last executing test programs: 2.260934236s ago: executing program 0 (id=638): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xf5ffffff, @mcast1}, 0x80, 0x0}, 0x80) 2.260562463s ago: executing program 0 (id=639): r0 = socket$inet(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000040000000218000000000000", @ANYRES32, @ANYRESDEC], 0x48) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0800, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02a4ea0eea00000027bd7000fcdbdf2503000600ffa0000002004e2409e2ffff00000000000000000400040005000000000800e00000236900000000000000000300000000000000030007003220000002004e21640101010000000000000001"], 0x60}}, 0x20040010) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x10000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r6}) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @bcast]}) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000140)=0x1, 0x4) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) r9 = eventfd(0x0) close_range(r7, r9, 0x0) 1.423904637s ago: executing program 0 (id=658): chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}], 0x28}}], 0x1, 0x0) 1.361861908s ago: executing program 0 (id=660): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.213044193s ago: executing program 2 (id=665): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f000000000008002278535fbde7505206d466dbf1a097cd49c057dcfaf76590203311ef5dd1ce1baf8f2f4c619751a9d949a7fce3c25fcec4840cb352dea7555a5a79126b0bcdc692775e1d623d64b92e3afa2074faa5d3aa055c7123a047bb6e"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000002c0)=0x6e) (async) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000002c0)=0x6e) 1.212565927s ago: executing program 2 (id=667): r0 = socket$inet(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000040000000218000000000000", @ANYRES32, @ANYRESDEC], 0x48) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0800, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02a4ea0eea00000027bd7000fcdbdf2503000600ffa0000002004e2409e2ffff00000000000000000400040005000000000800e00000236900000000000000000300000000000000030007003220000002004e21640101010000000000000001"], 0x60}}, 0x20040010) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x10000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r6}) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @bcast]}) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000140)=0x1, 0x4) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) r9 = eventfd(0x0) close_range(r7, r9, 0x0) 1.150616844s ago: executing program 1 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000955be01e4b57044f00b7080000000000007b8a000000000000022300000000000007020000f8ffffffb703000008000000b7040000000400008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = open(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408800, 0x0) r4 = open(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x142) r5 = socket(0x2b, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r7, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r10}}, 0x48) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r10, 0x3}}, 0x10) r12 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r12, 0x65, 0x2, 0x0, &(0x7f0000000040)) close_range(r8, 0xffffffffffffffff, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r4, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) utimensat(r3, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000340)={{r13, r14/1000+10000}, {0x0, 0xea60}}, 0x0) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r1, 0x0, 0x5}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000a00)=ANY=[@ANYRES64=r2], 0x0) 1.07289747s ago: executing program 1 (id=672): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00') pread64(r2, &(0x7f0000000480)=""/281, 0x119, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000200)={r7, 0x1, 0x59, "4352e4079e95bd8f5365d0c980912e71c231f23e40b223fe623b90befba4430bc443a9a8a0a7b53fc545f10804cb0f76fa3cb49c7f653b589465303d062ae70a423e46bea3aeadeff42ca98f4aaebe05c76c6a9c0e6165110e"}, 0x61) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.072703117s ago: executing program 1 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000007001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x3d633ef5b9448d59}, 0x0) 998.640247ms ago: executing program 1 (id=674): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x4) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) 932.617549ms ago: executing program 1 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@local}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in, @in=@broadcast, @in, @in=@remote}]}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xac}}, 0x0) 932.346878ms ago: executing program 1 (id=676): syz_open_dev$hidraw(&(0x7f0000000080), 0xcac6, 0x418080) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="c400000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a000000000000002786947ff872669b39950933f41ced604f639fbab674b0eef9c56f271dac62b99c01788156c00ca4591ebb0619f8212d93769a1088c609583f207e6bc5de8eb79c10db1f5c2e394cedbe0e609a63cc30fb9b87021a9660955b0f2feb0ebff82e53e810fdc41d7524c8e2843ffd8e9fca68e00ead"], 0xc4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x4913, 0x770e, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}}, 0x14}}, 0x0) r6 = socket(0x22, 0x2, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) syz_usb_disconnect(r0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12"], 0x0) 359.282654ms ago: executing program 2 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c000200080001000145d9301217d0671cee0c74efb1c647ab1f25cad99fbbef348547cc351741121230a2dc695bd1fc4892"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x38011, r0, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x122) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}]}) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 141.593198ms ago: executing program 2 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0xfffffffe}, 0x0, {[0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000090000040"]) 141.283682ms ago: executing program 3 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000815) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) splice(r1, &(0x7f0000000080)=0x6, r4, &(0x7f0000000200)=0x80000001, 0x80000000, 0xa) r5 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x44) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "20b70709bf73c811", "322581178b48f1d0e81d46ba37b8c8724cc05786cb85a6bf6674638c7e2647e8", "cb90a2d7", "8c24caf3b8897427"}, 0x38) 140.685655ms ago: executing program 3 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400070018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x3d633ef5b9448d59}, 0x0) 62.573097ms ago: executing program 3 (id=694): chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}}], 0x1, 0x0) 61.573961ms ago: executing program 3 (id=695): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc84a}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000003}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0xb0}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x5) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) 61.381302ms ago: executing program 2 (id=696): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000022c0)={&(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="892df184ce01912cfdcabc9d49361c5d3517afa030e1568a84f46d5dde0eeda1f5aaad0015d2ff4367dd06d010dec3b233ccfdeae3be7d31694eceeb19eac22dd2540bdc3752dfd773658b72e61e77b43ab8b0549e0000f4544afd75c5fc68ad619cf82cd18c975cb13c9b754f2f8b2f95416e47558e2f1d35a66243701f7719f9ee0884012a17d9ac96aa00c44a0543436e0a8045ebf3538e75f9ec0845ed9d8edb9852418531f6d2b1bda06723d80e0f0887dbc30d3a4dd33f72a9d3879fe97094f985defd63b7aa809ce873c0678055e2b3c06df07855ec704b4e", 0xdc}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000240)="66728b87b2b66587241efb986f171d0084da14740cb73516dd1527f38ab456287336c38722a8437774c6466b0a5cd9c67ce09703361fab01702fbed06a9dd5dcbcbdd6da1b38a38b3682e2c3c4a5fc1e1ad0faa3e18e75d963", 0x59}], 0x3, &(0x7f0000002600)=[{0xc0, 0x107, 0xf83, "0950eaebb20bb0fc5869164f7f4a92b3d423e91bd43d41ac8a1c0ced81bed84cc436ce9a260c17ef796fc165d167516a21d2aaee4465539f2ec4d80068d5d1ef9dfc0d62cb7ac747d97254f7c092e658f3f10907f36af85781277351826d4baff8856cf93c4325bfe19d385bac132df2156af505e3f6d9d8d6efd9f9ff3a5c92f6ee02d553f5a411c2b4601eeac74ea46b4b17abd041e092eb6d5227608efd7f08a7bac1cae000ee8e06"}, {0xe0, 0x114, 0x9, "efcf0d65cf29a3fb8eb6fd11e8662f21332f33be385de0336e85e923b01b45a3997d1b97634d70e39b6349b03265b91f2a315f96ec66c6cc4dd5fb213abb4f6bf8dd8b138534dac4c35949b101120c7ad0b98a4f29f1d005dd9362233eae8fc1802c913267f7ffe917bb76f8e54ee79bb427c9f5101957524e26c3e3d8223b3fcf625171f6015b3534e4d6a290fdc4537764b98fce70a8da331c0743b03b16853a84fd2d46f31509c0b26c1de63e5b3be0e0991d09f6873b508a12313a4254294fa9fa09fb16742746be1c3b5e6088e3"}, {0x68, 0x6, 0x2, "5beac658a5308e7a21718ca428dc8ae063ce7c3953ff1f5a18405ee318221615c981eab8997d0d3427460c4c79b48eaaaf3827c63ac2e0faa661f5ac05ccb5f44479b57de589587c812df6e19b5195017e633916ee"}, {0x88, 0x10e, 0xc, "07371b4e481f8497d12274187d31d5f9191dd22a6688f9626527fa4192f9d9375ed8f59cc1d1f82dc113b11478495407286aa9b8ec9a47a872ca6b2e1f95192ca6b7b6b8847191e387cceb3490f6da5c45c59ce7e13bed7d216b99e3eaab0e48c4ef1553c572362956ede6ca793e63c710939b27c891"}, {0xe0, 0xff, 0x9, "593078228c243915e309fa28d6d76709dd7b3666997379bc7b458f97283e0e084ecd48260c1e937d72042f8945f8e7d3bb71ab56c1fbe4e09ce86e703856c08641476a17b19968d1349a8f62c4c10657b1d6c133f408e345a826c8bc9cc5a31dcc1eb8b9d27d50cea6040612863b67b853387ffc8d44e156008618e4a5eaaf51c1bfa4ce709dd2daa86152b6f97eaef2dd18281f7226d724aff2c9b38e8f7af4a31a35955e318ecaf6d048f7eb1fc50716d0f004b7651ef4e582fd3278b744b04d526ab6de0bbf3a4ec982dec95e0c"}, {0x98, 0x104, 0xfffffffb, "65f1fc97001507dfbec6000256465da743f4bf4ad6fc90237efd865247beeca70da18705bf235ca7f5221de84d96465a50ca4b4b8f286b0e5742189d3d91683130bd0baefaa348acdd87d88f75d5f2b02a6539b83bd25cc63102b6db8f3c58a62036cdf534fd59f6f5a88308eef9e95c9adb8d1f951bc121270435bb8ff00c8424a2"}, {0x100, 0x113, 0x6, "1e576ceee4e5f8fa252c009f8ba98878efec285f5a62fc4d940ce9e1b2a06e19e909338a667cb222230251e119bc0fcf81eafcbf761b37e437486fea4d4f657f7251d93e9c79ebb656b5b68314dcf653de9397abc48d71a19caa916e4c7131ad47ba457b837c96b1ce32133b311c1b668dc0ff0744f9e5017a5abaf5674ea34a450511e9575f0b196a2a7c8fd8212b28fc98d857807b52983f73bd611cacbf99045b3635fc15caf1af780ff7ef9e94e8547bb5db747d70030247acdd9f3bc9e48872225e0c8d02d14ae184849a5aa9442958bf9dbe722a29ce8e98cefc5b58a3c259b6970ae74760915bc6eae176fe"}, {0x60, 0x119, 0xd, "3a44b3286fd072f906adfb79fb08e1d6b7671930b6ac999dfc850d23060374f949c698c71cf662f157e89f5ae4214f7e9438749c52fa85f2a2fb9fd373a86449bbf9cb5677a0b5858b223bdd"}, {0x88, 0x0, 0x10000, "a2fb393e8fd422d36e3de75a472284989ebe4bc9d959efe3106bdab6130447405e5f296745028ff1b709a2baee40362251bd3e7893f35772e214d9747b6ff5f8da9de6ee850d0e44b2253652baf3f268214f6c9a18a05543ad65d312de8ee9dd346874cd0ea2fcca7aadcdaa5423a24538b93ddc7c74d7"}, {0x18, 0x10b, 0x10, "2402e752c0434a9b"}], 0x608}, 0x4040010) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/62, 0x3e}], 0x3) 3.205736ms ago: executing program 3 (id=697): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x4c377, 0xffffffff, 0x5, 0x0, 0x78fe3546, 0x0, 0x7f, 0x3, 0x8, 0x2fd, 0x3, 0x3, 0x4, 0x0, 0x3, 0x5], 0xd000, 0x7ef7a932f6a6b6b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x8, 0x0, {0x0, 0x1, 0x2, 0x2, 0xffffffff}, 0x8000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x10000401, 0x6}, 0x0, {}, 0x1, 0x1, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x4c377, 0xffffffff, 0x5, 0x0, 0x78fe3546, 0x0, 0x7f, 0x3, 0x8, 0x2fd, 0x3, 0x3, 0x4, 0x0, 0x3, 0x5], 0xd000, 0x7ef7a932f6a6b6b}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x8, 0x0, {0x0, 0x1, 0x2, 0x2, 0xffffffff}, 0x8000}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) (async) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x10000401, 0x6}, 0x0, {}, 0x1, 0x1, 0x1}) (async) 2.644233ms ago: executing program 0 (id=698): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000003000)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x16c, r0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x100, 0x2a, [@fast_bss_trans={0x37, 0xd8, {0x5, 0x6, "246d79aea59ab599af7f6129609dd824", "1fa3336874302638888a2c7d334891304c96ad87b13c290f1eb04efef0ac5f16", "85624319148786c1f5f33c3540144d5b4bbaa321de3190b8d382e804eed2c092", [{0x8, 0x26, "c722911e89d3f354602f8b138515a99e9bc9486680c4e5c5153ac25361d1a464b554d24dfcac"}, {0x3, 0x1e, "7e6833181a42d505cfc1f9cd796efd05edfa7fb211e5ccde4f1190bdb79f"}, {0x4, 0xf, "0826f8951621af329f1e886d64437d"}, {0x3, 0x9, "a1e6b1ec378b9ae283"}, {0x1, 0x1e, "99c53ee011c3df7b5b116e8ad6b4792e8dd930792fcec312fd1840107f0d"}, {0x2}]}}, @random={0x4, 0x6, "fddf9f213ff7"}, @ssid={0x0, 0x18, @random="102067934c9da477c2d9b054b24994918ab531ef53fa4d8a"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random="18e9ef127916"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x16c}, 0x1, 0x0, 0x0, 0x88001}, 0x4000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) write$binfmt_aout(r2, &(0x7f0000000940)=ANY=[], 0xff2e) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000080)={r4, 0x1, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$qrtrtun(r9, &(0x7f0000000180)="024dfc7b58623401", 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r9) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001bc0), r6) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000001cc0)={&(0x7f0000001b80), 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x60, r10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x20, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) r11 = accept$alg(0xffffffffffffffff, 0x0, 0x0) writev(r11, &(0x7f0000002dc0)=[{&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="6917d760f1fd413c0b692de7a8afbcf4c02216191bb30fc9b912723fc9d10e185e9d322b92a5481fbdd8a697a8edd2fea2b0cb473103a332959cb45ffd62ab9a891268", 0x43}, {&(0x7f0000002d80)="e14677cad0f4ab221a3051b973b318d4bb49d0d49bc270fc5390747f1cbec78950ef3ede", 0x24}], 0x3) sendmmsg$alg(r11, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="9296e663f12ed413e3799b09ac5eac728b6706bf8cd673c933bbe45b10630586ee7f3339ec", 0x25}, {&(0x7f00000002c0)="154ca4afa9e4ceb91f2db19d67721000f8740260d68c83f0113d8b", 0x1b}, {&(0x7f0000000300)="ade1ba8beee5f702ab7572e16c8bc8a9bcc4af6fcd584c15c1fbd7ab13986e25504a6d46ac5c3528f79c6e1395d076558572ca1d7c725ad30787dd404794b536e69081a08bb18ddfed30ff820c802bde5a8a774ebc37800844ff1ba6958fc52d1050569afee8d96f4cf394f9c9dd46e22a35c2e8358f49f4f16b8d8e43296a16704a98ba6d4b79d1265f818f9046ccad3648bf68298c21fb3ee640dc2226dc20f318e1bb11a47ec425782f7ea1d7a997ac3b46c43ebd0beb7922dae2d7d5e41eb3397f6632df642e53a9f310fd97e25f9525e90373749639c1c3b75532d107b92ceeddc37e1c9275301a86c90613e447805422", 0xf3}, {&(0x7f0000000400)="bfc3234327ce7c88709248a40bb7e146245d992607fee80daa178e59bee99fb5de7b7f5db82ae92fe657be4a607a38b11f608522", 0x34}, {&(0x7f0000000440)="44fc00", 0x3}, {&(0x7f0000000480)="8c40ff79eff350fb36a412ec0222c601bf34663512617bb2dcb89e37bcf8747954bb80f4f33fcb67d7f5a8695dfe33034fa808f227c37ff76e238d8ef518ffb01639c47e76674338356b6085de4f6ae404ae4c700dfb6835127ae2ae9c5810971f0d4eb0b490bd9de35391da93db5465049d74a1034617424290f5585c105e", 0x7f}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="6f41445f7d754cce7016ce85ed7b5bbeceeb6faa2f84b0bcb01daf8e950ed1653a30b253cbf82c50050d4cd96784855c6acf0f50e48b9fe61a880ad1e84e53f4e91061c50ae80e63", 0x48}], 0x8, 0x0, 0x0, 0x4040080}, {0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001600)="cb73dbedbb3a6836b34a498674c2a38167db6f5b3b16dc156b2754e89dcd34e0f9b7b5c0b0be6893916c81764578d2409f8d665bffe36db60aa734", 0x3b}], 0x1, 0x0, 0x0, 0x84}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001680)="03cdb8d24ef021700340afedd4df2345c1bb6bd6163a50a555e8a0b98e0ee58f2db9325ae1ac04b3b93d759b428fb7a234cb8ca2b24a17d50ba81d8ef501ade389554966d2793aadb117b3d38e530e2352b9f90cfe593ba989", 0x59}, {&(0x7f0000001700)="9bea0597fe96322f502fd000bddf9cfc4b157d4d8240b3ff93ab985234d6b93cda743e8091b83576d251ffc845aa28250df9c072716130b800d65456d6e2a8fb899893a09ba3e4d3353bc5e28b56bbbe11bbbc0ea7d3664ae9b001b8e8722e0d556bd8d63c4eb65fe4bff5a29fe9cbbdd4e2284b9cb08aff5143981092361f02", 0x80}, {&(0x7f0000001780)="bfe72eef32c75845652d38314696eef622b0a488af67f734ae96fe6e35344902c7dfdfbd26fbd428bb676215883bf3666bbb6c768b5bec4fd133e202e07158a376dd0e5cdbf23cf5dfe6c852de27bce54a9b5b56347a4e12fb01af3ce6", 0x5d}, {&(0x7f0000001800)="9dc16498c20648e8519c052321688c42ed62c5d054bf", 0x16}, {&(0x7f0000001840)="b75fe31fa1aa070850a1c4bde3941c260bf8e7aea1a9a44aec00a0c58b54fc3200a9d0c2cfdda397ba1231e3701abe02b7c9772df2a590401c88de3ddd08b3a2f71862e8a2dd211f5a2481ed672e59d5d3b87ad9048f55e34cdcc2c0b47daa0627ead3300be02bd2dd2dc1e2a5a77eec2793a2b2bd121cf686cbe3c43049fa2654f2b5c4e924e8369876180e85aead6820e21aaaa19e69e5c9b9163d86bb4256c7f2421a55fa5c42329c15cb9d9ee688178909e1e668fb3d9252", 