6ee73689f37617c14fc15d0", 0x10}, {&(0x7f00000061c0)="bd23bdde67b9fe1303dfabdd9db96e9ff41600b447e9d617d6c7e262fa3824097c1ded5714d9b50b408cacdd2a186b7572f910bd72aeb0ee", 0x38}, {&(0x7f0000006200)="e8902252551f72c68e166534a5123de847eb366bef90fcdce71270eb6edefa2575cf3fcd04be946bf58df006950ed668cb", 0x31}, {&(0x7f0000006240)="9d575a1154c12298db07bdedd85021d0823bb3cc41cb0ee7dad5ee0275aa8146e1b8e4dab2672b6de08a713303baf7617ced74f7dc85829958d21c155d1f4a503b52c6b35d5a44b69b1278b56c1385606de61953567a08229760e8de09013048639cbb212ee0", 0x66}, {&(0x7f00000062c0)="867c7161ba4d6a015043df891c765a53e67ad13bc65f183b523d819701c7021964c183f323adc94e243bbb9d3ef7ef20902123d237b1bfecff3fdbc5e54651c22c540c531ee92af4fe32e04d333f64f57cdf7d02e550533d9158ee8e5c1e80b966e5", 0x62}], 0x7, &(0x7f00000063c0)=[{0x88, 0x11, 0xac, "285bec1b237abb925fb5677c002e28d7325f8074e6dd0e8812cb28df6a4a61ded3a4c58b9deb7a154d4196f8520555d139dd5d086db42a8f4284b4069889528847fcb8f37b4e382418f4bafa140d6868138564c775a33070889bb9cde36ff94cc4a42f1feb3deaec0a0e7ce51d78a71b5f0a364062"}, {0x1010, 0x103, 0xffffff00, "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"}, {0x110, 0x119, 0x3, "399c8868989066942d6e06beab6b589d8e28f9a75b84072dff7d02876b9fa970dee0571d01bed8fadc87d14255b7e1c8eeec294ff5fb432ae88ea34fe70f897dce164c0d746f802a466343539bb9cae6b50c3328781d65e13e435bcd1523fb09e9cbe22caf153dbcd163f6623838f3032827bd821ee8a70b4806f036a1dc6639ca3c3b1156e671e63266a7359760588e472391238ef448f06052f3f973ebbc3a185d50bf82ae62b04a6a9f9a0c124859ed52f8e448f182d6d0824ff6eb6af087ac1d2d061e01d913f9b8078891c7b2333ac80a13b20be9f3b824af491a6cfb21c06903a666f3f041dd918a8234f610b53e64a2f6f9cc080f9b"}, {0x68, 0x11, 0x2, "08a50aee25bf8dc1f2ab107b9fc86676575881c9cc1770d5a1f325721fc501d44bdd04b47633fc1173ca4237bbfce8f6ed5d7830c3f63a578f7fabdbf9c91eeb34905bb18dd4843424441f6647cc5014322f13766f0e"}, {0x110, 0x108, 0x7f, "b80f3a137b257034faa47cd6163dfc4227a2c5fb2941fe9b90a6574712628375117755a34c3f724fb198b6af46f92c7a54338686711459158ebeca857b47e4398c1fa5d6e07b8bfd40f7cb722c2f958335932032e668c751cbbe0c668d16623215e3db6f13a3353e864f5cd50d081cd16eaafa6e4dee701dd03c448c440b6af48403fad2d22ef4ba4feb1cc2b6d34d9b47e1ded0e713381167a846b6bf7f506c87bcf2b03d37e1cf13902d477aefa8f8a09bc9da8355e11750e93d63cfbc505c2eb939493254afd6a3ad1f09bd28d319c28e2c9c5e19c634069c36da42af3a6f368226ba24feff2be014a2aa3371d1aee3fcd4492684f5b5f9"}, {0xb8, 0x10e, 0x7, "dd141e3851fe70fdc817610d0500e60eb815039110de6a825d2e333ebb1a227e4dcd6b97b57d5895447061587fb93c60e4469c2682d92f66ccfc546d9bfa7f7ae9cac5b012e07574d6b8a3c0029f6e5ee931ae90aef849e1975559deaac0f165842949a10044cfe7332310354bd9202be1604a4511a4bf1a98101f5e024355dc60158386d0755f83671d679a5e3d74644dc5cca1df76890379137656fbfef82c496f821f"}, {0xa0, 0x0, 0x46, "740033224bbf9a3c4a75800da9d2b39582e10ce7a8ca8424066ee26f5b4521715ef97c6f1bd1c56d880d648ec609036cbe26e04ebc44bcdb9a7d39a80677461e2b3edb267f2e1dba71003c16dc9d09bb610a192f063199e1065aab112d8c62be15b3b6115dc41e35fe9d633f12ba771a0aca88cdd44899676b531b91b7ecde19b9a45ceb43917721b430a5f1b3"}, {0xc8, 0x10f, 0xe9, "e02f8380116a8dda77b06b82817f932f883a9c7911da81da0fa2e28b53751ff7d4529b064d86ed8ec627e431a79c16f996a78547c22fc47821d29af6aa5b6f61913c9ab335cadb4d756f98158f40e4ffaf02a1267ee34a44c951c9e2d642fb30a8a8f98b8f1e2b12b236d3eb0a662723af11d6dd24cbcea1183672a89b1b704a5291527c53cc21e3715229b8e50e116811d9d7f35f40f3438ced36be07ee88245b5bffd6a8e8d454d15ff2b6658b729a1acda630c36a"}, {0xb8, 0x110, 0x6, "34b77867e43fb7ec3080f06ffdb0c3aa083fe7c5acf169628cb50be328f327707d01a0e714782490bcd4717e73aa1a8d8bc73913983db7a487cb57332255260254d5af048f37680e20da5f88054f6f8df21927b647a2f8b0016af27e48ab9095409d5f209296dda0b2c1f5d5d34d2a130db628cbd4bafa5ddc628a3de1865aef263e8423130a144855742610276cb5fed79533b0b4a6132581788a04179da26f054194dccc7cf25a"}], 0x162c}}], 0x3, 0x4000004) 839.819752ms ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060008060000203302"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (fail_nth: 6) 838.277034ms ago: executing program 4 (id=738): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x7d, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x63000000}, 0x1c) write(r0, &(0x7f0000000300)="89", 0xffe3) 780.0138ms ago: executing program 2 (id=739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 779.427466ms ago: executing program 3 (id=741): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x0, 0x0, @local}]}, &(0x7f00000004c0)=0x10) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000000040)=@rsp={{0x5, 0x0, 0x18, 0x3f, 0x9}, {@u16=0xd94d, 0x100, 0x2, 0x4}}, 0x80, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0x5}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000640)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000740)={r4, 0x0, r5, 0xdfd, 0x6, 0x9, 0x3f7ffe03, 0x4fffffd, 0xd, 0xe, 0x2, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000580)={0x18, 0x2, 0x0, 0x9}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r9, &(0x7f0000000880)="6e616d65207e20221d222626", 0xc) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000300)) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5000000, 0x74}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaa3de5302994b1a0550600"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0xee01, 0x1000) 705.883649ms ago: executing program 4 (id=742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000780)="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", 0x14b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655e", 0x58}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000002c0)="385eab4f254e5a5c492c82d7a6cb15c97b4de4a0b5092720b7ebefc2d3df7a66ce924b3780b96e046163f5aa0f201cebe27b121e79e27ba6efae9a7e6b36cee37fc3449d8ac5ededbf212f5b55001f13c3b1407b01ba0dee4deba035d6ed5f5b74676f8d6db7925354e02c0ab329b80ca2e0ce7298587db2c7c3ebd37ada39c4963113e7bd2deeff49781bf9afc9683b7a56b01fdd29fb063e018a1624fef60e7567ab60504cda0dbf99088d3907b6e5aca46471aa135eb3634067655df131b9759a1d31a9c80dec265cfb740d2b8762cf0af6a8596e5e731759f0c40f8bcdd7c41473f67620b778", 0xe8}, {&(0x7f0000002240)="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", 0x1c8}], 0x2}, 0x0) 637.470695ms ago: executing program 3 (id=744): r0 = inotify_init1(0x0) r1 = fanotify_init(0x1a, 0x400) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x16, 0x1, 0x20, "4b3a5076049f61d65b73556d5782128065fb8a192965be4cea92b51fac435a76", 0x32435750}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x34003, 0xa8) unshare(0x6a040000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="866cfc026b5c0eb3bc3a152b4460a419f0cb8ccf85f09c0d", 0x18}], 0x1}}], 0x1, 0x4000081) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES16=r5, @ANYBLOB="010028bd5000fdcbdf251f"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000440)={@val={0x8, 0xc}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x38, 0x1c, 0x66, 0x0, 0x5, 0x2, 0x0, @local, @local}, {0x14, 0x4, 0x0, @broadcast}}}, 0x2a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x30}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r11, &(0x7f0000000180)='./file2\x00') r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000680)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r13, 0x0, 0x484, &(0x7f00000006c0)="060000007f00000100150000000000006d6800"/44, 0x2c) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800dd8d0002000000000000020000000000370500000000060015000200000014001600100008800c000280080001"], 0x38}}, 0x0) fanotify_mark(r1, 0x641, 0x1028, r3, 0x0) 449.572768ms ago: executing program 6 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000015000103000000001c000ec00a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 399.985885ms ago: executing program 6 (id=746): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)) syz_open_dev$video(&(0x7f0000000a40), 0xa8, 0x41841) pipe2(&(0x7f0000000a80), 0x0) open(&(0x7f0000000b80)='.\x00', 0x8000, 0x112) openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0xc0802, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f00000007c0)={0x0, 0x2030b5, 0x1000, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0003203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 350.100692ms ago: executing program 6 (id=747): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 349.55603ms ago: executing program 6 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x10, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace(0x10, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xb7, 0xd, 0x1, 0x0, "546eb5f9cb02498f2d0adcbcb355646f15f1d31a3c91d4937685f98d6b1c201b73d84a886b0327974b1923dc802c2a32b23dad49a2c3774001a4a68caab64f78d9aa5289000b71372eb1d89059c7b6caafefd1db6841943be4cc5a643acf5575cfa954cfc48399b2c552dde9724f07e214d6aa7bd966a5ea42174c5a3f9759693682ec4cf4f1391787750ef9412953978360ae779c38f8b4843ce3bbc9383dd8e7a48de369152c61878965a5854172b5f79ea2"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000003a7ce374f856a13e282b074e0b9084f5409c5a43682a30de6e9e2ed463df68d7b97d969750a789ce6291ece3867964f04ccdefd93b1a6d0feb7ce5b2c7aaebd42a1272bbeaac21fe023b64f4dce8437fd484835d24c064a26e9bc07a1dd20e12de761323d6e670649c5cf5eb75e6b24d0d247e8f446d7e5a2d0b167f5c8e32b200cf22332742a08d656f0bab2704a4d035543cd708dafac7f5e79fdf0404f88c0a6e9c400db7e4aa23cdb30ad0ca5fc5677580383e2a", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r9 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x80) r10 = gettid() r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x4) read(r11, &(0x7f0000000640)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r11, 0x4040534e, &(0x7f0000000740)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r10, 0x7) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xc07d}, {r0}, {r9, 0x2689}, {0xffffffffffffffff, 0x400}, {r0, 0x8031}, {0xffffffffffffffff, 0x8201}], 0x6, &(0x7f0000000440), &(0x7f0000000480)={[0x4]}, 0x8) ioctl$CEC_RECEIVE(r9, 0xc0386106, &(0x7f00000003c0)={0x3, 0x5, 0x0, 0x2, 0x0, 0x5, "886f0b31e65f313c62f8ea3e81acaaa1", 0x2, 0x8, 0x8, 0x2c, 0x6, 0x0, 0x9}) 118.958987ms ago: executing program 6 (id=749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x132, 0x1a4}) r3 = socket(0x8, 0x5, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x800, @loopback, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000c80)="13", 0x1}], 0x1}, 0x48043) r4 = dup(r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000cc0)='ip6gretap0\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000080)={0x2, @in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x6}}, [0x0, 0x5, 0x2200000, 0x2, 0x2, 0x9, 0x0, 0x8, 0xfffffffffffffffe, 0x1, 0x6, 0x6, 0x8, 0xbd9c, 0x6]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000d00)={r7, @in6={{0xa, 0x4e22, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x200000, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r4, &(0x7f0000000e80)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{}], "27ff2e"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'z'}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000400)=""/164, 0x44, 0xa4, 0x4}, 0x28) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000ec0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 63.418636ms ago: executing program 6 (id=750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000006c0)="240000002a0001030300000000000000000000000100"/36, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000c00078008001140000000000500010006000000050005000200000005000f40000000000900020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0xffffffffffffff47}) dup3(r3, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x20044044}, 0xd0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x8d80, 0x0) writev(r5, &(0x7f0000000600), 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000007c0)={0x73622a85, 0x0, 0x1, 0x20000000000000}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0xffffffffffffff67}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000700)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000740)='wg1\x00', 0x4) sendto$inet(r7, &(0x7f0000000780)="e5", 0xffffffe4, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000640)="ffffffffffff0211223344550806000108000604000243054305123400123400ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000680)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000, 0x2, 0x2}, @flat=@binder={0x73622a85, 0x110a, 0x2, 0x1}, @fda={0x66646185, 0xc, 0x1, 0x10}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1040}]}) r9 = syz_usbip_server_init(0x3) write$usbip_server(r9, &(0x7f0000000000)=@ret_unlink={{0x4, 0x6, 0x0, 0x0, 0x9}, {0x2c5}}, 0x30) 10.902475ms ago: executing program 3 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'geneve0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x700, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 0s ago: executing program 3 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x401, 0x6, 0x5, 0xa, 0xc, "3d119ec2988cad33cd1cdea0c66b965c90b9c7", 0x8, 0x6}) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1234\n', 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) (rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0x80184132, &(0x7f0000000500)={0x0, [], '\x00', [{}, {}, {}, {}, {}, {}, {0x0, 0x10001}, {}, {}, {}, {}, {0xfffffffc}]}) (async, rerun: 64) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) kernel console output (not intermixed with test programs): adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.190464][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.194839][ T5782] veth1_macvtap: left promiscuous mode [ 67.194861][ T5782] veth0_macvtap: left promiscuous mode [ 67.194905][ T5782] veth1_vlan: left promiscuous mode [ 67.195021][ T5782] veth0_vlan: left promiscuous mode [ 67.234064][ T6747] FAULT_INJECTION: forcing a failure. [ 67.234064][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 67.234086][ T6747] CPU: 2 UID: 0 PID: 6747 Comm: syz.2.