last executing test programs: 2m7.992009174s ago: executing program 3 (id=745): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', r1, @lsm=0x1b, r0, 0x8, &(0x7f0000000100)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x5, 0xc238, 0x4}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r0, r0, r3, r4, r0, r0, r0, r0], 0x0, 0x10, 0xb}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090300000000000012001d0000000c0001800800030005000000"], 0x20}}, 0x0) 2m7.990549108s ago: executing program 3 (id=747): r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x5, 0x85, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x0, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "ccbd133e"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x6, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x72, 0xf}, @mdlm={0x15, 0x24, 0x12, 0xf800}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x3, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0xb4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x74, 0x61, 0x5, 0xff, 0x5}, 0x19, &(0x7f0000000400)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x5, 0x7}]}, 0x2, [{0x8c, &(0x7f0000000440)=@string={0x8c, 0x3, "18e968c30dbfcbf6e60505fa3c1c256096ed1276b32f23ab913e6cdb0aa467a943f555b8f6861f67c8dca209a0a214b0f80ec7530ba9ec7563e0e842ac0685084da002d9d40bd09a3696847e0cfe761ec0183e3e4e37f6544cba14ecbd3728d0cb94a2dec8208ccbc707f2e14e5d5e36484e1fbb96b61531c8a7c198eb3ca74f63b656f4553c08b63aa3"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x10}}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x80, @private2, 0x100}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "47c5e82b010100", "f83fdc9671181d91b7de77cafea0bef969521fb4b68d8b00", "ef00", "982e9d8697d9899a"}, 0x38) (async) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r2], 0xc4ce3dea) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) 2m4.89067065s ago: executing program 3 (id=794): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000005040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/83, 0x53}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4048840) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8c04, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', r1, 0x20, 0x40, 0x78027484, 0x8, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x66, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x87, [@local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}, @local]}, @noop, @end]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfa}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="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"/556], 0x258}, 0x10) getdents64(r3, &(0x7f0000001400)=""/4099, 0x1003) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x45d2, &(0x7f0000000340)={0x0, 0x6253, 0x2, 0x2, 0x284}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 2m4.031939273s ago: executing program 3 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x21, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2400c051) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x0, 0x1200001, 0xffffffff, 0x0, 0x0}, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r1, 0x2219, 0xd482, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1) 2m3.87995296s ago: executing program 3 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x89a40000c}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x15c, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m3.631863285s ago: executing program 3 (id=807): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) (async) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @random="9f67981d4767"}, 0x14) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x20, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x24000040) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x3fa, 0x10, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x2}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x40004) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xd}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m3.592670869s ago: executing program 32 (id=807): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) (async) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @random="9f67981d4767"}, 0x14) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x20, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x24000040) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x3fa, 0x10, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x2}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x40004) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xd}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.024214614s ago: executing program 0 (id=2804): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000e14f53529bd7000ffdbdf25080001"], 0x18}}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2d}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2d}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0xc, 0xb, @loopback={0x4000000040003e4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0xc, 0xb, @loopback={0x4000000040003e4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000001d80)={&(0x7f0000001880)=@newtaction={0x4cc, 0x30, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{0x110, 0x1, [@m_ipt={0x10c, 0xe, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xb0, 0x6, "f6008f4cf8f4523172c0523886b4d8177e1f94d5a73b0aebc1cf30cb9b5cd81d42d165fb09c997f55e5f925de165b09fd34ce04b11aa83131ab7e256f9800e14905eec350f33f36e2101df6e7ba6da853b9f83a34900275cd63296dada9e4fcfd491d366fe4d7103c40f54e37a12c3e536da067d99475ccd86b477a589fffa7d72bb6896ee153e1c14391e253f01f8c907222b414c838c5924b15d4b6ac1a9bfe89c6e691c080dce6f2b62fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x3a8, 0x1, [@m_ipt={0x74, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x27, 0x6, "446fb7bf3c6706522e5f4b522d0274cfa7a6de38a39eaf1dd01491a826d861d7a3021c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x330, 0x8, 0x0, 0x0, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x106, 0x6, {0x101, 'mangle\x00', 0x3, 0x24, "ca9321604f0fad1f488da17b4f427cd72e8c9a2c0cf0ea4d7beb34dd542c948d42f5e68b53c8b2c0bf530a66430cf902e33c8ab519aa13acd8f72cda2d2f02cb21825a1e2b8651514698ec1e5f781b5d5612cac1af9cfccce7350cfbe3509a58541da189256afc6dac8817d867c2f4b1028c5a22ce8599ca8752ef4912efe297d997f51f3504be51492f9f8bc55e7b02c29a40ba3fc438d023edcb584dfebd3ccf5cddc9482b0672ead1b6cba871c8e7e6efb84ab0d815a241b83b3a6109b562ae518e834e8123d639e72a29dc38a4cb039127a5165ab4568187c870"}}, @TCA_IPT_TARG={0x91, 0x6, {0x7c7a, 'nat\x00', 0x3, 0x5, "51e6985653afb5bba0ba59d8c00f4b9a8db3f9ee62fcf50b4d5d45c78b63522bea6b863c8b5f0776590b14cc8cec2c8aeed7183aa5a6c6753bdc3fd550b1f69b523fed70043e69249551ee311396b07e76302927f7b5f1f80525a1211a29bf855ec68d601b221e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xee, 0x6, "1e44806f55d832ce17c579480e8691948e741b8b5f736ef1fd49526aa0c5681032cb0ef5e16689d031c5a2b5e1fcfe3e589c234a1a163f1ab4f4823d44146795bb9e5f2f95308e304f4f8baf22dbf5516d4cd545571c5b4352c033acda5e3728b272821ef0119bc09bb56b14ce19f0bd87daf6cf8e69ce1ab56da195527d141e0b4ba9abd656a9dcfcea7a978cf63bbc977bd029c4bc444799026e1ae354928e1c2f68811d8c5e8c2a4f931c3726a492408317c4f59fc5e80930f0a2f849fd57a26a28db97d65298240038e2b5f6a570fabe59bda2fa8d3c6a664568456c35ca92493cd2b953fabc4958"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x10}, 0x800) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680fadecedecefc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x76}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000880)={{r8}, "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"}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x14) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.766230348s ago: executing program 0 (id=2809): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x12, "78ffffffff1124abe53dd3c4e240992b"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc00"/16}, {0x6, 0x9, "c8f46976e79e56"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 1.765360378s ago: executing program 0 (id=2811): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0xc, 0x3da48c8682330ab8}, {0xffff}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x800, 0x9, 0x10}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="27765c6c20f5ae", 0x7}], 0x1}, 0x20004014) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040084) (async) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040084) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x60e2, @private1, 0x30d}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x60e2, @private1, 0x30d}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet_sctp(0x2, 0x1, 0x84) r13 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @empty}]}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @empty}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000080)={r14, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f00000000c0)={r14, 0x3}, 0x8) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) 1.656037577s ago: executing program 4 (id=2815): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.595953587s ago: executing program 4 (id=2817): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5b04, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x0, 0x3}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1.595638948s ago: executing program 4 (id=2819): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x12, "78ffffffff1124abe53dd3c4e240992b"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc00"/16}, {0x6, 0x9, "c8f46976e79e56"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 1.526095439s ago: executing program 4 (id=2820): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x35, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0xfc, 0x0, 0x0}) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8a040, 0x0) ioctl$FBIOPUT_CON2FBMAP(r10, 0x4610, &(0x7f0000000140)={0x1, 0x2}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYBLOB="c3040500000000004800128008000100677470003c000280050005"], 0x68}, 0x1, 0x0, 0x0, 0x24004014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) 1.375227278s ago: executing program 4 (id=2822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0xf0ffff, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) 1.375008459s ago: executing program 4 (id=2823): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) 1.374338168s ago: executing program 0 (id=2824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x140, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x7ff}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x1000, 0x6, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x86, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0xd, 0xe, 0x4, 0x0, @private2, @private2, 0x8000, 0x8, 0x7fff, 0xb}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x5b, 0x6, 0x8, 0x45, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x6, 0xd162}}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r13) (async) r15 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r15) (async) getsockname$packet(r15, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r16, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="03002cbd70000e0000000200000008000100", @ANYRES32=r16, @ANYBLOB="0800020000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$nl_route_sched_retired(r4, &(0x7f00000019c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f0000000980)=@newtfilter={0xf60, 0x2c, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0, 0xa}, {0x4, 0x2}, {0x5, 0xf}}, [@f_rsvp={{0x9}, {0x74, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffff}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa, 0x8, 0xffffffa7}, {0xde17, 0x2, 0x95}, 0x29, 0x5, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1000, 0x200, 0x5}, {0x4, 0xd6, 0xa59}, 0x8, 0x2, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0xfffffffe, 0x1}, {0x20000000, 0x1}, 0x5e, 0xd, 0x1}}]}}, @f_tcindex={{0xc}, {0x210, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x3, 0x2}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xd326}, @TCA_TCINDEX_ACT={0x1e4, 0x7, [@m_mirred={0x1e0, 0x13, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6130, 0x101, 0x3, 0x7, 0x8}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x58, 0x3, 0x8, 0x9, 0x6}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x800, 0x20000000, 0x80000001, 0x4}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff0000, 0x7, 0x4, 0x4, 0x40}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1fcd, 0x2, 0x0, 0x1ff}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdc3, 0x8, 0x4, 0x200, 0x5}, 0x2, r16}}]}, {0xf2, 0x6, "db4826a939c31cd8bd04db92c604addad09fd840ac3798ad802e0a656ca3d538561b2199050f99eb7d06a6332cf48109c431e154f3e43bc66e8b8f8a9644b2ff56d9782df52c866d2b61339899660f0d5240a0063b79186936412446d257ed795f0a572587e44f5ca65cfa434a805ae8d6f15b00aac1dfc2fe567a71846ee944ad73ebdffa7d00cba27b5cbfb98ac8dbc2fc07ec229e82d9ff23263c9e5d34dcd300d9a878bbc46f987804315167a608a81946cda1bfd7ee8f63dcaceb8c8c41d79d6e36651fd1ef4f016396c3b4902383c3d4305f34c554e8d9d6ff7308d75d7d374c7325164f44b1ef94b0eee7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffffff7}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x18}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x8996}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}]}}, @f_rsvp={{0x9}, {0xc6c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, @TCA_RSVP_POLICE={0xc60, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x12d28d06, 0x20000003, 0x7, 0x1, 0x0, {0x1, 0x0, 0x4, 0x4, 0x3, 0xffffff7a}, {0x4, 0x1, 0x100, 0xf40, 0x3}, 0x5, 0x2, 0x89bb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8d25, 0x6, 0x1dd8, 0x7, 0xfd, 0x4, 0x1, 0xfffffff7, 0xa, 0x7ff, 0xa38, 0x3, 0x3, 0x3, 0xffffffff, 0x61dd, 0x8000, 0x7f, 0x4, 0x5, 0x1, 0x49, 0x3, 0x5, 0x8, 0x5, 0x7, 0x1, 0xd, 0x0, 0xa, 0x7768, 0x8001, 0x3, 0x5, 0x3ff, 0x9, 0x1, 0x5, 0x0, 0x8, 0x7, 0x6, 0x3ff, 0x1, 0xc34d, 0x7f, 0x5, 0x2, 0x0, 0x9, 0x1, 0x9, 0x6, 0x5, 0x9, 0x1, 0x9, 0xffffffff, 0xf, 0x508, 0x8, 0xb, 0x59b7, 0x8, 0x3, 0x9, 0x10000, 0x4, 0x6, 0x800, 0x10000, 0xfffffffa, 0xfffffffb, 0x5, 0x3, 0x7, 0x4, 0xffffffff, 0x6, 0x1800, 0x0, 0x9, 0xff, 0x6, 0x400, 0x9, 0x1c, 0xf, 0x8, 0x9, 0x2, 0x9e6, 0x1ff, 0x6, 0x101, 0x4, 0x3, 0xdc, 0x800, 0x10, 0x1, 0x2, 0xe, 0x9, 0x8, 0xdaf3, 0x9, 0x799, 0x5, 0x6, 0x6, 0x80, 0xd37f, 0xd308, 0x3, 0xffffff81, 0x2, 0x3, 0xfb46, 0x5f32eb10, 0x6, 0xe0, 0x9, 0x401, 0x0, 0x3, 0x6, 0x3, 0x1000, 0x0, 0xfffffffa, 0x6, 0x4, 0x1, 0x1, 0x1, 0x5, 0x2, 0x0, 0x9, 0xfffffffd, 0x7, 0x7, 0x8, 0x3, 0x9, 0xf, 0x0, 0x80000000, 0x5, 0x1, 0x401, 0x1, 0xffffffff, 0x800, 0x3, 0x8, 0x1d8, 0xb82cd1b, 0x1, 0x8, 0xd, 0xb, 0x1a, 0x4bf, 0x1, 0x1, 0x7, 0xfffffff7, 0x0, 0x0, 0x3, 0x5, 0x3ff, 0x3, 0x3, 0x7fff, 0x9, 0xf, 0x4, 0xe12, 0xfffffffd, 0xfff, 0x1, 0x9, 0x1326, 0x3e7, 0x7ff, 0xffffff00, 0x33f2d130, 0x9, 0x40, 0x7fff, 0x8, 0x3, 0x40, 0x2, 0x8, 0x6, 0x6, 0x7, 0xb, 0x7fffffff, 0x6, 0x2, 0x10, 0x7, 0xbe000000, 0x6, 0x8, 0x41c, 0x7, 0x5, 0x3, 0x5a9, 0x6fb611c1, 0x5, 0x4, 0x0, 0x101, 0xb2c4, 0x2, 0x6, 0x9a, 0x5, 0x6, 0x80000001, 0x5, 0xe, 0x7, 0x10001, 0xfffffffd, 0xffff, 0x9, 0x0, 0x2, 0x8, 0x10000, 0x800, 0xb1, 0x3, 0x3, 0x0, 0x6, 0x4b61, 0x66df, 0x8, 0x81, 0x5, 0xffffbf62, 0x8, 0x7ff, 0x7, 0x7, 0x32f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x9, 0x100, 0x2, 0x4, 0x9, 0x4, 0x7, 0xfffffffa, 0x6, 0x4, 0x400, 0x5, 0x1e641bf2, 0x0, 0x6, 0x7, 0xbc24, 0xe, 0x8, 0x6, 0x9, 0x1, 0x2, 0x8, 0x80000001, 0x1, 0x3, 0x6, 0x81, 0x4, 0x80000000, 0x8, 0xffffffff, 0x2, 0x3, 0xc9, 0x1, 0x9, 0x2, 0x9, 0xff, 0x2, 0x4, 0x3, 0x80000000, 0x1, 0x2, 0x9, 0x6f2, 0x0, 0x2df, 0xfffffffb, 0xd, 0x570, 0x9, 0x8, 0xa, 0x8, 0x0, 0x0, 0x9, 0x7, 0x9, 0x0, 0xb, 0x2, 0x2, 0x8000, 0x3, 0x6, 0x1, 0xfff, 0x7fff, 0x6, 0x4, 0x5, 0x3, 0x9, 0x5, 0x2, 0xcc, 0x1000, 0x400, 0x7, 0x7, 0x6, 0x379, 0xfffff801, 0x6, 0x5, 0x10, 0xe5, 0x79d, 0x3, 0x0, 0xf, 0x3, 0x40, 0x5, 0x8c4, 0x7, 0xfffffff8, 0x4, 0x9, 0xfffffffd, 0x3, 0x1, 0xf, 0x4, 0xfffffffd, 0x7, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1, 0x4, 0xa, 0x200, 0x4, 0x3, 0xb4, 0x1ff, 0x6061, 0x4, 0xfffffffc, 0x9, 0x2, 0x3, 0x1, 0x5, 0x81, 0x8001, 0x2, 0x6, 0x8ed3, 0x5, 0x0, 0xb00, 0x5, 0x48, 0x0, 0x3ff, 0x800, 0x9, 0xea, 0xe7ed, 0x9210, 0x4, 0x8, 0x5, 0x5d55, 0xa, 0x3, 0x9, 0x3f, 0x7, 0x6, 0x8, 0xffff, 0x7fc, 0x0, 0x3, 0x7bd, 0x6, 0x92a, 0xfff, 0x3, 0x6, 0x5, 0x306, 0x5, 0x6, 0x8, 0xa, 0xfff, 0x0, 0x6, 0x6, 0x2, 0x4, 0x800, 0x7, 0xfffff031, 0x7, 0x2, 0x8, 0x7, 0x5, 0x3a0, 0x9, 0x1, 0x3, 0x0, 0x9, 0x766f, 0x33, 0x1, 0x8, 0x3e, 0x3, 0x3ff, 0x8dc, 0x7fffffff, 0x7f, 0x0, 0x740e3548, 0x0, 0x24, 0x10001, 0x3, 0x7, 0xfe, 0x0, 0x2, 0x2, 0x10, 0x1, 0x9, 0x0, 0x7ff, 0x7fffffff, 0x7, 0x9, 0x4, 0x7f, 0x1, 0x7ff, 0xff, 0xe, 0x2, 0x80000000, 0x5, 0x0, 0xffffffff, 0x0, 0x100, 0x8, 0x9, 0x6aa, 0x3, 0x39bf, 0xe6, 0x9, 0x5, 0x10001, 0x8000, 0xfffffff5, 0x7, 0x0, 0x800, 0x10, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x0, 0x8, 0x40, 0xfffffffa, 0x2, 0x5acc, 0xfffffffe, 0x4, 0x3, 0x5, 0x9, 0xd0, 0xe4, 0x10000, 0xbdde, 0x8, 0x7, 0x3, 0x5, 0x33b80, 0x10000, 0x200, 0x0, 0xffff, 0x7, 0x6, 0x5, 0x277, 0x0, 0x7, 0xba0, 0x6, 0x6, 0x5, 0x8, 0xc, 0x1, 0x9, 0x9, 0x7, 0x9, 0xb, 0x8001, 0x8, 0x3, 0x1, 0x0, 0x0, 0xd, 0x1, 0x81, 0x1c000000, 0x3, 0x2, 0x0, 0x3, 0xffffffff, 0xc, 0x3, 0x204d, 0x3ff, 0x5b, 0x6, 0x6, 0x401, 0x2, 0x8, 0x4, 0x2, 0x5, 0xb, 0xd4, 0x1, 0x6, 0x10000, 0x2, 0x6, 0xf87, 0xffff, 0x5, 0x1, 0x2, 0x8, 0xf5d1, 0x7, 0x2, 0x10, 0x6, 0x4, 0x6, 0x0, 0x9, 0x9, 0xac0, 0x40, 0x8, 0xa50, 0x6, 0x1, 0x4, 0x10000, 0x1, 0x7, 0x7, 0x7, 0x10, 0x3, 0xdf6, 0x0, 0x2315, 0x3, 0xf59, 0x2f, 0xa7, 0x9, 0xffffff81, 0x8, 0x800, 0x356, 0x2, 0x2b, 0xa, 0xe, 0x0, 0x4, 0x7ff, 0x0, 0x7, 0xfffffffe, 0x8, 0x2, 0xc0000000, 0x1, 0x4, 0x57, 0x453, 0x7fffffff, 0x0, 0x5, 0x1, 0x0, 0xff, 0x2, 0x8, 0x0, 0x3, 0xffffffff, 0x5, 0x7, 0x7fff, 0x1, 0xf, 0x2, 0xa04, 0x7, 0x6, 0x0, 0x0, 0x5, 0x9, 0x0, 0x4bd, 0x7, 0x4, 0x400, 0x13bd, 0x9, 0x4, 0x7, 0x7e, 0xfffffff2, 0x10, 0x8, 0x6, 0x9, 0x6, 0xc000, 0xe8b3, 0x7fff, 0xfffffffe, 0x4, 0x6, 0x5, 0x1ff, 0x0, 0xfff, 0xfffffffc, 0x80, 0x2, 0xc, 0x3, 0x8, 0x3, 0xd7a, 0x7, 0x200, 0x81, 0x17b, 0x2, 0xe, 0xa, 0xf224, 0x8fd9, 0x10001, 0x8, 0x4, 0x2, 0x8, 0x5, 0x6, 0x1b, 0x8, 0xfffffffc, 0x80, 0x7, 0x2000000, 0x7, 0x4, 0x5, 0x1, 0x616dcf40, 0x1000, 0x0, 0x0, 0x8, 0x5, 0x1, 0x101, 0xa4e, 0x4, 0x3, 0x1, 0xb3, 0x9, 0xfffffff6, 0x8, 0x1, 0xf3c, 0x0, 0x9, 0x4, 0x8001, 0x4, 0x3, 0x4, 0x9, 0x200, 0xc, 0x5e, 0x80000000, 0x4, 0x5, 0x6, 0xa00]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}]}}]}, 0xf60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='gfs2\x00', 0x21000d, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1744c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xc}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1dadd}]}}}, @IFLA_LINK={0x8, 0x5, r17}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x54}}, 0x8000) 1.216424865s ago: executing program 2 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60891}, 0x24044080) 1.144806698s ago: executing program 0 (id=2827): mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00f0ffff0000000060000040"}}}}}}}, 0x0) 1.064162454s ago: executing program 0 (id=2828): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000080)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r10, 0xc0844123, &(0x7f00000001c0)) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x24008}, [@IFLA_IFALIAS={0x14, 0x14, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.063906387s ago: executing program 2 (id=2829): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0xf) r1 = userfaultfd(0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r3, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x4000018) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 932.796879ms ago: executing program 2 (id=2830): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x40, 0x258, 0x2000, 0x280, 0xffffffff, 0x1, 0x1, 0x0, {0x8, 0x4, 0x1}, {0x7, 0x2c, 0x1}, {0x9c1d, 0x2, 0x1}, {0x8, 0xffff7fff, 0x1}, 0x1, 0x40, 0x6, 0xfffff000, 0x1, 0x5, 0x1000, 0xfff, 0x1000, 0x4, 0x8000, 0x3, 0x4, 0x0, 0x3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x5b04, 0x0) 871.7178ms ago: executing program 2 (id=2831): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x0, 0xa, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) poll(&(0x7f0000000040)=[{r0, 0xc0c0}, {0xffffffffffffffff, 0x400}], 0x2, 0x673) 351.610013ms ago: executing program 1 (id=2834): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x308000, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 351.321638ms ago: executing program 1 (id=2835): mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "f5ffffff0000000060000040"}}}}}}}, 0x0) 290.844854ms ago: executing program 1 (id=2836): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x0, 0x101, 0x4}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000003c0)={{r1, &(0x7f00000000c0)='/dev/autofs\x00', 0x115603, &(0x7f0000000100)={@align=0xfffffffffffffffd, {0x8, 0x1, 0x1, 0x8}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xb}, 0x2, &(0x7f0000000380)=[{0x3, 0xe38e, &(0x7f00000001c0)='!