0xba}, {&(0x7f0000001900)="363c5e6eb1ab9bfdfd97e8d296dcd1c671c9653c5a37ea7d3f8c837094c41d8bb1a48971524ac8239f8e25ea28c1b2335ebcc806a8e333abb036184eb85189aab513592063e294ef31e645ba1a981e45e153a0fb664db8fec5efc9c3bc78daf83439720fabb175bc8639d2041e5a82718f08b570764513528780d76346b5e32e87f0caabd5586d2e9f88199665eeb1b617b664baaaecf03cb00074d954307f47a3d7e2f9673915c40a26537a7e0c12f0847e68e5c3e71e46882dae13902d548d3dfab2c2e0d07c26fc92aeaebc41b615301140d07d18c3bdaa975998c82e18e5d905", 0xe2}], 0x6, &(0x7f0000001a80), 0x0, 0x20000080}], 0x3, 0x2000c000) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x401, 0x80, {{0x28, 0x4, 0x0, 0x5, 0xa0, 0x66, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x1b, 0x3b, [@private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @local]}, @timestamp={0x44, 0x24, 0xe5, 0x0, 0xc, [0x6, 0x7, 0x8, 0x6, 0x80000000, 0x4, 0x74b7, 0x1]}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x2, [{@multicast2, 0x3}]}, @ssrr={0x89, 0x1b, 0xd3, [@remote, @empty, @empty, @broadcast, @multicast2, @broadcast]}, @lsrr={0x83, 0x23, 0x40, [@dev={0xac, 0x14, 0x14, 0x16}, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010106, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010102]}, @noop, @end]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) 1.824597ms ago: executing program 2 (id=699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) io_uring_setup(0x1691, &(0x7f00000005c0)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x800, 0x3014, 0x4, 0x2, 0x7, 0x0, 0x3}}) io_uring_enter(r3, 0x2ded, 0xed6e, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xffff, @loopback}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x18, 0x0, &(0x7f0000000080)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x2) 1.589872ms ago: executing program 3 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000001400)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x2}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESDEC=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRESDEC=r5], 0x6f4}, 0x1, 0x0, 0x0, 0x48030}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000001400)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r4, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) (async) connect$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x2}}, 0x10) (async) accept4(r4, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESDEC=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRESDEC=r5], 0x6f4}, 0x1, 0x0, 0x0, 0x48030}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 0s ago: executing program 0 (id=701): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) io_uring_setup(0x10004c2d, &(0x7f00000006c0)={0x0, 0x23ab, 0x10, 0x400000, 0x2ec}) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) io_uring_enter(r0, 0x27df, 0x0, 0x2, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x1b, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8", 0x47504a4d}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) fanotify_init(0x10, 0x101000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$FUSE(r12, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 0s ago: executing program 3 (id=702): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000000c0)={0x1}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000003c0)=0x2, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x14, 0x2, {0x8, @usage=0xe9, 0x0, 0x8, 0x3, 0x1b5, 0x8, 0x0, 0x487, @usage=0x3ff, 0x0, 0x6, [0xfffffffffffffff9, 0x0, 0xff, 0x4, 0x1, 0x80000001]}, {0x3, @struct={0x1ff, 0x45b}, 0x0, 0x7, 0x100000001, 0x7fffffffffffffff, 0x6da, 0xa23, 0x4d, @usage=0x5, 0x4, 0x2, [0x100000001, 0x3, 0x1, 0x0, 0x6, 0x3]}, {0x268, @struct={0xfffffff8, 0xa}, 0x0, 0xff, 0x8, 0x0, 0x3ff, 0x9, 0x40, @struct={0x4, 0x11832c50}, 0x41d, 0xf, [0x50b4, 0x3, 0x0, 0x0, 0x5, 0x4]}, {0xbf, 0x0, 0x2}}) (async) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xb}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 38.825077][ T40] audit: type=1400 audit(1743604881.305:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.831106][ T40] audit: type=1400 audit(1743604881.305:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.837368][ T40] audit: type=1400 audit(1743604881.305:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.843393][ T40] audit: type=1400 audit(1743604881.305:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:45322' (ED25519) to the list of known hosts. [ 39.789268][ T40] audit: type=1400 audit(1743604882.275:87): avc: denied { name_bind } for pid=5894 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.523933][ T5905] cgroup: Unknown subsys name 'net' [ 41.666970][ T5905] cgroup: Unknown subsys name 'cpuset' [ 41.670537][ T5905] cgroup: Unknown subsys name 'rlimit' [ 41.893221][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.551305][ T5905] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.262974][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 45.262984][ T40] audit: type=1400 audit(1743604887.745:105): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.527234][ T40] audit: type=1400 audit(1743604888.005:106): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.534265][ T40] audit: type=1400 audit(1743604888.015:107): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.541110][ T40] audit: type=1400 audit(1743604888.015:108): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.547755][ T40] audit: type=1400 audit(1743604888.025:109): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[6054]" dev="sockfs" ino=6054 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.571517][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.573482][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.574192][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.577598][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.579078][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.581878][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.583442][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.586246][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.588709][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.589206][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.589636][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.591457][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.593872][ T40] audit: type=1400 audit(1743604888.085:110): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.596409][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.596537][ T40] audit: type=1400 audit(1743604888.085:111): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.599950][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.604176][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.604503][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.605427][ T5295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.606039][ T5295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.606337][ T5295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.606957][ T40] audit: type=1400 audit(1743604888.085:112): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.612202][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.796877][ T40] audit: type=1400 audit(1743604888.285:113): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.843813][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.895513][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 45.910974][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 46.027013][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.029902][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.032495][ T5938] bridge_slave_0: entered allmulticast mode [ 46.036268][ T5938] bridge_slave_0: entered promiscuous mode [ 46.041908][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.044134][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.046151][ T5938] bridge_slave_1: entered allmulticast mode [ 46.048515][ T5938] bridge_slave_1: entered promiscuous mode [ 46.147070][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.149174][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.151663][ T5937] bridge_slave_0: entered allmulticast mode [ 46.154379][ T5937] bridge_slave_0: entered promiscuous mode [ 46.189650][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.192298][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.194763][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.196835][ T5937] bridge_slave_1: entered allmulticast mode [ 46.199164][ T5937] bridge_slave_1: entered promiscuous mode [ 46.201433][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.203462][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.206058][ T5941] bridge_slave_0: entered allmulticast mode [ 46.208469][ T5941] bridge_slave_0: entered promiscuous mode [ 46.213101][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.215166][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.217268][ T5941] bridge_slave_1: entered allmulticast mode [ 46.219571][ T5941] bridge_slave_1: entered promiscuous mode [ 46.223025][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.293091][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.313496][ T5938] team0: Port device team_slave_0 added [ 46.318799][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.336941][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.340653][ T5938] team0: Port device team_slave_1 added [ 46.344260][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.364042][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.443937][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.446020][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.453130][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.458973][ T5937] team0: Port device team_slave_0 added [ 46.493373][ T5941] team0: Port device team_slave_0 added [ 46.496693][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.498968][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.506773][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.510823][ T5937] team0: Port device team_slave_1 added [ 46.525814][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.527845][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.529914][ T5943] bridge_slave_0: entered allmulticast mode [ 46.532276][ T5943] bridge_slave_0: entered promiscuous mode [ 46.536073][ T5941] team0: Port device team_slave_1 added [ 46.568461][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.570481][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.572480][ T5943] bridge_slave_1: entered allmulticast mode [ 46.575434][ T5943] bridge_slave_1: entered promiscuous mode [ 46.605010][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.607040][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.614288][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.647621][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.651745][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.654655][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.656583][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.663464][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.667969][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.669900][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.677031][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.723016][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.725097][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.732002][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.751047][ T5938] hsr_slave_0: entered promiscuous mode [ 46.753198][ T5938] hsr_slave_1: entered promiscuous mode [ 46.758352][ T5943] team0: Port device team_slave_0 added [ 46.765900][ T5943] team0: Port device team_slave_1 added [ 46.861476][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.863421][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.870486][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.890521][ T5941] hsr_slave_0: entered promiscuous mode [ 46.892698][ T5941] hsr_slave_1: entered promiscuous mode [ 46.895193][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.897517][ T5941] Cannot create hsr debugfs directory [ 46.901378][ T5937] hsr_slave_0: entered promiscuous mode [ 46.903177][ T5937] hsr_slave_1: entered promiscuous mode [ 46.905569][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.907845][ T5937] Cannot create hsr debugfs directory [ 46.929590][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.931528][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.938825][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.077344][ T5943] hsr_slave_0: entered promiscuous mode [ 47.079521][ T5943] hsr_slave_1: entered promiscuous mode [ 47.081417][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.083500][ T5943] Cannot create hsr debugfs directory [ 47.297020][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.305540][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.309728][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.318604][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.337013][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.343017][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.351652][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.356156][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.375001][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.380582][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.388061][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.394531][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.435840][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.439999][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.443597][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.450530][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.525449][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.531869][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.551802][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.561098][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.573050][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.585609][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.588481][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.591997][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.594449][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.602860][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.607607][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.610025][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.616445][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.618494][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.634278][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.636329][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.642077][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.644844][ T5953] Bluetooth: hci2: command tx timeout [ 47.644852][ T5952] Bluetooth: hci0: command tx timeout [ 47.645201][ T5953] Bluetooth: hci1: command tx timeout [ 47.653489][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.655530][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.682671][ T5938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.686396][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.697587][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.704789][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.706689][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.720576][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.723211][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.726483][ T5953] Bluetooth: hci3: command tx timeout [ 47.733036][ T40] audit: type=1400 audit(1743604890.215:114): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.810967][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.829885][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.852780][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.872919][ T5941] veth0_vlan: entered promiscuous mode [ 47.882372][ T5941] veth1_vlan: entered promiscuous mode [ 47.891501][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.912055][ T5938] veth0_vlan: entered promiscuous mode [ 47.921946][ T5938] veth1_vlan: entered promiscuous mode [ 47.929324][ T5937] veth0_vlan: entered promiscuous mode [ 47.941666][ T5937] veth1_vlan: entered promiscuous mode [ 47.950536][ T5943] veth0_vlan: entered promiscuous mode [ 47.952879][ T5941] veth0_macvtap: entered promiscuous mode [ 47.958214][ T5941] veth1_macvtap: entered promiscuous mode [ 47.965324][ T5943] veth1_vlan: entered promiscuous mode [ 47.975274][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.981504][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.984198][ T5938] veth0_macvtap: entered promiscuous mode [ 47.990146][ T5938] veth1_macvtap: entered promiscuous mode [ 48.001369][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.005851][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.008913][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.011805][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.018265][ T5937] veth0_macvtap: entered promiscuous mode [ 48.021772][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.025361][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.029280][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.037990][ T5937] veth1_macvtap: entered promiscuous mode [ 48.043493][ T5943] veth0_macvtap: entered promiscuous mode [ 48.049414][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.052579][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.056434][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.061996][ T5943] veth1_macvtap: entered promiscuous mode [ 48.069182][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.072743][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.076204][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.078705][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083104][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.086556][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.089505][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.092299][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.096213][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.107738][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.110621][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.113287][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.116306][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.119789][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.128134][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.131016][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.133817][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.136714][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.139360][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.142205][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.146154][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.150461][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.152876][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.155980][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158392][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.173063][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.176572][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.179297][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.182163][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.185229][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.188098][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.191574][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.197091][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.197441][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.200103][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.202605][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.208620][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.211043][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.239835][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.242065][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.245521][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.247840][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.266095][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.269287][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.293394][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.296761][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.303264][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.309516][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.336621][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.345295][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.348153][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.368354][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.370500][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.452397][ T6016] overlayfs: missing 'workdir' [ 48.491290][ T6025] xt_hashlimit: size too large, truncated to 1048576 [ 48.551080][ T6035] FAULT_INJECTION: forcing a failure. [ 48.551080][ T6035] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.555908][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.1.13 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 48.555922][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.555928][ T6035] Call Trace: [ 48.555931][ T6035] [ 48.555935][ T6035] dump_stack_lvl+0x16c/0x1f0 [ 48.555951][ T6035] should_fail_ex+0x512/0x640 [ 48.555962][ T6035] _copy_from_iter+0x2a4/0x15b0 [ 48.555974][ T6035] ? __alloc_skb+0x200/0x380 [ 48.555986][ T6035] ? __pfx__copy_from_iter+0x10/0x10 [ 48.555997][ T6035] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 48.556013][ T6035] netlink_sendmsg+0x829/0xdd0 [ 48.556026][ T6035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.556043][ T6035] ____sys_sendmsg+0xa95/0xc70 [ 48.556057][ T6035] ? copy_msghdr_from_user+0x10a/0x160 [ 48.556068][ T6035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.556087][ T6035] ___sys_sendmsg+0x134/0x1d0 [ 48.556098][ T6035] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.556123][ T6035] __sys_sendmsg+0x16d/0x220 [ 48.556134][ T6035] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.556148][ T6035] ? rcu_is_watching+0x12/0xc0 [ 48.556165][ T6035] do_syscall_64+0xcd/0x260 [ 48.556178][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.556188][ T6035] RIP: 0033:0x7f355b78d169 [ 48.556196][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.556205][ T6035] RSP: 002b:00007f355c698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.556214][ T6035] RAX: ffffffffffffffda RBX: 00007f355b9a5fa0 RCX: 00007f355b78d169 [ 48.556220][ T6035] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 48.556226][ T6035] RBP: 00007f355c698090 R08: 0000000000000000 R09: 0000000000000000 [ 48.556231][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.556237][ T6035] R13: 0000000000000000 R14: 00007f355b9a5fa0 R15: 00007fffe41915a8 [ 48.556248][ T6035] [ 48.721764][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.760624][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 48.761143][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 49.123760][ T58] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 49.251095][ T6038] overlayfs: statfs failed on './file0' [ 49.286039][ T58] usb 5-1: config 0 has no interfaces? [ 49.288156][ T58] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 49.291053][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.292392][ C2] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 49.295852][ T58] usb 5-1: config 0 descriptor?? [ 49.435823][ T6076] FAULT_INJECTION: forcing a failure. [ 49.435823][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 49.440508][ T6076] CPU: 2 UID: 0 PID: 6076 Comm: syz.3.23 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 49.440522][ T6076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.440527][ T6076] Call Trace: [ 49.440531][ T6076] [ 49.440535][ T6076] dump_stack_lvl+0x16c/0x1f0 [ 49.440570][ T6076] should_fail_ex+0x512/0x640 [ 49.440588][ T6076] should_failslab+0xc2/0x120 [ 49.440601][ T6076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 49.440612][ T6076] ? skb_clone+0x190/0x3f0 [ 49.440626][ T6076] skb_clone+0x190/0x3f0 [ 49.440637][ T6076] netlink_deliver_tap+0xabd/0xd30 [ 49.440652][ T6076] netlink_unicast+0x5df/0x7f0 [ 49.440667][ T6076] ? __pfx_netlink_unicast+0x10/0x10 [ 49.440683][ T6076] netlink_sendmsg+0x8d1/0xdd0 [ 49.440697][ T6076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.440714][ T6076] ____sys_sendmsg+0xa95/0xc70 [ 49.440728][ T6076] ? copy_msghdr_from_user+0x10a/0x160 [ 49.440739][ T6076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.440759][ T6076] ___sys_sendmsg+0x134/0x1d0 [ 49.440770][ T6076] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.440797][ T6076] __sys_sendmsg+0x16d/0x220 [ 49.440808][ T6076] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.440825][ T6076] ? rcu_is_watching+0x12/0xc0 [ 49.440842][ T6076] do_syscall_64+0xcd/0x260 [ 49.440855][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.440865][ T6076] RIP: 0033:0x7f759c98d169 [ 49.440874][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.440894][ T6076] RSP: 002b:00007f759d789038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.440904][ T6076] RAX: ffffffffffffffda RBX: 00007f759cba5fa0 RCX: 00007f759c98d169 [ 49.440910][ T6076] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 49.440915][ T6076] RBP: 00007f759d789090 R08: 0000000000000000 R09: 0000000000000000 [ 49.440921][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.440926][ T6076] R13: 0000000000000000 R14: 00007f759cba5fa0 R15: 00007ffce577b858 [ 49.440939][ T6076] [ 49.552208][ T6078] bridge1: entered promiscuous mode [ 49.553098][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.553799][ T6078] bridge1: entered allmulticast mode [ 49.557296][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.575474][ T58] usb 5-1: USB disconnect, device number 2 [ 49.725139][ T5953] Bluetooth: hci1: command tx timeout [ 49.727283][ T5953] Bluetooth: hci0: command tx timeout [ 49.728157][ T5952] Bluetooth: hci2: command tx timeout [ 49.803986][ T5952] Bluetooth: hci3: command tx timeout [ 49.871772][ T6118] Zero length message leads to an empty skb [ 49.963942][ T836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.123842][ T836] usb 6-1: Using ep0 maxpacket: 8 [ 50.127510][ T836] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 50.130208][ T836] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 50.133038][ T836] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 50.136666][ T836] usb 6-1: config 250 has no interface number 0 [ 50.138835][ T836] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 50.143292][ T836] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 50.147588][ T836] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.151461][ T836] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.155119][ T836] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 50.159878][ T836] usb 6-1: config 250 interface 228 has no altsetting 0 [ 50.165324][ T836] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 50.168881][ T836] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 50.172067][ T836] usb 6-1: Product: syz [ 50.174168][ T836] usb 6-1: SerialNumber: syz [ 50.179650][ T836] hub 6-1:250.228: bad descriptor, ignoring hub [ 50.181936][ T836] hub 6-1:250.228: probe with driver hub failed with error -5 [ 50.381605][ T836] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 50.684748][ T836] usb 6-1: USB disconnect, device number 2 [ 50.689918][ T836] usblp0: removed [ 50.796551][ T6140] FAULT_INJECTION: forcing a failure. [ 50.796551][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.800350][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.2.47 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 50.800368][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.800377][ T6140] Call Trace: [ 50.800382][ T6140] [ 50.800387][ T6140] dump_stack_lvl+0x16c/0x1f0 [ 50.800429][ T6140] should_fail_ex+0x512/0x640 [ 50.800452][ T6140] _copy_from_user+0x2e/0xd0 [ 50.800469][ T6140] move_addr_to_kernel+0x65/0x170 [ 50.800492][ T6140] __copy_msghdr+0x386/0x470 [ 50.800508][ T6140] copy_msghdr_from_user+0xc1/0x160 [ 50.800524][ T6140] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 50.800555][ T6140] ___sys_sendmsg+0xfe/0x1d0 [ 50.800568][ T6140] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.800594][ T6140] __sys_sendmsg+0x16d/0x220 [ 50.800605][ T6140] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.800619][ T6140] ? rcu_is_watching+0x12/0xc0 [ 50.800635][ T6140] do_syscall_64+0xcd/0x260 [ 50.800648][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.800658][ T6140] RIP: 0033:0x7fcda778d169 [ 50.800667][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.800676][ T6140] RSP: 002b:00007fcda85da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.800686][ T6140] RAX: ffffffffffffffda RBX: 00007fcda79a5fa0 RCX: 00007fcda778d169 [ 50.800692][ T6140] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 50.800697][ T6140] RBP: 00007fcda85da090 R08: 0000000000000000 R09: 0000000000000000 [ 50.800702][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.800708][ T6140] R13: 0000000000000000 R14: 00007fcda79a5fa0 R15: 00007ffcbbf38aa8 [ 50.800720][ T6140] [ 50.913622][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 50.913637][ T40] audit: type=1400 audit(1743604893.395:219): avc: denied { append } for pid=6149 comm="syz.2.52" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.952854][ T40] audit: type=1400 audit(1743604893.435:220): avc: denied { append } for pid=6151 comm="syz.3.53" name="v4l-subdev7" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.956947][ T836] IPVS: starting estimator thread 0... [ 50.961178][ T40] audit: type=1400 audit(1743604893.445:221): avc: denied { ioctl } for pid=6151 comm="syz.3.53" path="socket:[7900]" dev="sockfs" ino=7900 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.989713][ T40] audit: type=1400 audit(1743604893.475:222): avc: denied { mount } for pid=6102 comm="syz.1.35" name="/" dev="overlay" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.008473][ T40] audit: type=1400 audit(1743604893.495:223): avc: denied { getopt } for pid=6158 comm="syz.3.54" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.016570][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.54'. [ 51.019128][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.3.54'. [ 51.022570][ T40] audit: type=1400 audit(1743604893.505:224): avc: denied { create } for pid=6158 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.030492][ T40] audit: type=1400 audit(1743604893.505:225): avc: denied { bind } for pid=6158 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.054231][ T40] audit: type=1400 audit(1743604893.535:226): avc: denied { setopt } for pid=6158 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.064212][ T6154] IPVS: using max 44 ests per chain, 105600 per kthread [ 51.136022][ T6167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.57'. [ 51.138996][ T6167] netlink: 'syz.3.57': attribute type 6 has an invalid length. [ 51.141942][ T6167] netlink: 'syz.3.57': attribute type 5 has an invalid length. [ 51.146295][ T6167] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 51.149611][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 51.255884][ T6175] netlink: 'syz.0.61': attribute type 5 has an invalid length. [ 51.357113][ T40] audit: type=1400 audit(1743604893.845:227): avc: denied { create } for pid=6176 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.364245][ T40] audit: type=1400 audit(1743604893.845:228): avc: denied { bind } for pid=6176 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.523737][ T6000] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.640985][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 51.684055][ T6000] usb 5-1: Using ep0 maxpacket: 16 [ 51.688065][ T6000] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 51.690695][ T6000] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 117, changing to 10 [ 51.693789][ T6000] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26144, setting to 1024 [ 51.696864][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.700212][ T6000] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 51.703017][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.705830][ T6000] usb 5-1: Product: syz [ 51.707009][ T6000] usb 5-1: Manufacturer: syz [ 51.708299][ T6000] usb 5-1: SerialNumber: syz [ 51.710884][ T6000] usb 5-1: config 0 descriptor?? [ 51.713514][ T6179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.804220][ T5952] Bluetooth: hci2: command tx timeout [ 51.813809][ T5953] Bluetooth: hci0: command tx timeout [ 51.814743][ T5952] Bluetooth: hci1: command tx timeout [ 51.884460][ T5952] Bluetooth: hci3: command tx timeout [ 51.893588][ T6190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6190 comm=syz.2.66 [ 51.897338][ T6190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6190 comm=syz.2.66 [ 51.918694][ T6179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.925038][ T6000] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 51.927456][ T6194] xt_hashlimit: size too large, truncated to 1048576 [ 52.041993][ T6198] mmap: syz.2.68 (6198) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.128415][ T9] usb 5-1: USB disconnect, device number 3 [ 52.676980][ T6248] xt_hashlimit: size too large, truncated to 1048576 [ 52.725725][ T6253] FAULT_INJECTION: forcing a failure. [ 52.725725][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 52.729645][ T6253] CPU: 2 UID: 0 PID: 6253 Comm: syz.2.89 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 52.729666][ T6253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.729675][ T6253] Call Trace: [ 52.729681][ T6253] [ 52.729687][ T6253] dump_stack_lvl+0x16c/0x1f0 [ 52.729734][ T6253] should_fail_ex+0x512/0x640 [ 52.729759][ T6253] should_failslab+0xc2/0x120 [ 52.729777][ T6253] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 52.729794][ T6253] ? skb_clone+0x190/0x3f0 [ 52.729814][ T6253] skb_clone+0x190/0x3f0 [ 52.729832][ T6253] ip6_finish_output2+0x1468/0x2020 [ 52.729852][ T6253] ? ip6_mtu+0x1a3/0x4a0 [ 52.729871][ T6253] ip6_finish_output+0x3f9/0x1360 [ 52.729893][ T6253] ip6_output+0x1f9/0x540 [ 52.729911][ T6253] ? __pfx_ip6_output+0x10/0x10 [ 52.729930][ T6253] ip6_local_out+0xcd/0x4a0 [ 52.729953][ T6253] ip6_send_skb+0x112/0x460 [ 52.729973][ T6253] ip6_push_pending_frames+0xe0/0x110 [ 52.729991][ T6253] rawv6_sendmsg+0x327c/0x4890 [ 52.730015][ T6253] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 52.730031][ T6253] ? avc_has_perm_noaudit+0x149/0x3b0 [ 52.730056][ T6253] ? avc_has_perm+0x11a/0x1c0 [ 52.730078][ T6253] ? __pfx_avc_has_perm+0x10/0x10 [ 52.730119][ T6253] ? __import_iovec+0x1c8/0x660 [ 52.730132][ T6253] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 52.730143][ T6253] ? inet_sendmsg+0x119/0x140 [ 52.730156][ T6253] inet_sendmsg+0x119/0x140 [ 52.730170][ T6253] ____sys_sendmsg+0x973/0xc70 [ 52.730185][ T6253] ? copy_msghdr_from_user+0x10a/0x160 [ 52.730195][ T6253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.730215][ T6253] ___sys_sendmsg+0x134/0x1d0 [ 52.730227][ T6253] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.730253][ T6253] __sys_sendmsg+0x16d/0x220 [ 52.730264][ T6253] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.730279][ T6253] ? rcu_is_watching+0x12/0xc0 [ 52.730296][ T6253] do_syscall_64+0xcd/0x260 [ 52.730309][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.730319][ T6253] RIP: 0033:0x7fcda778d169 [ 52.730327][ T6253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.730336][ T6253] RSP: 002b:00007fcda85da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.730346][ T6253] RAX: ffffffffffffffda RBX: 00007fcda79a5fa0 RCX: 00007fcda778d169 [ 52.730352][ T6253] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 52.730357][ T6253] RBP: 00007fcda85da090 R08: 0000000000000000 R09: 0000000000000000 [ 52.730362][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.730375][ T6253] R13: 0000000000000000 R14: 00007fcda79a5fa0 R15: 00007ffcbbf38aa8 [ 52.730387][ T6253] [ 52.821759][ C2] vkms_vblank_simulate: vblank timer overrun [ 52.856929][ T6261] capability: warning: `syz.2.91' uses 32-bit capabilities (legacy support in use) [ 52.963386][ T6269] FAULT_INJECTION: forcing a failure. [ 52.963386][ T6269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.967983][ T6269] CPU: 0 UID: 0 PID: 6269 Comm: syz.0.93 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 52.967997][ T6269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.968003][ T6269] Call Trace: [ 52.968006][ T6269] [ 52.968010][ T6269] dump_stack_lvl+0x16c/0x1f0 [ 52.968026][ T6269] should_fail_ex+0x512/0x640 [ 52.968038][ T6269] _copy_from_user+0x2e/0xd0 [ 52.968049][ T6269] memdup_user+0x6b/0xe0 [ 52.968062][ T6269] hidraw_send_report+0x1d8/0x4d0 [ 52.968079][ T6269] hidraw_ioctl+0x7af/0x9e0 [ 52.968093][ T6269] ? __pfx_hidraw_ioctl+0x10/0x10 [ 52.968107][ T6269] ? selinux_file_ioctl+0x180/0x270 [ 52.968121][ T6269] ? selinux_file_ioctl+0xb4/0x270 [ 52.968136][ T6269] ? __pfx_hidraw_ioctl+0x10/0x10 [ 52.968150][ T6269] __x64_sys_ioctl+0x190/0x200 [ 52.968166][ T6269] do_syscall_64+0xcd/0x260 [ 52.968179][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.968189][ T6269] RIP: 0033:0x7f80d098d169 [ 52.968197][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.968206][ T6269] RSP: 002b:00007f80ce7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.968215][ T6269] RAX: ffffffffffffffda RBX: 00007f80d0ba6080 RCX: 00007f80d098d169 [ 52.968221][ T6269] RDX: 0000000000000000 RSI: 00000000c0404806 RDI: 0000000000000003 [ 52.968227][ T6269] RBP: 00007f80ce7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.968232][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.968237][ T6269] R13: 0000000000000001 R14: 00007f80d0ba6080 R15: 00007ffce8e7dd48 [ 52.968249][ T6269] [ 53.166066][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 53.182383][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.245078][ T6282] FAULT_INJECTION: forcing a failure. [ 53.245078][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 53.250718][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.2.100 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 53.250741][ T6282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.250750][ T6282] Call Trace: [ 53.250756][ T6282] [ 53.250762][ T6282] dump_stack_lvl+0x16c/0x1f0 [ 53.250786][ T6282] should_fail_ex+0x512/0x640 [ 53.250806][ T6282] should_failslab+0xc2/0x120 [ 53.250827][ T6282] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 53.250844][ T6282] ? skb_clone+0x190/0x3f0 [ 53.250865][ T6282] skb_clone+0x190/0x3f0 [ 53.250884][ T6282] ip6_finish_output2+0x1468/0x2020 [ 53.250906][ T6282] ? ip6_mtu+0x1a3/0x4a0 [ 53.250927][ T6282] ip6_finish_output+0x3f9/0x1360 [ 53.250950][ T6282] ip6_output+0x1f9/0x540 [ 53.250967][ T6282] ? __pfx_ip6_output+0x10/0x10 [ 53.250988][ T6282] ip6_local_out+0xcd/0x4a0 [ 53.251014][ T6282] ip6_send_skb+0x112/0x460 [ 53.251037][ T6282] ip6_push_pending_frames+0xe0/0x110 [ 53.251058][ T6282] rawv6_sendmsg+0x327c/0x4890 [ 53.251086][ T6282] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 53.251104][ T6282] ? avc_has_perm_noaudit+0x149/0x3b0 [ 53.251134][ T6282] ? avc_has_perm+0x11a/0x1c0 [ 53.251159][ T6282] ? __pfx_avc_has_perm+0x10/0x10 [ 53.251207][ T6282] ? __import_iovec+0x1c8/0x660 [ 53.251225][ T6282] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 53.251243][ T6282] ? inet_sendmsg+0x119/0x140 [ 53.251264][ T6282] inet_sendmsg+0x119/0x140 [ 53.251293][ T6282] ____sys_sendmsg+0x973/0xc70 [ 53.251316][ T6282] ? copy_msghdr_from_user+0x10a/0x160 [ 53.251334][ T6282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.251368][ T6282] ___sys_sendmsg+0x134/0x1d0 [ 53.251386][ T6282] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.251436][ T6282] __sys_sendmsg+0x16d/0x220 [ 53.251454][ T6282] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.251477][ T6282] ? rcu_is_watching+0x12/0xc0 [ 53.251505][ T6282] do_syscall_64+0xcd/0x260 [ 53.251550][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.251566][ T6282] RIP: 0033:0x7fcda778d169 [ 53.251579][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.251594][ T6282] RSP: 002b:00007fcda85da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.251609][ T6282] RAX: ffffffffffffffda RBX: 00007fcda79a5fa0 RCX: 00007fcda778d169 [ 53.251619][ T6282] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 53.251628][ T6282] RBP: 00007fcda85da090 R08: 0000000000000000 R09: 0000000000000000 [ 53.251636][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.251645][ T6282] R13: 0000000000000000 R14: 00007fcda79a5fa0 R15: 00007ffcbbf38aa8 [ 53.251666][ T6282] [ 53.383447][ T6288] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.386964][ T6288] overlayfs: missing 'lowerdir' [ 53.418427][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 53.421467][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.424899][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 53.429999][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 53.432525][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.434898][ T9] usb 6-1: Product: syz [ 53.436105][ T9] usb 6-1: Manufacturer: syz [ 53.437390][ T9] usb 6-1: SerialNumber: syz [ 53.441061][ T9] usb 6-1: config 0 descriptor?? [ 53.494551][ T6304] Bluetooth: MGMT ver 1.23 [ 53.531356][ T6306] fuse: Bad value for 'fd' [ 53.540738][ T6308] xt_hashlimit: size too large, truncated to 1048576 [ 53.541179][ T6306] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.611108][ T6317] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.650763][ T9] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 53.673010][ T6321] can: request_module (can-proto-0) failed. [ 53.680553][ T6324] IPv6: sit1: Disabled Multicast RS [ 53.682903][ T6324] sit1: entered allmulticast mode [ 53.741728][ T6327] No such timeout policy "syz1" [ 53.744968][ T6327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.115'. [ 53.782579][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 53.817468][ T6338] syz.2.118 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.828982][ T6340] Bluetooth: MGMT ver 1.23 [ 53.846231][ T6344] xt_hashlimit: size too large, truncated to 1048576 [ 53.854918][ T6003] usb 6-1: USB disconnect, device number 3 [ 53.884093][ T5952] Bluetooth: hci0: command tx timeout [ 53.886416][ T5952] Bluetooth: hci2: command tx timeout [ 53.894028][ T5953] Bluetooth: hci1: command tx timeout [ 53.945009][ T6355] syz.0.123 uses obsolete (PF_INET,SOCK_PACKET) [ 53.963911][ T5953] Bluetooth: hci3: command tx timeout [ 53.988032][ T6359] xt_hashlimit: invalid rate [ 54.134289][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 54.147354][ T6376] xt_hashlimit: size too large, truncated to 1048576 [ 54.199358][ T6383] xt_hashlimit: invalid rate [ 55.264943][ T6409] xt_hashlimit: size too large, truncated to 1048576 [ 55.331335][ T6418] lo speed is unknown, defaulting to 1000 [ 55.334203][ T6418] lo speed is unknown, defaulting to 1000 [ 55.337560][ T6418] lo speed is unknown, defaulting to 1000 [ 55.473427][ T5981] lo speed is unknown, defaulting to 1000 [ 55.473730][ T6418] infiniband syz2: set active [ 55.477264][ T6418] infiniband syz2: added lo [ 55.503099][ T6418] RDS/IB: syz2: added [ 55.504897][ T6418] smc: adding ib device syz2 with port count 1 [ 55.507286][ T6418] smc: ib device syz2 port 1 has pnetid [ 55.509730][ T5981] lo speed is unknown, defaulting to 1000 [ 55.512947][ T6418] lo speed is unknown, defaulting to 1000 [ 55.592435][ T6418] lo speed is unknown, defaulting to 1000 [ 55.693918][ T6418] lo speed is unknown, defaulting to 1000 [ 55.786704][ T6418] lo speed is unknown, defaulting to 1000 [ 55.933006][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 55.933018][ T40] audit: type=1400 audit(1743604898.415:295): avc: denied { create } for pid=6437 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.944315][ T40] audit: type=1400 audit(1743604898.425:296): avc: denied { accept } for pid=6437 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.017555][ T6444] xt_hashlimit: size too large, truncated to 1048576 [ 56.082832][ T40] audit: type=1400 audit(1743604898.565:297): avc: denied { bind } for pid=6439 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.207557][ T40] audit: type=1400 audit(1743604898.695:298): avc: denied { connect } for pid=6454 comm="syz.1.161" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.310804][ T6462] vlan2: entered promiscuous mode [ 56.312941][ T6462] vlan2: entered allmulticast mode [ 56.315922][ T6462] hsr_slave_1: entered allmulticast mode [ 56.319831][ T40] audit: type=1400 audit(1743604898.805:299): avc: denied { create } for pid=6461 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 56.332667][ T40] audit: type=1400 audit(1743604898.815:300): avc: denied { sys_admin } for pid=6461 comm="syz.1.163" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 56.379102][ T6465] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 56.382197][ T6465] VFS: Can't find a romfs filesystem on dev nullb0. [ 56.382197][ T6465] [ 56.417489][ T40] audit: type=1400 audit(1743604898.905:301): avc: denied { getopt } for pid=6466 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.490822][ T40] audit: type=1400 audit(1743604898.975:302): avc: denied { append } for pid=6470 comm="syz.1.167" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.506644][ T40] audit: type=1400 audit(1743604898.985:303): avc: denied { mount } for pid=6470 comm="syz.1.167" name="/" dev="autofs" ino=10867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 56.523741][ T40] audit: type=1400 audit(1743604899.005:304): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.544280][ T6473] xt_hashlimit: size too large, truncated to 1048576 [ 57.059384][ T6501] Attempt to restore checkpoint with obsolete wellknown handles [ 57.200562][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 57.304319][ T6514] syz.2.183: attempt to access beyond end of device [ 57.304319][ T6514] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 57.308271][ T6514] syz.2.183: attempt to access beyond end of device [ 57.308271][ T6514] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 57.311847][ T6514] Mount JFS Failure: -5 [ 57.313146][ T6514] jfs_mount failed w/return code = -5 [ 57.324339][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.325887][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 57.382170][ T6518] fuse: Unknown parameter '' [ 57.459007][ T6526] xt_hashlimit: size too large, truncated to 1048576 [ 57.547627][ T6532] xt_hashlimit: size too large, truncated to 1048576 [ 57.603030][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 57.612616][ T6539] Trying to write to read-only block-device nullb0 [ 57.685573][ T6545] program syz.0.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.723283][ T6551] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 57.734095][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 57.736949][ T1110] ata1.00: irq_stat 0x40000000 [ 57.738659][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 57.740439][ T1110] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 5 [ 57.740439][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 57.745581][ T1110] ata1.00: status: { DRDY ERR } [ 57.747449][ T1110] ata1.00: error: { ABRT } [ 57.749264][ T1110] ata1.00: device reported invalid CHS sector 0 [ 57.778834][ T6557] ======================================================= [ 57.778834][ T6557] WARNING: The mand mount option has been deprecated and [ 57.778834][ T6557] and is ignored by this kernel. Remove the mand [ 57.778834][ T6557] option from the mount to silence this warning. [ 57.778834][ T6557] ======================================================= [ 57.984030][ T6583] lo speed is unknown, defaulting to 1000 [ 58.009059][ T6596] xt_hashlimit: size too large, truncated to 1048576 [ 58.242822][ T6623] overlay: ./bus is not a directory [ 58.298143][ T6628] ALSA: seq fatal error: cannot create timer (-22) [ 58.330600][ T6632] xt_hashlimit: size too large, truncated to 1048576 [ 58.353741][ T6003] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.415390][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 58.417307][ T1110] ata1: failed to read log page 10h (errno=-5) [ 58.419022][ T1110] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 58.421137][ T1110] ata1.00: irq_stat 0x40000000 [ 58.422665][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 58.425307][ T1110] ata1.00: cmd 61/20:58:2a:05:10/00:00:00:00:00/40 tag 11 ncq dma 16384 out [ 58.425307][ T1110] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 58.430743][ T1110] ata1.00: status: { DRDY } [ 58.432062][ T1110] ata1.00: error: { ABRT } [ 58.434739][ T1110] ata1.00: configured for UDMA/100 [ 58.439544][ T1110] ata1: EH complete [ 58.527570][ T6003] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 58.528086][ T6646] netlink: 6110 bytes leftover after parsing attributes in process `syz.2.227'. [ 58.540128][ T6003] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.542849][ T6003] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.547528][ T6003] usb 8-1: config 1 interface 1 has no altsetting 0 [ 58.551960][ T6003] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.560075][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.562991][ T6003] usb 8-1: Product: syz [ 58.564903][ T6003] usb 8-1: Manufacturer: syz [ 58.566591][ T6003] usb 8-1: SerialNumber: syz [ 58.817236][ T6003] usb 8-1: USB disconnect, device number 2 [ 58.885078][ T6693] tmpfs: Unknown parameter 'huge_çÖUIĆ' [ 58.950726][ T6696] dlm: no local IP address has been set [ 58.952461][ T6696] dlm: cannot start dlm midcomms -107 [ 59.026636][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 59.066387][ T6705] netfs: Couldn't get user pages (rc=-14) [ 59.174918][ T6715] xt_hashlimit: size too large, truncated to 1048576 [ 59.469382][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 59.509774][ T6769] lo speed is unknown, defaulting to 1000 [ 59.592059][ T6773] lo speed is unknown, defaulting to 1000 [ 59.716488][ T6782] team0: Device ipip0 is of different type [ 60.138679][ T6810] process 'syz.0.281' launched '/dev/fd/3' with NULL argv: empty string added [ 60.444013][ T6003] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.592927][ T6818] input: syz0 as /devices/virtual/input/input7 [ 60.595343][ T6818] input: failed to attach handler leds to device input7, error: -6 [ 60.596679][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 