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.234101][ T6747] Tainted: [L]=SOFTLOCKUP [ 67.234105][ T6747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.234111][ T6747] Call Trace: [ 67.234116][ T6747] [ 67.234121][ T6747] dump_stack_lvl+0x100/0x190 [ 67.234141][ T6747] should_fail_ex.cold+0x5/0xa [ 67.234157][ T6747] should_failslab+0xc2/0x120 [ 67.234174][ T6747] __kmalloc_noprof+0xfc/0x840 [ 67.234190][ T6747] ? tomoyo_encode2+0xfb/0x3c0 [ 67.234204][ T6747] tomoyo_encode2+0xfb/0x3c0 [ 67.234216][ T6747] tomoyo_unix_entry+0x343/0x640 [ 67.234233][ T6747] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 67.234251][ T6747] ? futex_private_hash_put.part.0+0xdc/0x180 [ 67.234292][ T6747] ? __asan_memcpy+0x3c/0x60 [ 67.234307][ T6747] tomoyo_socket_listen_permission+0x326/0x380 [ 67.234320][ T6747] ? __pfx_tomoyo_socket_listen_permission+0x10/0x10 [ 67.234342][ T6747] ? __fget_files+0x21f/0x3d0 [ 67.234361][ T6747] security_socket_listen+0x91/0x210 [ 67.234376][ T6747] __sys_listen_socket+0xab/0x150 [ 67.234393][ T6747] __sys_listen+0xa7/0x130 [ 67.234409][ T6747] __x64_sys_listen+0x53/0x80 [ 67.234425][ T6747] do_syscall_64+0x123/0x790 [ 67.234443][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.234454][ T6747] RIP: 0033:0x7f0c39d9f559 [ 67.234464][ T6747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.234475][ T6747] RSP: 002b:00007f0c37ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 67.234486][ T6747] RAX: ffffffffffffffda RBX: 00007f0c3a025fa0 RCX: 00007f0c39d9f559 [ 67.234493][ T6747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 67.234499][ T6747] RBP: 00007f0c39e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 67.234505][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.234511][ T6747] R13: 00007f0c3a026038 R14: 00007f0c3a025fa0 R15: 00007ffd8299d498 [ 67.234541][ T6747] [ 67.286251][ T66] Bluetooth: hci1: command tx timeout [ 67.289144][ T6745] sd 0:0:0:0: PR command failed: 1026 [ 67.289170][ T6745] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 67.289198][ T6745] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 67.391941][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 67.405711][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 67.499308][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 67.734721][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 67.736497][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.736627][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.736724][ T6682] bridge_slave_0: entered allmulticast mode [ 67.739115][ T6682] bridge_slave_0: entered promiscuous mode [ 67.741295][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.741356][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.741408][ T6682] bridge_slave_1: entered allmulticast mode [ 67.742134][ T6682] bridge_slave_1: entered promiscuous mode [ 67.771068][ T5782] IPVS: stop unused estimator thread 0... [ 67.801376][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.806725][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.854554][ T6682] team0: Port device team_slave_0 added [ 67.859138][ T6682] team0: Port device team_slave_1 added [ 67.932020][ T6778] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 67.966105][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 67.966117][ T42] audit: type=1400 audit(1792502436.300:468): avc: denied { write } for pid=6777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.006449][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.006464][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.006484][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.008583][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.008595][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.008615][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.028050][ T42] audit: type=1400 audit(1792502436.360:469): avc: denied { write } for pid=6782 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.115106][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.119364][ T42] audit: type=1400 audit(1792502436.450:470): avc: denied { create } for pid=6786 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.125542][ T6682] hsr_slave_0: entered promiscuous mode [ 68.135312][ T6682] hsr_slave_1: entered promiscuous mode [ 68.135763][ T6682] debugfs: 'hsr0' already exists in 'hsr' [ 68.135775][ T6682] Cannot create hsr debugfs directory [ 68.323457][ T66] Bluetooth: hci2: command tx timeout [ 68.557303][ T6785] infiniband syz1: set active [ 68.557356][ T6785] infiniband syz1: added syz_tun [ 68.565758][ T6785] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 68.565779][ T6785] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 68.565800][ T6785] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 68.588108][ T6682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.601967][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.603831][ T6785] RDS/IB: syz1: added [ 68.603908][ T6785] smc: adding ib device syz1 with port count 1 [ 68.603924][ T6785] smc: ib device syz1 port 1 has no pnetid [ 68.611188][ T6682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.624188][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.624866][ T6682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.630743][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.632729][ T6682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.640374][ T6682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.688062][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.688109][ T6682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.712970][ T6806] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.730133][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.798800][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.819903][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.825844][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.825928][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.834324][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.834387][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.018722][ T42] audit: type=1400 audit(1792502437.350:471): avc: denied { kexec_image_load } for pid=6805 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 69.286314][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.400522][ T6825] Cannot find add_set index 0 as target [ 69.521581][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 69.586418][ T6682] veth0_vlan: entered promiscuous mode [ 69.592467][ T42] audit: type=1400 audit(1792502437.920:472): avc: denied { mounton } for pid=6836 comm="syz.2.258" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.593487][ T6682] veth1_vlan: entered promiscuous mode [ 69.595977][ T6837] SQUASHFS error: Failed to read block 0x0: -5 [ 69.596021][ T6837] unable to read squashfs_super_block [ 69.600958][ T42] audit: type=1400 audit(1792502437.930:473): avc: denied { create } for pid=6836 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.601561][ T42] audit: type=1400 audit(1792502437.930:474): avc: denied { ioctl } for pid=6836 comm="syz.2.258" path="socket:[15517]" dev="sockfs" ino=15517 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.618678][ T6682] veth0_macvtap: entered promiscuous mode [ 69.627534][ T6682] veth1_macvtap: entered promiscuous mode [ 69.641526][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.657202][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.683713][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.683754][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.683783][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.683811][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.735659][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.735679][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.760690][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.760709][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.785430][ T42] audit: type=1400 audit(1792502438.120:475): avc: denied { mount } for pid=6682 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.824840][ T42] audit: type=1400 audit(1792502438.160:476): avc: denied { read } for pid=6843 comm="syz.5.228" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.824981][ T42] audit: type=1400 audit(1792502438.160:477): avc: denied { open } for pid=6843 comm="syz.5.228" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.867016][ T6806] kexec: Could not allocate control_code_buffer [ 69.917780][ T6848] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.952632][ T6851] netlink: 50 bytes leftover after parsing attributes in process `syz.2.261'. [ 70.116184][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.116562][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.116880][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.273763][ T6856] infiniband syz0: set active [ 70.273814][ T851] wg0 speed is unknown, defaulting to 1000 [ 70.273863][ T6856] infiniband syz0: added wg0 [ 70.296632][ T6856] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.296667][ T6856] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.296704][ T6856] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.342729][ T6856] RDS/IB: syz0: added [ 70.342773][ T6856] smc: adding ib device syz0 with port count 1 [ 70.342790][ T6856] smc: ib device syz0 port 1 has no pnetid [ 70.343940][ T1347] wg0 speed is unknown, defaulting to 1000 [ 70.344460][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.403735][ T66] Bluetooth: hci2: command tx timeout [ 70.433043][ T6875] fuse: Unknown parameter 't' [ 70.458773][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.560185][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.650070][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.750183][ T6856] wg0 speed is unknown, defaulting to 1000 [ 70.924138][ T1347] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.083769][ T1347] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 71.085480][ T1347] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.085502][ T1347] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.087127][ T1347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.087139][ T1347] usb 7-1: Product: syz [ 71.087146][ T1347] usb 7-1: Manufacturer: syz [ 71.087153][ T1347] usb 7-1: SerialNumber: syz [ 71.155947][ T1347] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 71.162795][ T1347] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 71.162795][ T1347] Please send a copy of this message to and [ 71.220107][ T6911] FAULT_INJECTION: forcing a failure. [ 71.220107][ T6911] name failslab, interval 1, probability 0, space 0, times 0 [ 71.220140][ T6911] CPU: 1 UID: 0 PID: 6911 Comm: syz.5.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.220181][ T6911] Tainted: [L]=SOFTLOCKUP [ 71.220186][ T6911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.220195][ T6911] Call Trace: [ 71.220201][ T6911] [ 71.220207][ T6911] dump_stack_lvl+0x100/0x190 [ 71.220237][ T6911] should_fail_ex.cold+0x5/0xa [ 71.220264][ T6911] should_failslab+0xc2/0x120 [ 71.220290][ T6911] __kmalloc_noprof+0xfc/0x840 [ 71.220309][ T6911] ? rcu_is_watching+0x13/0xc0 [ 71.220350][ T6911] ? tomoyo_encode2+0xfb/0x3c0 [ 71.220372][ T6911] tomoyo_encode2+0xfb/0x3c0 [ 71.220391][ T6911] tomoyo_encode+0x29/0x50 [ 71.220405][ T6911] tomoyo_realpath_from_path+0x18c/0x690 [ 71.220426][ T6911] tomoyo_mount_acl+0x1b6/0x8b0 [ 71.220447][ T6911] ? is_bpf_text_address+0x8a/0x1a0 [ 71.220486][ T6911] ? is_bpf_text_address+0x8a/0x1a0 [ 71.220515][ T6911] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.220538][ T6911] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 71.220570][ T6911] ? kernel_text_address+0x8d/0x100 [ 71.220597][ T6911] ? unwind_get_return_address+0x59/0xa0 [ 71.220629][ T6911] ? arch_stack_walk+0xa6/0xf0 [ 71.220654][ T6911] ? __lock_acquire+0x5c0/0x1f40 [ 71.220697][ T6911] ? tomoyo_mount_permission+0x1f6/0x460 [ 71.220727][ T6911] ? tomoyo_domain+0xb2/0x150 [ 71.220744][ T6911] ? tomoyo_profile+0x47/0x60 [ 71.220766][ T6911] tomoyo_mount_permission+0x214/0x460 [ 71.220792][ T6911] ? tomoyo_mount_permission+0x1f6/0x460 [ 71.220821][ T6911] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 71.220864][ T6911] security_sb_mount+0xdd/0x270 [ 71.220891][ T6911] path_mount+0x158/0x2850 [ 71.220912][ T6911] ? __pfx_path_mount+0x10/0x10 [ 71.220928][ T6911] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.220954][ T6911] ? putname+0xb1/0x110 [ 71.220967][ T6911] ? kmem_cache_free+0x127/0x6c0 [ 71.220993][ T6911] ? __x64_sys_mount+0x293/0x310 [ 71.221011][ T6911] __x64_sys_mount+0x293/0x310 [ 71.221029][ T6911] ? __pfx___x64_sys_mount+0x10/0x10 [ 71.221052][ T6911] do_syscall_64+0x123/0x790 [ 71.221081][ T6911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.221099][ T6911] RIP: 0033:0x7f3d72d9f559 [ 71.221114][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.221132][ T6911] RSP: 002b:00007f3d73cf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.221151][ T6911] RAX: ffffffffffffffda RBX: 00007f3d73025fa0 RCX: 00007f3d72d9f559 [ 71.221163][ T6911] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 71.221175][ T6911] RBP: 00007f3d73cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 71.221187][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.221199][ T6911] R13: 00007f3d73026038 R14: 00007f3d73025fa0 R15: 00007ffe6e6e8338 [ 71.221225][ T6911] [ 71.221761][ T6911] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.454014][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454079][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.678463][ T6924] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 71.789020][ T6937] vlan3: entered allmulticast mode [ 71.789035][ T6937] bond0: entered allmulticast mode [ 71.789043][ T6937] bond_slave_0: entered allmulticast mode [ 71.789052][ T6937] bond_slave_1: entered allmulticast mode [ 71.789402][ T6936] bridge0: entered allmulticast mode [ 71.790140][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.291'. [ 71.792286][ T6936] bridge_slave_1: left allmulticast mode [ 71.792305][ T6936] bridge_slave_1: left promiscuous mode [ 71.792593][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.797666][ T6936] bridge_slave_0: left allmulticast mode [ 71.797684][ T6936] bridge_slave_0: left promiscuous mode [ 71.797849][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.815639][ T6936] bridge0 (unregistering): left allmulticast mode [ 71.825276][ T6939] syzkaller0: entered promiscuous mode [ 71.825296][ T6939] syzkaller0: entered allmulticast mode [ 71.828503][ T6939] tipc: Started in network mode [ 71.828532][ T6939] tipc: Node identity 6ab355502aaa, cluster identity 4711 [ 71.828686][ T6939] tipc: Enabled bearer , priority 0 [ 71.830527][ T6938] tipc: Resetting bearer [ 71.849552][ T6938] tipc: Disabling bearer [ 71.899032][ T41] usb 7-1: USB disconnect, device number 4 [ 71.945261][ T6947] FAULT_INJECTION: forcing a failure. [ 71.945261][ T6947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.945292][ T6947] CPU: 2 UID: 0 PID: 6947 Comm: syz.4.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.945314][ T6947] Tainted: [L]=SOFTLOCKUP [ 71.945320][ T6947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.945329][ T6947] Call Trace: [ 71.945334][ T6947] [ 71.945341][ T6947] dump_stack_lvl+0x100/0x190 [ 71.945370][ T6947] should_fail_ex.cold+0x5/0xa [ 71.945393][ T6947] _copy_from_iter+0x1f4/0x1690 [ 71.945419][ T6947] ? __asan_memset+0x23/0x50 [ 71.945438][ T6947] ? __pfx__copy_from_iter+0x10/0x10 [ 71.945466][ T6947] ? __pfx___alloc_skb+0x10/0x10 [ 71.945492][ T6947] netlink_sendmsg+0x94a/0x1020 [ 71.945515][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.945537][ T6947] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.945562][ T6947] ? ____sys_sendmsg+0xa4d/0xbe0 [ 71.945582][ T6947] ____sys_sendmsg+0xa4d/0xbe0 [ 71.945615][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.945633][ T6947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.945659][ T6947] ? lock_acquire+0x1d1/0x380 [ 71.945677][ T6947] ? get_pid_task+0x2a/0x250 [ 71.945702][ T6947] ___sys_sendmsg+0x190/0x1e0 [ 71.945726][ T6947] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.945748][ T6947] ? get_pid_task+0x106/0x250 [ 71.945778][ T6947] ? find_held_lock+0x2b/0x80 [ 71.945816][ T6947] __sys_sendmsg+0x160/0x210 [ 71.945835][ T6947] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.945864][ T6947] do_syscall_64+0x123/0x790 [ 71.945891][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.945907][ T6947] RIP: 0033:0x7f19fe99f559 [ 71.945921][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.945936][ T6947] RSP: 002b:00007f19ff7e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.945953][ T6947] RAX: ffffffffffffffda RBX: 00007f19fec25fa0 RCX: 00007f19fe99f559 [ 71.945963][ T6947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 71.945973][ T6947] RBP: 00007f19ff7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.945983][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.945991][ T6947] R13: 00007f19fec26038 R14: 00007f19fec25fa0 R15: 00007ffe75ffd088 [ 71.946013][ T6947] [ 72.143496][ T6959] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 72.182929][ T6962] FAT-fs (nullb0): bogus number of reserved sectors [ 72.182943][ T6962] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 72.184435][ T6962] atomic_op ffff8880576089e0 conn xmit_atomic 0000000000000000 [ 72.225302][ T6962] netlink: 34 bytes leftover after parsing attributes in process `syz.4.301'. [ 72.250596][ T6962] kvm: user requested TSC rate below hardware speed [ 72.329958][ T6972] ip_tables: iptables: counters copy to user failed while replacing table [ 72.379142][ T6981] openvswitch: netlink: EtherType 50a is less than min 600 [ 72.483551][ T66] Bluetooth: hci2: command tx timeout [ 72.593389][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 72.754650][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 72.754670][ T10] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 72.755668][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 72.755697][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.759667][ T6977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.761312][ T10] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 72.788421][ T10] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 72.836409][ T7012] netlink: 'syz.2.315': attribute type 15 has an invalid length. [ 72.844555][ T7012] vxlan0: entered promiscuous mode [ 72.844576][ T7012] vxlan0: entered allmulticast mode [ 72.867064][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 31488 - 0 [ 72.867455][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 31488 - 0 [ 72.867493][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 31488 - 0 [ 72.867528][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 31488 - 0 [ 73.003511][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 73.003541][ T42] audit: type=1400 audit(1792502441.340:512): avc: denied { mounton } for pid=6975 comm="syz.3.304" path="/96/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 73.005085][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.005585][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.156092][ T5844] usb 8-1: USB disconnect, device number 3 [ 73.170732][ T5844] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 73.171343][ T5844] cyberjack 8-1:1.0: device disconnected [ 73.258353][ T7025] jffs2: notice: (7025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.262823][ T42] audit: type=1400 audit(1792502441.590:513): avc: denied { mounton } for pid=7024 comm="syz.4.318" path="/44/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.376175][ T42] audit: type=1400 audit(1792502441.710:514): avc: denied { write } for pid=7031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.431666][ T42] audit: type=1400 audit(1792502441.760:515): avc: denied { write } for pid=7038 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.434540][ T7040] jffs2: notice: (7040) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.438496][ T42] audit: type=1400 audit(1792502441.770:516): avc: denied { write } for pid=7039 comm="syz.5.322" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.440055][ T42] audit: type=1400 audit(1792502441.770:517): avc: denied { add_name } for pid=7039 comm="syz.5.322" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.441621][ T42] audit: type=1400 audit(1792502441.770:518): avc: denied { read append open } for pid=7039 comm="syz.5.322" path="/18/file0/file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.494776][ T42] audit: type=1400 audit(1792502441.830:519): avc: denied { write } for pid=7039 comm="syz.5.322" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.497539][ T42] audit: type=1400 audit(1792502441.830:520): avc: denied { watch } for pid=7039 comm="syz.5.322" path="/18/file0/file5" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.497567][ T42] audit: type=1400 audit(1792502441.830:521): avc: denied { watch_sb watch_reads } for pid=7039 comm="syz.5.322" path="/18/file0/file5" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.738107][ T7057] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 73.813435][ T7065] mmap: syz.3.329 (7065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.822295][ T7066] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.999476][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 74.193976][ T7088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.337'. [ 74.423235][ T851] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 74.520204][ T7104] size and base must be multiples of 4 kiB [ 74.520229][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.5.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.520244][ T7104] Tainted: [L]=SOFTLOCKUP [ 74.520248][ T7104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.520254][ T7104] Call Trace: [ 74.520258][ T7104] [ 74.520263][ T7104] dump_stack_lvl+0x100/0x190 [ 74.520340][ T7104] mtrr_add.cold+0x74/0x87 [ 74.520366][ T7104] mtrr_ioctl+0x25a/0xcf0 [ 74.520407][ T7104] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 74.520450][ T7104] ? __pfx_mtrr_ioctl+0x10/0x10 [ 74.520469][ T7104] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.520500][ T7104] ? __fget_files+0x34/0x3d0 [ 74.520548][ T7104] ? __pfx_mtrr_ioctl+0x10/0x10 [ 74.520566][ T7104] proc_reg_unlocked_ioctl+0x229/0x320 [ 74.520597][ T7104] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 74.520619][ T7104] __x64_sys_ioctl+0x18e/0x210 [ 74.520642][ T7104] do_syscall_64+0x123/0x790 [ 74.520686][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.520704][ T7104] RIP: 0033:0x7f3d72d9f559 [ 74.520720][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.520735][ T7104] RSP: 002b:00007f3d73cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.520754][ T7104] RAX: ffffffffffffffda RBX: 00007f3d73025fa0 RCX: 00007f3d72d9f559 [ 74.520765][ T7104] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003 [ 74.520775][ T7104] RBP: 00007f3d72e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 74.520785][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.520795][ T7104] R13: 00007f3d73026038 R14: 00007f3d73025fa0 R15: 00007ffe6e6e8338 [ 74.520819][ T7104] [ 74.563662][ T5746] Bluetooth: hci2: command tx timeout [ 74.579490][ T851] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.580690][ T851] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.580706][ T851] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.580717][ T851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.594026][ T851] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.594049][ T851] usb 8-1: Product: syz [ 74.594063][ T851] usb 8-1: Manufacturer: syz [ 74.594075][ T851] usb 8-1: SerialNumber: syz [ 74.600542][ T851] usb 8-1: config 0 descriptor?? [ 74.619316][ T851] usb 8-1: selecting invalid altsetting 0 [ 74.623630][ T7106] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 74.637540][ T7112] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 74.836041][ T7135] netlink: 112 bytes leftover after parsing attributes in process `syz.5.347'. [ 74.871552][ T7082] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 74.875666][ T7082] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.876373][ T7082] CIFS: Attempting to mount //127.0.0.1/share [ 75.173243][ T5844] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 75.334236][ T5844] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 75.335519][ T5844] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.335558][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.354036][ T5844] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 75.354229][ T5844] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 75.354282][ T5844] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 75.360241][ T5844] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 75.360300][ T5844] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 75.373686][ T5844] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 75.374974][ T5844] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 75.375115][ T5844] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 75.380776][ T5844] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 75.518319][ T7158] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 75.527104][ T7155] netlink: 'syz.2.351': attribute type 3 has an invalid length. [ 75.527235][ T7155] netlink: 'syz.2.351': attribute type 3 has an invalid length. [ 75.659791][ T10] usb 10-1: USB disconnect, device number 2 [ 75.665313][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 75.669621][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 75.669893][ T10] keyspan 10-1:1.0: device disconnected [ 75.900862][ T7168] nfs: Unknown parameter 'mountpnrt' [ 75.980686][ T7174] FAULT_INJECTION: forcing a failure. [ 75.980686][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 75.980710][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.4.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.980725][ T7174] Tainted: [L]=SOFTLOCKUP [ 75.980729][ T7174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.980735][ T7174] Call Trace: [ 75.980739][ T7174] [ 75.980744][ T7174] dump_stack_lvl+0x100/0x190 [ 75.980764][ T7174] should_fail_ex.cold+0x5/0xa [ 75.980802][ T7174] should_failslab+0xc2/0x120 [ 75.980821][ T7174] __kmalloc_cache_noprof+0x91/0x6d0 [ 75.980840][ T7174] ? alloc_vfsmnt+0x72/0x840 [ 75.980856][ T7174] alloc_vfsmnt+0x72/0x840 [ 75.980871][ T7174] clone_mnt+0x4b/0x9c0 [ 75.980886][ T7174] copy_tree+0xf8/0xc50 [ 75.980901][ T7174] __do_loopback+0x338/0x540 [ 75.980914][ T7174] vfs_open_tree+0x65b/0xb60 [ 75.980926][ T7174] ? _raw_spin_unlock+0x28/0x50 [ 75.980943][ T7174] ? __pfx_vfs_open_tree+0x10/0x10 [ 75.980959][ T7174] __x64_sys_open_tree+0xbe/0x150 [ 75.980971][ T7174] do_syscall_64+0x123/0x790 [ 75.980989][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.981000][ T7174] RIP: 0033:0x7f19fe99f559 [ 75.981009][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.981020][ T7174] RSP: 002b:00007f19ff7e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 75.981032][ T7174] RAX: ffffffffffffffda RBX: 00007f19fec25fa0 RCX: 00007f19fe99f559 [ 75.981041][ T7174] RDX: 0000000000009101 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 75.981051][ T7174] RBP: 00007f19fea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.981060][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.981069][ T7174] R13: 00007f19fec26038 R14: 00007f19fec25fa0 R15: 00007ffe75ffd088 [ 75.981094][ T7174] [ 76.083331][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.083348][ T66] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.237866][ T7183] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.272123][ T7191] netlink: 50 bytes leftover after parsing attributes in process `syz.5.360'. [ 76.292704][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 76.295598][ T7190] futex_wake_op: syz.4.364 tries to shift op by -1; fix this program [ 76.437542][ T74] IPVS: starting estimator thread 0... [ 76.523331][ T7199] IPVS: using max 43 ests per chain, 103200 per kthread [ 76.534297][ T7183] wg0 speed is unknown, defaulting to 1000 [ 76.569187][ T58] cfg80211: failed to load regulatory.db [ 76.771873][ T7202] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 76.936209][ T7209] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 76.936231][ T7209] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.058583][ T7082] CIFS: VFS: cifs_mount failed w/return code = -512 [ 77.060130][ T7211] CIFS: Attempting to mount //127.0.0.1/share [ 77.108175][ T58] usb 8-1: USB disconnect, device number 4 [ 77.159409][ T7216] Invalid logical block size (4194304) [ 77.179309][ T7218] zram: failed to load dictionary d (err=-2) [ 77.211408][ T7220] bridge0: port 3(veth1_to_bridge) entered blocking state [ 77.211630][ T7220] bridge0: port 3(veth1_to_bridge) entered disabled state [ 77.211963][ T7220] veth1_to_bridge: entered allmulticast mode [ 77.217454][ T7220] veth1_to_bridge: entered promiscuous mode [ 77.217651][ T7220] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.218868][ T7220] bridge0: port 3(veth1_to_bridge) entered blocking state [ 77.218974][ T7220] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 77.338050][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 77.341723][ T7227] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.341980][ T7227] netlink: 156 bytes leftover after parsing attributes in process `syz.4.374'. [ 77.421443][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'. [ 77.623911][ T7240] syzkaller0: entered promiscuous mode [ 77.623941][ T7240] syzkaller0: entered allmulticast mode [ 77.626504][ T7240] tipc: Started in network mode [ 77.626528][ T7240] tipc: Node identity 46f5911b7db5, cluster identity 4711 [ 77.626690][ T7240] tipc: Enabled bearer , priority 0 [ 77.719141][ T7243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.806423][ T7211] CIFS: VFS: cifs_mount failed w/return code = -112 [ 78.165460][ T7256] FAULT_INJECTION: forcing a failure. [ 78.165460][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 78.165527][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.5.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.165555][ T7256] Tainted: [L]=SOFTLOCKUP [ 78.165562][ T7256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.165573][ T7256] Call Trace: [ 78.165579][ T7256] [ 78.165589][ T7256] dump_stack_lvl+0x100/0x190 [ 78.165699][ T7256] should_fail_ex.cold+0x5/0xa [ 78.165752][ T7256] should_failslab+0xc2/0x120 [ 78.165804][ T7256] __kvmalloc_node_noprof+0x113/0x9b0 [ 78.165833][ T7256] ? io_alloc_cache_init+0x38/0x170 [ 78.165877][ T7256] io_alloc_cache_init+0x38/0x170 [ 78.165903][ T7256] io_rsrc_cache_init+0x40/0x50 [ 78.165926][ T7256] io_uring_setup.cold+0x4c0/0x1c7e [ 78.165949][ T7256] ? lock_acquire+0x1d1/0x380 [ 78.165993][ T7256] ? avc_has_perm_noaudit+0x56/0x470 [ 78.166026][ T7256] ? __pfx_io_uring_setup+0x10/0x10 [ 78.166055][ T7256] ? find_held_lock+0x2b/0x80 [ 78.166100][ T7256] ? avc_has_perm_noaudit+0x11e/0x470 [ 78.166123][ T7256] ? avc_has_perm_noaudit+0x11e/0x470 [ 78.166162][ T7256] ? xfd_validate_state+0x129/0x190 [ 78.166207][ T7256] __x64_sys_io_uring_setup+0xc2/0x170 [ 78.166242][ T7256] do_syscall_64+0x123/0x790 [ 78.166288][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.166310][ T7256] RIP: 0033:0x7f3d72d9f559 [ 78.166327][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.166346][ T7256] RSP: 002b:00007f3d73cf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 78.166366][ T7256] RAX: ffffffffffffffda RBX: 00007f3d73025fa0 RCX: 00007f3d72d9f559 [ 78.166379][ T7256] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000524 [ 78.166391][ T7256] RBP: 00007f3d72e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 78.166404][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.166416][ T7256] R13: 00007f3d73026038 R14: 00007f3d73025fa0 R15: 00007ffe6e6e8338 [ 78.166442][ T7256] [ 78.173010][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 78.173026][ T42] audit: type=1400 audit(1792502446.500:556): avc: denied { append } for pid=7255 comm="syz.5.385" name="v4l-subdev6" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.186637][ T7256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.187234][ T7256] team0: Device macvlan2 is already an upper device of the team interface [ 78.332735][ T7235] tipc: Resetting bearer [ 78.348643][ T7235] tipc: Disabling bearer [ 78.478628][ T42] audit: type=1326 audit(1792502446.810:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7265 comm="syz.3.389" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ce59f559 code=0x0 [ 78.827147][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.394'. [ 78.938294][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 78.940604][ T42] audit: type=1400 audit(1792502447.270:558): avc: denied { create } for pid=7283 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.941036][ T42] audit: type=1400 audit(1792502447.270:559): avc: denied { connect } for pid=7283 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.969919][ T42] audit: type=1400 audit(1792502447.300:560): avc: denied { write } for pid=7282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.992475][ T42] audit: type=1400 audit(1792502447.320:561): avc: denied { create } for pid=7283 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.032572][ T42] audit: type=1400 audit(1792502447.360:562): avc: denied { write } for pid=7290 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.140006][ T42] audit: type=1400 audit(1792502447.470:563): avc: denied { write } for pid=7298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.209207][ T42] audit: type=1400 audit(1792502447.540:564): avc: denied { write } for pid=7302 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.376098][ T42] audit: type=1400 audit(1792502447.710:565): avc: denied { map } for pid=7310 comm="syz.3.400" path="socket:[18907]" dev="sockfs" ino=18907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.402018][ T7311] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 79.436569][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 79.477204][ T7315] ip6t_srh: unknown srh invflags 51E8 [ 79.484987][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'. [ 79.485002][ T7317] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 79.518331][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.518677][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.524790][ T7321] netlink: 'syz.5.404': attribute type 1 has an invalid length. [ 79.552031][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.556706][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.658015][ T7321] bond1: entered promiscuous mode [ 79.658437][ T7321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.663340][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 31488 - 0 [ 79.663359][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.663378][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 31488 - 0 [ 79.663391][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.663408][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 31488 - 0 [ 79.663422][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.663439][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 31488 - 0 [ 79.663452][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.806123][ T7328] random: crng reseeded on system resumption [ 80.415716][ T7357] tipc: Invalid UDP bearer configuration [ 80.415738][ T7357] tipc: Enabling of bearer rejected, failed to enable media [ 80.490508][ T7362] 9p: Unknown uid 00000000004294967295 [ 80.562977][ T7369] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 80.849203][ T7381] fuse: root generation should be zero [ 81.143532][ T7387] syzkaller0: entered promiscuous mode [ 81.143553][ T7387] syzkaller0: entered allmulticast mode [ 81.668913][ T7398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7398 comm=syz.5.424 [ 82.082799][ T7416] X.509: Couldn't decode AuthKeyIdentifier [ 82.333619][ T7424] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 82.630759][ T7434] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.745340][ T66] Bluetooth: hci0: unexpected event for opcode 0x201c [ 82.748387][ T66] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 82.880240][ T7441] FAULT_INJECTION: forcing a failure. [ 82.880240][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 82.880274][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.2.