\x00', &(0x7f0000000200)="eaf0564f7d769bfb859cea63995b59c3016680172ba5287d326001d4a515dc94a45831f0ccc1a7d89d4b338850", 0x2d}, {0x1, 0x3, &(0x7f0000000240)=':[\x89*\x00', &(0x7f0000000280)="e91f39000b19719d7b75e9266670f3d1fce8dd23d2adfb5ed0641dc41189203a20cd7d93817f0d632f724169b94f4920d16e2cad3c389c6a7ecd1cc8ef304d0ba29185ee3c191af940c241101189c3006512e566eda569fc590f1a2469aa9418e38c460ccd8a131d68feaa9dd549f0f98aea5ef75adf6b482a490a34da55e436a1930f34b197f78993335df99a526a7754623e13053da29fae0841cfc589b81e928c240a8fe2d3da1dd7ea76c6a4d25b1b809458991740d01e7f3df06cd43c54c0d3a7fc2bf53ab13a8334b4719e3389ffabbdb5d565dec75cb5edf187215043e4c17744d340b62b7263acf58265", 0xee, 0x10}]}) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000440)) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000480)=0x3) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0xfffffffffffffff9, 0xa5, 0x3087, 0x9, 0xfffffffffffffff7, 0x4, 0x32e6, 0x40, 0x6, 0x0, 0x80000000, 0x1ff, 0x3, 0xfffffffffffff046, 0x8, 0x3], 0xa004, 0x1001}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000600)={&(0x7f0000000580)=""/71, 0x100000, 0x1800, 0x800, 0x2}, 0x20) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000640), 0x181040, 0x0) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x10001, 0xfffffeff, 0x4, 0x0, r4, 0x0, '\x00', r5, r2, 0x5, 0x4, 0x1}, 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1800000, 0x1010, r6, 0xebcb9000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', r5, 0x4, 0xb, 0x4, 0x3, 0x8, @mcast1, @remote, 0x7, 0x8, 0x400, 0x8001}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000880)={r8, r9/1000+60000}, 0x10) r10 = accept$packet(r4, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) getsockname$packet(r10, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) syz_open_dev$video4linux(&(0x7f00000009c0), 0x8001, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000a00)={0x2, 0x3, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x5, r3}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r12, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6b}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008020}, 0x800) r13 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r13, &(0x7f0000003340)={&(0x7f0000000c00), 0xc, &(0x7f00000031c0)=[{&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/186, 0xba}, {&(0x7f0000001dc0)=""/164, 0xa4}, {&(0x7f0000001e80)=""/113, 0x71}, {&(0x7f0000001f00)=""/144, 0x90}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/221, 0xdd}, {&(0x7f00000030c0)=""/205, 0xcd}], 0x9, &(0x7f0000003280)=[{0xb8, 0x0, 0x0, ""/167}], 0xb8, 0x10000}, 0x38, 0x10000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000003380)={r11, 0x1, 0x6, @local}, 0x10) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x18, 0x3f9, 0x300, 0x70bd2a, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x3000a014}, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000034c0)=0x6000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000036c0)={'syztnl1\x00', &(0x7f00000035c0)={'sit0\x00', 0x0, 0x700, 0x0, 0x6, 0x200, {{0x36, 0x4, 0x2, 0x32, 0xd8, 0x2, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@end, @cipso={0x86, 0x4b, 0x1, [{0x0, 0xb, "7a1132fd0b7e343712"}, {0x6, 0x9, "6c0fbfe7bc8c1c"}, {0x7, 0xf, "aafdd861b757a0dbed54554c1e"}, {0x5, 0x2}, {0x6, 0xf, "3819f08245ad0376a4e4b1cacf"}, {0x6, 0x11, "8762449be562945019836a9f0cf09e"}]}, @rr={0x7, 0x13, 0xb7, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @noop, @noop, @timestamp_addr={0x44, 0x4c, 0x66, 0x1, 0x6, [{@multicast2, 0x6}, {@rand_addr=0x64010100, 0x7}, {@loopback, 0x3}, {@private=0xa010101}, {@broadcast, 0x3}, {@broadcast, 0x2d2c}, {@multicast2, 0x8}, {@empty, 0x2}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x9, [{@empty, 0x80}, {@multicast1, 0x1}]}]}}}}}) 289.820118ms ago: executing program 1 (id=2837): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) r3 = fanotify_init(0xf00, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa6202, 0x0) fanotify_mark(r3, 0x1, 0x1020, r0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 210.610344ms ago: executing program 1 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) 210.220681ms ago: executing program 1 (id=2839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000003c0)="152cf9e97d4a44b0045eab06d682530cde11aba5996d412cd2f99dd3a444986141c9a482bed724d8157792103123c7f8691f5f77a9355eab3408e91840d3f6a4151deedab10d2f20753f4d9ba2908555920037b875287102d2e072a1bf1bc40399d3dbd39fe419f0b862ecb3faa8882647e55257cb65fe4d26b8031cd36a920a1332d5d7a043cea144890226e48c2ba3170894a82573315f6ed5ff02bc9c4f2fa9", 0xa1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) shutdown(r4, 0x0) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = accept4$tipc(r3, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10, 0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r10, 0x4, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000480)={r10, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x5}}}, &(0x7f0000000540)=0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) write(r0, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 251.916µs ago: executing program 2 (id=2840): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r2, 0x5170c560dce29b81, 0x4, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = epoll_create1(0x0) (async) r5 = socket(0x10, 0x803, 0x2) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r6, &(0x7f0000000040)=""/30, 0x44) (async) setxattr$security_selinux(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x1) (async) getdents64(r6, &(0x7f0000000840)=""/217, 0xd9) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000440)={0x0, 0xfffffffd, 0xfffffffb}) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555540204}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x35}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}]}, 0x60}}, 0x0) (async) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r8, &(0x7f0000000100)='0\x00', 0x2) (async) mmap(&(0x7f000075d000/0x4000)=nil, 0x4000, 0x100000a, 0x80010, r9, 0xffffe000) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) connect$x25(r7, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x23cfdd41d620754}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x36aacc53}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x104}]}}]}, 0x70}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@initdev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[], 0x2a8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 2 (id=2841): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000580)=[{0x21, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x0, @svalue=0xc32}, {0x1, @uvalue=0x7}, {0x0, @svalue=0x1}]}, 0x5}]}) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000340)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r4, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x0, r1}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0x5b04, 0x0) syz_clone(0x800180, &(0x7f0000000000)="d257039f817582fbeb8ac2b094528e799a4905d3ab5f517ae89b520b968cf3882154df6a1fff56dd02677bb16665fd38899390987eeb0672dac193b54f93", 0x3e, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)="67c158d2e5b385ada1038ef5e834527e7b3c773ffd53e9501c7b59df67813742fc806fa578ccb54b47bb78d372908f36d9a5a170a235f57cd64c8d38ccb1963e4671607c7d91433c45e67301f5e4427c04b6b365daf52ea54a448d943f773cd74dd921cc0e906dd5bfdd39cff2b1d7cd2424f4fdcdfa097d93c555d74479a547e25a275db14ad5fb1a1415609014346c24cf5d60b6b854d890b8dbcdf23116bbe2da39ed38bef0112c5faa028e866332fc0ab225cb27dca366e4a2ac2d4fe46c8b") timer_create(0x0, &(0x7f0000000180)={0x0, 0x3a, 0x4, @thr={&(0x7f00000007c0)="545fdb6ddd9316022539b13314ad1d4056931d08d5bbba135b0e01c6bb575bcd7459c93ff6280550677a6db86cd57e069624225f80fdb0be6ddad8d73b5a3edcb02ec39579ddae9bccc76b6d0f7444c818c3d45249cc8d7053b1de79a3c446998e823a24196784f68e307fe953ca99183b599755c08bdb202460b6fa512f43f226cb643b90c97e55a21ff2a072af2d4a20e8175d61b11d23bd27710eb28e7a2f3cc71437985a4877f71e1e06007b242533002eac541ffa5505e4613669e16349119a63e4bac137b2e4d2eadad6a1166d95520d6d7aca371e47a49c5697c889a30000000000000000", &(0x7f0000000300)="9fc157bf2100000000"}}, &(0x7f00000001c0)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x35, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0xfc, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r11) timer_create(0x7, &(0x7f00000003c0)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000100)="7df215ef6613d62c8e6ba271fac65e49741cdaacc6866de96b61897212a818acb5edeeb1eadc96bc85fcb81a32c40e5894688614b6d755f1", &(0x7f0000000440)="b77bd0fa876c0d9a0d283b321038b12ba9c35abd66ca8fb0eee63ff9e6b68073e5fe2edb100348360460c1bd9e549ee5e72babc836b68d7b17f1c0040f279431f9081219e0d8b47f67f0a747561d9e704a00165d43e5634374c5dd3716db16c9812f92be2ea9c7e803379fd58bcb8bac4adaad196202cb8ec62e51060e29e392ade9c4412153d782bc509ed7834a33f942bd87b73a168404378d1e4cbf805c6c94"}}, &(0x7f0000000400)) kernel console output (not intermixed with test programs): mmu_topup_memory_caches+0x25/0x170 [ 203.432032][T12905] kvm_mmu_load+0xd6/0x23e0 [ 203.432047][T12905] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 203.432069][T12905] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 203.432090][T12905] ? __pfx_kvm_mmu_load+0x10/0x10 [ 203.432104][T12905] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 203.432117][T12905] ? kvm_check_and_inject_events+0x961/0x1070 [ 203.432132][T12905] ? record_steal_time+0x3e0/0xbc0 [ 203.432145][T12905] vcpu_run+0x39f4/0x5ca0 [ 203.432169][T12905] ? __pfx_vcpu_run+0x10/0x10 [ 203.432189][T12905] ? rcu_is_watching+0x12/0xc0 [ 203.432209][T12905] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 203.432225][T12905] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 203.432246][T12905] kvm_vcpu_ioctl+0x730/0x1720 [ 203.432259][T12905] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.432271][T12905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.432286][T12905] ? do_vfs_ioctl+0x226/0x13e0 [ 203.432300][T12905] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.432312][T12905] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.432339][T12905] ? __fget_files+0x215/0x3d0 [ 203.432352][T12905] ? hook_file_ioctl_common+0x149/0x410 [ 203.432369][T12905] ? selinux_file_ioctl+0x13b/0x290 [ 203.432385][T12905] ? selinux_file_ioctl+0xb6/0x290 [ 203.432403][T12905] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.432415][T12905] __x64_sys_ioctl+0x18e/0x210 [ 203.432428][T12905] do_syscall_64+0x115/0x870 [ 203.432446][T12905] ? clear_bhb_loop+0x40/0x90 [ 203.432460][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.432472][T12905] RIP: 0033:0x7f8a8e79ce59 [ 203.432483][T12905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.432493][T12905] RSP: 002b:00007f8a8f576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.432505][T12905] RAX: ffffffffffffffda RBX: 00007f8a8ea15fa0 RCX: 00007f8a8e79ce59 [ 203.432512][T12905] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 203.432518][T12905] RBP: 00007f8a8f576090 R08: 0000000000000000 R09: 0000000000000000 [ 203.432525][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.432531][T12905] R13: 00007f8a8ea16038 R14: 00007f8a8ea15fa0 R15: 00007fff64653028 [ 203.432545][T12905] [ 203.794803][T12913] loop5: detected capacity change from 0 to 7 [ 203.798098][T12913] Dev loop5: unable to read RDB block 7 [ 203.799899][T12913] loop5: AHDI p1 p2 p3 [ 203.801472][T12913] loop5: partition table partially beyond EOD, truncated [ 203.804023][T12913] loop5: p1 start 1601398130 is beyond EOD, truncated [ 203.806228][T12913] loop5: p2 start 1702059890 is beyond EOD, truncated [ 203.931071][T12926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.934434][T12926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.231274][T12937] FAULT_INJECTION: forcing a failure. [ 204.231274][T12937] name failslab, interval 1, probability 0, space 0, times 0 [ 204.235419][T12937] CPU: 3 UID: 0 PID: 12937 Comm: syz.0.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.235439][T12937] Tainted: [L]=SOFTLOCKUP [ 204.235443][T12937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.235450][T12937] Call Trace: [ 204.235457][T12937] [ 204.235462][T12937] dump_stack_lvl+0x100/0x190 [ 204.235479][T12937] should_fail_ex.cold+0x5/0xa [ 204.235497][T12937] should_failslab+0xc2/0x120 [ 204.235511][T12937] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 204.235529][T12937] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 204.235549][T12937] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 204.235566][T12937] mmu_topup_memory_caches+0x25/0x170 [ 204.235584][T12937] kvm_mmu_load+0xd6/0x23e0 [ 204.235599][T12937] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 204.235618][T12937] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 204.235639][T12937] ? __pfx_kvm_mmu_load+0x10/0x10 [ 204.235654][T12937] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 204.235667][T12937] ? kvm_check_and_inject_events+0x961/0x1070 [ 204.235683][T12937] ? record_steal_time+0x3e0/0xbc0 [ 204.235697][T12937] vcpu_run+0x39f4/0x5ca0 [ 204.235729][T12937] ? __pfx_vcpu_run+0x10/0x10 [ 204.235760][T12937] ? rcu_is_watching+0x12/0xc0 [ 204.235790][T12937] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 204.235814][T12937] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 204.235845][T12937] kvm_vcpu_ioctl+0x730/0x1720 [ 204.235866][T12937] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 204.235885][T12937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.235907][T12937] ? do_vfs_ioctl+0x226/0x13e0 [ 204.235928][T12937] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 204.235973][T12937] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 204.236009][T12937] ? __fget_files+0x215/0x3d0 [ 204.236028][T12937] ? hook_file_ioctl_common+0x149/0x410 [ 204.236060][T12937] ? selinux_file_ioctl+0x13b/0x290 [ 204.236084][T12937] ? selinux_file_ioctl+0xb6/0x290 [ 204.236108][T12937] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 204.236120][T12937] __x64_sys_ioctl+0x18e/0x210 [ 204.236133][T12937] do_syscall_64+0x115/0x870 [ 204.236148][T12937] ? clear_bhb_loop+0x40/0x90 [ 204.236162][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.236174][T12937] RIP: 0033:0x7f023b19ce59 [ 204.236184][T12937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.236195][T12937] RSP: 002b:00007f023c04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.236206][T12937] RAX: ffffffffffffffda RBX: 00007f023b415fa0 RCX: 00007f023b19ce59 [ 204.236213][T12937] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 204.236220][T12937] RBP: 00007f023c04d090 R08: 0000000000000000 R09: 0000000000000000 [ 204.236227][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.236233][T12937] R13: 00007f023b416038 R14: 00007f023b415fa0 R15: 00007ffeca657e88 [ 204.236247][T12937] [ 204.704025][T12954] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2169'. [ 204.836228][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 204.842068][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2171'. [ 204.895100][T12966] FAULT_INJECTION: forcing a failure. [ 204.895100][T12966] name failslab, interval 1, probability 0, space 0, times 0 [ 204.900230][T12966] CPU: 3 UID: 0 PID: 12966 Comm: syz.0.