last executing test programs: 12.605214654s ago: executing program 0 (id=505): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x2, 0x0, 0x20000000) r1 = socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000040000000000000009500000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup(r4) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x0, @broadcast}}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'ipvlan1\x00', @ifru_ivalue=0x1}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) process_madvise(r8, &(0x7f0000000800)=[{&(0x7f00000003c0)="08105a9bf87a1d8cbe3f645728becf0170210021f17b9b21a279de485ffa76941d24fdfe2c4062bb4948a6462f2203a44204377cb7ce0e7ab2a0edae03ec95c7e5123c62823eddb66506f1e6a4903c46c4a7d011c43f72341cf141", 0x5b}, {&(0x7f0000000580)="fac9cee70936b72a119c85a7309593a15c6eab9e54d9efc94e17c0634f655fdb0ed6495dcb71f5c12ef19c09eec9fb5e8f8136b97fffcdf2c2017c3ba92a3fbd5c375f4bfdb9aa9c0e8ef6ecbda02f96c7f2728bf55986f0929c8478526c549496e8b079e4bee9bba74015eef6655cb529748aaecfc3f54233c7a144e8463520c063daf1354c0aafb164fdf55015f6fc340edda35129ac8572f21dbbb6a55a8894d2a89ce930e2e5c7efe2bd5a736ad61f8e9a18d6adccc1aa74240c36bcbc40ed8760181a4aa0a0c6da1a4b2f20fb7ff54205a9a6f6f6cd6f5daf79315ead774e36ed6ca16c1e22736cd447a0cd39f78aa7b2", 0xf3}, {0x0}, {&(0x7f0000000440)}, {&(0x7f0000000780)="cee3eee54aef2f972aea2fcddcf9553dcd983e1a7594e45c9895e18ddfc07c09545869dd8f2b8242aea54392b98ca77770f49e5937ebbe05e97e32fa8e49a09e0c733e6bcc15f00d8decac8fa24ab1d6673867917c343bdeeafbd6ab18c7da9c57eb6250c276cf291aa86420a0cdcee98c239a51865989b64534", 0x7a}], 0x5, 0x9, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010000092140000001220f00090581d700"/49], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00260f00000003a8407a730b93bf0280b3", @ANYRES32=r6, @ANYRES8=r9, @ANYRESDEC=r1], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r10, 0x40184810, &(0x7f00000000c0)={0x7ff, 0x0, 0x0, 0x500000, 0x0, 0x20000}) ioctl$HIDIOCGREPORT(r10, 0x400c4807, &(0x7f00000000c0)={0x5}) io_uring_enter(r5, 0x52ae, 0xb15b, 0x10, &(0x7f00000001c0)={[0x7]}, 0x8) 9.374242623s ago: executing program 0 (id=524): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x7fc00102}, {0x1, 0x9, 0x6}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/43, 0x2b, 0x0, 0x4, 0x0, 0x0, 0x3}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000480), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000002c0)=[{0x1, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x40}, @result={0x3, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1000}, {0x0, 0x80}, {0x0, 0x3}, @quote={{0x40}}}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001900010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\f\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="3b120b2558214c859044df88eb1aa8979d62bc36130600c7df9575919c460465dd8d50690ba171d640fd4776715f0f350766717a311afb9723972c43eb9f114f56f6b570da016d7b9f7c58f357a85224fc7e0cc8bf7b4075bc4041cbe29cf5ebafca915f811b1ed77a14f07257a7b4e095bc33f828cb045cc24200083997733c3fd9cedd2ca87f5d820148804f47864fb2ccf3d8059a74fb49c58bcd0e7dcaf94734a89b0cf68a24d73405fc47e1c86340152b8f0f571f41f2276fd78ba0eb34"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x0, r6}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff03000000000000e3ffffff9402000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000500)={0x1, 0x1, 0xfff}) r8 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x7ff800000000}, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r9, 0x7c81, 0x0) 8.154349732s ago: executing program 0 (id=529): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000788000/0x2000)=nil) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x3, 0xa) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000f40)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/time\x00') prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x430400, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 5.262668029s ago: executing program 0 (id=535): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000300)=[{0x8, 0x3, 0xb7, 0x2, @time={0x4, 0x10}, {0xf, 0x4}, {0xfe, 0x1}, @control={0x2, 0x5, 0x7}}, {0x4, 0x6, 0x6, 0x2b, @tick=0x5, {0x9, 0x37}, {0xfb, 0x2}, @quote={{0x6, 0x1}, 0x0, &(0x7f0000000380)={0x4, 0x5, 0x3, 0x2, @time={0x8, 0x10}, {0xff, 0x3}, {0x39, 0x8}, @queue={0x5, {0xa, 0x8}}}}}, {0x40, 0x7, 0x4, 0x1, @tick=0x7, {0x80, 0x8}, {0xff, 0x2}, @queue={0x71, {0x5, 0x2}}}, {0xc1, 0x3, 0x7, 0xe6, @time={0x5, 0x3}, {0xea, 0x9d}, {0x81, 0x3}, @addr={0x54, 0x8d}}], 0x93) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/127, 0x7f}], 0x2}, 0x1}], 0x1, 0x2041, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="faf7b6401900010000000000000000001d0108000a00", @ANYRES32=0x0, @ANYBLOB='\f\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x0, r8}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1cf4000005100000010001000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 5.262318485s ago: executing program 1 (id=536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x3, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "74f6056c03b150b2e65b94ea8df920009c4a3732b0e7f1f78e95e914838f"}, 0x29) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)="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", 0x93f}], 0x1}}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4200, r5, 0x3, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000308010200000000000000000000000005000300840000003c0004870800014080000001080001400000000308000140000000030400011977ef4b23c9400000000f080001400000000a08000140ffff800108000140000080010c0004800800"], 0x64}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x77c382, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x319801, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000380)={0x5, 0x98c, 0x0, 0x0, 0xfffffffffffffe5e}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000580)="f36fb93e080000b897dcfad1ba000000000f300f9d1e660f5a93000000000f00d70f300f0094560e000000f30fc7b50000000067f30f09c744240000000000c7442402c186105bc7442406000000000f011424"}], 0x1, 0x0, 0x0, 0x0) 4.893906523s ago: executing program 1 (id=537): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x40}, 0x0, 0x0}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x81, 0x7}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x40000) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0}) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x13, 0x0, &(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r8 = syz_clone(0x0, &(0x7f0000000c80)="3327c6c135d57de7a9261d3516f07eefcd19e1e60e54295eeac1d3a4bec279f1c8654fd0373edc8d37f762160073b2df14d7ee7bbfa8a99e41ac01d09e06a7be2766c2184f0373dcf91d16e9ee18e47b75cd3dd25a997b9637edaf1b3caa883d57edeb38f701b57aad22be901e025acd6ba555afead2df7fe735251b9f51b14588c191202d0ea20a08ec72b4572a8044", 0x90, 0x0, 0x0, 0x0) process_vm_readv(r8, &(0x7f0000000680)=[{&(0x7f0000000bc0)=""/165, 0xa5}], 0x1, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/222, 0xde}], 0x1, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x2, 0x974, 0x3, 0x9, 0xe, 0x5, 0xfd, 0x2c, 0x65, 0x1, 0x5, 0x8, 0x5}, {0x4, 0xbec0, 0x81, 0xe, 0x6, 0x7, 0x1, 0x5, 0xb4, 0x6, 0x5, 0xca, 0xffffffffffff8001}, {0x8, 0x0, 0xc, 0x8, 0x9, 0x9, 0x6, 0x0, 0xf, 0x9, 0x8, 0x5, 0x4}], 0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r12}, &(0x7f0000000100), &(0x7f0000000140)=r11}, 0x20) 4.404896621s ago: executing program 0 (id=538): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000788000/0x2000)=nil) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x3, 0xa) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000f40)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/time\x00') prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x430400, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 3.18953702s ago: executing program 1 (id=541): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x0, 0x7, 0x200, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x64090) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x0) 3.180171678s ago: executing program 1 (id=543): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) r1 = semget$private(0x0, 0x4, 0x120) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000000)=""/192) semget(0x3, 0x0, 0x3fc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r4}, &(0x7f00000000c0)) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='host1x_cdma_push\x00', r5}, 0xffffff01) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.165034147s ago: executing program 2 (id=545): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 3.110685426s ago: executing program 2 (id=546): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x43}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.69991499s ago: executing program 1 (id=549): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='iocharset', 0x0) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f00000001c0)='7\x00', 0x2) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x18, 0x605}, 0x14}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, 0x14, 0x119, 0x0, 0x10000000, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x35, 0xfa, "8d747ea4dc9278634a4c3ae5529e1ddcc4ff4d14d7b8613506a5ce56d72324b6319cfe46b2f7698a223a23adf2102b9e48"}]}, 0x4c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffe}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x17, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r7, &(0x7f00000010c0), 0x0) 1.270298524s ago: executing program 3 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x3, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "74f6056c03b150b2e65b94ea8df920009c4a3732b0e7f1f78e95e914838f"}, 0x29) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)="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", 0x93f}], 0x1}}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4200, r5, 0x3, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000308010200000000000000000000000005000300840000003c0004870800014080000001080001400000000308000140000000030400011977ef4b23c9400000000f080001400000000a08000140ffff800108000140000080010c0004800800"], 0x64}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x77c382, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x319801, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000380)={0x5, 0x98c, 0x0, 0x0, 0xfffffffffffffe5e}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000580)="f36fb93e080000b897dcfad1ba000000000f300f9d1e660f5a93000000000f00d70f300f0094560e000000f30fc7b50000000067f30f09c744240000000000c7442402c186105bc7442406000000000f011424"}], 0x1, 0x0, 0x0, 0x0) 1.223763641s ago: executing program 2 (id=551): openat$vcs(0xffffffffffffff9c, &(0x7f0000005640), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='xprtrdma_decode_seg\x00', r0, 0x0, 0x1bf}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000280)) userfaultfd(0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x800000, 0x20000000000000, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002d6000/0x1000)=nil) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) mprotect(&(0x7f000020c000/0x1000)=nil, 0x1000, 0x2000000) mprotect(&(0x7f00002d7000/0x2000)=nil, 0x2000, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af14, &(0x7f0000000540)={0x1}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x43}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 922.262523ms ago: executing program 3 (id=552): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x0, 0x7, 0x200, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x64090) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x0) 793.626733ms ago: executing program 3 (id=553): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500}}) (fail_nth: 6) 700.581125ms ago: executing program 3 (id=554): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r0, @ANYBLOB="00008a00100000001c001a80080002802d00ff040800020057f47b0c0da5533747f7e7916f8ebdbdb4803a1d6758b231dbaf2e3ee1dde5e0994402ac2459a3ab27a8d60d13bc722780b788405407291903e133924a9f4c6caa562a8739226344613ab20a7ab4b3d5e62e44d82ddab9a356b143367f58a7a7382ef63bf811370c099fdb62986e581dd9dc251a2ca08c0b10db0580e9e83e00a7ddb40e409821a1775dfbc02678b0855f79c19532c369149421e86bbdcc189278c5df041346"], 