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.880289][ T7441] Tainted: [L]=SOFTLOCKUP [ 82.880294][ T7441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.880301][ T7441] Call Trace: [ 82.880305][ T7441] [ 82.880310][ T7441] dump_stack_lvl+0x100/0x190 [ 82.880367][ T7441] should_fail_ex.cold+0x5/0xa [ 82.880395][ T7441] should_failslab+0xc2/0x120 [ 82.880416][ T7441] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 82.880433][ T7441] ? kstrdup_const+0x63/0x80 [ 82.880448][ T7441] kstrdup+0x51/0xe0 [ 82.880460][ T7441] kstrdup_const+0x63/0x80 [ 82.880472][ T7441] __kernfs_new_node+0x9b/0xa10 [ 82.880495][ T7441] ? lock_acquire+0x1d1/0x380 [ 82.880517][ T7441] ? __pfx___kernfs_new_node+0x10/0x10 [ 82.880536][ T7441] ? lock_acquire+0x1d1/0x380 [ 82.880554][ T7441] ? kernfs_root+0x23/0x2a0 [ 82.880572][ T7441] ? find_held_lock+0x2b/0x80 [ 82.880597][ T7441] ? kernfs_root+0xee/0x2a0 [ 82.880613][ T7441] ? kernfs_root+0xee/0x2a0 [ 82.880637][ T7441] kernfs_new_node+0x194/0x200 [ 82.880654][ T7441] ? __pfx_kernfs_new_node+0x10/0x10 [ 82.880668][ T7441] ? kernfs_add_one+0x213/0xb40 [ 82.880684][ T7441] __kernfs_create_file+0x53/0x350 [ 82.880702][ T7441] cgroup_addrm_files+0x4ef/0xdb0 [ 82.880733][ T7441] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 82.880748][ T7441] ? find_held_lock+0x2b/0x80 [ 82.880769][ T7441] ? _raw_spin_unlock+0x28/0x50 [ 82.880788][ T7441] ? xa_store+0x3f/0x50 [ 82.880799][ T7441] ? mem_cgroup_css_online+0x39b/0xbf0 [ 82.880817][ T7441] css_populate_dir+0x161/0x590 [ 82.880835][ T7441] cgroup_apply_control_enable+0x441/0xdd0 [ 82.880855][ T7441] cgroup_mkdir+0x57f/0x1330 [ 82.880884][ T7441] ? __pfx_cgroup_mkdir+0x10/0x10 [ 82.880907][ T7441] kernfs_iop_mkdir+0x111/0x190 [ 82.880924][ T7441] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 82.880947][ T7441] vfs_mkdir+0x364/0x850 [ 82.880963][ T7441] filename_mkdirat+0x48b/0x5e0 [ 82.880982][ T7441] ? __pfx_filename_mkdirat+0x10/0x10 [ 82.880998][ T7441] ? strncpy_from_user+0x19d/0x2d0 [ 82.881017][ T7441] ? do_getname+0x191/0x390 [ 82.881030][ T7441] __x64_sys_mkdirat+0x89/0xc0 [ 82.881047][ T7441] do_syscall_64+0x123/0x790 [ 82.881066][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.881078][ T7441] RIP: 0033:0x7f0c39d9f559 [ 82.881088][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.881098][ T7441] RSP: 002b:00007f0c37ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 82.881109][ T7441] RAX: ffffffffffffffda RBX: 00007f0c3a025fa0 RCX: 00007f0c39d9f559 [ 82.881116][ T7441] RDX: 0000000000000777 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 82.881123][ T7441] RBP: 00007f0c39e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.881130][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.881136][ T7441] R13: 00007f0c3a026038 R14: 00007f0c3a025fa0 R15: 00007ffd8299d498 [ 82.881152][ T7441] [ 82.881186][ T7441] cgroup: cgroup_addrm_files: failed to add kmem.tcp.limit_in_bytes, err=-12 [ 82.990334][ T7447] bridge0: entered promiscuous mode [ 82.990390][ T7447] bridge0: entered allmulticast mode [ 83.314550][ T7468] syzkaller0: entered promiscuous mode [ 83.314564][ T7468] syzkaller0: entered allmulticast mode [ 83.317559][ T7468] tipc: Started in network mode [ 83.317575][ T7468] tipc: Node identity 0ac5d1f78402, cluster identity 4711 [ 83.317674][ T7468] tipc: Enabled bearer , priority 0 [ 84.052388][ T7460] tipc: Resetting bearer [ 84.063979][ T7460] tipc: Disabling bearer [ 84.418210][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 84.418222][ T42] audit: type=1400 audit(1792502452.750:583): avc: denied { bind } for pid=7494 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.500161][ T7501] syzkaller0: entered promiscuous mode [ 84.500183][ T7501] syzkaller0: entered allmulticast mode [ 84.502856][ T7501] tipc: Enabled bearer , priority 0 [ 84.531494][ T42] audit: type=1400 audit(1792502452.860:584): avc: denied { shutdown } for pid=7494 comm="syz.2.455" lport=50627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.220113][ T7490] tipc: Resetting bearer [ 85.229384][ T7490] tipc: Disabling bearer [ 85.327452][ T42] audit: type=1400 audit(1792502453.660:585): avc: denied { create } for pid=7518 comm="syz.5.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.328032][ T42] audit: type=1400 audit(1792502453.660:586): avc: denied { setopt } for pid=7518 comm="syz.5.463" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.328343][ T42] audit: type=1400 audit(1792502453.660:587): avc: denied { write } for pid=7518 comm="syz.5.463" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.480744][ T7525] FAULT_INJECTION: forcing a failure. [ 85.480744][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.480777][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.5.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.480792][ T7525] Tainted: [L]=SOFTLOCKUP [ 85.480796][ T7525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.480802][ T7525] Call Trace: [ 85.480806][ T7525] [ 85.480810][ T7525] dump_stack_lvl+0x100/0x190 [ 85.480850][ T7525] should_fail_ex.cold+0x5/0xa [ 85.480872][ T7525] _copy_from_iter+0x1f4/0x1690 [ 85.480898][ T7525] ? trace_kmem_cache_alloc+0xdd/0x100 [ 85.480922][ T7525] ? __kasan_slab_alloc+0x89/0x90 [ 85.480939][ T7525] ? __pfx__copy_from_iter+0x10/0x10 [ 85.480955][ T7525] ? __asan_memset+0x23/0x50 [ 85.480968][ T7525] ? __build_skb_around+0x278/0x390 [ 85.481000][ T7525] ? is_vmalloc_addr+0x86/0xa0 [ 85.481014][ T7525] netlink_sendmsg+0x94a/0x1020 [ 85.481037][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.481051][ T7525] ? selinux_socket_sendmsg+0x198/0x2f0 [ 85.481075][ T7525] ? ____sys_sendmsg+0xa4d/0xbe0 [ 85.481090][ T7525] ____sys_sendmsg+0xa4d/0xbe0 [ 85.481103][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.481115][ T7525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.481133][ T7525] ? lock_acquire+0x1d1/0x380 [ 85.481152][ T7525] ? get_pid_task+0x2a/0x250 [ 85.481175][ T7525] ___sys_sendmsg+0x190/0x1e0 [ 85.481192][ T7525] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.481207][ T7525] ? get_pid_task+0x106/0x250 [ 85.481227][ T7525] ? find_held_lock+0x2b/0x80 [ 85.481251][ T7525] __sys_sendmsg+0x160/0x210 [ 85.481263][ T7525] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.481282][ T7525] do_syscall_64+0x123/0x790 [ 85.481307][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.481319][ T7525] RIP: 0033:0x7f3d72d9f559 [ 85.481328][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.481355][ T7525] RSP: 002b:00007f3d73cf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.481366][ T7525] RAX: ffffffffffffffda RBX: 00007f3d73025fa0 RCX: 00007f3d72d9f559 [ 85.481373][ T7525] RDX: 000000000000c000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 85.481384][ T7525] RBP: 00007f3d73cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.481391][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.481397][ T7525] R13: 00007f3d73026038 R14: 00007f3d73025fa0 R15: 00007ffe6e6e8338 [ 85.481412][ T7525] [ 85.511488][ T7527] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.547782][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 85.551158][ T42] audit: type=1400 audit(1792502453.880:588): avc: denied { name_connect } for pid=7528 comm="syz.5.467" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 85.595650][ T42] audit: type=1400 audit(1792502453.930:589): avc: denied { write } for pid=7530 comm="syz.5.468" name="/" dev="9p" ino=71827695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.599190][ T42] audit: type=1400 audit(1792502453.930:590): avc: denied { mounton } for pid=7530 comm="syz.5.468" path="/79/file0/sys" dev="9p" ino=71827943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.599935][ T42] audit: type=1400 audit(1792502453.930:591): avc: denied { write } for pid=7530 comm="syz.5.468" name="/" dev="9p" ino=71827695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.600248][ T42] audit: type=1400 audit(1792502453.930:592): avc: denied { create } for pid=7530 comm="syz.5.468" name="drv" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 85.652893][ T7533] tmpfs: Cannot disable swap on remount [ 85.663260][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 85.767370][ T7551] netlink: 'syz.3.477': attribute type 11 has an invalid length. [ 85.786816][ T7555] lo: entered allmulticast mode [ 85.889135][ T7566] syzkaller1: entered promiscuous mode [ 85.889157][ T7566] syzkaller1: entered allmulticast mode [ 86.422336][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.484'. [ 86.422358][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.484'. [ 86.424473][ T7583] geneve0: entered promiscuous mode [ 86.699877][ T7596] netlink: 168 bytes leftover after parsing attributes in process `syz.4.490'. [ 86.762927][ T66] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 86.784041][ T5836] hid-generic 0003:0001:0001.0003: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 87.089480][ T7620] typec_fusb302 0-0002: supply vbus not found, using dummy regulator [ 87.105259][ T7620] typec_fusb302 0-0002: failed to request gpio_int_n [ 87.122362][ T7620] typec_fusb302 0-0002: probe with driver typec_fusb302 failed with error -2 [ 87.127997][ T7620] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 87.141519][ T7620] 0x000000000003-0x000000010001 : "" [ 87.158561][ T7620] ftl_cs: FTL header corrupt! [ 87.303501][ T5847] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.349955][ T7633] openvswitch: netlink: Missing key (keys=40, expected=100) [ 87.415616][ T7635] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.452122][ T7637] netlink: 50 bytes leftover after parsing attributes in process `syz.5.501'. [ 87.474082][ T5847] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 87.475608][ T5847] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 87.475629][ T5847] usb 7-1: config 0 has no interface number 0 [ 87.475660][ T5847] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.478397][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.478416][ T5847] usb 7-1: Product: syz [ 87.478428][ T5847] usb 7-1: Manufacturer: syz [ 87.478439][ T5847] usb 7-1: SerialNumber: syz [ 87.501805][ T5847] usb 7-1: config 0 descriptor?? [ 87.516355][ T7639] netlink: 'syz.4.502': attribute type 10 has an invalid length. [ 87.518747][ T5847] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 87.727553][ T7618] syzkaller0: entered promiscuous mode [ 87.727574][ T7618] syzkaller0: entered allmulticast mode [ 87.737925][ T1347] usb 7-1: USB disconnect, device number 5 [ 87.751318][ T1347] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 87.758347][ T7635] wg0 speed is unknown, defaulting to 1000 [ 87.815185][ T7651] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 87.816763][ T7651] @0Ù: renamed from bond_slave_1 (while UP) [ 87.839078][ T7651] Mount JFS Failure: -22 [ 87.839089][ T7651] jfs_mount failed w/return code = -22 [ 88.045796][ T7658] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.100416][ T7660] dlm: no local IP address has been set [ 88.100429][ T7660] dlm: cannot start dlm midcomms -107 [ 88.183284][ T1347] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 88.265108][ T7668] bridge_slave_1: entered promiscuous mode [ 88.353933][ T1347] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 88.357884][ T1347] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 88.357900][ T1347] usb 7-1: config 0 has no interface number 0 [ 88.357919][ T1347] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 88.357932][ T1347] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 88.359716][ T1347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.359729][ T1347] usb 7-1: Product: syz [ 88.359737][ T1347] usb 7-1: Manufacturer: syz [ 88.359744][ T1347] usb 7-1: SerialNumber: syz [ 88.362880][ T1347] usb 7-1: config 0 descriptor?? [ 88.363699][ T7618] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.393772][ T1347] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 88.626085][ T5836] usb 7-1: USB disconnect, device number 6 [ 88.633906][ T5836] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 88.663032][ T7678] tipc: Enabled bearer , priority 0 [ 88.723935][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.724405][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.724774][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.725085][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.725348][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.725614][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.725904][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.726250][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:17:25:e1:9a:aa, vlan:0) [ 88.789456][ T851] Process accounting resumed [ 88.973900][ T37] wlan1: Trigger new scan to find an IBSS to join [ 89.487909][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 89.487927][ T42] audit: type=1400 audit(1792502457.820:616): avc: denied { getopt } for pid=7707 comm="syz.5.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.488246][ T42] audit: type=1400 audit(1792502457.820:617): avc: denied { setopt } for pid=7707 comm="syz.5.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.775139][ T58] tipc: Node number set to 1075402064 [ 89.808244][ T42] audit: type=1400 audit(1792502458.140:618): avc: denied { create } for pid=7720 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.866347][ T7723] FAULT_INJECTION: forcing a failure. [ 89.866347][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 89.866368][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.4.