60.601583][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.604881][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 60.609802][ T5953] Bluetooth: hci1: connection err: -111 [ 60.611920][ T6003] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 60.614518][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.616829][ T6003] usb 5-1: Product: syz [ 60.617892][ T6003] usb 5-1: Manufacturer: syz [ 60.619110][ T6003] usb 5-1: SerialNumber: syz [ 60.622299][ T6003] usb 5-1: config 0 descriptor?? [ 60.831578][ T6003] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 61.001965][ T6820] netlink: 580 bytes leftover after parsing attributes in process `syz.3.285'. [ 61.008122][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 61.008134][ T40] audit: type=1400 audit(1743604903.495:354): avc: denied { append } for pid=6819 comm="syz.3.285" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.011688][ T6820] Cannot find add_set index 0 as target [ 61.033357][ T6003] usb 5-1: USB disconnect, device number 4 [ 61.101650][ T40] audit: type=1326 audit(1743604903.585:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.287" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f759c98d169 code=0x7fc00000 [ 61.208662][ T6840] xt_hashlimit: size too large, truncated to 1048576 [ 61.342678][ T40] audit: type=1400 audit(1743604903.825:356): avc: denied { name_bind } for pid=6847 comm="syz.3.292" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.395075][ T6851] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 61.397383][ T6851] netlink: 'syz.3.292': attribute type 3 has an invalid length. [ 61.399611][ T6851] netlink: 224 bytes leftover after parsing attributes in process `syz.3.292'. [ 61.402056][ T6851] NCSI netlink: No device for ifindex 0 [ 61.641099][ T40] audit: type=1400 audit(1743604904.125:357): avc: denied { mount } for pid=6867 comm="syz.0.299" name="/" dev="configfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 61.651394][ T40] audit: type=1400 audit(1743604904.135:358): avc: denied { setattr } for pid=6867 comm="syz.0.299" name="/" dev="configfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.661761][ T40] audit: type=1400 audit(1743604904.145:359): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 61.701423][ T40] audit: type=1400 audit(1743604904.185:360): avc: denied { map } for pid=6874 comm="syz.1.301" path="socket:[14511]" dev="sockfs" ino=14511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.710278][ T40] audit: type=1400 audit(1743604904.185:361): avc: denied { read } for pid=6874 comm="syz.1.301" path="socket:[14511]" dev="sockfs" ino=14511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.719276][ T40] audit: type=1400 audit(1743604904.195:362): avc: denied { read write } for pid=6876 comm="syz.0.302" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.730251][ T40] audit: type=1400 audit(1743604904.195:363): avc: denied { open } for pid=6876 comm="syz.0.302" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.909647][ T6889] lo speed is unknown, defaulting to 1000 [ 61.963760][ T836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.088908][ T6896] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 62.113808][ T836] usb 5-1: device descriptor read/64, error -71 [ 62.123256][ T6896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.134884][ T6897] ip6erspan0: entered promiscuous mode [ 62.141067][ T6897] bond1: (slave ip6erspan0): making interface the new active one [ 62.146506][ T6897] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 62.150628][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'. [ 62.156458][ T6895] bond1: entered promiscuous mode [ 62.159698][ T6895] bond1: entered allmulticast mode [ 62.161179][ T6895] ip6erspan0: entered allmulticast mode [ 62.272692][ T6909] netlink: 'syz.1.309': attribute type 2 has an invalid length. [ 62.277132][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 62.373873][ T836] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 62.374285][ T6000] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 62.474478][ T6923] delete_channel: no stack [ 62.497937][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6928 comm=syz.2.317 [ 62.502644][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 62.506373][ T836] usb 5-1: device descriptor read/64, error -71 [ 62.520264][ T6928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.538727][ T6928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.540832][ T6928] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 62.545974][ T6928] bond1: (slave vcan0): Error -95 calling set_mac_address [ 62.583613][ T6930] dvmrp0: entered allmulticast mode [ 62.614753][ T836] usb usb5-port1: attempt power cycle [ 62.953827][ T836] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.975036][ T836] usb 5-1: device descriptor read/8, error -71 [ 63.213898][ T836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.234167][ T836] usb 5-1: device descriptor read/8, error -71 [ 63.344246][ T836] usb usb5-port1: unable to enumerate USB device [ 63.452193][ T6945] tmpfs: Unknown parameter '˙˙˙˙18446744073709551615' [ 63.752154][ T6962] netlink: 'syz.2.330': attribute type 39 has an invalid length. [ 63.969588][ T6968] CUSE: unknown device info "˙" [ 63.971033][ T6968] CUSE: zero length info key specified [ 63.974263][ T6968] syz.2.332: attempt to access beyond end of device [ 63.974263][ T6968] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 63.977832][ T6968] befs: (nbd2): unable to read superblock [ 63.995772][ T836] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.017459][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'. [ 64.166848][ T836] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.169234][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.171458][ T836] usb 6-1: Product: syz [ 64.172553][ T836] usb 6-1: Manufacturer: syz [ 64.174717][ T836] usb 6-1: SerialNumber: syz [ 64.179540][ T836] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 64.201684][ T34] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 64.781306][ T6991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.960078][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.963346][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.139425][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.180287][ T7003] FAULT_INJECTION: forcing a failure. [ 65.180287][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 65.183886][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.2.343 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 65.183909][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.183918][ T7003] Call Trace: [ 65.183924][ T7003] [ 65.183930][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 65.183977][ T7003] should_fail_ex+0x512/0x640 [ 65.183997][ T7003] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 65.184017][ T7003] should_failslab+0xc2/0x120 [ 65.184036][ T7003] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 65.184052][ T7003] ? __alloc_skb+0x2b2/0x380 [ 65.184073][ T7003] __alloc_skb+0x2b2/0x380 [ 65.184088][ T7003] ? __pfx___alloc_skb+0x10/0x10 [ 65.184108][ T7003] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 65.184132][ T7003] netlink_alloc_large_skb+0x69/0x130 [ 65.184152][ T7003] netlink_sendmsg+0x6a1/0xdd0 [ 65.184175][ T7003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.184204][ T7003] ____sys_sendmsg+0xa95/0xc70 [ 65.184227][ T7003] ? copy_msghdr_from_user+0x10a/0x160 [ 65.184243][ T7003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.184276][ T7003] ___sys_sendmsg+0x134/0x1d0 [ 65.184294][ T7003] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.184338][ T7003] __sys_sendmsg+0x16d/0x220 [ 65.184356][ T7003] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.184379][ T7003] ? rcu_is_watching+0x12/0xc0 [ 65.184405][ T7003] do_syscall_64+0xcd/0x260 [ 65.184425][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.184441][ T7003] RIP: 0033:0x7fcda778d169 [ 65.184453][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.184467][ T7003] RSP: 002b:00007fcda85da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.184481][ T7003] RAX: ffffffffffffffda RBX: 00007fcda79a5fa0 RCX: 00007fcda778d169 [ 65.184492][ T7003] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 65.184500][ T7003] RBP: 00007fcda85da090 R08: 0000000000000000 R09: 0000000000000000 [ 65.184509][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.184522][ T7003] R13: 0000000000000000 R14: 00007fcda79a5fa0 R15: 00007ffcbbf38aa8 [ 65.184543][ T7003] [ 65.243705][ T34] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 65.269207][ T34] ath9k_htc: Failed to initialize the device [ 65.296329][ T34] usb 6-1: ath9k_htc: USB layer deinitialized [ 65.313386][ T836] usb 6-1: USB disconnect, device number 4 [ 65.384669][ T7018] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 65.553923][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.706323][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.709864][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 65.714633][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.718052][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.724142][ T9] usb 8-1: config 0 descriptor?? [ 65.724207][ T836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.729185][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 65.837079][ T7032] veth0_to_team: entered promiscuous mode [ 65.838709][ T7032] veth0_to_team: entered allmulticast mode [ 65.870777][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 65.890413][ T7034] sp0: Synchronizing with TNC [ 65.913768][ T836] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.916803][ T836] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.919590][ T836] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.922430][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.927137][ T7030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.931470][ T836] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.102348][ T5981] usb 8-1: USB disconnect, device number 3 [ 66.114434][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 66.114444][ T40] audit: type=1400 audit(1743604908.595:383): avc: denied { ioctl } for pid=7046 comm="syz.1.357" path="socket:[14715]" dev="sockfs" ino=14715 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.133312][ T836] usb 7-1: USB disconnect, device number 2 [ 66.148758][ T40] audit: type=1400 audit(1743604908.635:384): avc: denied { write } for pid=7051 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.184359][ T40] audit: type=1400 audit(1743604908.675:385): avc: denied { write } for pid=7057 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 66.186864][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 66.195774][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 66.228713][ T40] audit: type=1400 audit(1743604908.715:386): avc: denied { getopt } for pid=7061 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.240192][ T7065] block nbd1: Unsupported socket: shutdown callout must be supported. [ 66.281332][ T7069] FAULT_INJECTION: forcing a failure. [ 66.281332][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.286129][ T7069] CPU: 3 UID: 0 PID: 7069 Comm: syz.1.364 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 66.286148][ T7069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.286155][ T7069] Call Trace: [ 66.286159][ T7069] [ 66.286163][ T7069] dump_stack_lvl+0x16c/0x1f0 [ 66.286179][ T7069] should_fail_ex+0x512/0x640 [ 66.286191][ T7069] _copy_from_iter+0x2a4/0x15b0 [ 66.286203][ T7069] ? __alloc_skb+0x200/0x380 [ 66.286214][ T7069] ? __pfx__copy_from_iter+0x10/0x10 [ 66.286225][ T7069] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 66.286241][ T7069] netlink_sendmsg+0x829/0xdd0 [ 66.286255][ T7069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.286272][ T7069] ____sys_sendmsg+0xa95/0xc70 [ 66.286287][ T7069] ? copy_msghdr_from_user+0x10a/0x160 [ 66.286298][ T7069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.286317][ T7069] ___sys_sendmsg+0x134/0x1d0 [ 66.286329][ T7069] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.286355][ T7069] __sys_sendmsg+0x16d/0x220 [ 66.286366][ T7069] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.286386][ T7069] do_syscall_64+0xcd/0x260 [ 66.286400][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.286411][ T7069] RIP: 0033:0x7f355b78d169 [ 66.286419][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.286430][ T7069] RSP: 002b:00007f355c698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.286441][ T7069] RAX: ffffffffffffffda RBX: 00007f355b9a5fa0 RCX: 00007f355b78d169 [ 66.286447][ T7069] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.286452][ T7069] RBP: 00007f355c698090 R08: 0000000000000000 R09: 0000000000000000 [ 66.286457][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.286462][ T7069] R13: 0000000000000000 R14: 00007f355b9a5fa0 R15: 00007fffe41915a8 [ 66.286474][ T7069] [ 66.347646][ T7030] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 66.365518][ T7030] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.368259][ T7030] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.371478][ T7030] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.374819][ T7030] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.376492][ T40] audit: type=1400 audit(1743604908.865:387): avc: denied { bind } for pid=7074 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.378295][ T7030] bond2: (slave geneve2): making interface the new active one [ 66.379834][ T7075] xt_connbytes: Forcing CT accounting to be enabled [ 66.379975][ T7075] Cannot find add_set index 0 as target [ 66.389396][ T7030] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 66.395017][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.351'. [ 66.422791][ T40] audit: type=1400 audit(1743604908.905:388): avc: denied { setopt } for pid=7080 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.424397][ T7081] netlink: 'syz.1.369': attribute type 39 has an invalid length. [ 66.645821][ T7093] FAULT_INJECTION: forcing a failure. [ 66.645821][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 66.649805][ T40] audit: type=1400 audit(1743604909.135:389): avc: denied { read write } for pid=7094 comm="syz.1.376" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.650403][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.0.374 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 66.650422][ T7093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.650431][ T7093] Call Trace: [ 66.650436][ T7093] [ 66.650442][ T7093] dump_stack_lvl+0x16c/0x1f0 [ 66.650463][ T7093] should_fail_ex+0x512/0x640 [ 66.650482][ T7093] should_failslab+0xc2/0x120 [ 66.650507][ T7093] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 66.650524][ T7093] ? skb_clone+0x190/0x3f0 [ 66.650544][ T7093] skb_clone+0x190/0x3f0 [ 66.650561][ T7093] netlink_deliver_tap+0xabd/0xd30 [ 66.650583][ T7093] netlink_unicast+0x5df/0x7f0 [ 66.650603][ T7093] ? __pfx_netlink_unicast+0x10/0x10 [ 66.650628][ T7093] netlink_sendmsg+0x8d1/0xdd0 [ 66.650649][ T7093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.650675][ T7093] ____sys_sendmsg+0xa95/0xc70 [ 66.650696][ T7093] ? copy_msghdr_from_user+0x10a/0x160 [ 66.650712][ T7093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.650741][ T7093] ___sys_sendmsg+0x134/0x1d0 [ 66.650759][ T7093] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.650803][ T7093] __sys_sendmsg+0x16d/0x220 [ 66.650821][ T7093] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.650843][ T7093] ? rcu_is_watching+0x12/0xc0 [ 66.650867][ T7093] do_syscall_64+0xcd/0x260 [ 66.650887][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.650902][ T7093] RIP: 0033:0x7f80d098d169 [ 66.650915][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.650928][ T7093] RSP: 002b:00007f80d1718038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.650943][ T7093] RAX: ffffffffffffffda RBX: 00007f80d0ba5fa0 RCX: 00007f80d098d169 [ 66.650952][ T7093] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.650960][ T7093] RBP: 00007f80d1718090 R08: 0000000000000000 R09: 0000000000000000 [ 66.650968][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.650977][ T7093] R13: 0000000000000000 R14: 00007f80d0ba5fa0 R15: 00007ffce8e7dd48 [ 66.650997][ T7093] [ 66.717411][ T40] audit: type=1400 audit(1743604909.135:390): avc: denied { open } for pid=7094 comm="syz.1.376" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.724449][ T40] audit: type=1400 audit(1743604909.185:391): avc: denied { create } for pid=7094 comm="syz.1.376" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.769533][ T7103] IPv6: addrconf: prefix option has invalid lifetime [ 66.831706][ T7112] ptrace attach of "/syz-executor exec"[5938] was attempted by "/syz-executor exec"[7112] [ 66.947015][ T7128] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 66.953499][ T7128] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 