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.900255][T12966] Tainted: [L]=SOFTLOCKUP [ 204.900261][T12966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.900271][T12966] Call Trace: [ 204.900280][T12966] [ 204.900288][T12966] dump_stack_lvl+0x100/0x190 [ 204.900314][T12966] should_fail_ex.cold+0x5/0xa [ 204.900339][T12966] should_failslab+0xc2/0x120 [ 204.900357][T12966] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 204.900381][T12966] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 204.900407][T12966] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 204.900433][T12966] mmu_topup_memory_caches+0x25/0x170 [ 204.900457][T12966] kvm_mmu_load+0xd6/0x23e0 [ 204.900479][T12966] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 204.900503][T12966] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 204.900533][T12966] ? __pfx_kvm_mmu_load+0x10/0x10 [ 204.900554][T12966] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 204.900575][T12966] ? kvm_check_and_inject_events+0x961/0x1070 [ 204.900597][T12966] ? record_steal_time+0x3e0/0xbc0 [ 204.900616][T12966] vcpu_run+0x39f4/0x5ca0 [ 204.900649][T12966] ? __pfx_vcpu_run+0x10/0x10 [ 204.900681][T12966] ? rcu_is_watching+0x12/0xc0 [ 204.900710][T12966] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 204.900730][T12966] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 204.900761][T12966] kvm_vcpu_ioctl+0x730/0x1720 [ 204.900781][T12966] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 204.900800][T12966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.900822][T12966] ? do_vfs_ioctl+0x226/0x13e0 [ 204.900839][T12966] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 204.900855][T12966] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 204.900889][T12966] ? __fget_files+0x215/0x3d0 [ 204.900909][T12966] ? hook_file_ioctl_common+0x149/0x410 [ 204.900936][T12966] ? selinux_file_ioctl+0x13b/0x290 [ 204.900964][T12966] ? selinux_file_ioctl+0xb6/0x290 [ 204.900989][T12966] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 204.901008][T12966] __x64_sys_ioctl+0x18e/0x210 [ 204.901029][T12966] do_syscall_64+0x115/0x870 [ 204.901052][T12966] ? clear_bhb_loop+0x40/0x90 [ 204.901074][T12966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.901090][T12966] RIP: 0033:0x7f023b19ce59 [ 204.901105][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.901121][T12966] RSP: 002b:00007f023c04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.901139][T12966] RAX: ffffffffffffffda RBX: 00007f023b415fa0 RCX: 00007f023b19ce59 [ 204.901150][T12966] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 204.901161][T12966] RBP: 00007f023c04d090 R08: 0000000000000000 R09: 0000000000000000 [ 204.901171][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.901181][T12966] R13: 00007f023b416038 R14: 00007f023b415fa0 R15: 00007ffeca657e88 [ 204.901204][T12966] [ 205.064007][T12969] [U] [ 205.064994][T12969] [U] [ 205.065994][T12969] [U] [ 205.066945][T12969] [U] [ 205.068053][T12969] [U] [ 205.068945][T12969] [U] [ 205.069858][T12969] [U] [ 205.070819][T12969] [U] [ 205.072134][T12969] [U] [ 205.073125][T12969] [U] [ 205.074021][T12969] [U] [ 205.074902][T12969] [U] [ 205.076765][T12969] [U] [ 205.077669][T12969] [U] [ 205.078533][T12969] [U] [ 205.079397][T12969] [U] [ 205.137544][T12972] sctp: [Deprecated]: syz.0.2175 (pid 12972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.137544][T12972] Use struct sctp_sack_info instead [ 205.160161][T12972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.266888][ T5755] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 205.267218][ T5752] Bluetooth: hci4: command 0xfc11 tx timeout [ 205.473867][ T40] audit: type=1400 audit(1781316114.430:1239): avc: denied { read append } for pid=12984 comm="syz.1.2180" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.484138][ T40] audit: type=1400 audit(1781316114.430:1240): avc: denied { open } for pid=12984 comm="syz.1.2180" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.510276][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 205.592597][T12991] FAULT_INJECTION: forcing a failure. [ 205.592597][T12991] name failslab, interval 1, probability 0, space 0, times 0 [ 205.597828][T12991] CPU: 1 UID: 0 PID: 12991 Comm: syz.0.2183 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.597856][T12991] Tainted: [L]=SOFTLOCKUP [ 205.597863][T12991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.597872][T12991] Call Trace: [ 205.597880][T12991] [ 205.597889][T12991] dump_stack_lvl+0x100/0x190 [ 205.597915][T12991] should_fail_ex.cold+0x5/0xa [ 205.597941][T12991] should_failslab+0xc2/0x120 [ 205.597964][T12991] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 205.597990][T12991] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 205.598016][T12991] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 205.598050][T12991] mmu_topup_memory_caches+0x25/0x170 [ 205.598076][T12991] kvm_mmu_load+0xd6/0x23e0 [ 205.598099][T12991] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 205.598127][T12991] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 205.598158][T12991] ? __pfx_kvm_mmu_load+0x10/0x10 [ 205.598181][T12991] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 205.598201][T12991] ? kvm_check_and_inject_events+0x961/0x1070 [ 205.598223][T12991] ? record_steal_time+0x3e0/0xbc0 [ 205.598243][T12991] vcpu_run+0x39f4/0x5ca0 [ 205.598276][T12991] ? __pfx_vcpu_run+0x10/0x10 [ 205.598308][T12991] ? rcu_is_watching+0x12/0xc0 [ 205.598337][T12991] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 205.598360][T12991] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 205.598389][T12991] kvm_vcpu_ioctl+0x730/0x1720 [ 205.598409][T12991] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 205.598428][T12991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.598450][T12991] ? do_vfs_ioctl+0x226/0x13e0 [ 205.598469][T12991] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.598488][T12991] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 205.598525][T12991] ? __fget_files+0x215/0x3d0 [ 205.598545][T12991] ? hook_file_ioctl_common+0x149/0x410 [ 205.598571][T12991] ? selinux_file_ioctl+0x13b/0x290 [ 205.598595][T12991] ? selinux_file_ioctl+0xb6/0x290 [ 205.598623][T12991] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 205.598642][T12991] __x64_sys_ioctl+0x18e/0x210 [ 205.598662][T12991] do_syscall_64+0x115/0x870 [ 205.598685][T12991] ? clear_bhb_loop+0x40/0x90 [ 205.598707][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.598726][T12991] RIP: 0033:0x7f023b19ce59 [ 205.598744][T12991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.598761][T12991] RSP: 002b:00007f023c04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.598795][T12991] RAX: ffffffffffffffda RBX: 00007f023b415fa0 RCX: 00007f023b19ce59 [ 205.598806][T12991] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 205.598817][T12991] RBP: 00007f023c04d090 R08: 0000000000000000 R09: 0000000000000000 [ 205.598827][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.598837][T12991] R13: 00007f023b416038 R14: 00007f023b415fa0 R15: 00007ffeca657e88 [ 205.598862][T12991] [ 205.960460][T13013] tmpfs: Unknown parameter '' [ 205.997789][T13015] FAULT_INJECTION: forcing a failure. [ 205.997789][T13015] name failslab, interval 1, probability 0, space 0, times 0 [ 206.003116][T13015] CPU: 3 UID: 0 PID: 13015 Comm: syz.1.2193 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.003144][T13015] Tainted: [L]=SOFTLOCKUP [ 206.003150][T13015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.003159][T13015] Call Trace: [ 206.003166][T13015] [ 206.003173][T13015] dump_stack_lvl+0x100/0x190 [ 206.003198][T13015] should_fail_ex.cold+0x5/0xa [ 206.003220][T13015] should_failslab+0xc2/0x120 [ 206.003239][T13015] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 206.003265][T13015] ? __alloc_skb+0x140/0x710 [ 206.003287][T13015] ? __alloc_skb+0x5b7/0x710 [ 206.003314][T13015] __alloc_skb+0x140/0x710 [ 206.003335][T13015] ? __alloc_skb+0x5b7/0x710 [ 206.003356][T13015] ? __pfx___alloc_skb+0x10/0x10 [ 206.003387][T13015] alloc_skb_with_frags+0xdd/0x760 [ 206.003407][T13015] ? avc_has_perm_noaudit+0x145/0x3b0 [ 206.003429][T13015] sock_alloc_send_pskb+0x801/0x980 [ 206.003464][T13015] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 206.003490][T13015] ? sock_has_perm+0x25a/0x2f0 [ 206.003512][T13015] ? __pfx_sock_has_perm+0x10/0x10 [ 206.003536][T13015] hci_sock_sendmsg+0x1c7/0x2620 [ 206.003563][T13015] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 206.003588][T13015] sock_write_iter+0x524/0x5a0 [ 206.003607][T13015] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 206.003628][T13015] ? __pfx_sock_write_iter+0x10/0x10 [ 206.003656][T13015] ? bpf_lsm_file_permission+0x9/0x10 [ 206.003681][T13015] ? security_file_permission+0x76/0x210 [ 206.003705][T13015] ? rw_verify_area+0xce/0x6d0 [ 206.003724][T13015] vfs_write+0x6ac/0x1070 [ 206.003743][T13015] ? __pfx_sock_write_iter+0x10/0x10 [ 206.003765][T13015] ? __pfx_vfs_write+0x10/0x10 [ 206.003781][T13015] ? find_held_lock+0x2b/0x80 [ 206.003812][T13015] ksys_write+0x1f8/0x250 [ 206.003829][T13015] ? __pfx_ksys_write+0x10/0x10 [ 206.003850][T13015] ? rcu_is_watching+0x12/0xc0 [ 206.003877][T13015] do_syscall_64+0x115/0x870 [ 206.003898][T13015] ? clear_bhb_loop+0x40/0x90 [ 206.003942][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.003961][T13015] RIP: 0033:0x7f4c5db9ce59 [ 206.003974][T13015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.003990][T13015] RSP: 002b:00007f4c5ea34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.004008][T13015] RAX: ffffffffffffffda RBX: 00007f4c5de15fa0 RCX: 00007f4c5db9ce59 [ 206.004020][T13015] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 206.004030][T13015] RBP: 00007f4c5ea34090 R08: 0000000000000000 R09: 0000000000000000 [ 206.004040][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.004049][T13015] R13: 00007f4c5de16038 R14: 00007f4c5de15fa0 R15: 00007ffefe06c338 [ 206.004074][T13015] [ 206.053905][T13007] Invalid option length (1048180) for dns_resolver key [ 206.402622][T13030] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2197'. [ 206.428403][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2197'. [ 206.432388][T13030] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2197'. [ 206.444568][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 206.620344][T13036] FAULT_INJECTION: forcing a failure. [ 206.620344][T13036] name failslab, interval 1, probability 0, space 0, times 0 [ 206.625757][T13036] CPU: 1 UID: 0 PID: 13036 Comm: syz.2.2199 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.625786][T13036] Tainted: [L]=SOFTLOCKUP [ 206.625791][T13036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.625802][T13036] Call Trace: [ 206.625810][T13036] [ 206.625817][T13036] dump_stack_lvl+0x100/0x190 [ 206.625843][T13036] should_fail_ex.cold+0x5/0xa [ 206.625868][T13036] should_failslab+0xc2/0x120 [ 206.625889][T13036] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 206.625935][T13036] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 206.625961][T13036] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 206.625988][T13036] mmu_topup_memory_caches+0x25/0x170 [ 206.626013][T13036] kvm_mmu_load+0xd6/0x23e0 [ 206.626035][T13036] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 206.626067][T13036] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 206.626099][T13036] ? __pfx_kvm_mmu_load+0x10/0x10 [ 206.626120][T13036] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 206.626140][T13036] ? kvm_check_and_inject_events+0x961/0x1070 [ 206.626162][T13036] ? record_steal_time+0x3e0/0xbc0 [ 206.626183][T13036] vcpu_run+0x39f4/0x5ca0 [ 206.626217][T13036] ? __pfx_vcpu_run+0x10/0x10 [ 206.626249][T13036] ? rcu_is_watching+0x12/0xc0 [ 206.626279][T13036] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 206.626303][T13036] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 206.626334][T13036] kvm_vcpu_ioctl+0x730/0x1720 [ 206.626356][T13036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 206.626375][T13036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 206.626397][T13036] ? do_vfs_ioctl+0x226/0x13e0 [ 206.626417][T13036] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 206.626436][T13036] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 206.626472][T13036] ? __fget_files+0x215/0x3d0 [ 206.626492][T13036] ? hook_file_ioctl_common+0x149/0x410 [ 206.626518][T13036] ? selinux_file_ioctl+0x13b/0x290 [ 206.626544][T13036] ? selinux_file_ioctl+0xb6/0x290 [ 206.626575][T13036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 206.626595][T13036] __x64_sys_ioctl+0x18e/0x210 [ 206.626615][T13036] do_syscall_64+0x115/0x870 [ 206.626638][T13036] ? clear_bhb_loop+0x40/0x90 [ 206.626660][T13036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.626678][T13036] RIP: 0033:0x7fe287d9ce59 [ 206.626694][T13036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.626711][T13036] RSP: 002b:00007fe288c6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.626729][T13036] RAX: ffffffffffffffda RBX: 00007fe288015fa0 RCX: 00007fe287d9ce59 [ 206.626741][T13036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 206.626751][T13036] RBP: 00007fe288c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.626761][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.626771][T13036] R13: 00007fe288016038 R14: 00007fe288015fa0 R15: 00007fff95055ac8 [ 206.626796][T13036] [ 207.082907][T13046] FAULT_INJECTION: forcing a failure. [ 207.082907][T13046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.087090][T13046] CPU: 3 UID: 0 PID: 13046 Comm: syz.1.2202 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.087109][T13046] Tainted: [L]=SOFTLOCKUP [ 207.087113][T13046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.087119][T13046] Call Trace: [ 207.087123][T13046] [ 207.087128][T13046] dump_stack_lvl+0x100/0x190 [ 207.087145][T13046] should_fail_ex.cold+0x5/0xa [ 207.087162][T13046] _copy_from_iter+0x1f4/0x1690 [ 207.087180][T13046] ? __pfx__copy_from_iter+0x10/0x10 [ 207.087195][T13046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 207.087213][T13046] copy_page_from_iter+0x238/0x300 [ 207.087228][T13046] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 207.087251][T13046] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 207.087269][T13046] ? unwind_get_return_address+0x59/0xa0 [ 207.087289][T13046] ? find_held_lock+0x2b/0x80 [ 207.087303][T13046] ? avc_has_perm_noaudit+0x145/0x3b0 [ 207.087320][T13046] tun_get_user+0x16d6/0x3c20 [ 207.087343][T13046] ? __pfx_tun_get_user+0x10/0x10 [ 207.087360][T13046] ? __file_has_perm+0x336/0x460 [ 207.087375][T13046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.087396][T13046] ? find_held_lock+0x2b/0x80 [ 207.087406][T13046] ? tun_get+0x191/0x370 [ 207.087420][T13046] ? tun_get+0x191/0x370 [ 207.087439][T13046] tun_chr_write_iter+0xdc/0x200 [ 207.087458][T13046] vfs_write+0x6ac/0x1070 [ 207.087471][T13046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 207.087490][T13046] ? __pfx_vfs_write+0x10/0x10 [ 207.087501][T13046] ? find_held_lock+0x2b/0x80 [ 207.087518][T13046] ksys_write+0x12a/0x250 [ 207.087531][T13046] ? __pfx_ksys_write+0x10/0x10 [ 207.087544][T13046] ? rcu_is_watching+0x12/0xc0 [ 207.087562][T13046] do_syscall_64+0x115/0x870 [ 207.087577][T13046] ? clear_bhb_loop+0x40/0x90 [ 207.087590][T13046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.087602][T13046] RIP: 0033:0x7f4c5db5d68e [ 207.087611][T13046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.087622][T13046] RSP: 002b:00007f4c5ea33fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.087633][T13046] RAX: ffffffffffffffda RBX: 00007f4c5ea346c0 RCX: 00007f4c5db5d68e [ 207.087640][T13046] RDX: 00000000000000be RSI: 0000200000000280 RDI: 00000000000000c8 [ 207.087646][T13046] RBP: 00007f4c5ea34090 R08: 0000000000000000 R09: 0000000000000000 [ 207.087653][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.087659][T13046] R13: 00007f4c5de16038 R14: 00007f4c5de15fa0 R15: 00007ffefe06c338 [ 207.087673][T13046] [ 207.257157][ T40] audit: type=1326 audit(1781316116.208:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.1.2206" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5db9ce59 code=0x0 [ 207.426553][T13072] input: syz1 as /devices/virtual/input/input29 [ 207.522546][T13079] comedi: valid board names for 8255 driver are: [ 207.525232][T13079] 8255 [ 207.526201][T13079] comedi: valid board names for vmk80xx driver are: [ 207.528443][T13079] vmk80xx [ 207.529434][T13079] comedi: valid board names for usbduxsigma driver are: [ 207.531552][T13079] usbduxsigma [ 207.532794][T13079] comedi: valid board names for usbduxfast driver are: [ 207.534943][T13079] usbduxfast [ 207.536495][T13079] comedi: valid board names for usbdux driver are: [ 207.538756][T13079] usbdux [ 207.539775][T13079] comedi: valid board names for ni6501 driver are: [ 207.541861][T13079] ni6501 [ 207.542924][T13079] comedi: valid board names for dt9812 driver are: [ 207.544968][T13079] dt9812 [ 207.545894][T13079] comedi: valid board names for ni_labpc_cs driver are: [ 207.548108][T13079] ni_labpc_cs [ 207.549311][T13079] comedi: valid board names for ni_daq_700 driver are: [ 207.551448][T13079] ni_daq_700 [ 207.555494][T13079] comedi: valid board names for labpc_pci driver are: [ 207.557676][T13079] labpc_pci [ 207.558688][T13079] comedi: valid board names for adl_pci9118 driver are: [ 207.561149][T13079] pci9118dg [ 207.562198][T13079] pci9118hg [ 207.563298][T13079] pci9118hr [ 207.564363][T13079] comedi: valid board names for 8255_pci driver are: [ 207.566804][T13079] 8255_pci [ 207.567978][T13079] comedi: valid board names for s526 driver are: [ 207.569967][T13079] s526 [ 207.570849][T13079] comedi: valid board names for multiq3 driver are: [ 207.573004][T13079] multiq3 [ 207.573992][T13079] comedi: valid board names for pcmuio driver are: [ 207.576019][T13079] pcmuio48 [ 207.577051][T13079] pcmuio96 [ 207.578159][T13079] comedi: valid board names for pcmmio driver are: [ 207.580159][T13079] pcmmio [ 207.581092][T13079] comedi: valid board names for pcmda12 driver are: [ 207.583199][T13079] pcmda12 [ 207.584187][T13079] comedi: valid board names for pcmad driver are: [ 207.586423][T13079] pcmad12 [ 207.587391][T13079] pcmad16 [ 207.588470][T13079] comedi: valid board names for ni_labpc driver are: [ 207.590528][T13079] lab-pc-1200 [ 207.591598][T13079] lab-pc-1200ai [ 207.592884][T13079] lab-pc+ [ 207.593928][T13079] comedi: valid board names for atmio16 driver are: [ 207.596012][T13079] atmio16 [ 207.597191][T13079] atmio16d [ 207.598381][T13079] comedi: valid board names for ni_at_ao driver are: [ 207.600532][T13079] at-ao-6 [ 207.601516][T13079] at-ao-10 [ 207.602522][T13079] comedi: valid board names for ni_at_a2150 driver are: [ 207.605952][T13079] ni_at_a2150 [ 207.607096][T13079] comedi: valid board names for adq12b driver are: [ 207.609281][T13079] adq12b [ 207.610217][T13079] comedi: valid board names for mpc624 driver are: [ 207.612227][T13079] mpc624 [ 207.613273][T13079] comedi: valid board names for c6xdigio driver are: [ 207.616086][T13079] c6xdigio [ 207.617366][T13079] comedi: valid board names for aio_iiro_16 driver are: [ 207.619721][T13079] aio_iiro_16 [ 207.620833][T13079] comedi: valid board names for aio_aio12_8 driver are: [ 207.622952][T13079] aio_aio12_8 [ 207.624025][T13079] aio_ai12_8 [ 207.625090][T13079] aio_ao12_4 [ 207.626139][T13079] comedi: valid board names for fl512 driver are: [ 207.628149][T13079] fl512 [ 207.629184][T13079] comedi: valid board names for dmm32at driver are: [ 207.631200][T13079] dmm32at [ 207.632185][T13079] comedi: valid board names for dt282x driver are: [ 207.634232][T13079] dt2821 [ 207.635187][T13079] dt2821-f [ 207.636202][T13079] dt2821-g [ 207.637240][T13079] dt2823 [ 207.638171][T13079] dt2824-pgh [ 207.639307][T13079] dt2824-pgl [ 207.640388][T13079] dt2825 [ 207.641330][T13079] dt2827 [ 207.642253][T13079] dt2828 [ 207.643298][T13079] dt2829 [ 207.644244][T13079] dt21-ez [ 207.645226][T13079] dt23-ez [ 207.646237][T13079] dt24-ez [ 207.647266][T13079] dt24-ez-pgl [ 207.648580][T13079] comedi: valid board names for dt2817 driver are: [ 207.651012][T13079] dt2817 [ 207.652154][T13079] comedi: valid board names for dt2815 driver are: [ 207.654256][T13079] dt2815 [ 207.655325][T13079] comedi: valid board names for dt2814 driver are: [ 207.657383][T13079] dt2814 [ 207.658306][T13079] comedi: valid board names for dt2811 driver are: [ 207.660301][T13079] dt2811-pgh [ 207.661347][T13079] dt2811-pgl [ 207.662481][T13079] comedi: valid board names for dt2801 driver are: [ 207.664967][T13079] dt2801 [ 207.665891][T13079] comedi: valid board names for das6402 driver are: [ 207.667918][T13079] das6402-12 [ 207.668953][T13079] das6402-16 [ 207.669997][T13079] comedi: valid board names for das1800 driver are: [ 207.672049][T13079] das-1701st [ 207.673179][T13079] das-1701st-da [ 207.674374][T13079] das-1702st [ 207.675432][T13079] das-1702st-da [ 207.676595][T13079] das-1702hr [ 207.677636][T13079] das-1702hr-da [ 207.678738][T13079] das-1701ao [ 207.679773][T13079] das-1702ao [ 207.680816][T13079] das-1801st [ 207.681849][T13079] das-1801st-da [ 207.685011][T13079] das-1802st [ 207.686103][T13079] das-1802st-da [ 207.687259][T13079] das-1802hr [ 207.688305][T13079] das-1802hr-da [ 207.689426][T13079] das-1801hc [ 207.690463][T13079] das-1802hc [ 207.691497][T13079] das-1801ao [ 207.692604][T13079] das-1802ao [ 207.693753][T13079] comedi: valid board names for das800 driver are: [ 207.696079][T13079] das-800 [ 207.697119][T13079] cio-das800 [ 207.698193][T13079] das-801 [ 207.699155][T13079] cio-das801 [ 207.700204][T13079] das-802 [ 207.701172][T13079] cio-das802 [ 207.702203][T13079] cio-das802/16 [ 