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.866383][ T7723] Tainted: [L]=SOFTLOCKUP [ 89.866387][ T7723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.866394][ T7723] Call Trace: [ 89.866398][ T7723] [ 89.866402][ T7723] dump_stack_lvl+0x100/0x190 [ 89.866422][ T7723] should_fail_ex.cold+0x5/0xa [ 89.866439][ T7723] should_failslab+0xc2/0x120 [ 89.866456][ T7723] __kmalloc_noprof+0xfc/0x840 [ 89.866477][ T7723] ? tomoyo_encode2+0xfb/0x3c0 [ 89.866491][ T7723] tomoyo_encode2+0xfb/0x3c0 [ 89.866503][ T7723] tomoyo_encode+0x29/0x50 [ 89.866513][ T7723] tomoyo_realpath_from_path+0x18c/0x690 [ 89.866527][ T7723] tomoyo_path_number_perm+0x23c/0x580 [ 89.866542][ T7723] ? tomoyo_path_number_perm+0x22e/0x580 [ 89.866558][ T7723] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 89.866579][ T7723] ? __lock_acquire+0x5c0/0x1f40 [ 89.866598][ T7723] ? __fget_files+0x34/0x3d0 [ 89.866615][ T7723] ? find_held_lock+0x2b/0x80 [ 89.866630][ T7723] ? hook_file_ioctl_common+0x140/0x440 [ 89.866646][ T7723] ? __fget_files+0x21f/0x3d0 [ 89.866664][ T7723] security_file_ioctl+0xd3/0x230 [ 89.866681][ T7723] __x64_sys_ioctl+0xb7/0x210 [ 89.866695][ T7723] do_syscall_64+0x123/0x790 [ 89.866714][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.866725][ T7723] RIP: 0033:0x7f19fe99f559 [ 89.866735][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.866745][ T7723] RSP: 002b:00007f19ff7e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.866756][ T7723] RAX: ffffffffffffffda RBX: 00007f19fec25fa0 RCX: 00007f19fe99f559 [ 89.866763][ T7723] RDX: 0000200000000500 RSI: 00000000c02c564a RDI: 0000000000000003 [ 89.866769][ T7723] RBP: 00007f19ff7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 89.866776][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.866782][ T7723] R13: 00007f19fec26038 R14: 00007f19fec25fa0 R15: 00007ffe75ffd088 [ 89.866796][ T7723] [ 89.866805][ T7723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 89.934893][ T29] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 90.006784][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 90.006798][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 90.021045][ T7732] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.084174][ T29] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 90.085053][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.085075][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 90.085088][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 90.085100][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 90.085113][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 90.085126][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 90.085136][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.086895][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.086907][ T29] usb 10-1: Product: syz [ 90.086915][ T29] usb 10-1: Manufacturer: syz [ 90.086922][ T29] usb 10-1: SerialNumber: syz [ 90.092517][ T29] usb 10-1: config 0 descriptor?? [ 90.095536][ T7714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 90.097378][ T29] ati_remote 10-1:0.0: Initializing ati_remote hardware failed. [ 90.097490][ T29] ati_remote 10-1:0.0: probe with driver ati_remote failed with error -5 [ 90.258108][ T42] audit: type=1400 audit(1792502458.590:619): avc: denied { append } for pid=7737 comm="syz.2.542" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.275944][ T42] audit: type=1400 audit(1792502458.610:620): avc: denied { ioctl } for pid=7737 comm="syz.2.542" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.302530][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.302941][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.353389][ T42] audit: type=1400 audit(1792502458.690:621): avc: denied { read } for pid=7740 comm="syz.2.543" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.353725][ T42] audit: type=1400 audit(1792502458.690:622): avc: denied { open } for pid=7740 comm="syz.2.543" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.354966][ T42] audit: type=1400 audit(1792502458.690:623): avc: denied { ioctl } for pid=7740 comm="syz.2.543" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0xab08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.006865][ C0] bridge0: topology change detected, propagating [ 92.007411][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 92.965461][ T5847] usb 10-1: USB disconnect, device number 3 [ 93.174933][ T7754] tipc: Enabled bearer , priority 0 [ 93.181821][ T7756] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 255 out of range (51000000..2150000000) [ 93.225749][ T42] audit: type=1400 audit(1792502461.560:624): avc: denied { listen } for pid=7760 comm="syz.3.549" lport=42549 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.226127][ T42] audit: type=1400 audit(1792502461.560:625): avc: denied { accept } for pid=7760 comm="syz.3.549" lport=42549 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.228551][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 93.228569][ T7761] net_ratelimit: 27029 callbacks suppressed [ 93.228578][ T7761] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 93.268686][ T7763] FAULT_INJECTION: forcing a failure. [ 93.268686][ T7763] name failslab, interval 1, probability 0, space 0, times 0 [ 93.268715][ T7763] CPU: 1 UID: 0 PID: 7763 Comm: syz.3.550 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.268739][ T7763] Tainted: [L]=SOFTLOCKUP [ 93.268745][ T7763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.268754][ T7763] Call Trace: [ 93.268759][ T7763] [ 93.268765][ T7763] dump_stack_lvl+0x100/0x190 [ 93.268791][ T7763] should_fail_ex.cold+0x5/0xa [ 93.268812][ T7763] should_failslab+0xc2/0x120 [ 93.268833][ T7763] __kmalloc_cache_noprof+0x91/0x6d0 [ 93.268855][ T7763] ? input_allocate_device+0x44/0x350 [ 93.268904][ T7763] input_allocate_device+0x44/0x350 [ 93.268922][ T7763] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 93.268945][ T7763] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 93.268962][ T7763] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 93.268984][ T7763] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 93.269005][ T7763] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 93.269029][ T7763] ? __fget_files+0x34/0x3d0 [ 93.269062][ T7763] ? selinux_file_ioctl+0x13b/0x290 [ 93.269086][ T7763] ? selinux_file_ioctl+0xb6/0x290 [ 93.269132][ T7763] ? __pfx_uinput_ioctl+0x10/0x10 [ 93.269159][ T7763] __x64_sys_ioctl+0x18e/0x210 [ 93.269182][ T7763] do_syscall_64+0x123/0x790 [ 93.269212][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.269230][ T7763] RIP: 0033:0x7f45ce59f559 [ 93.269244][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.269260][ T7763] RSP: 002b:00007f45cf3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.269277][ T7763] RAX: ffffffffffffffda RBX: 00007f45ce825fa0 RCX: 00007f45ce59f559 [ 93.269288][ T7763] RDX: 0000200000000180 RSI: 000000008004552d RDI: 0000000000000003 [ 93.269304][ T7763] RBP: 00007f45cf3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.269314][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.269324][ T7763] R13: 00007f45ce826038 R14: 00007f45ce825fa0 R15: 00007ffd199e60f8 [ 93.269348][ T7763] [ 93.340970][ T7766] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.379588][ T7767] netlink: 50 bytes leftover after parsing attributes in process `syz.3.551'. [ 93.515802][ T7766] wg0 speed is unknown, defaulting to 1000 [ 93.547242][ T7771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.547260][ T7771] IPv6: NLM_F_CREATE should be set when creating new route [ 93.596116][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.596605][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.714650][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.719175][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.800582][ T5837] syz1: Port: 1 Link DOWN [ 93.844089][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.844131][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.844160][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.844188][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.887049][ T7749] tipc: Disabling bearer [ 93.925539][ T36] wlan1: Trigger new scan to find an IBSS to join [ 94.093230][ T7775] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 94.183574][ T7795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.558'. [ 94.264152][ T7775] usb 9-1: unable to get BOS descriptor or descriptor too short [ 94.264199][ T7775] usb 9-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 94.265163][ T7775] usb 9-1: config 8 has an invalid interface number: 198 but max is 0 [ 94.265184][ T7775] usb 9-1: config 8 has no interface number 0 [ 94.265219][ T7775] usb 9-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 94.268109][ T7775] usb 9-1: string descriptor 0 read error: -22 [ 94.268212][ T7775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.276234][ T7785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.301197][ T7808] netlink: 68 bytes leftover after parsing attributes in process `syz.3.561'. [ 94.377856][ T7797] netlink: 48 bytes leftover after parsing attributes in process `syz.5.559'. [ 94.468885][ T7815] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.478448][ T7775] usb 9-1: USB disconnect, device number 2 [ 94.504148][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 94.504165][ T42] audit: type=1400 audit(1792502462.830:628): avc: denied { setopt } for pid=7814 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.504375][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 94.504392][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 94.652850][ T7815] wg0 speed is unknown, defaulting to 1000 [ 94.715349][ T7829] FAULT_INJECTION: forcing a failure. [ 94.715349][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 94.715378][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.715399][ T7829] Tainted: [L]=SOFTLOCKUP [ 94.715404][ T7829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.715413][ T7829] Call Trace: [ 94.715419][ T7829] [ 94.715424][ T7829] dump_stack_lvl+0x100/0x190 [ 94.715451][ T7829] should_fail_ex.cold+0x5/0xa [ 94.715472][ T7829] should_failslab+0xc2/0x120 [ 94.715494][ T7829] kmem_cache_alloc_noprof+0x92/0x6a0 [ 94.715515][ T7829] ? ovs_flow_alloc+0x1e/0x210 [ 94.715537][ T7829] ovs_flow_alloc+0x1e/0x210 [ 94.715556][ T7829] ovs_flow_cmd_new+0x231/0xe10 [ 94.715578][ T7829] ? kasan_save_stack+0x30/0x50 [ 94.715597][ T7829] ? kasan_save_track+0x14/0x30 [ 94.715615][ T7829] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 94.715634][ T7829] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 94.715651][ T7829] ? netlink_rcv_skb+0x159/0x420 [ 94.715664][ T7829] ? genl_rcv+0x28/0x40 [ 94.715677][ T7829] ? netlink_unicast+0x65f/0x950 [ 94.715691][ T7829] ? __sys_sendmsg+0x160/0x210 [ 94.715706][ T7829] ? do_syscall_64+0x123/0x790 [ 94.715758][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.715817][ T7829] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 94.715834][ T7829] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 94.715856][ T7829] genl_family_rcv_msg_doit+0x214/0x300 [ 94.715876][ T7829] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.715899][ T7829] ? bpf_lsm_capable+0x9/0x10 [ 94.715914][ T7829] ? security_capable+0x80/0x260 [ 94.715933][ T7829] ? ns_capable+0xd2/0xf0 [ 94.715966][ T7829] genl_rcv_msg+0x560/0x800 [ 94.715984][ T7829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.716001][ T7829] ? __lock_acquire+0x5c0/0x1f40 [ 94.716019][ T7829] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 94.716042][ T7829] ? __lock_acquire+0x5c0/0x1f40 [ 94.716062][ T7829] netlink_rcv_skb+0x159/0x420 [ 94.716077][ T7829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.716095][ T7829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.716118][ T7829] ? netlink_deliver_tap+0x1ae/0xcc0 [ 94.716144][ T7829] genl_rcv+0x28/0x40 [ 94.716158][ T7829] netlink_unicast+0x65f/0x950 [ 94.716176][ T7829] ? __pfx_netlink_unicast+0x10/0x10 [ 94.716189][ T7829] ? __build_skb_around+0x278/0x390 [ 94.716218][ T7829] netlink_sendmsg+0xa02/0x1020 [ 94.716236][ T7829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.716256][ T7829] ? selinux_socket_sendmsg+0x198/0x2f0 [ 94.716280][ T7829] ? ____sys_sendmsg+0xa4d/0xbe0 [ 94.716298][ T7829] ____sys_sendmsg+0xa4d/0xbe0 [ 94.716316][ T7829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.716333][ T7829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.716357][ T7829] ? lock_acquire+0x1d1/0x380 [ 94.716373][ T7829] ? get_pid_task+0x2a/0x250 [ 94.716395][ T7829] ___sys_sendmsg+0x190/0x1e0 [ 94.716417][ T7829] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.716437][ T7829] ? get_pid_task+0x106/0x250 [ 94.716465][ T7829] ? find_held_lock+0x2b/0x80 [ 94.716499][ T7829] __sys_sendmsg+0x160/0x210 [ 94.716516][ T7829] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.716543][ T7829] do_syscall_64+0x123/0x790 [ 94.716568][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.716583][ T7829] RIP: 0033:0x7f0c39d9f559 [ 94.716596][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.716611][ T7829] RSP: 002b:00007f0c37ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.716626][ T7829] RAX: ffffffffffffffda RBX: 00007f0c3a025fa0 RCX: 00007f0c39d9f559 [ 94.716636][ T7829] RDX: 000000000000c000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 94.716645][ T7829] RBP: 00007f0c37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.716654][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.716663][ T7829] R13: 00007f0c3a026038 R14: 00007f0c3a025fa0 R15: 00007ffd8299d498 [ 94.716684][ T7829] [ 94.814865][ T7836] FAULT_INJECTION: forcing a failure. [ 94.814865][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 94.814892][ T7836] CPU: 1 UID: 60928 PID: 7836 Comm: syz.2.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.814913][ T7836] Tainted: [L]=SOFTLOCKUP [ 94.814918][ T7836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.814927][ T7836] Call Trace: [ 94.814933][ T7836] [ 94.814938][ T7836] dump_stack_lvl+0x100/0x190 [ 94.814965][ T7836] should_fail_ex.cold+0x5/0xa [ 94.814986][ T7836] should_failslab+0xc2/0x120 [ 94.815009][ T7836] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 94.815032][ T7836] ? neigh_parms_alloc+0x85/0x5e0 [ 94.815069][ T7836] kmemdup_noprof+0x29/0x60 [ 94.815086][ T7836] neigh_parms_alloc+0x85/0x5e0 [ 94.815107][ T7836] inetdev_init+0x13c/0x570 [ 94.815149][ T7836] inetdev_event+0x827/0x17f0 [ 94.815169][ T7836] ? ib_netdevice_event+0xfc/0x330 [ 94.815203][ T7836] ? __pfx_inetdev_event+0x10/0x10 [ 94.815224][ T7836] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.815247][ T7836] notifier_call_chain+0x99/0x3f0 [ 94.815273][ T7836] call_netdevice_notifiers_info+0xbe/0x110 [ 94.815295][ T7836] register_netdevice+0x1998/0x25a0 [ 94.815317][ T7836] ? __pfx_register_netdevice+0x10/0x10 [ 94.815341][ T7836] __tun_chr_ioctl+0x1ef4/0x4880 [ 94.815371][ T7836] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.815388][ T7836] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 94.815417][ T7836] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 94.815430][ T7836] ? __fget_files+0x34/0x3d0 [ 94.815460][ T7836] ? selinux_file_ioctl+0x13b/0x290 [ 94.815481][ T7836] ? selinux_file_ioctl+0xb6/0x290 [ 94.815504][ T7836] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 94.815519][ T7836] __x64_sys_ioctl+0x18e/0x210 [ 94.815538][ T7836] do_syscall_64+0x123/0x790 [ 94.815563][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.815578][ T7836] RIP: 0033:0x7f0c39d9f559 [ 94.815591][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.815605][ T7836] RSP: 002b:00007f0c37ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.815620][ T7836] RAX: ffffffffffffffda RBX: 00007f0c3a025fa0 RCX: 00007f0c39d9f559 [ 94.815630][ T7836] RDX: 0000200000000300 RSI: 00000000400454ca RDI: 000000000000000d [ 94.815640][ T7836] RBP: 00007f0c39e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.815649][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.815657][ T7836] R13: 00007f0c3a026038 R14: 00007f0c3a025fa0 R15: 00007ffd8299d498 [ 94.815678][ T7836] [ 94.859222][ T36] wlan1: Creating new IBSS network, BSSID 22:ec:db:3b:2d:5e [ 94.956681][ T7846] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 95.133562][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.141915][ T7861] netlink: NAT attribute has 8 unknown bytes [ 95.141933][ T7861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.216760][ T29] hid-generic 0003:0001:0001.0004: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 95.265689][ T7863] fido_id[7863]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.327877][ T7870] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 95.507859][ T42] audit: type=1400 audit(1792502463.840:629): avc: denied { mounton } for pid=7876 comm="syz.4.589" path="/117/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 95.507980][ T7877] FAULT_INJECTION: forcing a failure. [ 95.507980][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 95.508006][ T7877] CPU: 3 UID: 0 PID: 7877 Comm: syz.4.