66.959409][ T7130] FAULT_INJECTION: forcing a failure. [ 66.959409][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 66.962838][ T7130] CPU: 3 UID: 0 PID: 7130 Comm: syz.0.387 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 66.962851][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.962857][ T7130] Call Trace: [ 66.962861][ T7130] [ 66.962865][ T7130] dump_stack_lvl+0x16c/0x1f0 [ 66.962880][ T7130] should_fail_ex+0x512/0x640 [ 66.962889][ T7130] ? __kmalloc_node_noprof+0xc5/0x500 [ 66.962901][ T7130] should_failslab+0xc2/0x120 [ 66.962914][ T7130] __kmalloc_node_noprof+0xd8/0x500 [ 66.962924][ T7130] ? find_held_lock+0x2b/0x80 [ 66.962936][ T7130] ? qdisc_alloc+0xbb/0xc50 [ 66.962949][ T7130] qdisc_alloc+0xbb/0xc50 [ 66.962959][ T7130] ? _raw_read_unlock+0x28/0x50 [ 66.962971][ T7130] qdisc_create+0x71/0xfa0 [ 66.962987][ T7130] tc_modify_qdisc+0x1436/0x2100 [ 66.963004][ T7130] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 66.963030][ T7130] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 66.963044][ T7130] rtnetlink_rcv_msg+0x3c6/0xe90 [ 66.963058][ T7130] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.963076][ T7130] netlink_rcv_skb+0x16a/0x440 [ 66.963088][ T7130] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.963101][ T7130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.963120][ T7130] ? netlink_deliver_tap+0x1ae/0xd30 [ 66.963134][ T7130] netlink_unicast+0x53a/0x7f0 [ 66.963151][ T7130] ? __pfx_netlink_unicast+0x10/0x10 [ 66.963166][ T7130] netlink_sendmsg+0x8d1/0xdd0 [ 66.963181][ T7130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.963198][ T7130] ____sys_sendmsg+0xa95/0xc70 [ 66.963213][ T7130] ? copy_msghdr_from_user+0x10a/0x160 [ 66.963223][ T7130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.963243][ T7130] ___sys_sendmsg+0x134/0x1d0 [ 66.963255][ T7130] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.963282][ T7130] __sys_sendmsg+0x16d/0x220 [ 66.963293][ T7130] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.963308][ T7130] ? rcu_is_watching+0x12/0xc0 [ 66.963324][ T7130] do_syscall_64+0xcd/0x260 [ 66.963337][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.963347][ T7130] RIP: 0033:0x7f80d098d169 [ 66.963355][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.963364][ T7130] RSP: 002b:00007f80d1718038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.963373][ T7130] RAX: ffffffffffffffda RBX: 00007f80d0ba5fa0 RCX: 00007f80d098d169 [ 66.963379][ T7130] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.963399][ T7130] RBP: 00007f80d1718090 R08: 0000000000000000 R09: 0000000000000000 [ 66.963405][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.963410][ T7130] R13: 0000000000000000 R14: 00007f80d0ba5fa0 R15: 00007ffce8e7dd48 [ 66.963423][ T7130] [ 66.966032][ T6000] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.994905][ T40] audit: type=1400 audit(1743604909.485:392): avc: denied { shutdown } for pid=7125 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.145437][ T6000] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 67.147648][ T6000] usb 8-1: can't read configurations, error -22 [ 67.191043][ T7147] netlink: 80 bytes leftover after parsing attributes in process `syz.1.393'. [ 67.275693][ T6000] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.283823][ T7154] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 67.341060][ T58] IPVS: starting estimator thread 0... [ 67.425511][ T6000] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 67.427944][ T6000] usb 8-1: can't read configurations, error -22 [ 67.431299][ T6000] usb usb8-port1: attempt power cycle [ 67.443787][ T7158] IPVS: using max 44 ests per chain, 105600 per kthread [ 67.450489][ T7169] ref_ctr_offset mismatch. inode: 0x2320050 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 67.485067][ T5952] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 67.487487][ T5952] Bluetooth: hci0: Injecting HCI hardware error event [ 67.697013][ T7184] Cannot find add_set index 0 as target [ 67.699908][ T7184] lo: entered allmulticast mode [ 67.702122][ T7184] tunl0: entered allmulticast mode [ 67.704735][ T7184] gre0: entered allmulticast mode [ 67.707153][ T7184] gretap0: entered allmulticast mode [ 67.709548][ T7184] erspan0: entered allmulticast mode [ 67.712038][ T7184] ip_vti0: entered allmulticast mode [ 67.714793][ T7184] ip6_vti0: entered allmulticast mode [ 67.717296][ T7184] sit0: entered allmulticast mode [ 67.719585][ T7184] ip6tnl0: entered allmulticast mode [ 67.722321][ T7184] ip6gre0: entered allmulticast mode [ 67.725673][ T7184] ip6gretap0: entered allmulticast mode [ 67.728318][ T7184] bridge0: entered allmulticast mode [ 67.730836][ T7184] vcan0: entered allmulticast mode [ 67.733088][ T7184] bond0: entered allmulticast mode [ 67.736865][ T7184] bond_slave_0: entered allmulticast mode [ 67.739043][ T7184] bond_slave_1: entered allmulticast mode [ 67.741800][ T7184] team0: entered allmulticast mode [ 67.743459][ T7184] team_slave_0: entered allmulticast mode [ 67.745331][ T7184] team_slave_1: entered allmulticast mode [ 67.747594][ T7184] dummy0: entered allmulticast mode [ 67.749361][ T7184] nlmon0: entered allmulticast mode [ 67.751311][ T7184] caif0: entered allmulticast mode [ 67.753298][ T7184] batadv0: entered allmulticast mode [ 67.757467][ T7184] vxcan0: entered allmulticast mode [ 67.759820][ T7184] vxcan1: entered allmulticast mode [ 67.762215][ T7184] veth0: entered allmulticast mode [ 67.764700][ T7184] veth1: entered allmulticast mode [ 67.767098][ T7184] wg0: entered allmulticast mode [ 67.769430][ T7184] wg1: entered allmulticast mode [ 67.771726][ T7184] wg2: entered allmulticast mode [ 67.773752][ T6000] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.774104][ T7184] veth0_to_bridge: entered allmulticast mode [ 67.778121][ T7184] veth1_to_bridge: entered allmulticast mode [ 67.780280][ T7184] veth0_to_bond: entered allmulticast mode [ 67.782650][ T7184] veth1_to_bond: entered allmulticast mode [ 67.786161][ T7184] veth1_to_team: entered allmulticast mode [ 67.788516][ T7184] veth0_to_batadv: entered allmulticast mode [ 67.790395][ T7184] batadv_slave_0: entered allmulticast mode [ 67.792238][ T7184] veth1_to_batadv: entered allmulticast mode [ 67.794499][ T7184] batadv_slave_1: entered allmulticast mode [ 67.796593][ T7184] xfrm0: entered allmulticast mode [ 67.798232][ T7184] veth0_to_hsr: entered allmulticast mode [ 67.800086][ T7184] hsr_slave_0: entered allmulticast mode [ 67.802404][ T7184] veth1_to_hsr: entered allmulticast mode [ 67.806784][ T7184] hsr0: entered allmulticast mode [ 67.807472][ T6000] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 67.808496][ T7184] veth1_virt_wifi: entered allmulticast mode [ 67.811470][ T6000] usb 8-1: can't read configurations, error -22 [ 67.813289][ T7184] veth0_virt_wifi: entered allmulticast mode [ 67.818314][ T7184] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 67.820840][ T7184] veth1_vlan: entered allmulticast mode [ 67.822735][ T7184] veth0_vlan: entered allmulticast mode [ 67.824686][ T7184] vlan0: entered allmulticast mode [ 67.826320][ T7184] vlan1: entered allmulticast mode [ 67.827951][ T7184] macvlan0: entered allmulticast mode [ 67.829643][ T7184] macvlan1: entered allmulticast mode [ 67.831355][ T7184] ipvlan0: entered allmulticast mode [ 67.832943][ T7184] ipvlan1: entered allmulticast mode [ 67.835081][ T7184] veth1_macvtap: entered allmulticast mode [ 67.837129][ T7184] veth0_macvtap: entered allmulticast mode [ 67.839149][ T7184] macvtap0: entered allmulticast mode [ 67.841004][ T7184] macsec0: entered allmulticast mode [ 67.842751][ T7184] geneve0: entered allmulticast mode [ 67.844727][ T7184] geneve1: entered allmulticast mode [ 67.846879][ T7184] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 67.849858][ T7184] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 67.852717][ T7184] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 67.855459][ T7184] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 67.857828][ T7184] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 67.860008][ T7184] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 67.862275][ T7184] K: entered allmulticast mode [ 67.863839][ T7184] veth2: entered allmulticast mode [ 67.865277][ T7184] veth3: entered allmulticast mode [ 67.867416][ T7184] vlan3: entered allmulticast mode [ 67.869250][ T7184] bridge1: entered allmulticast mode [ 67.911823][ T7190] bridge_slave_0: left allmulticast mode [ 67.914630][ T7190] bridge_slave_0: left promiscuous mode [ 67.916299][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.920877][ T7190] bridge_slave_1: left allmulticast mode [ 67.922844][ T7190] bridge_slave_1: left promiscuous mode [ 67.925189][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.932560][ T7190] bond0: (slave bond_slave_0): Releasing backup interface [ 67.943050][ T7190] bond0: (slave bond_slave_1): Releasing backup interface [ 67.954763][ T6000] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 67.957670][ T7190] team0: Port device team_slave_0 removed [ 67.964734][ T7190] team0: Port device team_slave_1 removed [ 67.966717][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.968854][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.972228][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.974634][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.976424][ T6000] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 67.978908][ T6000] usb 8-1: can't read configurations, error -22 [ 67.980950][ T6000] usb usb8-port1: unable to enumerate USB device [ 67.984368][ T7190] bond2: (slave geneve2): Releasing active interface [ 67.986908][ T7190] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 67.989478][ T7190] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 67.992007][ T7190] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 67.996375][ T7190] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.007050][ T5981] lo speed is unknown, defaulting to 1000 [ 68.030009][ T7198] tmpfs: Bad value for 'mpol' [ 68.089373][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 68.092753][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 68.373734][ T6003] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.526987][ T6003] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 68.529608][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.532033][ T6003] usb 7-1: Product: syz [ 68.533639][ T6003] usb 7-1: Manufacturer: syz [ 68.535010][ T6003] usb 7-1: SerialNumber: syz [ 68.538827][ T6003] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 68.550470][ T6003] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 68.755142][ T6000] usb 7-1: USB disconnect, device number 3 [ 68.763820][ T5953] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 68.766148][ T5953] Bluetooth: hci0: hardware error 0x00 [ 68.774204][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.786388][ T7229] netlink: 68 bytes leftover after parsing attributes in process `syz.2.417'. [ 68.932780][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.935430][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.937709][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.939895][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.942009][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.944447][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.946666][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.948865][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.950995][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.953153][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.955566][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.957727][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.959869][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.962267][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.964676][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.966833][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.968975][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.971099][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.973237][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.976149][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.978294][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.980371][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.982445][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.984824][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.987506][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.989699][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.991872][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.994210][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.996375][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 68.998527][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 69.003230][ T3231] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 69.009059][ T7237] netlink: 'syz.0.421': attribute type 8 has an invalid length. [ 69.057685][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 69.060756][ T7242] Cannot find add_set index 0 as target [ 69.061235][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 69.243449][ T7249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7249 comm=syz.0.426 [ 69.547677][ T7261] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20004 [ 69.575571][ T6003] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 69.577568][ T6003] ath9k_htc: Failed to initialize the device [ 69.580645][ T6000] usb 7-1: ath9k_htc: USB layer deinitialized [ 69.786960][ T7276] tc_dump_action: action bad kind [ 69.810524][ T7276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.812957][ T7276] bond2: entered allmulticast mode [ 69.813996][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.818526][ T7276] bond0: (slave bond2): Enslaving as an active interface with an up link [ 69.873977][ T6000] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.963763][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 69.966614][ T58] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 69.969388][ T58] usb 5-1: config 0 has no interface number 0 [ 69.971468][ T58] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.975100][ T58] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 69.979018][ T58] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.982406][ T58] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.986444][ T58] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 69.989387][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.998719][ T58] usb 5-1: config 0 descriptor?? [ 70.002968][ T58] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 70.024882][ T6000] usb 7-1: config 0 has no interfaces? [ 70.026481][ T6000] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 70.028972][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.032234][ T6000] usb 7-1: config 0 descriptor?? [ 70.103792][ T3231] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 70.256589][ T6003] usb 5-1: USB disconnect, device number 9 [ 70.260541][ T6003] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 70.263765][ T3231] usb 8-1: Using ep0 maxpacket: 16 [ 70.272231][ T3231] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.276230][ T3231] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.279863][ T3231] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 70.283513][ T3231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.288807][ T3231] usb 8-1: config 0 descriptor?? [ 70.292306][ T9] usb 7-1: USB disconnect, device number 4 [ 70.372864][ T7304] lo speed is unknown, defaulting to 1000 [ 70.709966][ T3231] usbhid 8-1:0.0: can't add hid device: -71 [ 70.711680][ T3231] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 70.715184][ T3231] usb 8-1: USB disconnect, device number 8 [ 70.846689][ T5953] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 70.863617][ T7323] syz.0.448: attempt to access beyond end of device [ 70.863617][ T7323] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 70.871082][ T7323] syz.0.448: attempt to access beyond end of device [ 70.871082][ T7323] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 70.876416][ T7323] Mount JFS Failure: -5 [ 70.877982][ T7323] jfs_mount failed w/return code = -5 [ 71.087779][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089614][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.295335][ T7367] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 71.295335][ T7367] The task syz.2.460 (7367) triggered the difference, watch for misbehavior. [ 71.502459][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 71.502470][ T40] audit: type=1400 audit(1743604913.985:422): avc: denied { setopt } for pid=7361 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.720122][ T7384] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 71.745743][ T7386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7386 