0x44}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 700.132906ms ago: executing program 3 (id=555): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) 600.444357ms ago: executing program 3 (id=556): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff5, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 484.018038ms ago: executing program 0 (id=557): openat$vcs(0xffffffffffffff9c, &(0x7f0000005640), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='xprtrdma_decode_seg\x00', r0, 0x0, 0x1bf}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000240), 0x0) userfaultfd(0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x800000, 0x20000000000000, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002d6000/0x1000)=nil) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29}]}}}}}, 0x0) mprotect(&(0x7f000020c000/0x1000)=nil, 0x1000, 0x2000000) mprotect(&(0x7f00002d7000/0x2000)=nil, 0x2000, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af14, &(0x7f0000000540)={0x1}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x43}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 280.084656ms ago: executing program 2 (id=558): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x501200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6028230700540600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d0000000000424030300080a0000000000000000020467ca1e10200000d0378bcc9c91a9edb9d12460c5fa6700000000000000000000001e102000"], 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x2, 0xfffffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 29.774754ms ago: executing program 2 (id=559): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6800}}) 0s ago: executing program 2 (id=560): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) r1 = semget$private(0x0, 0x4, 0x120) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000000)=""/192) semget(0x3, 0x0, 0x3fc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r4}, &(0x7f00000000c0)) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='host1x_cdma_push\x00', r5}, 0xffffff01) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): +0x1ce/0xbd0 [ 70.829286][ T5841] ? __fget_files+0x23a/0x3f0 [ 70.830551][ T5841] ? fdget_pos+0x24c/0x360 [ 70.831735][ T5841] ? __pfx_lock_release+0x10/0x10 [ 70.833056][ T5841] ? trace_lock_acquire+0x14a/0x1d0 [ 70.834438][ T5841] ? __pfx_vfs_read+0x10/0x10 [ 70.835675][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 70.836999][ T5841] ? __fget_files+0x244/0x3f0 [ 70.838343][ T5841] ksys_read+0x12f/0x260 [ 70.839684][ T5841] ? __pfx_ksys_read+0x10/0x10 [ 70.840942][ T5841] do_syscall_64+0xcd/0x250 [ 70.842166][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.843708][ T5841] RIP: 0033:0x7f8d8f77ca3c [ 70.844876][ T5841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 70.849865][ T5841] RSP: 002b:00007f8d90593030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.852022][ T5841] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77ca3c [ 70.854086][ T5841] RDX: 000000000000000f RSI: 00007f8d905930a0 RDI: 0000000000000004 [ 70.856143][ T5841] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 70.858205][ T5841] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 70.860247][ T5841] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 70.862323][ T5841] [ 70.937372][ T39] audit: type=1400 audit(1728804383.248:361): avc: denied { setopt } for pid=5842 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.949982][ T39] audit: type=1400 audit(1728804383.248:362): avc: denied { bind } for pid=5842 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.964238][ T39] audit: type=1400 audit(1728804383.248:363): avc: denied { name_bind } for pid=5842 comm="syz.3.114" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 70.973369][ T39] audit: type=1400 audit(1728804383.248:364): avc: denied { node_bind } for pid=5842 comm="syz.3.114" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 70.990769][ T39] audit: type=1400 audit(1728804383.258:365): avc: denied { name_connect } for pid=5842 comm="syz.3.114" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 71.001620][ T39] audit: type=1400 audit(1728804383.308:366): avc: denied { create } for pid=5843 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.006686][ T39] audit: type=1400 audit(1728804383.308:367): avc: denied { bind } for pid=5843 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.012341][ T39] audit: type=1400 audit(1728804383.318:368): avc: denied { listen } for pid=5843 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.013071][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 71.027114][ T39] audit: type=1400 audit(1728804383.318:369): avc: denied { connect } for pid=5843 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.033721][ T39] audit: type=1400 audit(1728804383.328:370): avc: denied { setopt } for pid=5843 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.069500][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.072523][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.326122][ T5852] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 71.636879][ T5867] FAULT_INJECTION: forcing a failure. [ 71.636879][ T5867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.641018][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.1.122 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 71.643771][ T5867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.646615][ T5867] Call Trace: [ 71.647455][ T5867] [ 71.648190][ T5867] dump_stack_lvl+0x16c/0x1f0 [ 71.649358][ T5867] should_fail_ex+0x497/0x5b0 [ 71.650516][ T5867] _copy_to_user+0x30/0xc0 [ 71.651684][ T5867] sctp_getsockopt+0x2a18/0x74a0 [ 71.652976][ T5867] ? avc_has_perm_noaudit+0x119/0x3a0 [ 71.654383][ T5867] ? __pfx_lock_release+0x10/0x10 [ 71.655690][ T5867] ? trace_lock_acquire+0x14a/0x1d0 [ 71.657037][ T5867] ? __pfx_mark_lock+0x10/0x10 [ 71.658266][ T5867] ? __pfx_sctp_getsockopt+0x10/0x10 [ 71.659576][ T5867] ? avc_has_perm+0x11b/0x1c0 [ 71.660771][ T5867] ? __pfx___lock_acquire+0x10/0x10 [ 71.662098][ T5867] ? find_held_lock+0x2d/0x110 [ 71.663355][ T5867] ? __might_fault+0x13b/0x190 [ 71.664631][ T5867] ? __pfx_lock_release+0x10/0x10 [ 71.665948][ T5867] ? trace_lock_acquire+0x14a/0x1d0 [ 71.667301][ T5867] ? lock_acquire+0x2f/0xb0 [ 71.668486][ T5867] ? __might_fault+0xe3/0x190 [ 71.669729][ T5867] ? __might_fault+0xe3/0x190 [ 71.670964][ T5867] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 71.672498][ T5867] ? do_sock_getsockopt+0x3fe/0x800 [ 71.673860][ T5867] do_sock_getsockopt+0x3fe/0x800 [ 71.675149][ T5867] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 71.676635][ T5867] ? __fget_files+0x244/0x3f0 [ 71.677877][ T5867] __sys_getsockopt+0x1a1/0x270 [ 71.679147][ T5867] ? __pfx___sys_getsockopt+0x10/0x10 [ 71.680540][ T5867] ? fput+0x30/0x390 [ 71.681587][ T5867] ? ksys_write+0x1ad/0x260 [ 71.682775][ T5867] ? __pfx_ksys_write+0x10/0x10 [ 71.684048][ T5867] __x64_sys_getsockopt+0xbd/0x160 [ 71.685391][ T5867] ? do_syscall_64+0x91/0x250 [ 71.686637][ T5867] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.687996][ T5867] do_syscall_64+0xcd/0x250 [ 71.689194][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.690741][ T5867] RIP: 0033:0x7f768a97dff9 [ 71.691910][ T5867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.696858][ T5867] RSP: 002b:00007f768b7ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 71.699018][ T5867] RAX: ffffffffffffffda RBX: 00007f768ab35f80 RCX: 00007f768a97dff9 [ 71.701060][ T5867] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 71.703115][ T5867] RBP: 00007f768b7ca090 R08: 0000000020001180 R09: 0000000000000000 [ 71.705151][ T5867] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 71.707123][ T5867] R13: 0000000000000000 R14: 00007f768ab35f80 R15: 00007ffea7c58a48 [ 71.709113][ T5867] [ 71.844464][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.994282][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 71.998723][ T58] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.000796][ T58] usb 8-1: config 0 has no interface number 0 [ 72.002590][ T58] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.010253][ T58] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.017709][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.023107][ T58] usb 8-1: config 0 descriptor?? [ 72.049787][ T58] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 72.162487][ T5880] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 72.224723][ T4765] Bluetooth: hci3: SCO packet for unknown connection handle 1039 [ 72.247191][ T5866] netlink: 'syz.3.123': attribute type 28 has an invalid length. [ 72.251226][ T5866] netlink: 'syz.3.123': attribute type 3 has an invalid length. [ 72.253188][ T5866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.123'. [ 72.635059][ T5882] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 72.685436][ T9] usb 8-1: USB disconnect, device number 2 [ 72.721350][ T9] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected [ 73.828821][ T5916] FAULT_INJECTION: forcing a failure. [ 73.828821][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.832030][ T5916] CPU: 3 UID: 0 PID: 5916 Comm: syz.3.132 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 73.834770][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.837452][ T5916] Call Trace: [ 73.838307][ T5916] [ 73.839058][ T5916] dump_stack_lvl+0x16c/0x1f0 [ 73.840317][ T5916] should_fail_ex+0x497/0x5b0 [ 73.841728][ T5916] _copy_to_user+0x30/0xc0 [ 73.842928][ T5916] simple_read_from_buffer+0xd0/0x160 [ 73.844425][ T5916] proc_fail_nth_read+0x198/0x270 [ 73.845824][ T5916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.847401][ T5916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.848933][ T5916] vfs_read+0x1ce/0xbd0 [ 73.850062][ T5916] ? __fget_files+0x23a/0x3f0 [ 73.851307][ T5916] ? fdget_pos+0x24c/0x360 [ 73.852480][ T5916] ? __pfx_lock_release+0x10/0x10 [ 73.853902][ T5916] ? trace_lock_acquire+0x14a/0x1d0 [ 73.855302][ T5916] ? __pfx_vfs_read+0x10/0x10 [ 73.856555][ T5916] ? __pfx___mutex_lock+0x10/0x10 [ 73.857905][ T5916] ? __fget_files+0x244/0x3f0 [ 73.859155][ T5916] ksys_read+0x12f/0x260 [ 73.860286][ T5916] ? __pfx_ksys_read+0x10/0x10 [ 73.861576][ T5916] do_syscall_64+0xcd/0x250 [ 73.862782][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.864332][ T5916] RIP: 0033:0x7f8d8f77ca3c [ 73.865514][ T5916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 73.870569][ T5916] RSP: 002b:00007f8d90593030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.872807][ T5916] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77ca3c [ 73.874798][ T5916] RDX: 000000000000000f RSI: 00007f8d905930a0 RDI: 0000000000000006 [ 73.876785][ T5916] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 73.878961][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.881007][ T5916] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 73.883092][ T5916] [ 74.010921][ T5924] netlink: 'syz.1.134': attribute type 12 has an invalid length. [ 74.013043][ T5924] netlink: 'syz.1.134': attribute type 11 has an invalid length. [ 74.018579][ T5924] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.134'. [ 74.454287][ T5380] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.604217][ T5380] usb 6-1: Using ep0 maxpacket: 16 [ 74.607469][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 74.610433][ T5380] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 74.612835][ T5380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.621033][ T5380] usb 6-1: config 0 descriptor?? [ 75.047390][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.053736][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.411904][ T5380] usbhid 6-1:0.0: can't add hid device: -71 [ 75.413616][ T5380] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 75.419916][ T5380] usb 6-1: USB disconnect, device number 3 [ 75.994404][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 75.994416][ T39] audit: type=1400 audit(1728804388.308:422): avc: denied { setopt } for pid=5948 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.996019][ T5949] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 75.996086][ T5949] audit: out of memory in audit_log_start [ 76.003272][ T39] audit: type=1400 audit(1728804388.308:423): avc: denied { ioctl } for pid=5948 comm="syz.1.138" path="socket:[9670]" dev="sockfs" ino=9670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.121179][ T39] audit: type=1400 audit(1728804388.418:424): avc: denied { create } for pid=5955 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.124642][ T5956] Cannot find add_set index 0 as target [ 76.134504][ T39] audit: type=1400 audit(1728804388.418:425): avc: denied { setopt } for pid=5955 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.158155][ T39] audit: type=1400 audit(1728804388.468:426): avc: denied { write } for pid=5952 comm="syz.1.140" name="usbmon2" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.163925][ T39] audit: type=1400 audit(1728804388.468:427): avc: denied { open } for pid=5952 comm="syz.1.140" path="/dev/usbmon2" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.192644][ T30] cfg80211: failed to load regulatory.db [ 76.454049][ T39] audit: type=1400 audit(1728804388.758:428): avc: denied { write } for pid=5959 comm="syz.3.142" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.466432][ T39] audit: type=1400 audit(1728804388.778:429): avc: denied { ioctl } for pid=5959 comm="syz.3.142" path="socket:[9742]" dev="sockfs" ino=9742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.805551][ T5964] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 76.807560][ T5964] netlink: 236 bytes leftover after parsing attributes in process `syz.1.143'. [ 77.624976][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 78.762369][ T5994] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.152'. [ 78.767358][ T5994] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 78.780537][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 79.389221][ T6007] fuse: Bad value for 'fd' [ 80.834017][ T6024] FAULT_INJECTION: forcing a failure. [ 80.834017][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 80.839318][ T6024] CPU: 2 UID: 0 PID: 6024 Comm: syz.3.163 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 80.842250][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.845113][ T6024] Call Trace: [ 80.846016][ T6024] [ 80.846821][ T6024] dump_stack_lvl+0x16c/0x1f0 [ 80.848159][ T6024] should_fail_ex+0x497/0x5b0 [ 80.849412][ T6024] ? fs_reclaim_acquire+0xae/0x150 [ 80.850743][ T6024] should_failslab+0xc2/0x120 [ 80.851994][ T6024] kmem_cache_alloc_node_noprof+0x71/0x310 [ 80.853617][ T6024] ? __alloc_skb+0x2b1/0x380 [ 80.854865][ T6024] __alloc_skb+0x2b1/0x380 [ 80.856047][ T6024] ? __pfx___alloc_skb+0x10/0x10 [ 80.857324][ T6024] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 80.858910][ T6024] netlink_alloc_large_skb+0x69/0x130 [ 80.860309][ T6024] netlink_sendmsg+0x689/0xd70 [ 80.861584][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.863027][ T6024] ? __import_iovec+0x1fd/0x6e0 [ 80.864318][ T6024] ____sys_sendmsg+0xaaf/0xc90 [ 80.865581][ T6024] ? copy_msghdr_from_user+0x10b/0x160 [ 80.866992][ T6024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.868434][ T6024] ? __pfx___lock_acquire+0x10/0x10 [ 80.869803][ T6024] ___sys_sendmsg+0x135/0x1e0 [ 80.871030][ T6024] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.872499][ T6024] ? lock_acquire+0x2f/0xb0 [ 80.873689][ T6024] ? __fget_files+0x40/0x3f0 [ 80.875139][ T6024] ? fdget+0x176/0x210 [ 80.876260][ T6024] __sys_sendmsg+0x117/0x1f0 [ 80.877567][ T6024] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.878993][ T6024] ? __fget_files+0x244/0x3f0 [ 80.880330][ T6024] do_syscall_64+0xcd/0x250 [ 80.881765][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.883237][ T6024] RIP: 0033:0x7f8d8f77dff9 [ 80.884375][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.889262][ T6024] RSP: 002b:00007f8d90593038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.891949][ T6024] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77dff9 [ 80.894741][ T6024] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 80.897587][ T6024] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 80.900337][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.903069][ T6024] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 80.905777][ T6024] [ 80.906765][ C2] vkms_vblank_simulate: vblank timer overrun [ 80.992557][ T6032] fuse: Bad value for 'fd' [ 82.377204][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 82.377215][ T39] audit: type=1400 audit(1728804394.688:442): avc: denied { execute } for pid=6062 comm="syz.3.176" path="/39/cpuacct.usage_percpu_sys" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.573541][ T39] audit: type=1400 audit(1728804394.878:443): avc: denied { write } for pid=6064 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.580491][ T39] audit: type=1400 audit(1728804394.888:444): avc: denied { nlmsg_read } for pid=6064 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.601428][ T39] audit: type=1400 audit(1728804394.908:445): avc: denied { ioctl } for pid=6069 comm="syz.1.180" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12769 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.677198][ T39] audit: type=1400 audit(1728804394.988:446): avc: denied { create } for pid=6069 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.712387][ T39] audit: type=1400 audit(1728804396.018:447): avc: denied { setopt } for pid=6088 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.739338][ T39] audit: type=1400 audit(1728804396.048:448): avc: denied { bind } for pid=6088 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.878224][ T39] audit: type=1400 audit(1728804396.188:449): avc: denied { execute } for pid=6091 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.885494][ T39] audit: type=1400 audit(1728804396.188:450): avc: denied { execute_no_trans } for pid=6091 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.019712][ T65] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.023685][ T65] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.029139][ T65] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.032417][ T65] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.035151][ T65] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.044465][ T65] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.055395][ T39] audit: type=1400 audit(1728804396.368:451): avc: denied { mounton } for pid=6098 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 84.168635][ T6098] chnl_net:caif_netlink_parms(): no params data found [ 84.290741][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.293011][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.297669][ T6098] bridge_slave_0: entered allmulticast mode [ 84.299731][ T6098] bridge_slave_0: entered promiscuous mode [ 84.303005][ T6098] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.305982][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.307914][ T6098] bridge_slave_1: entered allmulticast mode [ 84.310013][ T6098] bridge_slave_1: entered promiscuous mode [ 84.478811][ T6098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.486228][ T6098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.512707][ T6098] team0: Port device team_slave_0 added [ 84.525612][ T6098] team0: Port device team_slave_1 added [ 84.548242][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.550074][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.556881][ T6098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.560803][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.562581][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.569019][ T6098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.595477][ T6098] hsr_slave_0: entered promiscuous mode [ 84.597960][ T6098] hsr_slave_1: entered promiscuous mode [ 84.599954][ T6098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.602591][ T6098] Cannot create hsr debugfs directory [ 85.005171][ T6098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.099504][ T6098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.176904][ T6098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.402833][ T6098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.543862][ T6098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.553863][ T6098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.566462][ T6098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.571480][ T6098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.649843][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.665882][ T6098] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.731971][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.733847][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.737643][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.739495][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.763883][ T6098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.774256][ T6098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.947185][ T6098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.981668][ T6098] veth0_vlan: entered promiscuous mode [ 85.989863][ T6098] veth1_vlan: entered promiscuous mode [ 86.017227][ T6098] veth0_macvtap: entered promiscuous mode [ 86.023832][ T6098] veth1_macvtap: entered promiscuous mode [ 86.037388][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.040002][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.042488][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.046214][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.048708][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.051442][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.055429][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.061574][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.066703][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.069222][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.071908][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.086908][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.089999][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.093725][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.097171][ T4765] Bluetooth: hci5: command tx timeout [ 86.103830][ T6098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.109828][ T6098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.112198][ T6098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.114885][ T6098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.236252][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.238434][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.261260][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.263372][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.342780][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 86.355523][ T6140] FAULT_INJECTION: forcing a failure. [ 86.355523][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.359750][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.2.187 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 86.362566][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.365909][ T6140] Call Trace: [ 86.366857][ T6140] [ 86.367632][ T6140] dump_stack_lvl+0x16c/0x1f0 [ 86.368879][ T6140] should_fail_ex+0x497/0x5b0 [ 86.370150][ T6140] _copy_from_user+0x30/0xf0 [ 86.371350][ T6140] get_user_ifreq+0xf1/0x250 [ 86.372526][ T6140] sock_ioctl+0x58c/0x6c0 [ 86.373652][ T6140] ? __pfx_sock_ioctl+0x10/0x10 [ 86.374936][ T6140] ? selinux_file_ioctl+0x180/0x270 [ 86.376293][ T6140] ? selinux_file_ioctl+0xb4/0x270 [ 86.377640][ T6140] ? __pfx_sock_ioctl+0x10/0x10 [ 86.378939][ T6140] __x64_sys_ioctl+0x18f/0x220 [ 86.380198][ T6140] do_syscall_64+0xcd/0x250 [ 86.381420][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.382963][ T6140] RIP: 0033:0x7f01c4d7dff9 [ 86.384158][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.389019][ T6140] RSP: 002b:00007f01c5c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.391317][ T6140] RAX: ffffffffffffffda RBX: 00007f01c4f35f80 RCX: 00007f01c4d7dff9 [ 86.393682][ T6140] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000003 [ 86.395952][ T6140] RBP: 00007f01c5c66090 R08: 0000000000000000 R09: 0000000000000000 [ 86.398333][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.400638][ T6140] R13: 0000000000000000 R14: 00007f01c4f35f80 