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.508030][ T7877] Tainted: [L]=SOFTLOCKUP [ 95.508036][ T7877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.508047][ T7877] Call Trace: [ 95.508053][ T7877] [ 95.508060][ T7877] dump_stack_lvl+0x100/0x190 [ 95.508093][ T7877] should_fail_ex.cold+0x5/0xa [ 95.508119][ T7877] should_failslab+0xc2/0x120 [ 95.508144][ T7877] __kmalloc_noprof+0xfc/0x840 [ 95.508166][ T7877] ? __list_lru_init+0xd9/0x4b0 [ 95.508187][ T7877] __list_lru_init+0xd9/0x4b0 [ 95.508205][ T7877] sget_fc+0xa7a/0x1f70 [ 95.508229][ T7877] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 95.508256][ T7877] ? kasan_save_track+0x14/0x30 [ 95.508278][ T7877] ? __pfx_set_anon_super_fc+0x10/0x10 [ 95.508297][ T7877] ? __pfx_sget_fc+0x10/0x10 [ 95.508323][ T7877] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 95.508346][ T7877] ? rcu_is_watching+0x13/0xc0 [ 95.508387][ T7877] ? cap_capable+0x107/0x430 [ 95.508412][ T7877] ? __pfx_proc_fill_super+0x10/0x10 [ 95.508448][ T7877] get_tree_nodev+0x28/0x190 [ 95.508473][ T7877] vfs_get_tree+0x92/0x320 [ 95.508493][ T7877] path_mount+0x7d0/0x2850 [ 95.508516][ T7877] ? __pfx_path_mount+0x10/0x10 [ 95.508533][ T7877] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.508563][ T7877] ? putname+0xb1/0x110 [ 95.508578][ T7877] ? kmem_cache_free+0x127/0x6c0 [ 95.508606][ T7877] ? __x64_sys_mount+0x293/0x310 [ 95.508623][ T7877] __x64_sys_mount+0x293/0x310 [ 95.508642][ T7877] ? __pfx___x64_sys_mount+0x10/0x10 [ 95.508668][ T7877] do_syscall_64+0x123/0x790 [ 95.508695][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.508714][ T7877] RIP: 0033:0x7f19fe99f559 [ 95.508728][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.508744][ T7877] RSP: 002b:00007f19ff7e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.508761][ T7877] RAX: ffffffffffffffda RBX: 00007f19fec25fa0 RCX: 00007f19fe99f559 [ 95.508772][ T7877] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 95.508783][ T7877] RBP: 00007f19fea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.508793][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.508803][ T7877] R13: 00007f19fec26038 R14: 00007f19fec25fa0 R15: 00007ffe75ffd088 [ 95.508827][ T7877] [ 95.878900][ T42] audit: type=1326 audit(1792502464.210:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.3.592" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ce59f559 code=0x0 [ 95.985666][ T7893] overlayfs: missing 'lowerdir' [ 96.033027][ T7895] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 96.033051][ T7895] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.035798][ T7895] vhci_hcd vhci_hcd.0: Device attached [ 96.189769][ T42] audit: type=1400 audit(1792502464.520:631): avc: denied { connect } for pid=7894 comm="syz.5.596" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.227091][ T66] Bluetooth: Frame is too long (len 12, expected len 4) [ 96.274070][ T29] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 96.709563][ T7896] vhci_hcd: connection closed [ 96.710822][ T12] vhci_hcd vhci_hcd.3: stop threads [ 96.710839][ T12] vhci_hcd vhci_hcd.3: release socket [ 96.712551][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 97.086349][ T7930] openvswitch: netlink: Missing key (keys=40, expected=100) [ 97.118227][ T7932] jffs2: notice: (7932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 97.279938][ T7938] IPv6: sit1: Disabled Multicast RS [ 97.280913][ T7938] sit1: entered allmulticast mode [ 97.314538][ T7940] fuse: fd is not a fuse device [ 97.316024][ T7940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 97.562342][ T7949] netlink: 13088 bytes leftover after parsing attributes in process `syz.2.611'. [ 97.562363][ T7949] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.637723][ T7956] netlink: 104 bytes leftover after parsing attributes in process `syz.2.614'. [ 97.702472][ T7960] Bluetooth: Error in BCSP hdr checksum [ 97.802813][ T7958] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.953849][ T42] audit: type=1400 audit(1792502466.280:632): avc: denied { write } for pid=7964 comm="syz.3.618" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.954777][ T42] audit: type=1400 audit(1792502466.290:633): avc: denied { remove_name } for pid=7964 comm="syz.3.618" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.954948][ T42] audit: type=1400 audit(1792502466.290:634): avc: denied { unlink } for pid=7964 comm="syz.3.618" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.972456][ T7965] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.041726][ T7967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.041849][ T7967] block device autoloading is deprecated and will be removed. [ 98.113576][ T42] audit: type=1400 audit(1792502466.450:635): avc: denied { append } for pid=7968 comm="syz.4.620" name="video4" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 98.150844][ T7965] wg0 speed is unknown, defaulting to 1000 [ 98.294236][ T7979] netlink: 'syz.4.623': attribute type 2 has an invalid length. [ 98.297102][ T42] audit: type=1400 audit(1792502466.630:636): avc: denied { getopt } for pid=7978 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.297469][ T7979] netlink: 92 bytes leftover after parsing attributes in process `syz.4.623'. [ 98.326619][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.485123][ T42] audit: type=1400 audit(1792502466.820:637): avc: denied { bind } for pid=7988 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.487926][ T7989] fuse: fd is not a fuse device [ 98.883596][ T7999] bond0: option ad_select: unable to set because the bond device is up full 09223372036854775807 00000000000000000006[ 99.262395][ T8004] FAULT_INJECTION: forcing a failure. [ 99.262395][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 99.262424][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.3.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.262449][ T8004] Tainted: [L]=SOFTLOCKUP [ 99.262456][ T8004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.262465][ T8004] Call Trace: [ 99.262472][ T8004] [ 99.262479][ T8004] dump_stack_lvl+0x100/0x190 [ 99.262543][ T8004] should_fail_ex.cold+0x5/0xa [ 99.262574][ T8004] ? __netlink_lookup+0x692/0x950 [ 99.262612][ T8004] should_failslab+0xc2/0x120 [ 99.262646][ T8004] kmem_cache_alloc_noprof+0x92/0x6a0 [ 99.262669][ T8004] ? skb_clone+0x190/0x400 [ 99.262694][ T8004] skb_clone+0x190/0x400 [ 99.262714][ T8004] netlink_deliver_tap+0xaed/0xcc0 [ 99.262746][ T8004] netlink_unicast+0x6ff/0x950 [ 99.262773][ T8004] ? __pfx_netlink_unicast+0x10/0x10 [ 99.262797][ T8004] netlink_sendmsg+0xa02/0x1020 [ 99.262821][ T8004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.262845][ T8004] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.262884][ T8004] ? ____sys_sendmsg+0xa4d/0xbe0 [ 99.262904][ T8004] ____sys_sendmsg+0xa4d/0xbe0 [ 99.262925][ T8004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.262945][ T8004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.262974][ T8004] ? lock_acquire+0x1d1/0x380 [ 99.263002][ T8004] ? get_pid_task+0x2a/0x250 [ 99.263026][ T8004] ___sys_sendmsg+0x190/0x1e0 [ 99.263049][ T8004] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.263091][ T8004] ? get_pid_task+0x106/0x250 [ 99.263124][ T8004] ? find_held_lock+0x2b/0x80 [ 99.263163][ T8004] __sys_sendmsg+0x160/0x210 [ 99.263184][ T8004] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.263217][ T8004] do_syscall_64+0x123/0x790 [ 99.263265][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.263283][ T8004] RIP: 0033:0x7f45ce59f559 [ 99.263298][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.263314][ T8004] RSP: 002b:00007f45cf3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.263332][ T8004] RAX: ffffffffffffffda RBX: 00007f45ce825fa0 RCX: 00007f45ce59f559 [ 99.263344][ T8004] RDX: 0000000004040004 RSI: 0000200000000180 RDI: 0000000000000003 [ 99.263355][ T8004] RBP: 00007f45cf3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.263378][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.263387][ T8004] R13: 00007f45ce826038 R14: 00007f45ce825fa0 R15: 00007ffd199e60f8 [ 99.263410][ T8004] [ 99.347290][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.376227][ T8009] Invalid logical block size (16777216) [ 99.466875][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.476875][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.478166][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.478835][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.480031][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.480728][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.513308][ T8019] jffs2: notice: (8019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 99.519997][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.620621][ T42] audit: type=1400 audit(1792502467.950:638): avc: denied { read write } for pid=8030 comm="syz.4.645" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.620862][ T42] audit: type=1400 audit(1792502467.950:639): avc: denied { open } for pid=8030 comm="syz.4.645" path="/138/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.621289][ T42] audit: type=1400 audit(1792502467.950:640): avc: denied { ioctl } for pid=8030 comm="syz.4.645" path="/138/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.627118][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.659932][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 99.670989][ T8036] bond1: option miimon: invalid value (18446744073256566789) [ 99.671011][ T8036] bond1: option miimon: allowed values 0 - 2147483647 [ 99.674397][ T8036] bond1 (unregistering): Released all slaves [ 99.749994][ T42] audit: type=1400 audit(1792502468.080:641): avc: denied { read } for pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 99.765177][ T5747] Bluetooth: hci5: command 0x1003 tx timeout [ 99.768974][ T5746] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.770831][ T8040] tipc: Enabling of bearer rejected, failed to enable media [ 99.778142][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 99.810452][ T8036] bond1: option miimon: invalid value (18446744073256566789) [ 99.810473][ T8036] bond1: option miimon: allowed values 0 - 2147483647 [ 99.812165][ T8036] bond1 (unregistering): Released all slaves [ 99.842952][ T8014] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.935597][ T42] audit: type=1400 audit(1792502468.270:642): avc: denied { setopt } for pid=8059 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.007439][ T42] audit: type=1400 audit(1792502468.340:643): avc: denied { bind } for pid=8059 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.007786][ T42] audit: type=1400 audit(1792502468.340:644): avc: denied { name_bind } for pid=8059 comm="syz.4.653" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.007990][ T42] audit: type=1400 audit(1792502468.340:645): avc: denied { node_bind } for pid=8059 comm="syz.4.653" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.008346][ T42] audit: type=1400 audit(1792502468.340:646): avc: denied { write } for pid=8059 comm="syz.4.653" laddr=fe80::28 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.012167][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.036376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.049661][ T12] bond0 (unregistering): Released all slaves [ 100.056337][ T12] bond1 (unregistering): Released all slaves [ 100.133274][ T42] audit: type=1400 audit(1792502468.460:647): avc: denied { write } for pid=8069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.160971][ T12] tipc: Left network mode [ 100.193217][ T5847] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 100.200446][ T8014] wg0 speed is unknown, defaulting to 1000 [ 100.250517][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.343930][ T5847] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 100.345292][ T5847] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 100.345314][ T5847] usb 8-1: config 0 has no interface number 0 [ 100.345349][ T5847] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.347290][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.347309][ T5847] usb 8-1: Product: syz [ 100.347321][ T5847] usb 8-1: Manufacturer: syz [ 100.347332][ T5847] usb 8-1: SerialNumber: syz [ 100.355727][ T5847] usb 8-1: config 0 descriptor?? [ 100.364380][ T5847] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 100.456489][ T8087] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 100.518752][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 100.521599][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.659'. [ 100.530519][ T8094] sch_fq: defrate 0 ignored. [ 100.537583][ T8094] usbip-vudc usbip-vudc.0: gadget not bound [ 100.603486][ T5126] usb 8-1: USB disconnect, device number 5 [ 100.633918][ T5126] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 100.757615][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 100.804404][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 100.836757][ T8107] loop7: detected capacity change from 0 to 7 [ 100.841744][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.841816][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.842390][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.842470][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.842839][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.842872][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.842953][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.842991][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.846936][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.847021][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.847168][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.847222][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.847303][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.847354][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.847388][ T8107] ldm_validate_partition_table(): Disk read failed. [ 100.847446][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.847484][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.847545][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.847581][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.847661][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 100.847736][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 100.847865][ T8107] Dev loop7: unable to read RDB block 0 [ 100.848254][ T8107] loop7: unable to read partition table [ 100.848421][ T8107] loop7: partition table beyond EOD, truncated [ 100.848536][ T8107] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 100.854374][ T8110] FAULT_INJECTION: forcing a failure. [ 100.854374][ T8110] name failslab, interval 1, probability 0, space 0, times 0 [ 100.854410][ T8110] CPU: 3 UID: 0 PID: 8110 Comm: syz.4.