207.703457][T13079] comedi: valid board names for isa-das08 driver are: [ 207.705594][T13079] isa-das08 [ 207.706626][T13079] das08-pgm [ 207.707654][T13079] das08-pgh [ 207.708678][T13079] das08-pgl [ 207.709711][T13079] das08-aoh [ 207.710725][T13079] das08-aol [ 207.711731][T13079] das08-aom [ 207.712771][T13079] das08/jr-ao [ 207.713979][T13079] das08jr-16-ao [ 207.715185][T13079] pc104-das08 [ 207.716322][T13079] das08jr/16 [ 207.717662][T13079] comedi: valid board names for das16m1 driver are: [ 207.719660][T13079] das16m1 [ 207.720638][T13079] comedi: valid board names for dac02 driver are: [ 207.722581][T13079] dac02 [ 207.723646][T13079] comedi: valid board names for rti802 driver are: [ 207.726304][T13079] rti802 [ 207.727409][T13079] comedi: valid board names for rti800 driver are: [ 207.729538][T13079] rti800 [ 207.730494][T13079] rti815 [ 207.731426][T13079] comedi: valid board names for pcm3724 driver are: [ 207.733618][T13079] pcm3724 [ 207.734600][T13079] comedi: valid board names for pcl818 driver are: [ 207.736650][T13079] pcl818l [ 207.737620][T13079] pcl818h [ 207.738586][T13079] pcl818hd [ 207.739571][T13079] pcl818hg [ 207.740595][T13079] pcl818 [ 207.741398][T13083] FAULT_INJECTION: forcing a failure. [ 207.741398][T13083] name failslab, interval 1, probability 0, space 0, times 0 [ 207.741510][T13079] pcl718 [ 207.741517][T13079] pcm3718 [ 207.741522][T13079] comedi: valid board names for pcl816 driver are: [ 207.749036][T13083] CPU: 3 UID: 0 PID: 13083 Comm: syz.2.2213 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.749083][T13083] Tainted: [L]=SOFTLOCKUP [ 207.749090][T13083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.749100][T13083] Call Trace: [ 207.749107][T13083] [ 207.749114][T13083] dump_stack_lvl+0x100/0x190 [ 207.749140][T13083] should_fail_ex.cold+0x5/0xa [ 207.749167][T13083] should_failslab+0xc2/0x120 [ 207.749187][T13083] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 207.749213][T13083] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 207.749240][T13083] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 207.749268][T13083] mmu_topup_memory_caches+0x25/0x170 [ 207.749294][T13083] kvm_mmu_load+0xd6/0x23e0 [ 207.749317][T13083] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 207.749344][T13083] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 207.749375][T13083] ? __pfx_kvm_mmu_load+0x10/0x10 [ 207.749397][T13083] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 207.749418][T13083] ? kvm_check_and_inject_events+0x961/0x1070 [ 207.749442][T13083] ? record_steal_time+0x3e0/0xbc0 [ 207.749462][T13083] vcpu_run+0x39f4/0x5ca0 [ 207.749497][T13083] ? __pfx_vcpu_run+0x10/0x10 [ 207.749530][T13083] ? rcu_is_watching+0x12/0xc0 [ 207.749560][T13083] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 207.749585][T13083] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 207.749617][T13083] kvm_vcpu_ioctl+0x730/0x1720 [ 207.749639][T13083] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 207.749658][T13083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.749680][T13083] ? do_vfs_ioctl+0x226/0x13e0 [ 207.749701][T13083] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 207.749720][T13083] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 207.749756][T13083] ? __fget_files+0x215/0x3d0 [ 207.749778][T13083] ? hook_file_ioctl_common+0x149/0x410 [ 207.749804][T13083] ? selinux_file_ioctl+0x13b/0x290 [ 207.749829][T13083] ? selinux_file_ioctl+0xb6/0x290 [ 207.749861][T13083] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 207.749881][T13083] __x64_sys_ioctl+0x18e/0x210 [ 207.749903][T13083] do_syscall_64+0x115/0x870 [ 207.749925][T13083] ? clear_bhb_loop+0x40/0x90 [ 207.749948][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.749966][T13083] RIP: 0033:0x7fe287d9ce59 [ 207.749982][T13083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.749998][T13083] RSP: 002b:00007fe288c6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.750017][T13083] RAX: ffffffffffffffda RBX: 00007fe288015fa0 RCX: 00007fe287d9ce59 [ 207.750029][T13083] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 207.750039][T13083] RBP: 00007fe288c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 207.750049][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.750059][T13083] R13: 00007fe288016038 R14: 00007fe288015fa0 R15: 00007fff95055ac8 [ 207.750084][T13083] [ 207.842097][T13079] pcl816 [ 207.843022][T13079] pcl814b [ 207.844007][T13079] comedi: valid board names for pcl812 driver are: [ 207.846086][T13079] pcl812 [ 207.847051][T13079] pcl812pg [ 207.848049][T13079] acl8112pg [ 207.849189][T13079] acl8112dg [ 207.850195][T13079] acl8112hg [ 207.851186][T13079] a821pgl [ 207.852139][T13079] a821pglnda [ 207.853284][T13079] a821pgh [ 207.854727][T13079] a822pgl [ 207.856133][T13079] a822pgh [ 207.857538][T13079] a823pgl [ 207.858836][T13079] a823pgh [ 207.860002][T13079] pcl813 [ 207.860943][T13079] pcl813b [ 207.861903][T13079] acl8113 [ 207.862934][T13079] iso813 [ 207.863909][T13079] acl8216 [ 207.864988][T13079] a826pg [ 207.865989][T13079] comedi: valid board names for pcl730 driver are: [ 207.868605][T13079] pcl730 [ 207.869866][T13079] iso730 [ 207.871090][T13079] acl7130 [ 207.872384][T13079] pcm3730 [ 207.873646][T13079] pcl725 [ 207.874937][T13079] p8r8dio [ 207.876235][T13079] acl7225b [ 207.877588][T13079] p16r16dio [ 207.878927][T13079] pcl733 [ 207.880195][T13079] pcl734 [ 207.881432][T13079] opmm-1616-xt [ 207.882889][T13079] pearl-mm-p [ 207.884300][T13079] ir104-pbf [ 207.885771][T13079] comedi: valid board names for pcl726 driver are: [ 207.888466][T13079] pcl726 [ 207.889723][T13079] pcl727 [ 207.890956][T13079] pcl728 [ 207.892163][T13079] acl6126 [ 207.893442][T13079] acl6128 [ 207.894499][T13079] comedi: valid board names for pcl724 driver are: [ 207.896662][T13079] pcl724 [ 207.897587][T13079] pcl722 [ 207.898521][T13079] pcl731 [ 207.899442][T13079] acl7122 [ 207.900465][T13079] acl7124 [ 207.901434][T13079] pet48dio [ 207.902429][T13079] pcmio48 [ 207.903403][T13079] onyx-mm-dio [ 207.904509][T13079] comedi: valid board names for pcl711 driver are: [ 207.906850][T13079] pcl711 [ 207.907804][T13079] pcl711b [ 207.908796][T13079] acl8112hg [ 207.909840][T13079] acl8112dg [ 207.910916][T13079] comedi: valid board names for amplc_pc263 driver are: [ 207.913041][T13079] pc263 [ 207.913944][T13079] comedi: valid board names for amplc_pc236 driver are: [ 207.916498][T13079] pc36at [ 207.917444][T13079] comedi: valid board names for amplc_dio200 driver are: [ 207.919648][T13079] pc212e [ 207.920645][T13079] pc214e [ 207.921575][T13079] pc215e [ 207.922505][T13079] pc218e [ 207.923439][T13079] pc272e [ 207.924684][T13079] comedi: valid board names for comedi_parport driver are: [ 207.927054][T13079] comedi_parport [ 207.928243][T13079] comedi: valid board names for comedi_test driver are: [ 207.930392][T13079] comedi_test [ 207.931535][T13079] comedi: valid board names for comedi_bond driver are: [ 207.933772][T13079] comedi_bond [ 207.973551][T13086] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 208.003331][T13086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.034415][T13086] bond8: (slave ip6gretap2): making interface the new active one [ 208.039687][T13086] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 208.054189][T13089] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 208.119179][T13097] FAULT_INJECTION: forcing a failure. [ 208.119179][T13097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.127929][T13097] CPU: 0 UID: 0 PID: 13097 Comm: syz.1.2219 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.127961][T13097] Tainted: [L]=SOFTLOCKUP [ 208.127966][T13097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.127977][T13097] Call Trace: [ 208.127983][T13097] [ 208.127991][T13097] dump_stack_lvl+0x100/0x190 [ 208.128017][T13097] should_fail_ex.cold+0x5/0xa [ 208.128042][T13097] _copy_from_iter+0x1f4/0x1690 [ 208.128071][T13097] ? __pfx__copy_from_iter+0x10/0x10 [ 208.128111][T13097] ? sock_has_perm+0x25a/0x2f0 [ 208.128137][T13097] ? __pfx_sock_has_perm+0x10/0x10 [ 208.128163][T13097] hci_sock_sendmsg+0x4a1/0x2620 [ 208.128190][T13097] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 208.128218][T13097] sock_write_iter+0x524/0x5a0 [ 208.128237][T13097] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 208.128258][T13097] ? __pfx_sock_write_iter+0x10/0x10 [ 208.128286][T13097] ? bpf_lsm_file_permission+0x9/0x10 [ 208.128313][T13097] ? security_file_permission+0x76/0x210 [ 208.128341][T13097] ? rw_verify_area+0xce/0x6d0 [ 208.128361][T13097] vfs_write+0x6ac/0x1070 [ 208.128380][T13097] ? __pfx_sock_write_iter+0x10/0x10 [ 208.128402][T13097] ? __pfx_vfs_write+0x10/0x10 [ 208.128424][T13097] ? find_held_lock+0x2b/0x80 [ 208.128456][T13097] ksys_write+0x1f8/0x250 [ 208.128475][T13097] ? __pfx_ksys_write+0x10/0x10 [ 208.128495][T13097] ? rcu_is_watching+0x12/0xc0 [ 208.128525][T13097] do_syscall_64+0x115/0x870 [ 208.128548][T13097] ? clear_bhb_loop+0x40/0x90 [ 208.128570][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.128589][T13097] RIP: 0033:0x7f4c5db9ce59 [ 208.128605][T13097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.128621][T13097] RSP: 002b:00007f4c5ea34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.128639][T13097] RAX: ffffffffffffffda RBX: 00007f4c5de15fa0 RCX: 00007f4c5db9ce59 [ 208.128651][T13097] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 208.128662][T13097] RBP: 00007f4c5ea34090 R08: 0000000000000000 R09: 0000000000000000 [ 208.128672][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.128682][T13097] R13: 00007f4c5de16038 R14: 00007f4c5de15fa0 R15: 00007ffefe06c338 [ 208.128706][T13097] [ 208.140909][T13096] hub 8-0:1.0: USB hub found [ 208.207420][T13096] hub 8-0:1.0: 1 port detected [ 208.215168][T13105] netlink: 'syz.4.2221': attribute type 10 has an invalid length. [ 208.233558][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2221'. [ 208.249340][ T40] audit: type=1400 audit(1781316117.191:1242): avc: denied { write } for pid=13106 comm="syz.1.2224" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 208.432394][T13115] FAULT_INJECTION: forcing a failure. [ 208.432394][T13115] name failslab, interval 1, probability 0, space 0, times 0 [ 208.436473][T13115] CPU: 1 UID: 0 PID: 13115 Comm: syz.0.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.436491][T13115] Tainted: [L]=SOFTLOCKUP [ 208.436496][T13115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.436502][T13115] Call Trace: [ 208.436507][T13115] [ 208.436512][T13115] dump_stack_lvl+0x100/0x190 [ 208.436530][T13115] should_fail_ex.cold+0x5/0xa [ 208.436550][T13115] should_failslab+0xc2/0x120 [ 208.436563][T13115] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 208.436581][T13115] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 208.436597][T13115] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 208.436614][T13115] mmu_topup_memory_caches+0x25/0x170 [ 208.436630][T13115] kvm_mmu_load+0xd6/0x23e0 [ 208.436644][T13115] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 208.436662][T13115] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 208.436682][T13115] ? __pfx_kvm_mmu_load+0x10/0x10 [ 208.436696][T13115] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 208.436709][T13115] ? kvm_check_and_inject_events+0x961/0x1070 [ 208.436724][T13115] ? record_steal_time+0x3e0/0xbc0 [ 208.436736][T13115] vcpu_run+0x39f4/0x5ca0 [ 208.436758][T13115] ? __pfx_vcpu_run+0x10/0x10 [ 208.436778][T13115] ? rcu_is_watching+0x12/0xc0 [ 208.436797][T13115] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 208.436813][T13115] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 208.436833][T13115] kvm_vcpu_ioctl+0x730/0x1720 [ 208.436846][T13115] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.436858][T13115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.436872][T13115] ? do_vfs_ioctl+0x226/0x13e0 [ 208.436884][T13115] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 208.436895][T13115] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 208.436920][T13115] ? __fget_files+0x215/0x3d0 [ 208.436934][T13115] ? hook_file_ioctl_common+0x149/0x410 [ 208.436950][T13115] ? selinux_file_ioctl+0x13b/0x290 [ 208.436966][T13115] ? selinux_file_ioctl+0xb6/0x290 [ 208.436984][T13115] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.436996][T13115] __x64_sys_ioctl+0x18e/0x210 [ 208.437009][T13115] do_syscall_64+0x115/0x870 [ 208.437024][T13115] ? clear_bhb_loop+0x40/0x90 [ 208.437037][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.437049][T13115] RIP: 0033:0x7f023b19ce59 [ 208.437059][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.437070][T13115] RSP: 002b:00007f023c04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.437082][T13115] RAX: ffffffffffffffda RBX: 00007f023b415fa0 RCX: 00007f023b19ce59 [ 208.437089][T13115] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 208.437095][T13115] RBP: 00007f023c04d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.437102][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.437108][T13115] R13: 00007f023b416038 R14: 00007f023b415fa0 R15: 00007ffeca657e88 [ 208.437123][T13115] [ 208.784733][T13140] FAULT_INJECTION: forcing a failure. [ 208.784733][T13140] name failslab, interval 1, probability 0, space 0, times 0 [ 208.790658][T13140] CPU: 2 UID: 0 PID: 13140 Comm: syz.1.2234 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.790687][T13140] Tainted: [L]=SOFTLOCKUP [ 208.790693][T13140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.790702][T13140] Call Trace: [ 208.790709][T13140] [ 208.790716][T13140] dump_stack_lvl+0x100/0x190 [ 208.790741][T13140] should_fail_ex.cold+0x5/0xa [ 208.790764][T13140] should_failslab+0xc2/0x120 [ 208.790783][T13140] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 208.790808][T13140] ? __alloc_skb+0x140/0x710 [ 208.790830][T13140] __alloc_skb+0x140/0x710 [ 208.790845][T13140] ? __alloc_skb+0x5b7/0x710 [ 208.790860][T13140] ? __pfx___alloc_skb+0x10/0x10 [ 208.790881][T13140] hci_sock_sendmsg+0x1b01/0x2620 [ 208.790898][T13140] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 208.790917][T13140] sock_write_iter+0x524/0x5a0 [ 208.790930][T13140] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 208.790944][T13140] ? __pfx_sock_write_iter+0x10/0x10 [ 208.790962][T13140] ? bpf_lsm_file_permission+0x9/0x10 [ 208.790980][T13140] ? security_file_permission+0x76/0x210 [ 208.791004][T13140] ? rw_verify_area+0xce/0x6d0 [ 208.791016][T13140] vfs_write+0x6ac/0x1070 [ 208.791029][T13140] ? __pfx_sock_write_iter+0x10/0x10 [ 208.791043][T13140] ? __pfx_vfs_write+0x10/0x10 [ 208.791054][T13140] ? find_held_lock+0x2b/0x80 [ 208.791074][T13140] ksys_write+0x1f8/0x250 [ 208.791087][T13140] ? __pfx_ksys_write+0x10/0x10 [ 208.791100][T13140] ? rcu_is_watching+0x12/0xc0 [ 208.791119][T13140] do_syscall_64+0x115/0x870 [ 208.791134][T13140] ? clear_bhb_loop+0x40/0x90 [ 208.791148][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.791160][T13140] RIP: 0033:0x7f4c5db9ce59 [ 208.791170][T13140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.791181][T13140] RSP: 002b:00007f4c5ea34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.791192][T13140] RAX: ffffffffffffffda RBX: 00007f4c5de15fa0 RCX: 00007f4c5db9ce59 [ 208.791199][T13140] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 208.791206][T13140] RBP: 00007f4c5ea34090 R08: 0000000000000000 R09: 0000000000000000 [ 208.791212][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.791218][T13140] R13: 00007f4c5de16038 R14: 00007f4c5de15fa0 R15: 00007ffefe06c338 [ 208.791233][T13140] [ 209.049027][T13146] IPVS: length: 116 != 8 [ 209.051413][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2240'. [ 209.180853][T13166] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2247'. [ 209.187499][ T40] audit: type=1400 audit(1781316118.115:1243): avc: denied { setopt } for pid=13165 comm="syz.4.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.191191][T13168] veth1_to_batadv: mtu less than device minimum [ 209.195666][ T40] audit: type=1400 audit(1781316118.125:1244): avc: denied { read } for pid=13167 comm="syz.1.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.236211][T13168] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.240678][T13168] kAFS: unparsable volume name [ 209.301899][T13181] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 209.470712][T13198] x_tables: duplicate underflow at hook 2 [ 209.491387][T13202] overlay: Unknown parameter '/' [ 209.587860][ T40] audit: type=1400 audit(1781316118.522:1245): avc: denied { read } for pid=13210 comm="syz.0.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.658472][T13217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.918352][ T5821] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 209.964366][ T40] audit: type=1400 audit(1781316118.890:1247): avc: denied { write } for pid=13226 comm="syz.1.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.969200][T13228] overlayfs: failed to resolve './bus': -2 [ 209.972236][ T40] audit: type=1400 audit(1781316118.890:1246): avc: denied { write } for pid=13226 comm="syz.1.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.982033][ T40] audit: type=1400 audit(1781316118.890:1248): avc: denied { ioctl } for pid=13226 comm="syz.1.2268" path="socket:[62804]" dev="sockfs" ino=62804 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.089228][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 210.610696][T13233] erspan0: entered promiscuous mode [ 210.618718][T13233] macsec1: entered promiscuous mode [ 210.666609][T13235] __nla_validate_parse: 6 callbacks suppressed [ 210.666628][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 211.201526][ T5755] Bluetooth: hci2: unexpected event 0x07 length: 4 < 255 [ 211.256259][T13263] netlink: 'syz.4.2280': attribute type 9 has an invalid length. [ 211.342689][T13264] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2279'. [ 212.006388][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 212.009979][T13274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2284'. [ 212.013900][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 212.017317][T13274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2284'. [ 212.020197][T13274] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2284'. [ 212.098415][ T40] audit: type=1400 audit(1781316121.016:1249): avc: denied { map } for pid=13281 comm="syz.1.2287" path="socket:[61353]" dev="sockfs" ino=61353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.108358][ T40] audit: type=1400 audit(1781316121.016:1250): avc: denied { read accept } for pid=13281 comm="syz.1.2287" path="socket:[61353]" dev="sockfs" ino=61353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.168912][T13287] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2285'. [ 212.174409][ T40] audit: type=1400 audit(1781316121.095:1251): avc: denied { setopt } for pid=13275 comm="syz.4.