R15: 00007ffd6c2a46f8 [ 86.402697][ T6140] [ 88.174282][ T4765] Bluetooth: hci5: command tx timeout [ 88.904234][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 88.904245][ T39] audit: type=1400 audit(1728804401.168:463): avc: denied { ioctl } for pid=6178 comm="syz.0.206" path="/dev/video0" dev="devtmpfs" ino=876 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.114409][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 90.176844][ T39] audit: type=1400 audit(1728804402.488:464): avc: denied { bind } for pid=6172 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.209189][ T39] audit: type=1400 audit(1728804402.518:465): avc: denied { listen } for pid=6172 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.258588][ T4765] Bluetooth: hci5: command tx timeout [ 90.332144][ T6205] process 'syz.3.214' launched './file0' with NULL argv: empty string added [ 90.338592][ T39] audit: type=1400 audit(1728804402.648:466): avc: denied { execute_no_trans } for pid=6202 comm="syz.3.214" path="/46/file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.387635][ T39] audit: type=1400 audit(1728804402.698:467): avc: denied { getopt } for pid=6202 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.393683][ T39] audit: type=1400 audit(1728804402.698:468): avc: denied { create } for pid=6202 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.401315][ T39] audit: type=1400 audit(1728804402.698:469): avc: denied { read } for pid=6202 comm="syz.3.214" path="socket:[13763]" dev="sockfs" ino=13763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 90.560010][ T6216] random: crng reseeded on system resumption [ 90.560615][ T39] audit: type=1400 audit(1728804402.868:470): avc: denied { write } for pid=6215 comm="syz.1.219" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.580705][ T39] audit: type=1400 audit(1728804402.868:471): avc: denied { open } for pid=6215 comm="syz.1.219" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.707247][ T39] audit: type=1400 audit(1728804403.018:472): avc: denied { ioctl } for pid=6215 comm="syz.1.219" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.707420][ T6216] Restarting kernel threads ... done. [ 92.344725][ T4765] Bluetooth: hci5: command tx timeout [ 93.943840][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 93.943852][ T39] audit: type=1400 audit(1728804406.248:479): avc: denied { mount } for pid=6278 comm="syz.1.239" name="/" dev="ramfs" ino=14693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.957566][ T6280] fuse: Bad value for 'fd' [ 93.966464][ T39] audit: type=1400 audit(1728804406.278:480): avc: denied { read } for pid=6278 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.087813][ T6279] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.090987][ T39] audit: type=1400 audit(1728804406.398:481): avc: denied { mounton } for pid=6278 comm="syz.1.239" path="/66/file0/bus" dev="ramfs" ino=14701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 94.101293][ T6279] overlayfs: failed to set xattr on upper [ 94.103010][ T6279] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.107211][ T6279] overlayfs: ...falling back to index=off. [ 94.109088][ T6279] overlayfs: ...falling back to uuid=null. [ 94.185731][ T39] audit: type=1400 audit(1728804406.498:482): avc: denied { unmount } for pid=5330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 94.233260][ T39] audit: type=1400 audit(1728804406.538:483): avc: denied { mounton } for pid=6286 comm="syz.1.243" path="/67/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.303349][ T6294] capability: warning: `syz.3.245' uses deprecated v2 capabilities in a way that may be insecure [ 94.328436][ T6300] bridge0: entered allmulticast mode [ 94.330565][ T39] audit: type=1400 audit(1728804406.638:484): avc: denied { write } for pid=6299 comm="syz.3.246" name="ip6_mr_vif" dev="proc" ino=4026533870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 94.338592][ T39] audit: type=1400 audit(1728804406.648:485): avc: denied { read } for pid=6299 comm="syz.3.246" laddr=::1 lport=20003 faddr=::1 fport=47152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.359740][ T39] audit: type=1400 audit(1728804406.668:486): avc: denied { read } for pid=6286 comm="syz.1.243" dev="sockfs" ino=13918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.539029][ T6299] dccp_close: ABORT with 584 bytes unread [ 94.675153][ T6308] fuse: Bad value for 'fd' [ 95.213916][ T6312] FAULT_INJECTION: forcing a failure. [ 95.213916][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 95.217298][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.3.250 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 95.219974][ T6312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.222734][ T6312] Call Trace: [ 95.223602][ T6312] [ 95.224404][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 95.225637][ T6312] should_fail_ex+0x497/0x5b0 [ 95.226869][ T6312] ? lock_acquire.part.0+0x11b/0x380 [ 95.228237][ T6312] should_failslab+0xc2/0x120 [ 95.229463][ T6312] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 95.230853][ T6312] ? dst_alloc+0x99/0x1a0 [ 95.231985][ T6312] ? trace_lock_acquire+0x14a/0x1d0 [ 95.233339][ T6312] ? __pfx_ip6_dst_gc+0x10/0x10 [ 95.234645][ T6312] dst_alloc+0x99/0x1a0 [ 95.235727][ T6312] ip6_dst_alloc+0x2c/0x90 [ 95.236887][ T6312] ip6_pol_route+0x956/0x1120 [ 95.238121][ T6312] ? __pfx_ip6_pol_route+0x10/0x10 [ 95.239445][ T6312] ? ip6t_do_table+0xd50/0x1d40 [ 95.240715][ T6312] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 95.242190][ T6312] fib6_rule_lookup+0x5b8/0x720 [ 95.243459][ T6312] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 95.244886][ T6312] ? nf_nat_ipv6_fn+0x103/0x2e0 [ 95.246170][ T6312] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 95.247525][ T6312] ip6_route_input+0x663/0xc10 [ 95.248826][ T6312] ? __pfx_ip6_route_input+0x10/0x10 [ 95.250214][ T6312] ? __pfx_lock_release+0x10/0x10 [ 95.251519][ T6312] ? trace_lock_acquire+0x14a/0x1d0 [ 95.252878][ T6312] ? tcp_v6_early_demux+0x2ad/0xb40 [ 95.254285][ T6312] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 