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.854439][ T8110] Tainted: [L]=SOFTLOCKUP [ 100.854446][ T8110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.854458][ T8110] Call Trace: [ 100.854465][ T8110] [ 100.854474][ T8110] dump_stack_lvl+0x100/0x190 [ 100.854509][ T8110] should_fail_ex.cold+0x5/0xa [ 100.854536][ T8110] should_failslab+0xc2/0x120 [ 100.854565][ T8110] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.854594][ T8110] ? __kernfs_new_node+0xd2/0xa10 [ 100.854641][ T8110] __kernfs_new_node+0xd2/0xa10 [ 100.854670][ T8110] ? __pfx___kernfs_new_node+0x10/0x10 [ 100.854699][ T8110] ? lock_acquire+0x1d1/0x380 [ 100.854723][ T8110] ? kernfs_root+0x23/0x2a0 [ 100.854745][ T8110] ? find_held_lock+0x2b/0x80 [ 100.854774][ T8110] ? kernfs_root+0xee/0x2a0 [ 100.854794][ T8110] ? kernfs_root+0xee/0x2a0 [ 100.854821][ T8110] kernfs_new_node+0x194/0x200 [ 100.854848][ T8110] ? __pfx_kernfs_new_node+0x10/0x10 [ 100.854871][ T8110] ? kernfs_add_one+0x213/0xb40 [ 100.854902][ T8110] __kernfs_create_file+0x53/0x350 [ 100.854951][ T8110] sysfs_add_file_mode_ns+0x207/0x3c0 [ 100.854980][ T8110] internal_create_group+0x593/0xfb0 [ 100.855008][ T8110] ? __pfx_internal_create_group+0x10/0x10 [ 100.855026][ T8110] ? driver_probe_device+0x4a/0x140 [ 100.855055][ T8110] ? __driver_attach+0x21f/0x5b0 [ 100.855072][ T8110] ? bus_for_each_dev+0x13e/0x1d0 [ 100.855098][ T8110] ? driver_register+0x1e2/0x360 [ 100.855128][ T8110] netdev_queue_update_kobjects+0x17a/0x6f0 [ 100.855181][ T8110] netdev_register_kobject+0x2e9/0x410 [ 100.855215][ T8110] register_netdevice+0x15b6/0x25a0 [ 100.855248][ T8110] ? __pfx_register_netdevice+0x10/0x10 [ 100.855281][ T8110] register_netdev+0x34/0x50 [ 100.855304][ T8110] gether_register_netdev+0x93/0x130 [ 100.855352][ T8110] ecm_bind+0x848/0xc00 [ 100.855387][ T8110] ? __pfx_ecm_bind+0x10/0x10 [ 100.855414][ T8110] usb_add_function+0x219/0x890 [ 100.855453][ T8110] configfs_composite_bind+0xd83/0x1960 [ 100.855494][ T8110] gadget_bind_driver+0x28c/0xbf0 [ 100.855523][ T8110] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 100.855549][ T8110] ? __pfx_gadget_bind_driver+0x10/0x10 [ 100.855580][ T8110] really_probe+0x241/0xa60 [ 100.855602][ T8110] __driver_probe_device+0x210/0x460 [ 100.855620][ T8110] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.855651][ T8110] driver_probe_device+0x4a/0x140 [ 100.855670][ T8110] __driver_attach+0x21f/0x5b0 [ 100.855715][ T8110] ? __pfx___driver_attach+0x10/0x10 [ 100.855737][ T8110] bus_for_each_dev+0x13e/0x1d0 [ 100.855763][ T8110] ? __pfx_bus_for_each_dev+0x10/0x10 [ 100.855789][ T8110] ? bus_add_driver+0x2b5/0x5b0 [ 100.855827][ T8110] bus_add_driver+0x305/0x5b0 [ 100.855859][ T8110] driver_register+0x1e2/0x360 [ 100.855882][ T8110] usb_gadget_register_driver_owner+0x132/0x210 [ 100.855915][ T8110] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 100.855942][ T8110] configfs_write_iter+0x302/0x4e0 [ 100.855970][ T8110] vfs_write+0x6af/0x1050 [ 100.855994][ T8110] ? __pfx_configfs_write_iter+0x10/0x10 [ 100.856020][ T8110] ? __pfx_vfs_write+0x10/0x10 [ 100.856040][ T8110] ? find_held_lock+0x2b/0x80 [ 100.856090][ T8110] ksys_write+0x12a/0x250 [ 100.856113][ T8110] ? __pfx_ksys_write+0x10/0x10 [ 100.856145][ T8110] do_syscall_64+0x123/0x790 [ 100.856178][ T8110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.856198][ T8110] RIP: 0033:0x7f19fe99f559 [ 100.856215][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.856233][ T8110] RSP: 002b:00007f19ff7e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.856253][ T8110] RAX: ffffffffffffffda RBX: 00007f19fec25fa0 RCX: 00007f19fe99f559 [ 100.856265][ T8110] RDX: 000000000000000b RSI: 0000200000000600 RDI: 0000000000000005 [ 100.856276][ T8110] RBP: 00007f19fea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.856287][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.856298][ T8110] R13: 00007f19fec26038 R14: 00007f19fec25fa0 R15: 00007ffe75ffd088 [ 100.856325][ T8110] [ 100.877931][ T8110] udc dummy_udc.0: failed to start g1: -12 [ 100.877959][ T8110] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 100.881822][ T8110] UDC core: g1: couldn't find an available UDC or it's busy [ 100.896135][ T12] hsr_slave_0: left promiscuous mode [ 100.903824][ T12] hsr_slave_1: left promiscuous mode [ 100.904308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.904320][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.905774][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.905784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.941124][ T12] veth1_macvtap: left promiscuous mode [ 100.941157][ T12] veth0_macvtap: left promiscuous mode [ 100.941231][ T12] veth1_vlan: left promiscuous mode [ 100.941283][ T12] veth0_vlan: left promiscuous mode [ 100.959360][ T8120] openvswitch: netlink: Missing key (keys=40, expected=100) [ 101.010719][ T8126] netlink: NAT attribute has 8 unknown bytes [ 101.010743][ T8126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.187792][ T12] team0 (unregistering): Port device team_slave_1 removed [ 101.205164][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.245023][ T5837] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 101.318195][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.318272][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.318429][ T8014] bridge_slave_0: entered allmulticast mode [ 101.319563][ T8014] bridge_slave_0: entered promiscuous mode [ 101.327822][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.327910][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.328019][ T8014] bridge_slave_1: entered allmulticast mode [ 101.329427][ T8014] bridge_slave_1: entered promiscuous mode [ 101.354064][ T29] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 101.357889][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.360654][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.373201][ T5837] usb 9-1: device descriptor read/64, error -71 [ 101.389212][ T8014] team0: Port device team_slave_0 added [ 101.391600][ T8014] team0: Port device team_slave_1 added [ 101.413353][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 101.421100][ T8131] bridge_slave_1: left allmulticast mode [ 101.421125][ T8131] bridge_slave_1: left promiscuous mode [ 101.421371][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.436079][ T8131] bridge_slave_0: left allmulticast mode [ 101.436103][ T8131] bridge_slave_0: left promiscuous mode [ 101.436308][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.452074][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.452085][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.452098][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.453012][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.453019][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.453032][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.515375][ T8014] hsr_slave_0: entered promiscuous mode [ 101.516248][ T8014] hsr_slave_1: entered promiscuous mode [ 101.516783][ T8014] debugfs: 'hsr0' already exists in 'hsr' [ 101.516802][ T8014] Cannot create hsr debugfs directory [ 101.523290][ T5746] Bluetooth: hci2: command tx timeout [ 101.606205][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 101.637737][ T5837] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 101.647378][ T12] IPVS: stop unused estimator thread 0... [ 101.717205][ T8148] FAULT_INJECTION: forcing a failure. [ 101.717205][ T8148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.717227][ T8148] CPU: 2 UID: 0 PID: 8148 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.717248][ T8148] Tainted: [L]=SOFTLOCKUP [ 101.717252][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.717258][ T8148] Call Trace: [ 101.717262][ T8148] [ 101.717266][ T8148] dump_stack_lvl+0x100/0x190 [ 101.717287][ T8148] should_fail_ex.cold+0x5/0xa [ 101.717303][ T8148] _copy_from_user+0x2e/0xd0 [ 101.717333][ T8148] video_usercopy+0xe71/0x1730 [ 101.717358][ T8148] ? __pfx___video_do_ioctl+0x10/0x10 [ 101.717374][ T8148] ? __pfx_video_usercopy+0x10/0x10 [ 101.717396][ T8148] v4l2_ioctl+0x1bd/0x250 [ 101.717410][ T8148] ? __pfx_v4l2_ioctl+0x10/0x10 [ 101.717425][ T8148] __x64_sys_ioctl+0x18e/0x210 [ 101.717440][ T8148] do_syscall_64+0x123/0x790 [ 101.717459][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.717470][ T8148] RIP: 0033:0x7f0c39d9f559 [ 101.717479][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.717490][ T8148] RSP: 002b:00007f0c37ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.717501][ T8148] RAX: ffffffffffffffda RBX: 00007f0c3a025fa0 RCX: 00007f0c39d9f559 [ 101.717508][ T8148] RDX: 0000200000000500 RSI: 00000000c02c564a RDI: 0000000000000003 [ 101.717515][ T8148] RBP: 00007f0c37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.717521][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.717528][ T8148] R13: 00007f0c3a026038 R14: 00007f0c3a025fa0 R15: 00007ffd8299d498 [ 101.717553][ T8148] [ 101.722759][ T8014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.731625][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.732437][ T8014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.737248][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.738046][ T8014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.742017][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.742815][ T8014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.751148][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.773198][ T5837] usb 9-1: device descriptor read/64, error -71 [ 101.820208][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.840446][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.857950][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.858040][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.863262][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.863326][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.878075][ T8163] openvswitch: netlink: Missing key (keys=40, expected=100) [ 101.886207][ T5837] usb usb9-port1: attempt power cycle [ 102.083531][ T8175] 8021q: adding VLAN 0 to HW filter on device .` [ 102.084627][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.089354][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.120963][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.122241][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.130563][ T8175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.130577][ T8175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.138542][ T8175] veth1_vlan: left promiscuous mode [ 102.142458][ T8175] veth0_vlan: left promiscuous mode [ 102.143950][ T8175] veth0_vlan: entered promiscuous mode [ 102.145604][ T8175] veth1_vlan: entered promiscuous mode [ 102.151532][ T8175] veth1_macvtap: left promiscuous mode [ 102.154668][ T8175] veth0_macvtap: left promiscuous mode [ 102.155261][ T8175] veth0_macvtap: entered promiscuous mode [ 102.156096][ T8175] veth1_macvtap: entered promiscuous mode [ 102.160733][ T8175] 8021q: adding VLAN 0 to HW filter on device eth0 [ 102.162688][ T8175] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.166116][ T8175] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.169230][ T8175] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.172230][ T8175] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 102.203435][ T5807] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.223268][ T5807] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.234608][ T5782] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.234953][ T5782] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.236873][ T5837] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 102.263987][ T5837] usb 9-1: device descriptor read/8, error -71 [ 102.297893][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.450100][ T8014] veth0_vlan: entered promiscuous mode [ 102.453765][ T8014] veth1_vlan: entered promiscuous mode [ 102.473329][ T8014] veth0_macvtap: entered promiscuous mode [ 102.475806][ T8014] veth1_macvtap: entered promiscuous mode [ 102.482002][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.486855][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.519679][ T5782] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.519977][ T5782] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.520003][ T5782] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.520025][ T5782] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.528008][ T5837] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 102.550007][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.550027][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.554090][ T5837] usb 9-1: device descriptor read/8, error -71 [ 102.567117][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.567131][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.663489][ T5837] usb usb9-port1: unable to enumerate USB device [ 102.738067][ T8201] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.804070][ T8201] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.891148][ T8201] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.977891][ T8201] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.074781][ T5807] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.096557][ T5807] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.103463][ T5807] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.103498][ T5807] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.190651][ T8219] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.553344][ T5837] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 103.683428][ T5837] usb 7-1: device descriptor read/64, error -71 [ 103.925353][ T5837] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 104.063245][ T5837] usb 7-1: device descriptor read/64, error -71 [ 104.144264][ T8256] openvswitch: netlink: Missing key (keys=40, expected=100) [ 104.173438][ T5837] usb usb7-port1: attempt power cycle [ 104.210652][ T8258] geneve2: entered promiscuous mode [ 104.305187][ T8261] kAFS: bad VL server IP address [ 104.523267][ T5837] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 104.545719][ T5837] usb 7-1: device descriptor read/8, error -71 [ 104.793219][ T5837] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 104.813945][ T5837] usb 7-1: device descriptor read/8, error -71 [ 104.829725][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.699'. [ 104.931844][ T8274] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.936105][ T5837] usb usb7-port1: unable to enumerate USB device [ 104.976213][ T8276] netlink: 50 bytes leftover after parsing attributes in process `syz.6.702'. [ 104.984027][ T8277] netlink: 50 bytes leftover after parsing attributes in process `syz.4.701'. [ 105.151476][ T36] IPVS: starting estimator thread 0... [ 105.174471][ T8275] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.229995][ T37] IPVS: starting estimator thread 0... [ 105.263329][ T8279] IPVS: using max 26 ests per chain, 62400 per kthread [ 105.333232][ T8283] IPVS: using max 23 ests per chain, 55200 per kthread [ 105.359968][ T8274] wg0 speed is unknown, defaulting to 1000 [ 105.597229][ T8275] wg0 speed is unknown, defaulting to 1000 [ 105.882430][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 105.882443][ T42] audit: type=1400 audit(1792502474.210:680): avc: denied { write } for pid=8287 comm="syz.6.704" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 105.899448][ T8288] netlink: 42 bytes leftover after parsing attributes in process `syz.6.704'. [ 105.966502][ T8290] netlink: 92 bytes leftover after parsing attributes in process `syz.6.705'. [ 106.060253][ T8295] sctp: [Deprecated]: syz.6.707 (pid 8295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.060253][ T8295] Use struct sctp_sack_info instead [ 106.212432][ T42] audit: type=1400 audit(1792502474.540:681): avc: denied { write } for pid=8296 comm="syz.3.709" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.237139][ T42] audit: type=1400 audit(1792502474.570:682): avc: denied { bind } for pid=8298 comm="syz.6.