comm=syz.1.467 [ 71.750333][ T7386] xt_connbytes: Forcing CT accounting to be enabled [ 71.752191][ T7386] Cannot find add_set index 0 as target [ 71.756552][ T7389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7389 comm=syz.1.467 [ 71.800146][ T40] audit: type=1326 audit(1743604914.285:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.0.468" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80d098d169 code=0x0 [ 72.079742][ T7402] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 72.088547][ T7402] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 72.510624][ T40] audit: type=1400 audit(1743604914.995:424): avc: denied { open } for pid=7405 comm="syz.2.472" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.581952][ T40] audit: type=1400 audit(1743604915.065:425): avc: denied { mounton } for pid=7410 comm="syz.2.474" path="/proc/375/task" dev="proc" ino=14974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.686458][ T7421] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.828964][ T40] audit: type=1400 audit(1743604915.315:426): avc: denied { ioctl } for pid=7422 comm="syz.0.479" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.837083][ T40] audit: type=1400 audit(1743604915.325:427): avc: denied { block_suspend } for pid=7422 comm="syz.0.479" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.937234][ T7426] input: syz0 as /devices/virtual/input/input8 [ 72.939087][ T7426] input: failed to attach handler leds to device input8, error: -6 [ 72.948845][ T5953] Bluetooth: hci3: connection err: -111 [ 73.292699][ T7436] trusted_key: syz.1.484 sent an empty control message without MSG_MORE. [ 73.298202][ T7436] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 73.337982][ T7429] bridge2: entered promiscuous mode [ 73.344082][ T7434] bridge3: entered promiscuous mode [ 73.398004][ T40] audit: type=1400 audit(1743604915.885:428): avc: denied { bind } for pid=7443 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.403165][ T40] audit: type=1400 audit(1743604915.885:429): avc: denied { name_bind } for pid=7443 comm="syz.2.488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.412037][ T40] audit: type=1400 audit(1743604915.885:430): avc: denied { node_bind } for pid=7443 comm="syz.2.488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.423800][ T40] audit: type=1400 audit(1743604915.885:431): avc: denied { read } for pid=7443 comm="syz.2.488" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.466850][ T7451] overlayfs: missing 'lowerdir' [ 73.664774][ T7463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.108421][ T7481] loop2: detected capacity change from 0 to 7 [ 74.112451][ T7481] Dev loop2: unable to read RDB block 7 [ 74.115106][ T7481] loop2: AHDI p1 p3 [ 74.116364][ T7481] loop2: partition table partially beyond EOD, truncated [ 74.123146][ T7480] delete_channel: no stack [ 74.405022][ T7511] xt_ecn: cannot match TCP bits for non-tcp packets [ 74.516652][ T7526] netlink: 'syz.3.519': attribute type 10 has an invalid length. [ 74.520137][ T7526] veth0_macvtap: left promiscuous mode [ 74.534836][ T7530] __nla_validate_parse: 2 callbacks suppressed [ 74.534846][ T7530] netlink: 76 bytes leftover after parsing attributes in process `syz.1.520'. [ 74.635751][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 74.639000][ T7552] nbd: socks must be embedded in a SOCK_ITEM attr [ 74.671140][ T7557] QAT: Invalid ioctl -2110754303 [ 74.690499][ T7556] lo speed is unknown, defaulting to 1000 [ 74.696812][ T7534] netlink: 76 bytes leftover after parsing attributes in process `syz.3.522'. [ 74.726310][ T7571] xfrm0: left allmulticast mode [ 74.817453][ T7584] warning: `syz.3.534' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.594921][ T7598] cdrom: dropping to single frame dma [ 75.705499][ T7607] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 75.783964][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 75.811361][ T7615] input: syz0 as /devices/virtual/input/input10 [ 75.813950][ T7615] input: failed to attach handler leds to device input10, error: -6 [ 75.820902][ T5953] Bluetooth: hci2: connection err: -111 [ 75.840995][ T7616] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 75.844918][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 75.863736][ T58] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 76.025010][ T58] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 76.027397][ T58] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 76.029641][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 76.032029][ T58] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 76.035032][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 76.037707][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 76.043962][ T58] usb 7-1: string descriptor 0 read error: -22 [ 76.045756][ T58] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 76.048239][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.051719][ T58] usb 7-1: config 0 descriptor?? [ 76.054473][ T7600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.057347][ T58] hub 7-1:0.0: bad descriptor, ignoring hub [ 76.059018][ T58] hub 7-1:0.0: probe with driver hub failed with error -5 [ 76.063510][ T58] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input11 [ 76.379602][ T58] usb 7-1: USB disconnect, device number 5 [ 76.620111][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 76.620127][ T40] audit: type=1400 audit(1743604919.105:456): avc: denied { shutdown } for pid=7631 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.628722][ T40] audit: type=1400 audit(1743604919.105:457): avc: denied { read } for pid=7631 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.675149][ T7641] xt_hashlimit: size too large, truncated to 1048576 [ 76.736128][ T7636] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 76.745871][ T7636] bond3: entered promiscuous mode [ 76.747596][ T7636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.755778][ T7638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.757921][ T7638] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 76.760711][ T7638] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 76.764897][ T7638] bond3: (slave ip6gre1): making interface the new active one [ 76.766973][ T7638] ip6gre1: entered promiscuous mode [ 76.769042][ T7638] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 76.818506][ T7671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7671 comm=syz.3.551 [ 76.848942][ T7681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.552'. [ 76.879212][ T7640] cgroup: fork rejected by pids controller in /syz1 [ 76.964115][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 77.096814][ T7714] overlayfs: missing 'workdir' [ 77.136088][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 77.139044][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.141705][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 77.147797][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 77.150291][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.152487][ T9] usb 5-1: Product: syz [ 77.155597][ T9] usb 5-1: Manufacturer: syz [ 77.157962][ T9] usb 5-1: SerialNumber: syz [ 77.158394][ T40] audit: type=1400 audit(1743604919.645:458): avc: denied { append } for pid=7717 comm="syz.3.559" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.160470][ T9] usb 5-1: config 0 descriptor?? [ 77.170555][ T40] audit: type=1400 audit(1743604919.645:459): avc: denied { watch_mount } for pid=7717 comm="syz.3.559" path="/103" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.173412][ T7711] netlink: 76 bytes leftover after parsing attributes in process `syz.2.558'. [ 77.178621][ T40] audit: type=1400 audit(1743604919.655:460): avc: denied { map } for pid=7717 comm="syz.3.559" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.192617][ T40] audit: type=1400 audit(1743604919.655:461): avc: denied { execute } for pid=7717 comm="syz.3.559" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.200437][ T7722] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 77.225392][ T7722] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 77.228295][ T7722] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 77.234298][ T7722] bond1: (slave wireguard0): making interface the new active one [ 77.236855][ T7722] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 77.240520][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.560'. [ 77.291454][ T40] audit: type=1400 audit(1743604919.775:462): avc: denied { read } for pid=7733 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.299227][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 77.303160][ T40] audit: type=1400 audit(1743604919.775:463): avc: denied { ioctl } for pid=7731 comm="syz.2.562" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 77.338491][ T40] audit: type=1400 audit(1743604919.825:464): avc: denied { create } for pid=7737 comm="syz.1.564" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.346089][ T40] audit: type=1400 audit(1743604919.825:465): avc: denied { link } for pid=7737 comm="syz.1.564" name="#b" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.377733][ T9] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 77.381593][ T7740] syzkaller1: entered promiscuous mode [ 77.383202][ T7740] syzkaller1: entered allmulticast mode [ 77.505887][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'. [ 77.564475][ T7760] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 77.580523][ T58] usb 5-1: USB disconnect, device number 10 [ 77.660698][ T5981] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 77.825593][ T5981] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.828531][ T5981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.830895][ T5981] usb 8-1: Product: syz [ 77.832113][ T5981] usb 8-1: Manufacturer: syz [ 77.834368][ T5981] usb 8-1: SerialNumber: syz [ 77.844334][ T5981] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 77.872448][ T5981] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.077091][ T58] usb 8-1: USB disconnect, device number 9 [ 78.220404][ T7787] xt_hashlimit: size too large, truncated to 1048576 [ 78.240014][ T7788] program syz.2.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.273402][ T7791] QAT: failed to copy from user cfg_data. [ 78.457549][ T7808] kvm: pic: level sensitive irq not supported [ 78.458052][ T7808] kvm: pic: non byte read [ 78.462322][ T7808] kvm: pic: non byte read [ 78.465058][ T7808] kvm: pic: single mode not supported [ 78.465281][ T7808] kvm: pic: non byte read [ 78.469276][ T7808] kvm: pic: non byte read [ 78.472414][ T7808] kvm: pic: non byte read [ 78.475724][ T7808] kvm: pic: level sensitive irq not supported [ 78.475940][ T7808] kvm: pic: non byte read [ 78.480041][ T7808] kvm: pic: level sensitive irq not supported [ 78.480257][ T7808] kvm: pic: non byte read [ 78.484367][ T7808] kvm: pic: level sensitive irq not supported [ 78.484580][ T7808] kvm: pic: non byte read [ 78.488475][ T7808] kvm: pic: level sensitive irq not supported [ 78.488688][ T7808] kvm: pic: non byte read [ 78.634788][ T7821] dlm: no locking on control device [ 78.659200][ T7821] o2cb: This node has not been configured. [ 78.661575][ T7821] o2cb: Cluster check failed. Fix errors before retrying. [ 78.664526][ T7821] (syz.2.592,7821,1):user_dlm_register:674 ERROR: status = -22 [ 78.667243][ T7821] (syz.2.592,7821,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 78.669918][ T7823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7823 comm=syz.1.593 [ 78.882492][ T7832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.885368][ T7832] bond4: entered allmulticast mode [ 78.887740][ T7832] bond0: (slave bond4): Enslaving as an active interface with an up link [ 78.906735][ T7833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 78.909232][ T7833] bond5: entered allmulticast mode [ 78.911959][ T7833] bond0: (slave bond5): Enslaving as an active interface with an up link [ 78.923782][ T5981] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 78.925987][ T5981] ath9k_htc: Failed to initialize the device [ 78.928621][ T58] usb 8-1: ath9k_htc: USB layer deinitialized [ 78.953756][ T836] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.008728][ T7849] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 79.017439][ T7849] sp0: Synchronizing with TNC [ 79.050516][ T7851] tmpfs: User quota block hardlimit too large. [ 79.066939][ T7856] netlink: 'syz.1.604': attribute type 21 has an invalid length. [ 79.069235][ T7856] netlink: 'syz.1.604': attribute type 5 has an invalid length. [ 79.071443][ T7856] netlink: 'syz.1.604': attribute type 6 has an invalid length. [ 79.113744][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 79.116423][ T836] usb 7-1: config 0 has no interfaces? [ 79.119496][ T836] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 79.121885][ T836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.126022][ T836] usb 7-1: Product: syz [ 79.127398][ T836] usb 7-1: Manufacturer: syz [ 79.128746][ T836] usb 7-1: SerialNumber: syz [ 79.131957][ T836] usb 7-1: config 0 descriptor?? [ 79.132215][ T7864] evm: overlay not supported [ 79.170771][ T7870] xt_hashlimit: size too large, truncated to 1048576 [ 79.346223][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.349694][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.398570][ T3231] usb 7-1: USB disconnect, device number 6 [ 80.045677][ T7908] xt_hashlimit: size too large, truncated to 1048576 [ 80.141500][ T7914] __nla_validate_parse: 11 callbacks suppressed [ 80.141512][ T7914] netlink: 52 bytes leftover after parsing attributes in process `syz.3.622'. [ 80.177892][ T7916] dlm: no locking on control device [ 80.180823][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 80.212268][ T7916] o2cb: This node has not been configured. [ 80.214503][ T7916] o2cb: Cluster check failed. Fix errors before retrying. [ 80.216499][ T7916] (syz.3.624,7916,3):user_dlm_register:674 ERROR: status = -22 [ 80.218568][ T7916] (syz.3.624,7916,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 80.303170][ T7923] netlink: 'syz.0.627': attribute type 21 has an invalid length. [ 80.303211][ T7923] netlink: 152 bytes leftover after parsing attributes in process `syz.0.627'. [ 80.335143][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.337614][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.593723][ T836] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 80.733869][ T836] usb 8-1: device descriptor read/64, error -71 [ 80.900199][ T12] syzkaller0: tun_net_xmit 76 [ 80.901552][ T7929] syzkaller0: create flow: hash 3202920493 index 1 [ 80.902534][ T12] syzkaller0: tun_net_xmit 48 [ 80.905310][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 80.923839][ T6000] syzkaller0: tun_net_xmit 76 [ 80.949660][ T7928] syzkaller0: delete flow: hash 3202920493 index 1 [ 80.984205][ T836] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 81.120297][ T7937] xt_hashlimit: size too large, truncated to 1048576 [ 81.123963][ T836] usb 8-1: device descriptor read/64, error -71 [ 81.166038][ T7941] program syz.1.