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.183655][ T40] audit: type=1400 audit(1781316121.105:1252): avc: denied { execute } for pid=13288 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 212.295730][ T5752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.302676][ T5752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.309248][ T5752] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.321143][ T5752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.325969][ T5752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.402142][T13304] fuse: Bad value for 'fd' [ 212.627919][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.636990][ T5821] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 212.640563][ T5821] usb 5-1: can't read configurations, error -71 [ 212.709681][T13333] syzkaller0: entered promiscuous mode [ 212.712150][T13333] syzkaller0: entered allmulticast mode [ 212.946070][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.949365][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.952459][T13292] bridge_slave_0: entered allmulticast mode [ 212.956343][T13292] bridge_slave_0: entered promiscuous mode [ 212.961522][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.964599][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.966519][T13357] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2305'. [ 212.973554][T13292] bridge_slave_1: entered allmulticast mode [ 212.984212][T13292] bridge_slave_1: entered promiscuous mode [ 213.035579][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.046021][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.081460][T13292] team0: Port device team_slave_0 added [ 213.090099][T13292] team0: Port device team_slave_1 added [ 213.131330][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.133597][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.141658][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.146409][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.149402][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.157554][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.187479][T13292] hsr_slave_0: entered promiscuous mode [ 213.193317][T13292] hsr_slave_1: entered promiscuous mode [ 213.195847][T13292] debugfs: 'hsr0' already exists in 'hsr' [ 213.198168][T13292] Cannot create hsr debugfs directory [ 213.356670][T13361] tun0: tun_chr_ioctl cmd 1074025672 [ 213.359084][T13361] tun0: ignored: set checksum disabled [ 213.412366][T13292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.416228][T13292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.594121][T13292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.600750][T13292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.618596][T13385] bridge_slave_0: entered promiscuous mode [ 213.764795][T13292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.769295][T13292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.810546][T13401] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 213.813726][T13401] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 213.817447][T13401] overlayfs: missing 'lowerdir' [ 213.917114][T13292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.921533][T13292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.023545][T13407] veth1_macvtap: left promiscuous mode [ 214.025850][T13407] macsec0: entered promiscuous mode [ 214.032559][T13407] veth1_macvtap: entered promiscuous mode [ 214.040177][T13407] macsec0: left promiscuous mode [ 214.103953][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2329'. [ 214.215827][T13292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.227303][T13292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.232087][T13292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.239735][T13292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.243936][T13292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.246508][T13433] SET target dimension over the limit! [ 214.252111][T13292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.255278][T13292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.268831][T13292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.340039][T13444] fuse: Bad value for 'fd' [ 214.360408][T13442] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.366446][ T5755] Bluetooth: hci4: command tx timeout [ 214.368112][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.384184][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.393286][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.396436][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.424935][T13449] netlink: 'syz.2.2339': attribute type 64 has an invalid length. [ 214.424982][ T193] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.427720][T13449] netlink: 'syz.2.2339': attribute type 4 has an invalid length. [ 214.430560][ T193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.721243][T13483] gtp1: entered allmulticast mode [ 214.754277][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.797008][T13292] veth0_vlan: entered promiscuous mode [ 214.803595][T13292] veth1_vlan: entered promiscuous mode [ 214.833067][T13292] veth0_macvtap: entered promiscuous mode [ 214.837954][T13292] veth1_macvtap: entered promiscuous mode [ 214.846207][T13490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 214.848373][T13490] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 214.852617][T13490] vhci_hcd vhci_hcd.0: Device attached [ 214.852993][T13292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.861210][T13292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.864478][T13495] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 214.867451][T11226] vhci_hcd vhci_hcd.0: stop threads [ 214.871016][T11226] vhci_hcd vhci_hcd.0: release socket [ 214.874573][T11226] vhci_hcd vhci_hcd.0: disconnect device [ 214.883474][ T193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.887917][ T193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.891916][ T193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.898828][ T193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.015126][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.018470][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.059325][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.066933][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.084224][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 215.084241][ T40] audit: type=1400 audit(1781316123.987:1257): avc: denied { mounton } for pid=13292 comm="syz-executor" path="/syzkaller.b4LPco/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 215.096645][ T40] audit: type=1400 audit(1781316123.987:1258): avc: denied { mounton } for pid=13292 comm="syz-executor" path="/syzkaller.b4LPco/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 215.107241][ T40] audit: type=1400 audit(1781316123.987:1259): avc: denied { mounton } for pid=13292 comm="syz-executor" path="/syzkaller.b4LPco/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 215.118122][ T40] audit: type=1400 audit(1781316123.997:1260): avc: denied { mounton } for pid=13292 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 215.126790][ T40] audit: type=1400 audit(1781316123.997:1261): avc: denied { mounton } for pid=13292 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 215.217398][T13507] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 215.313677][T13503] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 215.317348][T13503] 8021q: VLANs not supported on gre0 [ 215.438235][T13513] tmpfs: Bad value for 'size' [ 215.545680][ T40] audit: type=1400 audit(1781316124.445:1262): avc: denied { accept } for pid=13518 comm="syz.1.2360" lport=35654 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.592331][T13521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 216.339103][T13565] overlay: Unknown parameter '/' [ 216.411755][T13522] overlayfs: statfs failed on './file0' [ 216.458740][ T5755] Bluetooth: hci4: command tx timeout [ 216.547537][T13580] netlink: 'syz.1.2381': attribute type 2 has an invalid length. [ 216.735916][ T40] audit: type=1326 audit(1781316125.628:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13593 comm="syz.1.2387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ed59ce59 code=0x7ffc0000 [ 216.745861][ T40] audit: type=1326 audit(1781316125.628:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13593 comm="syz.1.2387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ed59ce59 code=0x7ffc0000 [ 216.755736][ T40] audit: type=1326 audit(1781316125.628:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13593 comm="syz.1.2387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ed59ce59 code=0x7ffc0000 [ 216.765855][ T40] audit: type=1326 audit(1781316125.628:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13593 comm="syz.1.2387" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f88ed59ce59 code=0x7ffc0000 [ 216.898414][T13599] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 216.943432][T13604] 9p: Could not find request transport: jirtioP [ 218.459120][T13680] __nla_validate_parse: 2 callbacks suppressed [ 218.459139][T13680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2414'. [ 218.552885][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 218.560889][ T5755] Bluetooth: hci4: command tx timeout [ 218.608701][T13688] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 220.652684][ T5755] Bluetooth: hci4: command tx timeout [ 221.093418][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 221.093435][ T40] audit: type=1400 audit(1781316129.953:1351): avc: denied { unlink } for pid=5742 comm="syz-executor" name="file0" dev="tmpfs" ino=2993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.145132][T13698] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 221.233916][T13706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.242173][T13708] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62639 sclass=netlink_xfrm_socket pid=13708 comm=syz.1.2425 [ 221.347429][ T40] audit: type=1400 audit(1781316130.211:1352): avc: denied { bind } for pid=13718 comm="syz.0.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.372042][T13723] team0: Cannot enslave team device to itself [ 221.389573][ T40] audit: type=1400 audit(1781316130.251:1353): avc: denied { mount } for pid=13730 comm="syz.2.2432" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 221.398828][T13733] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 221.407081][ T40] audit: type=1400 audit(1781316130.261:1354): avc: denied { search } for pid=13730 comm="syz.2.2432" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.554312][T13746] batman_adv: batadv0: Adding interface: macvtap1 [ 221.557099][T13746] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.568050][T13746] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 221.577333][T13754] tipc: Enabling of bearer rejected, failed to enable media [ 221.603426][T13756] sit2: entered promiscuous mode [ 221.612683][T13756] sit2: entered allmulticast mode [ 221.929310][ T5757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.938803][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.943413][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.947541][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.951146][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.416172][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.419341][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.422649][T13794] bridge_slave_0: entered allmulticast mode [ 222.426659][T13794] bridge_slave_0: entered promiscuous mode [ 222.431929][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.435396][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.438650][T13794] bridge_slave_1: entered allmulticast mode [ 222.442769][T13794] bridge_slave_1: entered promiscuous mode [ 222.477176][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.485895][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.533312][T13794] team0: Port device team_slave_0 added [ 222.537920][T13794] team0: Port device team_slave_1 added [ 222.561918][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.564724][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.575651][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.582505][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.585985][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.596875][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.648477][T13794] hsr_slave_0: entered promiscuous mode [ 222.651880][T13794] hsr_slave_1: entered promiscuous mode [ 222.657790][T13794] debugfs: 'hsr0' already exists in 'hsr' [ 222.661824][T13794] Cannot create hsr debugfs directory [ 222.763222][ T40] audit: type=1400 audit(1781316131.614:1355): avc: denied { write } for pid=13822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.780530][ T40] audit: type=1400 audit(1781316131.634:1356): avc: denied { read } for pid=13825 comm="syz.1.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 222.850858][ T40] audit: type=1400 audit(1781316131.703:1357): avc: denied { write } for pid=13831 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.938257][T13794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.944570][ T40] audit: type=1400 audit(1781316131.793:1358): avc: denied { read } for pid=13837 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.978465][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2467'. [ 222.992966][T13842] netlink: 'syz.4.2466': attribute type 11 has an invalid length. [ 222.996771][T13842] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2466'. [ 223.057796][ T40] audit: type=1400 audit(1781316131.912:1359): avc: denied { write } for pid=13843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.104571][T13794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.123924][ T40] audit: type=1400 audit(1781316131.972:1360): avc: denied { write } for pid=13851 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.252129][T13794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.376724][T13794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.607525][T13794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.613429][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.614019][T13794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.615750][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.623750][T13794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.628082][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.628877][T13794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.631539][T13794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.677583][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.691995][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.704266][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.707045][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.713464][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.716010][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.924387][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 224.017405][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.020906][ T5755] Bluetooth: hci0: command tx timeout [ 224.024956][T13910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=13910 comm=syz.1.2487 [ 224.041903][T13794] veth0_vlan: entered promiscuous mode [ 224.054886][T13794] veth1_vlan: entered promiscuous mode [ 224.070471][T13794] veth0_macvtap: entered promiscuous mode [ 224.076961][T13794] veth1_macvtap: entered promiscuous mode [ 224.087221][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.098508][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.106299][ T1172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.110882][ T1172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.116777][ T1172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.122836][ T1172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.183552][T13915] IPv6: addrconf: prefix option has invalid lifetime [ 224.218011][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.219529][ T7122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.221319][T13915] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2489'. [ 224.223481][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.225668][ T7122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.503257][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'. [ 224.604033][T13941] overlayfs: failed to clone upperpath [ 224.707070][T13946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2501'. [ 226.111657][ T5755] Bluetooth: hci0: command tx timeout [ 226.589454][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 226.631398][T13971] sg_write: data in/out 16777180/10 bytes for SCSI command 0x0-- guessing data in; [ 226.631398][T13971] program syz.1.2508 not setting count and/or reply_len properly [ 226.828511][T13990] Bluetooth: MGMT ver 1.23 [ 226.974000][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 227.086521][T14008] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 227.091579][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 227.091600][ T40] audit: type=1400 audit(1781316135.921:1363): avc: denied { execute } for pid=14007 comm="syz.4.2523" name="file1" dev="ramfs" ino=65512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 227.104575][ T40] audit: type=1400 audit(1781316135.921:1364): avc: denied { execute_no_trans } for pid=14007 comm="syz.4.2523" path="/file1" dev="ramfs" ino=65512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 227.170612][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2525'. [ 227.906121][ T40] audit: type=1400 audit(1781316136.737:1365): avc: denied { bind } for pid=14026 comm="syz.2.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.912595][ T40] audit: type=1400 audit(1781316136.747:1366): avc: denied { listen } for pid=14026 comm="syz.2.