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.471105][ T8315] netlink: 92 bytes leftover after parsing attributes in process `syz.6.714'. [ 106.478560][ T8313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7184 sclass=netlink_route_socket pid=8313 comm=syz.2.713 [ 106.504990][ T8319] tipc: Enabling of bearer rejected, failed to enable media [ 107.245236][ T8339] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 107.258443][ T8342] netlink: 84 bytes leftover after parsing attributes in process `syz.3.724'. [ 107.346773][ T8347] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 107.349064][ T42] audit: type=1400 audit(1793026763.674:683): avc: denied { ioctl } for pid=8346 comm="syz.3.726" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 107.394349][ T8356] program syz.3.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.396155][ T8356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.396192][ T8356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.477507][ T42] audit: type=1400 audit(1793026763.804:684): avc: denied { ioctl } for pid=8360 comm="syz.6.731" path="socket:[24482]" dev="sockfs" ino=24482 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.478161][ T42] audit: type=1400 audit(1793026763.804:685): avc: denied { write } for pid=8360 comm="syz.6.731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 107.478411][ T42] audit: type=1400 audit(1793026763.804:686): avc: denied { read } for pid=8360 comm="syz.6.731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 107.604221][ T5746] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 107.604270][ T5746] Bluetooth: hci2: Injecting HCI hardware error event [ 107.606284][ T5747] Bluetooth: hci2: hardware error 0x00 [ 107.643045][ T8369] ntfs3(sr0): Primary boot signature is not NTFS. [ 107.647523][ T8369] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 108.208330][ T8371] fuse: fd is not a fuse device [ 108.298947][ T5746] Bluetooth: hci1: link tx timeout [ 108.298967][ T5746] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.318191][ T8378] FAULT_INJECTION: forcing a failure. [ 108.318191][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 108.318225][ T8378] CPU: 2 UID: 0 PID: 8378 Comm: syz.3.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.318250][ T8378] Tainted: [L]=SOFTLOCKUP [ 108.318257][ T8378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.318268][ T8378] Call Trace: [ 108.318275][ T8378] [ 108.318282][ T8378] dump_stack_lvl+0x100/0x190 [ 108.318315][ T8378] should_fail_ex.cold+0x5/0xa [ 108.318343][ T8378] should_failslab+0xc2/0x120 [ 108.318372][ T8378] __kmalloc_noprof+0xfc/0x840 [ 108.318397][ T8378] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 108.318427][ T8378] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 108.318457][ T8378] genl_family_rcv_msg_doit+0xc7/0x300 [ 108.318481][ T8378] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 108.318513][ T8378] ? bpf_lsm_capable+0x9/0x10 [ 108.318532][ T8378] ? security_capable+0x80/0x260 [ 108.318557][ T8378] ? ns_capable+0xd2/0xf0 [ 108.318580][ T8378] genl_rcv_msg+0x560/0x800 [ 108.318605][ T8378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.318626][ T8378] ? __lock_acquire+0x5c0/0x1f40 [ 108.318648][ T8378] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 108.318685][ T8378] netlink_rcv_skb+0x159/0x420 [ 108.318704][ T8378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.318727][ T8378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.318758][ T8378] ? netlink_deliver_tap+0x1ae/0xcc0 [ 108.318788][ T8378] genl_rcv+0x28/0x40 [ 108.318812][ T8378] netlink_unicast+0x65f/0x950 [ 108.318834][ T8378] ? __pfx_netlink_unicast+0x10/0x10 [ 108.318851][ T8378] ? __build_skb_around+0x278/0x390 [ 108.318886][ T8378] netlink_sendmsg+0xa02/0x1020 [ 108.318911][ T8378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.318938][ T8378] ? selinux_socket_sendmsg+0x198/0x2f0 [ 108.318969][ T8378] ? ____sys_sendmsg+0xa4d/0xbe0 [ 108.318992][ T8378] ____sys_sendmsg+0xa4d/0xbe0 [ 108.319015][ T8378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.319036][ T8378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.319068][ T8378] ? lock_acquire+0x1d1/0x380 [ 108.319088][ T8378] ? get_pid_task+0x2a/0x250 [ 108.319116][ T8378] ___sys_sendmsg+0x190/0x1e0 [ 108.319144][ T8378] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.319169][ T8378] ? get_pid_task+0x106/0x250 [ 108.319224][ T8378] ? find_held_lock+0x2b/0x80 [ 108.319269][ T8378] __sys_sendmsg+0x160/0x210 [ 108.319291][ T8378] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.319326][ T8378] do_syscall_64+0x123/0x790 [ 108.319357][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.319377][ T8378] RIP: 0033:0x7f45ce59f559 [ 108.319393][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.319410][ T8378] RSP: 002b:00007f45cf3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.319430][ T8378] RAX: ffffffffffffffda RBX: 00007f45ce825fa0 RCX: 00007f45ce59f559 [ 108.319442][ T8378] RDX: 000000000000c000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 108.319454][ T8378] RBP: 00007f45cf3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.319466][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.319478][ T8378] R13: 00007f45ce826038 R14: 00007f45ce825fa0 R15: 00007ffd199e60f8 [ 108.319505][ T8378] [ 108.375177][ T8383] netlink: 'syz.6.740': attribute type 11 has an invalid length. [ 108.519427][ T8395] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.555789][ T8400] netlink: 50 bytes leftover after parsing attributes in process `syz.3.744'. [ 108.736997][ T8407] netlink: ct family unspecified [ 108.737030][ T8407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.814312][ T8395] wg0 speed is unknown, defaulting to 1000 [ 109.077875][ T42] audit: type=1400 audit(1793026765.404:687): avc: denied { read write } for pid=8417 comm="syz.6.750" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.078096][ T42] audit: type=1400 audit(1793026765.404:688): avc: denied { open } for pid=8417 comm="syz.6.750" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.080163][ T42] audit: type=1400 audit(1793026765.404:689): avc: denied { ioctl } for pid=8417 comm="syz.6.750" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.086811][ T8418] binder: 8417:8418 ioctl c0306201 200000000100 returned -14 [ 109.091424][ T8418] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.750'. [ 109.095907][ T8418] binder: 8417:8418 ioctl c0306201 200000000200 returned -14 [ 109.158304][ T8426] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 109.158321][ T8426] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.158941][ T8426] vhci_hcd vhci_hcd.0: Device attached [ 109.159538][ T8427] vhci_hcd: cannot find the pending unlink 6 [ 109.161300][ T8424] ------------[ cut here ]------------ [ 109.161310][ T8424] kernel BUG at net/core/dev.c:11443! [ 109.161342][ T8424] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.178952][ T8424] CPU: 3 UID: 0 PID: 8424 Comm: syz.3.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.184176][ T8424] Tainted: [L]=SOFTLOCKUP [ 109.185519][ T8424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.188651][ T8424] RIP: 0010:register_netdevice+0x1233/0x25a0 [ 109.190577][ T8424] Code: 0f 0b e8 c0 8e 67 f8 48 8d 3d 79 5d af 08 ba ae 2c 00 00 48 c7 c6 00 94 39 8d 67 48 0f b9 3a e9 a5 ee ff ff e8 9e 8e 67 f8 90 <0f> 0b e8 96 8e 67 f8 90 0f 0b 48 8b 5c 24 18 48 8b 6c 24 20 e8 84 [ 109.196881][ T8424] RSP: 0018:ffffc9000364f798 EFLAGS: 00010293 [ 109.198801][ T8424] RAX: 0000000000000000 RBX: 1ffff920006c9efc RCX: 0000000000000000 [ 109.201318][ T8424] RDX: ffff888058904b00 RSI: ffffffff89a4d4b2 RDI: ffff888058904b00 [ 109.203835][ T8424] RBP: ffff88802e8ac000 R08: 0000000000000001 R09: 0000000000000000 [ 109.206322][ T8424] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 109.208857][ T8424] R13: ffff88802e8acf10 R14: ffff88802e8ad049 R15: ffff888036ad70bc [ 109.211339][ T8424] FS: 00007f45cf3a46c0(0000) GS:ffff8880d4c40000(0000) knlGS:0000000000000000 [ 109.214302][ T8424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.216399][ T8424] CR2: 00007f45ce588b80 CR3: 0000000062eae000 CR4: 0000000000352ef0 [ 109.218938][ T8424] Call Trace: [ 109.220032][ T8424] [ 109.220980][ T8424] ? __pfx_register_netdevice+0x10/0x10 [ 109.222815][ T8424] register_netdev+0x34/0x50 [ 109.224413][ T8424] gether_register_netdev+0x93/0x130 [ 109.226091][ T8424] ecm_bind+0x848/0xc00 [ 109.227457][ T8424] ? rcu_is_watching+0x13/0xc0 [ 109.228990][ T8424] ? __pfx_ecm_bind+0x10/0x10 [ 109.230489][ T8424] usb_add_function+0x219/0x890 [ 109.232066][ T8424] ? composite_dev_prepare+0x201/0x420 [ 109.233806][ T8424] configfs_composite_bind+0xd83/0x1960 [ 109.235532][ T8424] gadget_bind_driver+0x28c/0xbf0 [ 109.237163][ T8424] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 109.238944][ T8424] ? __pfx_gadget_bind_driver+0x10/0x10 [ 109.240675][ T8424] really_probe+0x241/0xa60 [ 109.242146][ T8424] __driver_probe_device+0x210/0x460 [ 109.243945][ T8424] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 109.246240][ T8424] driver_probe_device+0x4a/0x140 [ 109.248254][ T8424] __driver_attach+0x21f/0x5b0 [ 109.250077][ T8424] ? __pfx___driver_attach+0x10/0x10 [ 109.251767][ T8424] bus_for_each_dev+0x13e/0x1d0 [ 109.253316][ T8424] ? __pfx_bus_for_each_dev+0x10/0x10 [ 109.255009][ T8424] ? bus_add_driver+0x2b5/0x5b0 [ 109.256563][ T8424] bus_add_driver+0x305/0x5b0 [ 109.258148][ T8424] driver_register+0x1e2/0x360 [ 109.259741][ T8424] usb_gadget_register_driver_owner+0x132/0x210 [ 109.261793][ T8424] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 109.263616][ T8424] configfs_write_iter+0x302/0x4e0 [ 109.265262][ T8424] vfs_write+0x6af/0x1050 [ 109.266684][ T8424] ? __pfx_configfs_write_iter+0x10/0x10 [ 109.268507][ T8424] ? __pfx_vfs_write+0x10/0x10 [ 109.270104][ T8424] ? find_held_lock+0x2b/0x80 [ 109.271740][ T8424] ksys_write+0x12a/0x250 [ 109.273590][ T8424] ? __pfx_ksys_write+0x10/0x10 [ 109.275702][ T8424] do_syscall_64+0x123/0x790 [ 109.277721][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.279669][ T8424] RIP: 0033:0x7f45ce59f559 [ 109.281091][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.287161][ T8424] RSP: 002b:00007f45cf3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.290014][ T8424] RAX: ffffffffffffffda RBX: 00007f45ce826180 RCX: 00007f45ce59f559 [ 109.292647][ T8424] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000004 [ 109.295203][ T8424] RBP: 00007f45ce636b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.297750][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.300354][ T8424] R13: 00007f45ce826218 R14: 00007f45ce826180 R15: 00007ffd199e60f8 [ 109.302939][ T8424] [ 109.303957][ T8424] Modules linked in: [ 109.305632][ T8424] ---[ end trace 0000000000000000 ]--- [ 109.343605][ T8424] RIP: 0010:register_netdevice+0x1233/0x25a0 [ 109.343705][ T8424] Code: 0f 0b e8 c0 8e 67 f8 48 8d 3d 79 5d af 08 ba ae 2c 00 00 48 c7 c6 00 94 39 8d 67 48 0f b9 3a e9 a5 ee ff ff e8 9e 8e 67 f8 90 <0f> 0b e8 96 8e 67 f8 90 0f 0b 48 8b 5c 24 18 48 8b 6c 24 20 e8 84 [ 109.343722][ T8424] RSP: 0018:ffffc9000364f798 EFLAGS: 00010293 [ 109.343737][ T8424] RAX: 0000000000000000 RBX: 1ffff920006c9efc RCX: 0000000000000000 [ 109.343748][ T8424] RDX: ffff888058904b00 RSI: ffffffff89a4d4b2 RDI: ffff888058904b00 [ 109.343760][ T8424] RBP: ffff88802e8ac000 R08: 0000000000000001 R09: 0000000000000000 [ 109.343771][ T8424] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 109.343781][ T8424] R13: ffff88802e8acf10 R14: ffff88802e8ad049 R15: ffff888036ad70bc [ 109.343792][ T8424] FS: 00007f45cf3a46c0(0000) GS:ffff8880d4b40000(0000) knlGS:0000000000000000 [ 109.343830][ T8424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.343843][ T8424] CR2: 00007f0c3ab57e20 CR3: 0000000062eae000 CR4: 0000000000352ef0 [ 109.343855][ T8424] Kernel panic - not syncing: Fatal exception [ 109.386100][ T8424] Kernel Offset: disabled [ 109.387464][ T8424] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:21:17 Registers: info registers vcpu 0 CPU#0 RAX=ffff8880239a2ee0 RBX=0000000000000002 RCX=ffffffff81e7de78 RDX=1ffff110047345dc RSI=0000000000000000 RDI=ffff888035b83980 RBP=ffffc90003dd72b8 RSP=ffffc90003dd7190 R8 =0000000000000001 R9 =fffff520007bae20 R10=0000000000000003 R11=00000000000ad4c1 R12=dffffc0000000000 R13=ffff88805d634000 R14=ffff8880239a2ee0 R15=ffff88805d635000 RIP=ffffffff8537339d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4940000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f86c9757e20 CR3=0000000027573000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4dd65c80 00007ffd4dd65c80 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86c8bf9823 00007f86c8bf9823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86c8bf9e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86c8bf9e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557468b028 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 676461675f627375 2f6769666e6f632f 2e01ffffffffffff ffffa70811800318 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006017ce6003062 73752e6469682f31 2e632f736769666e 6f632f31672f7465 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100011800401 c7080006017ce600 306273752e646968 2f312e632f736769 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e6f632f31672f 7465676461675f62 73752f6769666e6f 632f2e01ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffa7081180 0318100013800401 000006080606017d 9e000200070a302e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6364755f796d6d75 6418081380030004 0004080012800401 c70800080648a000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007a15c RBX=ffff88801feea580 RCX=ffffffff8bd562f5 RDX=0000000000000001 RSI=ffffffff8c625e00 RDI=ffffffff81e0a76e RBP=ffffed1003fdd4b0 RSP=ffffc90000177e00 R8 =0000000000000000 R9 =ffffed100d4667bd R10=ffff88806a333deb R11=ffffffff81d76d99 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bd547af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f45ce5ecc40 CR3=000000004146d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9807f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd364e94f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd364e94f6 00007ffd364e94fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f980723714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9807237184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98072372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9807237176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000fe9a0205 43ff003412003412 0543054302000406 0008010006085544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98073f95f8 00007f98073f95c8 00007f98073f9600 00007f98073f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000012 0000000000000000 0000000000000000 0000000000010600 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000007933c RBX=ffff8880202d4b00 RCX=ffffffff8bd562f5 RDX=0000000000000001 RSI=ffffffff8c625e00 RDI=ffffffff81e0a76e RBP=ffffed100405a960 RSP=ffffc90000187e00 R8 =0000000000000000 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=ffffffff81d76d99 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bd547af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f45cf382ff8 CR3=000000004cf7d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd199e65e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd199e65e6 00007ffd199e65ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce63714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce6372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b33340 RDI=ffffffff9cc845a0 RBP=ffffffff9cc84560 RSP=ffffc9000364eeb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3990909 R15=dffffc0000000000 RIP=ffffffff85b33367 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f45cf3a46c0 ffffffff 00c00000 GS =0000 ffff8880d4c40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f45ce588b80 CR3=0000000062eae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=000000000000003f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd199e65e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd199e65e6 00007ffd199e65ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce63714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce6372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45ce7f95f8 00007f45ce7f95c8 00007f45ce7f9600 00007f45ce7f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000