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.244251][ T836] usb usb8-port1: attempt power cycle [ 81.326020][ T835] cfg80211: failed to load regulatory.db [ 81.443724][ T6000] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.593869][ T836] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 81.594920][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 81.599368][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 81.602062][ T6000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 81.607053][ T6000] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 81.609610][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.611918][ T6000] usb 6-1: Product: syz [ 81.613584][ T6000] usb 6-1: Manufacturer: syz [ 81.614982][ T6000] usb 6-1: SerialNumber: syz [ 81.617464][ T6000] usb 6-1: config 0 descriptor?? [ 81.626639][ T836] usb 8-1: device descriptor read/8, error -71 [ 81.826090][ T6000] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 81.829145][ T7946] trusted_key: encrypted_key: keylen parameter is missing [ 81.833758][ T7946] /dev/sg0: Can't lookup blockdev [ 81.874305][ T836] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 81.894968][ T836] usb 8-1: device descriptor read/8, error -71 [ 81.979682][ T7965] hsr_slave_0: left promiscuous mode [ 81.981675][ T7965] hsr_slave_1: left promiscuous mode [ 82.003858][ T836] usb usb8-port1: unable to enumerate USB device [ 82.025368][ T6003] usb 6-1: USB disconnect, device number 5 [ 82.100563][ T7967] trusted_key: encrypted_key: master key parameter '' is invalid [ 82.213773][ T7974] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.333828][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 82.333839][ T40] audit: type=1400 audit(1743604924.815:474): avc: denied { bind } for pid=7983 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.343002][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 82.829407][ T8019] tmpfs: Unknown parameter 'dont_measure' [ 82.874704][ T40] audit: type=1400 audit(1743604925.365:475): avc: denied { create } for pid=8022 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 82.900107][ T8032] syz.1.664: attempt to access beyond end of device [ 82.900107][ T8032] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.904638][ T8032] SQUASHFS error: Failed to read block 0x0: -5 [ 82.906645][ T8032] unable to read squashfs_super_block [ 82.936312][ T8034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=8034 comm=syz.2.665 [ 83.043748][ T835] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.195883][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 83.198826][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.201656][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.207181][ T835] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 83.209675][ T835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.211829][ T835] usb 5-1: Product: syz [ 83.212984][ T835] usb 5-1: Manufacturer: syz [ 83.214721][ T835] usb 5-1: SerialNumber: syz [ 83.217435][ T835] usb 5-1: config 0 descriptor?? [ 83.392670][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 83.423468][ T835] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 83.463819][ T5981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.590133][ T40] audit: type=1400 audit(1743604926.075:476): avc: denied { append } for pid=8074 comm="syz.3.681" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.613826][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 83.616703][ T5981] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.619669][ T5981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.622047][ T5981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 83.624009][ T6003] usb 5-1: USB disconnect, device number 11 [ 83.625813][ T5981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 83.631537][ T5981] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.636549][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.643968][ T5981] hub 6-1:1.0: bad descriptor, ignoring hub [ 83.646331][ T5981] hub 6-1:1.0: probe with driver hub failed with error -5 [ 83.650095][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 83.652199][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 83.656157][ T5981] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 83.658084][ T5981] cdc_wdm 6-1:1.0: Unknown control protocol [ 83.658398][ T40] audit: type=1400 audit(1743604926.145:477): avc: denied { create } for pid=8081 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 83.717858][ T40] audit: type=1400 audit(1743604926.205:478): avc: denied { getopt } for pid=8089 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.747668][ T8092] netlink: 'syz.3.685': attribute type 30 has an invalid length. [ 83.751715][ T8092] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 83.755700][ T8092] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 83.820418][ T40] audit: type=1400 audit(1743604926.305:479): avc: denied { getopt } for pid=8098 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.840845][ T40] audit: type=1400 audit(1743604926.325:480): avc: denied { append } for pid=8103 comm="syz.2.688" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.841989][ T8104] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 83.848232][ T40] audit: type=1400 audit(1743604926.325:481): avc: denied { create } for pid=8103 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 83.856242][ T40] audit: type=1400 audit(1743604926.325:482): avc: denied { write } for pid=8103 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 83.867213][ T8104] bond3 (unregistering): Released all slaves [ 83.900570][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 83.909560][ T40] audit: type=1400 audit(1743604926.395:483): avc: denied { write } for pid=8062 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.929872][ T8108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.955161][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 83.964947][ T8104] overlay: filesystem on ./file1 not supported [ 84.246345][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 84.296406][ T8153] ================================================================== [ 84.296415][ T8153] BUG: KASAN: stack-out-of-bounds in sys_imageblit+0x1af7/0x1e60 [ 84.296438][ T8153] Write of size 8 at addr ffffc9000538fce8 by task syz.3.702/8153 [ 84.296446][ T8153] [ 84.296451][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.3.702 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 84.296463][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.296470][ T8153] Call Trace: [ 84.296473][ T8153] [ 84.296477][ T8153] dump_stack_lvl+0x116/0x1f0 [ 84.296496][ T8153] print_report+0xc3/0x670 [ 84.296507][ T8153] ? __virt_addr_valid+0x5e/0x590 [ 84.296523][ T8153] ? sys_imageblit+0x1af7/0x1e60 [ 84.296534][ T8153] kasan_report+0xe0/0x110 [ 84.296544][ T8153] ? sys_imageblit+0x1af7/0x1e60 [ 84.296557][ T8153] sys_imageblit+0x1af7/0x1e60 [ 84.296568][ T8153] ? prep_compound_page+0x265/0x4e0 [ 84.296585][ T8153] ? __pfx_sys_imageblit+0x10/0x10 [ 84.296595][ T8153] ? get_page_from_freelist+0x1844/0x39b0 [ 84.296607][ T8153] ? find_held_lock+0x2b/0x80 [ 84.296621][ T8153] ? __pfx_get_page_from_freelist+0x10/0x10 [ 84.296630][ T8153] ? should_fail_alloc_page+0xee/0x130 [ 84.296642][ T8153] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 84.296653][ T8153] bit_putcs+0x90f/0xde0 [ 84.296671][ T8153] ? __pfx_bit_putcs+0x10/0x10 [ 84.296687][ T8153] ? fb_get_color_depth+0x120/0x250 [ 84.296701][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.296713][ T8153] ? __pfx_bit_putcs+0x10/0x10 [ 84.296727][ T8153] fbcon_putcs+0x380/0x4a0 [ 84.296741][ T8153] do_update_region+0x2e6/0x3f0 [ 84.296753][ T8153] invert_screen+0x1e4/0x590 [ 84.296766][ T8153] ? __pfx_invert_screen+0x10/0x10 [ 84.296779][ T8153] ? __pfx_complement_pos+0x10/0x10 [ 84.296792][ T8153] ? trace_kmalloc+0x2b/0xd0 [ 84.296804][ T8153] ? __kmalloc_noprof.cold+0x5c/0x61 [ 84.296817][ T8153] ? find_held_lock+0x2b/0x80 [ 84.296829][ T8153] clear_selection+0x59/0x70 [ 84.296841][ T8153] vc_do_resize+0xd9b/0x10e0 [ 84.296856][ T8153] ? __pfx_vc_do_resize+0x10/0x10 [ 84.296871][ T8153] fbcon_set_disp+0x7ad/0xe40 [ 84.296884][ T8153] set_con2fb_map+0x703/0x1060 [ 84.296899][ T8153] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 84.296915][ T8153] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 84.296931][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.296941][ T8153] do_fb_ioctl+0x328/0x7e0 [ 84.296951][ T8153] ? __pfx_do_fb_ioctl+0x10/0x10 [ 84.296962][ T8153] ? do_vfs_ioctl+0x512/0x1990 [ 84.296982][ T8153] ? selinux_file_ioctl+0x180/0x270 [ 84.296997][ T8153] fb_ioctl+0xe5/0x150 [ 84.297006][ T8153] ? __pfx_fb_ioctl+0x10/0x10 [ 84.297016][ T8153] __x64_sys_ioctl+0x190/0x200 [ 84.297029][ T8153] do_syscall_64+0xcd/0x260 [ 84.297041][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.297051][ T8153] RIP: 0033:0x7f759c98d169 [ 84.297059][ T8153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.297068][ T8153] RSP: 002b:00007f759d789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.297078][ T8153] RAX: ffffffffffffffda RBX: 00007f759cba5fa0 RCX: 00007f759c98d169 [ 84.297084][ T8153] RDX: 00002000000000c0 RSI: 0000000000004610 RDI: 0000000000000003 [ 84.297090][ T8153] RBP: 00007f759ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.297096][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.297101][ T8153] R13: 0000000000000000 R14: 00007f759cba5fa0 R15: 00007ffce577b858 [ 84.297111][ T8153] [ 84.297114][ T8153] [ 84.297118][ T8153] The buggy address belongs to the virtual mapping at [ 84.297118][ T8153] [ffffc90005388000, ffffc90005391000) created by: [ 84.297118][ T8153] kernel_clone+0xfc/0x960 [ 84.297136][ T8153] [ 84.297139][ T8153] The buggy address belongs to the physical page: [ 84.297142][ T8153] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x29646 [ 84.297151][ T8153] memcg:ffff88802376c282 [ 84.297155][ T8153] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.297186][ T8153] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 84.297198][ T8153] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88802376c282 [ 84.297207][ T8153] page dumped because: kasan: bad access detected [ 84.297212][ T8153] page_owner tracks the page as allocated [ 84.297215][ T8153] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 8131, tgid 8131 (syz.3.697), ts 84162894619, free_ts 84153948306 [ 84.297232][ T8153] post_alloc_hook+0x181/0x1b0 [ 84.297247][ T8153] get_page_from_freelist+0x1193/0x39b0 [ 84.297255][ T8153] __alloc_frozen_pages_noprof+0x263/0x2370 [ 84.297265][ T8153] alloc_pages_mpol+0x1fb/0x550 [ 84.297275][ T8153] alloc_pages_noprof+0x131/0x390 [ 84.297285][ T8153] __vmalloc_node_range_noprof+0x732/0x1540 [ 84.297303][ T8153] __vmalloc_node_noprof+0x74/0xa0 [ 84.297317][ T8153] copy_process+0x2ead/0x91a0 [ 84.297330][ T8153] kernel_clone+0xfc/0x960 [ 84.297342][ T8153] __do_sys_clone3+0x212/0x290 [ 84.297356][ T8153] do_syscall_64+0xcd/0x260 [ 84.297366][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.297374][ T8153] page last free pid 8132 tgid 8131 stack trace: [ 84.297380][ T8153] __free_frozen_pages+0x69d/0xff0 [ 84.297393][ T8153] tlb_remove_table_rcu+0x116/0x1a0 [ 84.297408][ T8153] rcu_core+0x799/0x14e0 [ 84.297418][ T8153] handle_softirqs+0x216/0x8e0 [ 84.297430][ T8153] __irq_exit_rcu+0x109/0x170 [ 84.297441][ T8153] irq_exit_rcu+0x9/0x30 [ 84.297453][ T8153] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 84.297462][ T8153] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.297476][ T8153] [ 84.297479][ T8153] Memory state around the buggy address: [ 84.297486][ T8153] ffffc9000538fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.297494][ T8153] ffffc9000538fc00: f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.297501][ T8153] >ffffc9000538fc80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 [ 84.297506][ T8153] ^ [ 84.297511][ T8153] ffffc9000538fd00: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 84.297518][ T8153] ffffc9000538fd80: 00 00 00 00 00 f1 f1 f1 f1 04 f3 f3 f3 00 00 00 [ 84.297523][ T8153] ================================================================== [ 84.297561][ T8153] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.297568][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.3.702 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 84.297580][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.297586][ T8153] Call Trace: [ 84.297589][ T8153] [ 84.297593][ T8153] dump_stack_lvl+0x3d/0x1f0 [ 84.297604][ T8153] panic+0x71c/0x800 [ 84.297613][ T8153] ? __pfx_panic+0x10/0x10 [ 84.297622][ T8153] ? irqentry_exit+0x3b/0x90 [ 84.297632][ T8153] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.297643][ T8153] ? sys_imageblit+0x1af7/0x1e60 [ 84.297654][ T8153] ? check_panic_on_warn+0x1f/0xb0 [ 84.297665][ T8153] ? sys_imageblit+0x1af7/0x1e60 [ 84.297675][ T8153] check_panic_on_warn+0xab/0xb0 [ 84.297684][ T8153] end_report+0x107/0x170 [ 84.297695][ T8153] kasan_report+0xee/0x110 [ 84.297705][ T8153] ? sys_imageblit+0x1af7/0x1e60 [ 84.297718][ T8153] sys_imageblit+0x1af7/0x1e60 [ 84.297729][ T8153] ? prep_compound_page+0x265/0x4e0 [ 84.297745][ T8153] ? __pfx_sys_imageblit+0x10/0x10 [ 84.297755][ T8153] ? get_page_from_freelist+0x1844/0x39b0 [ 84.297767][ T8153] ? find_held_lock+0x2b/0x80 [ 84.297780][ T8153] ? __pfx_get_page_from_freelist+0x10/0x10 [ 84.297789][ T8153] ? should_fail_alloc_page+0xee/0x130 [ 84.297801][ T8153] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 84.297811][ T8153] bit_putcs+0x90f/0xde0 [ 84.297829][ T8153] ? __pfx_bit_putcs+0x10/0x10 [ 84.297845][ T8153] ? fb_get_color_depth+0x120/0x250 [ 84.297858][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.297869][ T8153] ? __pfx_bit_putcs+0x10/0x10 [ 84.297884][ T8153] fbcon_putcs+0x380/0x4a0 [ 84.297898][ T8153] do_update_region+0x2e6/0x3f0 [ 84.297908][ T8153] invert_screen+0x1e4/0x590 [ 84.297921][ T8153] ? __pfx_invert_screen+0x10/0x10 [ 84.297934][ T8153] ? __pfx_complement_pos+0x10/0x10 [ 84.297947][ T8153] ? trace_kmalloc+0x2b/0xd0 [ 84.297959][ T8153] ? __kmalloc_noprof.cold+0x5c/0x61 [ 84.297970][ T8153] ? find_held_lock+0x2b/0x80 [ 84.297983][ T8153] clear_selection+0x59/0x70 [ 84.297994][ T8153] vc_do_resize+0xd9b/0x10e0 [ 84.298010][ T8153] ? __pfx_vc_do_resize+0x10/0x10 [ 84.298024][ T8153] fbcon_set_disp+0x7ad/0xe40 [ 84.298038][ T8153] set_con2fb_map+0x703/0x1060 [ 84.298054][ T8153] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 84.298069][ T8153] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 84.298085][ T8153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.298096][ T8153] do_fb_ioctl+0x328/0x7e0 [ 84.298106][ T8153] ? __pfx_do_fb_ioctl+0x10/0x10 [ 84.298117][ T8153] ? do_vfs_ioctl+0x512/0x1990 [ 84.298137][ T8153] ? selinux_file_ioctl+0x180/0x270 [ 84.298154][ T8153] fb_ioctl+0xe5/0x150 [ 84.298166][ T8153] ? __pfx_fb_ioctl+0x10/0x10 [ 84.298179][ T8153] __x64_sys_ioctl+0x190/0x200 [ 84.298195][ T8153] do_syscall_64+0xcd/0x260 [ 84.298212][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.298226][ T8153] RIP: 0033:0x7f759c98d169 [ 84.298233][ T8153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.298243][ T8153] RSP: 002b:00007f759d789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.298252][ T8153] RAX: ffffffffffffffda RBX: 00007f759cba5fa0 RCX: 00007f759c98d169 [ 84.298259][ T8153] RDX: 00002000000000c0 RSI: 0000000000004610 RDI: 0000000000000003 [ 84.298268][ T8153] RBP: 00007f759ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.298276][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.298286][ T8153] R13: 0000000000000000 R14: 00007f759cba5fa0 R15: 00007ffce577b858 [ 84.298306][ T8153] [ 84.298910][ T8153] Kernel Offset: disabled VM DIAGNOSIS: 14:42:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff815f9420 RDX=ffffffff8e097740 RSI=ffffffff815f9468 RDI=ffffffff93ab4e80 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27569d0 R10=ffffffff93ab4e87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f9469 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f80d1717f98 CR3=00000000235b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbbf38e30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda780f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda780f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda780f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda780f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda780f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda780f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854db1d5 RDI=ffffffff9ae1d3a0 RBP=ffffffff9ae1d360 RSP=ffffc90003636f88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=000000000000007a R14=ffffffff9ae1d360 R15=ffffffff854db170 RIP=ffffffff854db1ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f759d7896c0 ffffffff 00c00000 GS =0000 ffff8880d6abb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcda857ef98 CR3=000000002d462000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe4191930 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355b80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355b80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355b80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355b80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355b80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355b80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff815f9420 RDX=ffff888026854880 RSI=ffffffff815f9468 RDI=ffffffff93ab4e80 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27569d0 R10=ffffffff93ab4e87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f9469 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555558f8500 ffffffff 00c00000 GS =0000 ffff8880d6bbb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f80d0b9cf00 CR3=0000000052b86000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0b7c488 00007f80d0b7c480 00007f80d0b7c478 00007f80d0b7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d16dd100 00007f80d0b7c440 00007f80d0b7c458 00007f80d0b7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0b7c498 00007f80d0b7c490 00007f80d0b7c488 00007f80d0b7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff815f9420 RDX=ffff88801dee8000 RSI=ffffffff815f9468 RDI=ffffffff93ab4e80 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27569d0 R10=ffffffff93ab4e87 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815f9469 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cbb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000814000 CR3=000000005342a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce8e7e0d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d0a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000