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.955802][T14029] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 228.046340][T14035] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 228.066648][T14035] bond2: entered promiscuous mode [ 228.067132][T14033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2532'. [ 228.068666][T14035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.202122][ T5755] Bluetooth: hci0: command tx timeout [ 228.253181][T14041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.256899][T14041] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 228.261146][T14041] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 228.268184][T14041] bond2: (slave vti0): making interface the new active one [ 228.271308][T14041] vti0: entered promiscuous mode [ 228.275296][T14041] bond2: (slave vti0): Enslaving as an active interface with an up link [ 229.037697][ T40] audit: type=1400 audit(1781316137.862:1367): avc: denied { lock } for pid=14043 comm="syz.2.2534" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 229.085966][ T40] audit: type=1400 audit(1781316137.902:1368): avc: denied { watch } for pid=14059 comm="syz.4.2538" path="/486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.104166][ T40] audit: type=1400 audit(1781316137.902:1369): avc: denied { watch_sb } for pid=14059 comm="syz.4.2538" path="/486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.121995][ T40] audit: type=1400 audit(1781316137.902:1370): avc: denied { mount } for pid=14059 comm="syz.4.2538" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 229.650802][T13939] usbtmc 9-1:16.0: usb_control_msg returned -110 [ 229.930411][T14044] bond2: left promiscuous mode [ 229.931928][T14044] vti0: left promiscuous mode [ 229.957924][T14086] vlan2: entered promiscuous mode [ 229.959975][T14086] hsr0: entered promiscuous mode [ 229.970599][T14086] vlan2: entered allmulticast mode [ 229.975100][T14086] hsr0: entered allmulticast mode [ 229.977245][T14086] hsr_slave_0: entered allmulticast mode [ 229.981462][T14086] hsr_slave_1: entered allmulticast mode [ 229.997208][ T7119] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.998949][T14095] netlink: 'syz.4.2550': attribute type 2 has an invalid length. [ 230.005098][T14095] netlink: 'syz.4.2550': attribute type 2 has an invalid length. [ 230.018564][ T7119] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.024684][ T7119] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.032967][ T7119] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.078220][T14103] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 230.185860][T14115] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 230.185865][T14114] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 230.185878][T14114] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.2558'. [ 230.188347][T14115] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.2558'. [ 230.235757][T14119] xt_hashlimit: max too large, truncated to 1048576 [ 230.238589][T14119] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 230.246877][ T40] audit: type=1400 audit(1781316139.066:1371): avc: denied { name_bind } for pid=14117 comm="syz.4.2560" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 230.292479][ T5755] Bluetooth: hci0: command tx timeout [ 230.335231][T14126] netlink: 'syz.4.2564': attribute type 1 has an invalid length. [ 230.364686][T14126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.371843][T14126] netlink: 'syz.4.2564': attribute type 10 has an invalid length. [ 230.376413][T14126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2564'. [ 230.380378][T14126] dummy0: entered promiscuous mode [ 230.389703][T14126] sctp: [Deprecated]: syz.4.2564 (pid 14126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.389703][T14126] Use struct sctp_sack_info instead [ 230.573552][ T920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 230.697818][T14146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2571'. [ 230.725681][ T920] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 230.733685][ T920] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 230.745272][ T920] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 230.749375][ T920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.753725][ T920] usb 5-1: Product: syz [ 230.758083][ T920] usb 5-1: Manufacturer: syz [ 230.760263][ T920] usb 5-1: SerialNumber: syz [ 230.826504][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 230.857071][T14157] overlayfs: failed to resolve './file1': -2 [ 230.867988][T14159] kAFS: unable to lookup cell '1' [ 230.955414][T14165] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 230.975850][ T40] audit: type=1326 audit(1781316139.793:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.2.2580" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe287d9ce59 code=0x0 [ 233.279009][ T920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.285944][ T920] usb 5-1: MIDIStreaming interface descriptor not found [ 233.330761][ T920] usb 5-1: USB disconnect, device number 27 [ 233.362878][T13650] udevd[13650]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.478856][ T40] audit: type=1400 audit(1781316142.281:1373): avc: denied { ioctl } for pid=14209 comm="syz.2.2596" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 233.499447][ T40] audit: type=1400 audit(1781316142.291:1374): avc: denied { mount } for pid=14202 comm="syz.0.2593" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 233.577974][T14220] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2599'. [ 233.632978][T14224] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 233.666234][ T40] audit: type=1400 audit(1781316142.460:1375): avc: denied { getopt } for pid=14223 comm="syz.2.2600" lport=41250 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 233.723438][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 233.867233][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 233.870416][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 233.891087][T14249] syzkaller1: tun_chr_ioctl cmd 1074033169 [ 233.893197][T14249] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 233.895057][T14249] syzkaller1: group set to 0 [ 233.913656][T14249] bond0: entered promiscuous mode [ 233.915305][T14249] bond_slave_0: entered promiscuous mode [ 233.917171][T14249] bond_slave_1: entered promiscuous mode [ 233.921153][T14249] batadv0: entered promiscuous mode [ 233.929346][T14249] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 233.949388][T14249] bond0: left promiscuous mode [ 233.951906][T14249] bond_slave_0: left promiscuous mode [ 233.955089][T14249] bond_slave_1: left promiscuous mode [ 233.961198][T14249] batadv0: left promiscuous mode [ 233.972841][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 234.028987][T14252] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 234.029740][ T40] audit: type=1400 audit(1781316142.839:1376): avc: denied { getopt } for pid=14255 comm="syz.0.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.040648][T14252] bond3 (unregistering): Released all slaves [ 234.098402][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.110468][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.126641][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.140423][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.144687][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.259753][T14274] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 234.341877][ T40] audit: type=1400 audit(1781316143.137:1377): avc: denied { listen } for pid=14285 comm="syz.4.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.455028][T14299] netlink: 'syz.4.2623': attribute type 49 has an invalid length. [ 234.548019][ T40] audit: type=1400 audit(1781316143.346:1378): avc: denied { transfer } for pid=14308 comm="syz.0.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 234.602316][T14299] ip6gretap0: entered promiscuous mode [ 234.604762][T14299] ip6gretap0: entered allmulticast mode [ 234.676977][ T40] audit: type=1400 audit(1781316143.476:1379): avc: denied { write } for pid=14315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.788714][ T40] audit: type=1400 audit(1781316143.585:1380): avc: denied { write } for pid=14329 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.857443][T14263] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.860611][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.865426][T14263] bridge_slave_0: entered allmulticast mode [ 234.869599][T14263] bridge_slave_0: entered promiscuous mode [ 234.876262][T14263] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.879437][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.882657][T14263] bridge_slave_1: entered allmulticast mode [ 234.888420][T14263] bridge_slave_1: entered promiscuous mode [ 234.916675][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.923273][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.950919][T14263] team0: Port device team_slave_0 added [ 234.956981][T14263] team0: Port device team_slave_1 added [ 234.981990][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.984412][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.992502][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.997179][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.999353][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.007568][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.032736][T14263] hsr_slave_0: entered promiscuous mode [ 235.035086][T14263] hsr_slave_1: entered promiscuous mode [ 235.037151][T14263] debugfs: 'hsr0' already exists in 'hsr' [ 235.038932][T14263] Cannot create hsr debugfs directory [ 235.118839][ T40] audit: type=1400 audit(1781316143.914:1381): avc: denied { write } for pid=14338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.172095][ T40] audit: type=1400 audit(1781316143.964:1382): avc: denied { write } for pid=14341 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.302392][T14263] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 235.472164][T14349] kvm: kvm [14348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 235.478211][T14349] kvm: kvm [14348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 235.550706][T14360] __nla_validate_parse: 3 callbacks suppressed [ 235.550769][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2638'. [ 235.592592][T14360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14360 comm=syz.4.2638 [ 235.888225][T14263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.902028][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.905913][T14263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.912259][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.923443][T14263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.930926][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.934671][T14263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.948508][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.077502][T14263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.101559][T14263] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.112445][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.114818][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.139178][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.141377][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.239071][ T5755] Bluetooth: hci3: command tx timeout [ 236.452764][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.496718][T14263] veth0_vlan: entered promiscuous mode [ 236.505118][T14263] veth1_vlan: entered promiscuous mode [ 236.527213][T14263] veth0_macvtap: entered promiscuous mode [ 236.535328][T14263] veth1_macvtap: entered promiscuous mode [ 236.546724][T14263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.565743][T14263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.626770][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.638849][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.660194][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.690994][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.736606][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.742422][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.784600][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.787800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.855791][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 236.861677][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 236.864556][T14418] netlink: 'syz.4.2652': attribute type 12 has an invalid length. [ 236.947019][T14424] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 236.996293][T14430] FAULT_INJECTION: forcing a failure. [ 236.996293][T14430] name failslab, interval 1, probability 0, space 0, times 0 [ 237.001750][T14430] CPU: 0 UID: 0 PID: 14430 Comm: syz.2.2656 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.001781][T14430] Tainted: [L]=SOFTLOCKUP [ 237.001788][T14430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.001799][T14430] Call Trace: [ 237.001806][T14430] [ 237.001814][T14430] dump_stack_lvl+0x100/0x190 [ 237.001841][T14430] should_fail_ex.cold+0x5/0xa [ 237.001867][T14430] ? tomoyo_realpath_from_path+0xb6/0x690 [ 237.001896][T14430] should_failslab+0xc2/0x120 [ 237.001917][T14430] __kmalloc_noprof+0xe0/0x850 [ 237.001943][T14430] ? kfree+0x1dd/0x6c0 [ 237.001971][T14430] tomoyo_realpath_from_path+0xb6/0x690 [ 237.002005][T14430] tomoyo_path_number_perm+0x23c/0x580 [ 237.002029][T14430] ? tomoyo_path_number_perm+0x22e/0x580 [ 237.002056][T14430] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.002105][T14430] ? find_held_lock+0x2b/0x80 [ 237.002122][T14430] ? __fget_files+0x215/0x3d0 [ 237.002144][T14430] ? hook_file_ioctl_common+0x149/0x410 [ 237.002163][T14430] ? __fget_files+0x215/0x3d0 [ 237.002190][T14430] ? __fget_files+0x21f/0x3d0 [ 237.002234][T14430] security_file_ioctl+0xd3/0x230 [ 237.002263][T14430] __x64_sys_ioctl+0xb7/0x210 [ 237.002285][T14430] do_syscall_64+0x115/0x870 [ 237.002309][T14430] ? clear_bhb_loop+0x40/0x90 [ 237.002332][T14430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.002351][T14430] RIP: 0033:0x7f2a9199ce59 [ 237.002367][T14430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.002384][T14430] RSP: 002b:00007f2a92928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.002402][T14430] RAX: ffffffffffffffda RBX: 00007f2a91c15fa0 RCX: 00007f2a9199ce59 [ 237.002420][T14430] RDX: 0000000000000000 RSI: 0000000000005b04 RDI: 0000000000000003 [ 237.002431][T14430] RBP: 00007f2a92928090 R08: 0000000000000000 R09: 0000000000000000 [ 237.002442][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.002452][T14430] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 237.002478][T14430] [ 237.005962][T14428] overlayfs: failed to clone upperpath [ 237.007199][T14430] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.099403][T14430] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 237.227271][T14435] kvm: kvm [14434]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 237.232226][T14435] kvm: kvm [14434]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 237.468807][T14455] openvswitch: netlink: EtherType 50a is less than min 600 [ 237.471803][T14456] openvswitch: netlink: EtherType 50a is less than min 600 [ 237.480237][T14460] FAULT_INJECTION: forcing a failure. [ 237.480237][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 237.484836][T14460] CPU: 2 UID: 0 PID: 14460 Comm: syz.2.2668 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.484864][T14460] Tainted: [L]=SOFTLOCKUP [ 237.484871][T14460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.484882][T14460] Call Trace: [ 237.484889][T14460] [ 237.484897][T14460] dump_stack_lvl+0x100/0x190 [ 237.484923][T14460] should_fail_ex.cold+0x5/0xa [ 237.484949][T14460] ? tomoyo_encode2+0xfb/0x3c0 [ 237.484977][T14460] should_failslab+0xc2/0x120 [ 237.484998][T14460] __kmalloc_noprof+0xe0/0x850 [ 237.485024][T14460] ? d_absolute_path+0x136/0x1b0 [ 237.485055][T14460] tomoyo_encode2+0xfb/0x3c0 [ 237.485085][T14460] tomoyo_encode+0x29/0x50 [ 237.485111][T14460] tomoyo_realpath_from_path+0x18c/0x690 [ 237.485145][T14460] tomoyo_path_number_perm+0x23c/0x580 [ 237.485169][T14460] ? tomoyo_path_number_perm+0x22e/0x580 [ 237.485195][T14460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.485246][T14460] ? find_held_lock+0x2b/0x80 [ 237.485263][T14460] ? __fget_files+0x215/0x3d0 [ 237.485283][T14460] ? hook_file_ioctl_common+0x149/0x410 [ 237.485302][T14460] ? __fget_files+0x215/0x3d0 [ 237.485330][T14460] ? __fget_files+0x21f/0x3d0 [ 237.485357][T14460] security_file_ioctl+0xd3/0x230 [ 237.485386][T14460] __x64_sys_ioctl+0xb7/0x210 [ 237.485407][T14460] do_syscall_64+0x115/0x870 [ 237.485431][T14460] ? clear_bhb_loop+0x40/0x90 [ 237.485454][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.485473][T14460] RIP: 0033:0x7f2a9199ce59 [ 237.485490][T14460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.485507][T14460] RSP: 002b:00007f2a92928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.485525][T14460] RAX: ffffffffffffffda RBX: 00007f2a91c15fa0 RCX: 00007f2a9199ce59 [ 237.485537][T14460] RDX: 0000000000000000 RSI: 0000000000005b04 RDI: 0000000000000003 [ 237.485548][T14460] RBP: 00007f2a92928090 R08: 0000000000000000 R09: 0000000000000000 [ 237.485558][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.485569][T14460] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 237.485594][T14460] [ 237.485613][T14460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.572608][T14460] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 237.660166][T14474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 237.662892][T14474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.668456][T14474] vhci_hcd vhci_hcd.0: Device attached [ 237.695129][T14474] qnx4: no qnx4 filesystem (no root dir). [ 237.705998][T14475] vhci_hcd: connection closed [ 237.708439][ T1172] vhci_hcd vhci_hcd.2: stop threads [ 237.712756][ T1172] vhci_hcd vhci_hcd.2: release socket [ 237.715095][ T1172] vhci_hcd vhci_hcd.2: disconnect device [ 237.766679][ T5821] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 237.916228][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 237.920520][ T5821] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.925099][ T5821] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.929421][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 237.932254][ T5821] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.936151][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.941340][ T5821] usb 6-1: config 0 descriptor?? [ 238.150399][ T5821] hid_parser_main: 22 callbacks suppressed [ 238.150414][ T5821] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 238.154491][ T5821] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 238.156813][ T5821] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 238.159411][ T5821] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 238.161646][ T5821] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 238.164416][ T5821] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 238.312612][T14481] kvm: kvm [14480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 238.316243][T14481] kvm: kvm [14480]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 238.328216][ T5752] Bluetooth: hci3: command tx timeout [ 238.365283][ T854] usb 6-1: USB disconnect, device number 23 [ 238.465523][T14489] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 238.580965][T14500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2683'. [ 238.589650][T14500] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2683'. [ 238.595313][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 238.641425][T14508] FAULT_INJECTION: forcing a failure. [ 238.641425][T14508] name failslab, interval 1, probability 0, space 0, times 0 [ 238.649917][T14508] CPU: 0 UID: 0 PID: 14508 Comm: syz.0.2687 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.649938][T14508] Tainted: [L]=SOFTLOCKUP [ 238.649942][T14508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.649950][T14508] Call Trace: [ 238.649954][T14508] [ 238.649959][T14508] dump_stack_lvl+0x100/0x190 [ 238.649977][T14508] should_fail_ex.cold+0x5/0xa [ 238.649994][T14508] should_failslab+0xc2/0x120 [ 238.650008][T14508] __kmalloc_cache_noprof+0x7a/0x6f0 [ 238.650025][T14508] ? usbtmc_ioctl_abort_bulk_in_tag+0xd1/0x780 [ 238.650046][T14508] usbtmc_ioctl_abort_bulk_in_tag+0xd1/0x780 [ 238.650066][T14508] ? __pfx_usbtmc_ioctl_abort_bulk_in_tag+0x10/0x10 [ 238.650087][T14508] usbtmc_ioctl+0x1747/0x2930 [ 238.650104][T14508] ? do_vfs_ioctl+0x226/0x13e0 [ 238.650118][T14508] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.650130][T14508] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 238.650146][T14508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 238.650170][T14508] ? __fget_files+0x215/0x3d0 [ 238.650185][T14508] ? hook_file_ioctl_common+0x149/0x410 [ 238.650202][T14508] ? selinux_file_ioctl+0x13b/0x290 [ 238.650219][T14508] ? selinux_file_ioctl+0xb6/0x290 [ 238.650237][T14508] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 238.650255][T14508] __x64_sys_ioctl+0x18e/0x210 [ 238.650269][T14508] do_syscall_64+0x115/0x870 [ 238.650284][T14508] ? clear_bhb_loop+0x40/0x90 [ 238.650299][T14508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.650311][T14508] RIP: 0033:0x7f69dcf9ce59 [ 238.650322][T14508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.650335][T14508] RSP: 002b:00007f69ddf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.650347][T14508] RAX: ffffffffffffffda RBX: 00007f69dd215fa0 RCX: 00007f69dcf9ce59 [ 238.650355][T14508] RDX: 0000000000000000 RSI: 0000000000005b04 RDI: 0000000000000003 [ 238.650362][T14508] RBP: 00007f69ddf35090 R08: 0000000000000000 R09: 0000000000000000 [ 238.650369][T14508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.650376][T14508] R13: 00007f69dd216038 R14: 00007f69dd215fa0 R15: 00007fff6f900568 [ 238.650391][T14508] [ 238.834298][T14526] netlink: 'syz.4.2694': attribute type 11 has an invalid length. [ 238.843348][T14526] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2694'. [ 238.853910][T14528] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 238.855211][T14526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.874738][T14526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.878983][T14526] 8021q: adding VLAN 0 to HW filter on device eth0 [ 238.883006][T14526] 8021q: adding VLAN 0 to HW filter on device eth1 [ 238.888561][T14526] 8021q: adding VLAN 0 to HW filter on device eth2 [ 238.896425][T14530] FAULT_INJECTION: forcing a failure. [ 238.896425][T14530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.899565][T14526] 8021q: adding VLAN 0 to HW filter on device eth3 [ 238.902023][T14530] CPU: 1 UID: 0 PID: 14530 Comm: syz.2.2696 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.902051][T14530] Tainted: [L]=SOFTLOCKUP [ 238.902057][T14530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.902068][T14530] Call Trace: [ 238.902089][T14530] [ 238.902098][T14530] dump_stack_lvl+0x100/0x190 [ 238.902125][T14530] should_fail_ex.cold+0x5/0xa [ 238.902150][T14530] _copy_from_iter+0x1f4/0x1690 [ 238.902174][T14530] ? __asan_memset+0x23/0x50 [ 238.902201][T14530] ? __pfx__copy_from_iter+0x10/0x10 [ 238.902223][T14530] ? __pfx___alloc_skb+0x10/0x10 [ 238.902259][T14530] netlink_sendmsg+0x808/0xda0 [ 238.902286][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.902316][T14530] sock_write_iter+0x524/0x5a0 [ 238.902336][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.902358][T14530] ? __pfx_sock_write_iter+0x10/0x10 [ 238.902387][T14530] ? bpf_lsm_file_permission+0x9/0x10 [ 238.902418][T14530] ? security_file_permission+0x76/0x210 [ 238.902447][T14530] ? rw_verify_area+0xce/0x6d0 [ 238.902466][T14530] vfs_write+0x6ac/0x1070 [ 238.902486][T14530] ? __pfx_sock_write_iter+0x10/0x10 [ 238.902509][T14530] ? __pfx_vfs_write+0x10/0x10 [ 238.902526][T14530] ? find_held_lock+0x2b/0x80 [ 238.902558][T14530] ksys_write+0x1f8/0x250 [ 238.902577][T14530] ? __pfx_ksys_write+0x10/0x10 [ 238.902598][T14530] ? rcu_is_watching+0x12/0xc0 [ 238.902626][T14530] do_syscall_64+0x115/0x870 [ 238.902649][T14530] ? clear_bhb_loop+0x40/0x90 [ 238.902670][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.902688][T14530] RIP: 0033:0x7f2a9199ce59 [ 238.902705][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.902720][T14530] RSP: 002b:00007f2a92928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.902737][T14530] RAX: ffffffffffffffda RBX: 00007f2a91c15fa0 RCX: 00007f2a9199ce59 [ 238.902749][T14530] RDX: 0000000000000024 RSI: 00002000000001c0 RDI: 0000000000000003 [ 238.902759][T14530] RBP: 00007f2a92928090 R08: 0000000000000000 R09: 0000000000000000 [ 238.902770][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.902780][T14530] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 238.902804][T14530] [ 238.941217][T14537] FAULT_INJECTION: forcing a failure. [ 238.941217][T14537] name failslab, interval 1, probability 0, space 0, times 0 [ 238.945774][T14526] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 238.946166][T14537] CPU: 1 UID: 0 PID: 14537 Comm: syz.2.2698 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.946194][T14537] Tainted: [L]=SOFTLOCKUP [ 238.946200][T14537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.946211][T14537] Call Trace: [ 238.946218][T14537] [ 238.946225][T14537] dump_stack_lvl+0x100/0x190 [ 238.946251][T14537] should_fail_ex.cold+0x5/0xa [ 238.946276][T14537] should_failslab+0xc2/0x120 [ 238.946297][T14537] __kmalloc_cache_noprof+0x7a/0x6f0 [ 238.946322][T14537] ? usb_control_msg+0xbc/0x4b0 [ 238.946352][T14537] usb_control_msg+0xbc/0x4b0 [ 238.946378][T14537] ? __pfx_usb_control_msg+0x10/0x10 [ 238.946415][T14537] usbtmc_ioctl_abort_bulk_in_tag+0x184/0x780 [ 238.946449][T14537] ? __pfx_usbtmc_ioctl_abort_bulk_in_tag+0x10/0x10 [ 238.946483][T14537] usbtmc_ioctl+0x1747/0x2930 [ 238.946509][T14537] ? do_vfs_ioctl+0x226/0x13e0 [ 238.946530][T14537] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.946550][T14537] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 238.946574][T14537] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 238.946612][T14537] ? __fget_files+0x215/0x3d0 [ 238.946633][T14537] ? hook_file_ioctl_common+0x149/0x410 [ 238.946660][T14537] ? selinux_file_ioctl+0x13b/0x290 [ 238.946686][T14537] ? selinux_file_ioctl+0xb6/0x290 [ 238.946714][T14537] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 238.946741][T14537] __x64_sys_ioctl+0x18e/0x210 [ 238.946763][T14537] do_syscall_64+0x115/0x870 [ 238.946786][T14537] ? clear_bhb_loop+0x40/0x90 [ 238.946810][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.946828][T14537] RIP: 0033:0x7f2a9199ce59 [ 238.946844][T14537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.946861][T14537] RSP: 002b:00007f2a92928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.946880][T14537] RAX: ffffffffffffffda RBX: 00007f2a91c15fa0 RCX: 00007f2a9199ce59 [ 238.946891][T14537] RDX: 0000000000000000 RSI: 0000000000005b04 RDI: 0000000000000003 [ 238.946902][T14537] RBP: 00007f2a92928090 R08: 0000000000000000 R09: 0000000000000000 [ 238.946912][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.946923][T14537] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 238.946949][T14537] [ 238.946961][T14537] usbtmc 9-1:16.0: usb_control_msg returned -12 [ 239.102555][T14532] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 239.117621][ T7122] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.125836][ T7122] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.157789][T14551] FAULT_INJECTION: forcing a failure. [ 239.157789][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.174058][T14551] CPU: 2 UID: 0 PID: 14551 Comm: syz.2.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.174079][T14551] Tainted: [L]=SOFTLOCKUP [ 239.174083][T14551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.174090][T14551] Call Trace: [ 239.174094][T14551] [ 239.174099][T14551] dump_stack_lvl+0x100/0x190 [ 239.174116][T14551] should_fail_ex.cold+0x5/0xa [ 239.174132][T14551] _copy_from_user+0x2e/0xd0 [ 239.174147][T14551] copy_msghdr_from_user+0x9f/0x4f0 [ 239.174164][T14551] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 239.174184][T14551] ___sys_sendmsg+0x106/0x1e0 [ 239.174198][T14551] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.174228][T14551] __sys_sendmsg+0x170/0x220 [ 239.174246][T14551] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.174269][T14551] ? rcu_is_watching+0x12/0xc0 [ 239.174289][T14551] do_syscall_64+0x115/0x870 [ 239.174304][T14551] ? clear_bhb_loop+0x40/0x90 [ 239.174318][T14551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.174330][T14551] RIP: 0033:0x7f2a9199ce59 [ 239.174340][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.174351][T14551] RSP: 002b:00007f2a92928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.174364][T14551] RAX: ffffffffffffffda RBX: 00007f2a91c15fa0 RCX: 00007f2a9199ce59 [ 239.174371][T14551] RDX: 0000000024044080 RSI: 0000200000000240 RDI: 0000000000000003 [ 239.174378][T14551] RBP: 00007f2a92928090 R08: 0000000000000000 R09: 0000000000000000 [ 239.174385][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.174392][T14551] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 239.174406][T14551] [ 239.234016][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2710'. [ 239.236907][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 239.236919][ T40] audit: type=1400 audit(1781316148.016:1385): avc: denied { write } for pid=14561 comm="syz.4.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 239.268567][T14567] FAULT_INJECTION: forcing a failure. [ 239.268567][T14567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.274007][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.2.2712 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.274026][T14567] Tainted: [L]=SOFTLOCKUP [ 239.274030][T14567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.274037][T14567] Call Trace: [ 239.274041][T14567] [ 239.274046][T14567] dump_stack_lvl+0x100/0x190 [ 239.274063][T14567] should_fail_ex.cold+0x5/0xa [ 239.274080][T14567] _copy_from_iter+0x1f4/0x1690 [ 239.274102][T14567] ? __asan_memset+0x23/0x50 [ 239.274121][T14567] ? __pfx__copy_from_iter+0x10/0x10 [ 239.274135][T14567] ? __pfx___alloc_skb+0x10/0x10 [ 239.274158][T14567] netlink_sendmsg+0x808/0xda0 [ 239.274176][T14567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.274195][T14567] sock_write_iter+0x524/0x5a0 [ 239.274209][T14567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.274223][T14567] ? __pfx_sock_write_iter+0x10/0x10 [ 239.274242][T14567] ? bpf_lsm_file_permission+0x9/0x10 [ 239.274260][T14567] ? security_file_permission+0x76/0x210 [ 239.274279][T14567] ? rw_verify_area+0xce/0x6d0 [ 239.274291][T14567] vfs_write+0x6ac/0x1070 [ 239.274304][T14567] ? __pfx_sock_write_iter+0x10/0x10 [ 239.274319][T14567] ? __pfx_vfs_write+0x10/0x10 [ 239.274330][T14567] ? find_held_lock+0x2b/0x80 [ 239.274351][T14567] ksys_write+0x1f8/0x250 [ 239.274363][T14567] ? __pfx_ksys_write+0x10/0x10 [ 239.274377][T14567] ? rcu_is_watching+0x12/0xc0 [ 239.274396][T14567] do_syscall_64+0x115/0x870 [ 239.274411][T14567] ? clear_bhb_loop+0x40/0x90 [ 239.274425][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.274437][T14567] RIP: 0033:0x7f2a9199ce59 [ 239.274448][T14567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.274459][T14567] RSP: 002b:00007f2a92928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.274471][T14567] RAX: ffffffffffffffda RBX: 00007f2a91c15fa0 RCX: 00007f2a9199ce59 [ 239.274478][T14567] RDX: 0000000000000024 RSI: 00002000000001c0 RDI: 0000000000000003 [ 239.274485][T14567] RBP: 00007f2a92928090 R08: 0000000000000000 R09: 0000000000000000 [ 239.274491][T14567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.274498][T14567] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 239.274514][T14567] [ 239.430751][ T7122] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.438101][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.565235][T14576] tipc: Started in network mode [ 239.570081][T14576] tipc: Node identity 0200000000000000ff0f, cluster identity 4711 [ 239.589960][ T40] audit: type=1400 audit(1781316148.365:1386): avc: denied { write } for pid=14585 comm="syz.1.2716" name="/" dev="9p" ino=73687021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.601141][ T40] audit: type=1400 audit(1781316148.375:1387): avc: denied { lock } for pid=14585 comm="syz.1.2716" path="/101/file0/cpuacct.usage_sys" dev="9p" ino=73687235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.679012][T14592] FAULT_INJECTION: forcing a failure. [ 239.679012][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 239.684447][T14592] CPU: 2 UID: 0 PID: 14592 Comm: syz.0.2717 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.684477][T14592] Tainted: [L]=SOFTLOCKUP [ 239.684483][T14592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.684494][T14592] Call Trace: [ 239.684501][T14592] [ 239.684508][T14592] dump_stack_lvl+0x100/0x190 [ 239.684534][T14592] should_fail_ex.cold+0x5/0xa [ 239.684564][T14592] ? usb_alloc_urb+0x66/0xa0 [ 239.684585][T14592] should_failslab+0xc2/0x120 [ 239.684605][T14592] __kmalloc_noprof+0xe0/0x850 [ 239.684638][T14592] usb_alloc_urb+0x66/0xa0 [ 239.684660][T14592] usb_control_msg+0x1d3/0x4b0 [ 239.684686][T14592] ? __pfx_usb_control_msg+0x10/0x10 [ 239.684717][T14592] usbtmc_ioctl_abort_bulk_in_tag+0x184/0x780 [ 239.684749][T14592] ? __pfx_usbtmc_ioctl_abort_bulk_in_tag+0x10/0x10 [ 239.684782][T14592] usbtmc_ioctl+0x1747/0x2930 [ 239.684808][T14592] ? do_vfs_ioctl+0x226/0x13e0 [ 239.684828][T14592] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 239.684847][T14592] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 239.684870][T14592] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 239.684906][T14592] ? __fget_files+0x215/0x3d0 [ 239.684925][T14592] ? hook_file_ioctl_common+0x149/0x410 [ 239.684951][T14592] ? selinux_file_ioctl+0x13b/0x290 [ 239.684976][T14592] ? selinux_file_ioctl+0xb6/0x290 [ 239.685003][T14592] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 239.685030][T14592] __x64_sys_ioctl+0x18e/0x210 [ 239.685050][T14592] do_syscall_64+0x115/0x870 [ 239.685073][T14592] ? clear_bhb_loop+0x40/0x90 [ 239.685093][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.685111][T14592] RIP: 0033:0x7f69dcf9ce59 [ 239.685128][T14592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.685146][T14592] RSP: 002b:00007f69ddf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.685163][T14592] RAX: ffffffffffffffda RBX: 00007f69dd215fa0 RCX: 00007f69dcf9ce59 [ 239.685175][T14592] RDX: 0000000000000000 RSI: 0000000000005b04 RDI: 0000000000000003 [ 239.685186][T14592] RBP: 00007f69ddf35090 R08: 0000000000000000 R09: 0000000000000000 [ 239.685196][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.685206][T14592] R13: 00007f69dd216038 R14: 00007f69dd215fa0 R15: 00007fff6f900568 [ 239.685231][T14592] [ 239.685252][T14592] usbtmc 9-1:16.0: usb_control_msg returned -12 [ 239.785851][ T40] audit: type=1400 audit(1781316148.564:1388): avc: denied { accept } for pid=14597 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.873963][T14611] FAULT_INJECTION: forcing a failure. [ 239.873963][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 239.879343][T14611] CPU: 2 UID: 0 PID: 14611 Comm: syz.0.2727 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.879373][T14611] Tainted: [L]=SOFTLOCKUP [ 239.879379][T14611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.879389][T14611] Call Trace: [ 239.879395][T14611] [ 239.879402][T14611] dump_stack_lvl+0x100/0x190 [ 239.879428][T14611] should_fail_ex.cold+0x5/0xa [ 239.879481][T14611] should_failslab+0xc2/0x120 [ 239.879501][T14611] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 239.879525][T14611] ? skb_clone+0x190/0x400 [ 239.879566][T14611] skb_clone+0x190/0x400 [ 239.879593][T14611] netlink_deliver_tap+0xaed/0xcc0 [ 239.879619][T14611] netlink_unicast+0x62b/0x850 [ 239.879644][T14611] ? __pfx_netlink_unicast+0x10/0x10 [ 239.879672][T14611] netlink_sendmsg+0x8b0/0xda0 [ 239.879698][T14611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.879728][T14611] sock_write_iter+0x524/0x5a0 [ 239.879746][T14611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.879765][T14611] ? __pfx_sock_write_iter+0x10/0x10 [ 239.879791][T14611] ? bpf_lsm_file_permission+0x9/0x10 [ 239.879816][T14611] ? security_file_permission+0x76/0x210 [ 239.879844][T14611] ? rw_verify_area+0xce/0x6d0 [ 239.879864][T14611] vfs_write+0x6ac/0x1070 [ 239.879884][T14611] ? __pfx_sock_write_iter+0x10/0x10 [ 239.879905][T14611] ? __pfx_vfs_write+0x10/0x10 [ 239.879922][T14611] ? find_held_lock+0x2b/0x80 [ 239.879955][T14611] ksys_write+0x1f8/0x250 [ 239.879975][T14611] ? __pfx_ksys_write+0x10/0x10 [ 239.879997][T14611] ? rcu_is_watching+0x12/0xc0 [ 239.880026][T14611] do_syscall_64+0x115/0x870 [ 239.880048][T14611] ? clear_bhb_loop+0x40/0x90 [ 239.880070][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.880088][T14611] RIP: 0033:0x7f69dcf9ce59 [ 239.880103][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.880120][T14611] RSP: 002b:00007f69ddf35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.880137][T14611] RAX: ffffffffffffffda RBX: 00007f69dd215fa0 RCX: 00007f69dcf9ce59 [ 239.880148][T14611] RDX: 0000000000000024 RSI: 00002000000001c0 RDI: 0000000000000003 [ 239.880159][T14611] RBP: 00007f69ddf35090 R08: 0000000000000000 R09: 0000000000000000 [ 239.880170][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.880180][T14611] R13: 00007f69dd216038 R14: 00007f69dd215fa0 R15: 00007fff6f900568 [ 239.880205][T14611] [ 240.082362][T14627] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 240.116676][ T40] audit: type=1400 audit(1781316148.893:1389): avc: denied { connect } for pid=14628 comm="syz.4.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.124585][ T40] audit: type=1400 audit(1781316148.893:1390): avc: denied { shutdown } for pid=14628 comm="syz.4.2733" laddr=172.20.20.170 lport=37683 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.239552][T14645] FAULT_INJECTION: forcing a failure. [ 240.239552][T14645] name failslab, interval 1, probability 0, space 0, times 0 [ 240.243696][T14645] CPU: 2 UID: 0 PID: 14645 Comm: syz.1.2740 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.243717][T14645] Tainted: [L]=SOFTLOCKUP [ 240.243722][T14645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.243729][T14645] Call Trace: [ 240.243734][T14645] [ 240.243739][T14645] dump_stack_lvl+0x100/0x190 [ 240.243757][T14645] should_fail_ex.cold+0x5/0xa [ 240.243774][T14645] should_failslab+0xc2/0x120 [ 240.243787][T14645] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 240.243806][T14645] ? __alloc_skb+0x140/0x710 [ 240.243822][T14645] ? __alloc_skb+0x5b7/0x710 [ 240.243840][T14645] __alloc_skb+0x140/0x710 [ 240.243856][T14645] ? __alloc_skb+0x5b7/0x710 [ 240.243873][T14645] ? __pfx___alloc_skb+0x10/0x10 [ 240.243894][T14645] netlink_ack+0x117/0xb80 [ 240.243913][T14645] netlink_rcv_skb+0x333/0x420 [ 240.243927][T14645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.243940][T14645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.243959][T14645] ? netlink_deliver_tap+0x1ae/0xcc0 [ 240.243975][T14645] netlink_unicast+0x585/0x850 [ 240.243991][T14645] ? __pfx_netlink_unicast+0x10/0x10 [ 240.244009][T14645] netlink_sendmsg+0x8b0/0xda0 [ 240.244025][T14645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.244044][T14645] sock_write_iter+0x524/0x5a0 [ 240.244057][T14645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.244071][T14645] ? __pfx_sock_write_iter+0x10/0x10 [ 240.244089][T14645] ? bpf_lsm_file_permission+0x9/0x10 [ 240.244106][T14645] ? security_file_permission+0x76/0x210 [ 240.244125][T14645] ? rw_verify_area+0xce/0x6d0 [ 240.244137][T14645] vfs_write+0x6ac/0x1070 [ 240.244150][T14645] ? __pfx_sock_write_iter+0x10/0x10 [ 240.244164][T14645] ? __pfx_vfs_write+0x10/0x10 [ 240.244175][T14645] ? find_held_lock+0x2b/0x80 [ 240.244195][T14645] ksys_write+0x1f8/0x250 [ 240.244208][T14645] ? __pfx_ksys_write+0x10/0x10 [ 240.244221][T14645] ? rcu_is_watching+0x12/0xc0 [ 240.244240][T14645] do_syscall_64+0x115/0x870 [ 240.244255][T14645] ? clear_bhb_loop+0x40/0x90 [ 240.244270][T14645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.244281][T14645] RIP: 0033:0x7f88ed59ce59 [ 240.244293][T14645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.244304][T14645] RSP: 002b:00007f88ee387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.244316][T14645] RAX: ffffffffffffffda RBX: 00007f88ed815fa0 RCX: 00007f88ed59ce59 [ 240.244323][T14645] RDX: 0000000000000024 RSI: 00002000000001c0 RDI: 0000000000000003 [ 240.244330][T14645] RBP: 00007f88ee387090 R08: 0000000000000000 R09: 0000000000000000 [ 240.244337][T14645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.244343][T14645] R13: 00007f88ed816038 R14: 00007f88ed815fa0 R15: 00007ffce2665c58 [ 240.244384][T14645] [ 240.420733][ T5752] Bluetooth: hci3: command 0x040f tx timeout [ 240.455979][T14662] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 240.525792][T14677] openvswitch: netlink: Invalid VLAN frame [ 240.576905][ T40] audit: type=1326 audit(1781316149.341:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14678 comm="syz.1.2752" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88ed59ce59 code=0x0 [ 241.101864][ T40] audit: type=1400 audit(1781316149.879:1392): avc: denied { getopt } for pid=14707 comm="syz.0.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.112207][ T40] audit: type=1326 audit(1781316149.889:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.0.2765" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69dcf9ce59 code=0x0 [ 241.149488][ T844] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 241.280083][ T844] usb 6-1: device descriptor read/64, error -71 [ 241.314375][T14726] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2770'. [ 241.521315][ T844] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 241.591762][ T40] audit: type=1400 audit(1781316150.367:1394): avc: denied { lock } for pid=14736 comm="syz.4.2775" path="socket:[73085]" dev="sockfs" ino=73085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 241.652008][ T844] usb 6-1: device descriptor read/64, error -71 [ 241.762429][ T844] usb usb6-port1: attempt power cycle [ 241.771294][ T5821] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 241.789997][ T5821] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.819523][T14759] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 241.907822][T14757] fido_id[14757]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.043891][T14780] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 242.075778][T14782] all: renamed from bridge_slave_1 (while UP) [ 242.103542][ T844] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 242.129377][ T844] usb 6-1: device descriptor read/8, error -71 [ 242.366092][ T844] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 242.385777][ T844] usb 6-1: device descriptor read/8, error -71 [ 242.397844][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 242.403899][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 242.445484][T14808] netlink: 'syz.0.2804': attribute type 8 has an invalid length. [ 242.448935][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2804'. [ 242.458418][T14808] bond0: entered promiscuous mode [ 242.460573][T14808] bond_slave_0: entered promiscuous mode [ 242.463040][T14808] bond_slave_1: entered promiscuous mode [ 242.467262][T14808] gretap0: entered promiscuous mode [ 242.470814][T14808] hsr1: entered promiscuous mode [ 242.495096][ T844] usb usb6-port1: unable to enumerate USB device [ 242.511653][T14812] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 242.515779][ T5755] Bluetooth: hci3: command 0x040f tx timeout [ 242.636364][T14822] binder: 14821:14822 ioctl c00c620f 200000000100 returned -22 [ 242.639191][T14822] dlm: non-version read from control device 0 [ 242.686218][T14824] syzkaller0: entered promiscuous mode [ 242.688014][T14824] syzkaller0: entered allmulticast mode [ 243.121044][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 243.133217][ T5108] usb 9-1: USB disconnect, device number 4 [ 243.190116][T14856] syz.0.2824: attempt to access beyond end of device [ 243.190116][T14856] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 243.198008][T14856] gfs2: error -5 reading superblock [ 243.240460][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.251855][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.257105][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.260474][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.265411][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.337668][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 243.464187][T14878] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 243.512580][T12970] [U] [ 243.816497][ T7119] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 244.014238][ T7119] bond1 (unregistering): (slave gretap1): Releasing active interface [ 244.056865][ T7119] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 244.136038][T14893] netlink: 'syz.1.2837': attribute type 178 has an invalid length. [ 244.265470][ T7119] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 244.268005][ T7119] bridge3 (unregistering): left promiscuous mode [ 244.359944][ T7119] bond0 (unregistering): Released all slaves [ 244.364969][ T7119] bond1 (unregistering): Released all slaves [ 244.379464][ T7119] bond2 (unregistering): (slave bond3): Releasing backup interface [ 244.415421][ T7119] bond2 (unregistering): Released all slaves [ 244.427039][T14906] ================================================================== [ 244.429642][T14906] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 244.431979][T14906] Write of size 4 at addr ffff88802d934d08 by task syz.2.2841/14906 [ 244.435083][T14906] [ 244.436427][ T7119] bond3 (unregistering): Released all slaves [ 244.436609][T14906] CPU: 1 UID: 0 PID: 14906 Comm: syz.2.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.436629][T14906] Tainted: [L]=SOFTLOCKUP [ 244.436634][T14906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.436641][T14906] Call Trace: [ 244.436647][T14906] [ 244.436653][T14906] dump_stack_lvl+0x100/0x190 [ 244.436669][T14906] print_report+0x13d/0x4b0 [ 244.436687][T14906] ? __virt_addr_valid+0x239/0x430 [ 244.436700][T14906] ? try_module_get+0x4c/0xd0 [ 244.436710][T14906] kasan_report+0xdf/0x1d0 [ 244.436725][T14906] ? try_module_get+0x4c/0xd0 [ 244.436737][T14906] kasan_check_range+0x10f/0x1e0 [ 244.436751][T14906] try_module_get+0x4c/0xd0 [ 244.436761][T14906] dvb_device_open+0x124/0x3b0 [ 244.436779][T14906] ? __pfx_dvb_device_open+0x10/0x10 [ 244.436797][T14906] chrdev_open+0x234/0x6a0 [ 244.436814][T14906] ? __pfx_chrdev_open+0x10/0x10 [ 244.436828][T14906] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 244.436848][T14906] do_dentry_open+0x6ab/0x14d0 [ 244.436860][T14906] ? __pfx_chrdev_open+0x10/0x10 [ 244.436875][T14906] vfs_open+0x82/0x3f0 [ 244.436891][T14906] path_openat+0x208c/0x31a0 [ 244.436907][T14906] ? __pfx_path_openat+0x10/0x10 [ 244.436923][T14906] do_file_open+0x20e/0x430 [ 244.436938][T14906] ? __pfx_do_file_open+0x10/0x10 [ 244.436956][T14906] ? alloc_fd+0x476/0x790 [ 244.436971][T14906] ? do_getname+0x191/0x390 [ 244.436987][T14906] do_sys_openat2+0x10d/0x1e0 [ 244.437003][T14906] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.437021][T14906] __x64_sys_openat+0x12d/0x210 [ 244.437037][T14906] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.437055][T14906] ? rcu_is_watching+0x12/0xc0 [ 244.437073][T14906] do_syscall_64+0x115/0x870 [ 244.437087][T14906] ? clear_bhb_loop+0x40/0x90 [ 244.437100][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.437112][T14906] RIP: 0033:0x7f2a9195d68e [ 244.437122][T14906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.437134][T14906] RSP: 002b:00007f2a92927b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.437146][T14906] RAX: ffffffffffffffda RBX: 00007f2a929286c0 RCX: 00007f2a9195d68e [ 244.437153][T14906] RDX: 0000000000000002 RSI: 00007f2a92927c00 RDI: ffffffffffffff9c [ 244.437160][T14906] RBP: 00007f2a92927c00 R08: 0000000000000000 R09: 0000000000000000 [ 244.437167][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 244.437174][T14906] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 244.437185][T14906] [ 244.437190][T14906] [ 244.518837][T14906] Allocated by task 1: [ 244.520120][T14906] kasan_save_stack+0x30/0x50 [ 244.521579][T14906] kasan_save_track+0x14/0x30 [ 244.523039][T14906] __kasan_kmalloc+0xaa/0xb0 [ 244.524476][T14906] bus_add_driver+0x92/0x5b0 [ 244.525934][T14906] driver_register+0x1e2/0x360 [ 244.527669][T14906] vidtv_bridge_init+0x38/0x70 [ 244.529210][T14906] do_one_initcall+0x121/0x750 [ 244.530693][T14906] kernel_init_freeable+0x6ea/0x7b0 [ 244.532300][T14906] kernel_init+0x1f/0x1e0 [ 244.533638][T14906] ret_from_fork+0x72b/0xd50 [ 244.535075][T14906] ret_from_fork_asm+0x1a/0x30 [ 244.538057][T14906] [ 244.538973][T14906] The buggy address belongs to the object at ffff88802d934c00 [ 244.538973][T14906] which belongs to the cache kmalloc-256 of size 256 [ 244.544267][T14906] The buggy address is located 56 bytes to the right of [ 244.544267][T14906] allocated 208-byte region [ffff88802d934c00, ffff88802d934cd0) [ 244.550185][T14906] [ 244.551204][T14906] The buggy address belongs to the physical page: [ 244.553805][T14906] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d934 [ 244.557379][T14906] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 244.560825][T14906] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 244.563917][T14906] page_type: f5(slab) [ 244.565586][T14906] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 244.569171][T14906] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 244.572699][T14906] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 244.576269][T14906] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 244.579802][T14906] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 244.583347][T14906] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 244.586890][T14906] page dumped because: kasan: bad access detected [ 244.589509][T14906] page_owner tracks the page as allocated [ 244.591861][T14906] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19364560720, free_ts 0 [ 244.599742][T14906] post_alloc_hook+0xfd/0x120 [ 244.601707][T14906] get_page_from_freelist+0x11a6/0x3410 [ 244.603993][T14906] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 244.606452][T14906] new_slab+0xa6/0x6c0 [ 244.608168][T14906] refill_objects+0x277/0x420 [ 244.610139][T14906] __pcs_replace_empty_main+0x375/0x650 [ 244.612441][T14906] __kmalloc_cache_noprof+0x493/0x6f0 [ 244.614652][T14906] bus_add_driver+0x92/0x5b0 [ 244.616608][T14906] driver_register+0x1e2/0x360 [ 244.618599][T14906] usb_register_driver+0x21c/0x3e0 [ 244.620710][T14906] do_one_initcall+0x121/0x750 [ 244.622700][T14906] kernel_init_freeable+0x6ea/0x7b0 [ 244.624852][T14906] kernel_init+0x1f/0x1e0 [ 244.626677][T14906] ret_from_fork+0x72b/0xd50 [ 244.628649][T14906] ret_from_fork_asm+0x1a/0x30 [ 244.630638][T14906] page_owner free stack trace missing [ 244.632859][T14906] [ 244.633875][T14906] Memory state around the buggy address: [ 244.636244][T14906] ffff88802d934c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 244.639557][T14906] ffff88802d934c80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 244.642829][T14906] >ffff88802d934d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.646139][T14906] ^ [ 244.647958][T14906] ffff88802d934d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.651264][T14906] ffff88802d934e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 244.654557][T14906] ================================================================== [ 244.659657][ T5755] Bluetooth: hci3: command 0x040f tx timeout [ 244.663192][T14906] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.665505][T14906] CPU: 0 UID: 0 PID: 14906 Comm: syz.2.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.669480][T14906] Tainted: [L]=SOFTLOCKUP [ 244.670859][T14906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.673962][T14906] Call Trace: [ 244.675012][T14906] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.675974][T14906] dump_stack_lvl+0x100/0x190 [ 244.677582][T14906] vpanic+0x552/0x970 [ 244.678855][T14906] ? __pfx_vpanic+0x10/0x10 [ 244.680403][T14906] ? mark_held_locks+0x40/0x70 [ 244.681892][T14906] ? try_module_get+0x4c/0xd0 [ 244.683347][T14906] panic+0xd1/0xe0 [ 244.684556][T14906] ? __pfx_panic+0x10/0x10 [ 244.685939][T14906] ? try_module_get+0x4c/0xd0 [ 244.687409][T14906] ? preempt_schedule_common+0x42/0xc0 [ 244.689106][T14906] check_panic_on_warn.cold+0x19/0x34 [ 244.690764][T14906] end_report.part.0+0x3a/0x90 [ 244.692257][T14906] kasan_report.cold+0xe/0x18 [ 244.693716][T14906] ? try_module_get+0x4c/0xd0 [ 244.695202][T14906] kasan_check_range+0x10f/0x1e0 [ 244.696765][T14906] try_module_get+0x4c/0xd0 [ 244.698176][T14906] dvb_device_open+0x124/0x3b0 [ 244.699669][T14906] ? __pfx_dvb_device_open+0x10/0x10 [ 244.701300][T14906] chrdev_open+0x234/0x6a0 [ 244.702693][T14906] ? __pfx_chrdev_open+0x10/0x10 [ 244.704401][T14906] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 244.706620][T14906] do_dentry_open+0x6ab/0x14d0 [ 244.708179][T14906] ? __pfx_chrdev_open+0x10/0x10 [ 244.709794][T14906] vfs_open+0x82/0x3f0 [ 244.711203][T14906] path_openat+0x208c/0x31a0 [ 244.712776][T14906] ? __pfx_path_openat+0x10/0x10 [ 244.714382][T14906] do_file_open+0x20e/0x430 [ 244.715812][T14906] ? __pfx_do_file_open+0x10/0x10 [ 244.717394][T14906] ? alloc_fd+0x476/0x790 [ 244.718734][T14906] ? do_getname+0x191/0x390 [ 244.720175][T14906] do_sys_openat2+0x10d/0x1e0 [ 244.721641][T14906] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.723254][T14906] __x64_sys_openat+0x12d/0x210 [ 244.724853][T14906] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.726513][T14906] ? rcu_is_watching+0x12/0xc0 [ 244.728041][T14906] do_syscall_64+0x115/0x870 [ 244.729500][T14906] ? clear_bhb_loop+0x40/0x90 [ 244.730973][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.732799][T14906] RIP: 0033:0x7f2a9195d68e [ 244.734181][T14906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.740054][T14906] RSP: 002b:00007f2a92927b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.742589][T14906] RAX: ffffffffffffffda RBX: 00007f2a929286c0 RCX: 00007f2a9195d68e [ 244.744995][T14906] RDX: 0000000000000002 RSI: 00007f2a92927c00 RDI: ffffffffffffff9c [ 244.747428][T14906] RBP: 00007f2a92927c00 R08: 0000000000000000 R09: 0000000000000000 [ 244.749882][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 244.752284][T14906] R13: 00007f2a91c16038 R14: 00007f2a91c15fa0 R15: 00007fffb1902b88 [ 244.754675][T14906] [ 244.756407][T14906] Kernel Offset: disabled [ 244.757743][T14906] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:58:08 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff8e9e5220 RCX=0000000000000000 RDX=1ffffffff1d3ca44 RSI=00000000000000c0 RDI=ffff88805c879694 RBP=ffff88805c878000 RSP=ffffc90003fd7c88 R8 =0000000000000001 R9 =00000000000000b2 R10=0000000000000200 R11=0000000000000000 R12=0000000000000000 R13=00000000000000c0 R14=ffff88805c878000 R15=00000000000000c0 RIP=ffffffff852d2947 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2f59e4d880 ffffffff 00c00000 GS =0000 ffff8880d6387000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a88000020 CR3=00000000261a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000400004 Opmask04=00000000ff7ffdff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005611516a4410 00005611516a4410 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005611516a4400 00005611516a4400 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005611516a43f0 00005611516a43f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4648051a041a4f49 4b5a594f474b4405 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d305b705d392d00 5d392d305b746f6f 625d392d305b6b6c 62630064696b6c62 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d105b505d190d00 5d190d105b544f4f 425d190d105b4b4c 42430044494b4c42 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 72006b006b636974 73796f6a2d00322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857e9715 RDI=ffffffff9b45cca0 RBP=ffffffff9b45cc60 RSP=ffffc9000d4072b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff857e96b0 RIP=ffffffff857e973f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f2a929286c0 ffffffff 00c00000 GS =0000 ffff8880d6487000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a91986480 CR3=000000005918a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb1903076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb1903076 00007fffb190307c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a91a33352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a91a33392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a91a334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a91a33384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a91bed5f8 00007f2a91bed5c8 00007f2a91bed600 00007f2a91bed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001eec03 RBX=ffff88801eaaca80 RCX=ffffffff8b89a225 RDX=0000000000000000 RSI=ffffffff8df0fdfe RDI=ffffffff8c1c4780 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c67b5 R10=ffff88806a633dab R11=0000000000000000 R12=0000000000000002 R13=ffffed1003d55950 R14=0000000000000002 R15=ffffffff90d71950 RIP=ffffffff8b89887f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6587000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a91c17dac CR3=0000000038a07000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2666146 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce2666146 00007ffce266614c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ed633352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ed633392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ed6334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ed633384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000000 RDX=bdda368ab1ccbfb8 RSI=4225c9754e334048 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900068b78a0 R8 =0000000000000006 R9 =0000000000000001 R10=bdda368ab1ccbfb8 R11=0000000000000000 R12=00000000ffffffea R13=dffffc0000000000 R14=4225c9754e334048 R15=00000000000001a0 RIP=ffffffff84ffea19 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f88ee3876c0 ffffffff 00c00000 GS =0000 ffff8880d6687000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88ed64f156 CR3=000000004efe7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000121 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e656d75677261 2064696c61766e49 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e656d75677261 2064696c61766e49 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100010015 0000000000000048 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000050 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000600010015 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000200000048 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200010015 0000000100020015 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001001400000025 fd80400a817d483a 6a2cba2400020014 0000004800000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000304600003046 ffffffffffffffff 0006001488c34e72 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 99a0248a00000000 000080fe00010014 00000025fd80400a 817d483a6a2cba24 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 0000304300003043 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600142b0ecf4f 86e49e5600000000 000080fe00010014 00000024fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61203c203e202064 690a3e613c206463 6163612020230a00 69206361203c3a20 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000