95.255873][ T6312] ipv6_rcv+0x1e4/0x680 [ 95.256955][ T6312] ? __pfx_ipv6_rcv+0x10/0x10 [ 95.258190][ T6312] __netif_receive_skb_one_core+0x12e/0x1e0 [ 95.259718][ T6312] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 95.261397][ T6312] ? trace_lock_acquire+0x14a/0x1d0 [ 95.262749][ T6312] ? netif_receive_skb+0x109/0x7b0 [ 95.264090][ T6312] __netif_receive_skb+0x1d/0x160 [ 95.265446][ T6312] netif_receive_skb+0x13f/0x7b0 [ 95.266735][ T6312] ? __pfx_netif_receive_skb+0x10/0x10 [ 95.268150][ T6312] ? tun_rx_batched+0x8e/0x780 [ 95.269404][ T6312] tun_rx_batched+0x429/0x780 [ 95.270633][ T6312] ? __pfx_tun_rx_batched+0x10/0x10 [ 95.271986][ T6312] ? lock_acquire+0x2f/0xb0 [ 95.273171][ T6312] ? tun_get_user+0x13c9/0x3d80 [ 95.274627][ T6312] tun_get_user+0x2a4d/0x3d80 [ 95.275867][ T6312] ? __pfx_tun_get_user+0x10/0x10 [ 95.277185][ T6312] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.278713][ T6312] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.280172][ T6312] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 95.281821][ T6312] ? rcu_is_watching+0x12/0xc0 [ 95.282988][ T6312] ? __rcu_read_unlock+0x2b4/0x580 [ 95.284265][ T6312] tun_chr_write_iter+0xdc/0x210 [ 95.285503][ T6312] vfs_write+0x6b5/0x1140 [ 95.286557][ T6312] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 95.287963][ T6312] ? trace_lock_acquire+0x14a/0x1d0 [ 95.289325][ T6312] ? __pfx_vfs_write+0x10/0x10 [ 95.290580][ T6312] ? __fget_files+0x40/0x3f0 [ 95.291805][ T6312] ksys_write+0x12f/0x260 [ 95.292937][ T6312] ? __pfx_ksys_write+0x10/0x10 [ 95.294258][ T6312] do_syscall_64+0xcd/0x250 [ 95.295450][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.296980][ T6312] RIP: 0033:0x7f8d8f77cadf [ 95.298148][ T6312] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 95.302998][ T6312] RSP: 002b:00007f8d90572000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 95.305280][ T6312] RAX: ffffffffffffffda RBX: 00007f8d8f936058 RCX: 00007f8d8f77cadf [ 95.307307][ T6312] RDX: 000000000000004a RSI: 0000000020000000 RDI: 00000000000000c8 [ 95.309338][ T6312] RBP: 00007f8d90572090 R08: 0000000000000000 R09: 0000000000000000 [ 95.311368][ T6312] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 95.313412][ T6312] R13: 0000000000000000 R14: 00007f8d8f936058 R15: 00007ffdcf4dde28 [ 95.315420][ T6312] [ 95.369884][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.444613][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.453831][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.463698][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.471299][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.472621][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.473715][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.481923][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.577719][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.585322][ T39] audit: type=1400 audit(1728804407.898:487): avc: denied { getopt } for pid=6317 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.643581][ T39] audit: type=1400 audit(1728804407.948:488): avc: denied { read } for pid=6321 comm="syz.2.255" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.672837][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.749322][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 96.120653][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.122543][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.125962][ T6315] bridge_slave_0: entered allmulticast mode [ 96.128926][ T6315] bridge_slave_0: entered promiscuous mode [ 96.133531][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.135545][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.137751][ T6315] bridge_slave_1: entered allmulticast mode [ 96.139941][ T6315] bridge_slave_1: entered promiscuous mode [ 96.190507][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.197261][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.228022][ T6315] team0: Port device team_slave_0 added [ 96.233317][ T6315] team0: Port device team_slave_1 added [ 96.283117][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.285147][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.291544][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.295959][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.297721][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.304175][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.405469][ T6315] hsr_slave_0: entered promiscuous mode [ 96.407610][ T6315] hsr_slave_1: entered promiscuous mode [ 96.410117][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.412030][ T6315] Cannot create hsr debugfs directory [ 96.521771][ T6340] fuse: Bad value for 'fd' [ 96.533251][ T12] bridge_slave_1: left allmulticast mode [ 96.535084][ T12] bridge_slave_1: left promiscuous mode [ 96.538050][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.555327][ T12] bridge_slave_0: left allmulticast mode [ 96.556793][ T12] bridge_slave_0: left promiscuous mode [ 96.558307][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.007662][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.020474][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.039307][ T12] bond0 (unregistering): Released all slaves [ 97.615229][ T65] Bluetooth: hci1: command tx timeout [ 97.646539][ T6370] netlink: 56 bytes leftover after parsing attributes in process `syz.3.265'. [ 97.867700][ T12] hsr_slave_0: left promiscuous mode [ 97.874425][ T12] hsr_slave_1: left promiscuous mode [ 97.886952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.889728][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.914918][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.916970][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.965758][ T12] veth1_macvtap: left promiscuous mode [ 97.967854][ T12] veth0_macvtap: left promiscuous mode [ 97.969616][ T12] veth1_vlan: left promiscuous mode [ 97.971657][ T12] veth0_vlan: left promiscuous mode [ 98.011773][ T12] infiniband syz1: set down [ 98.526229][ T6182] smc: removing ib device syz1 [ 98.961811][ T6378] can: request_module (can-proto-4) failed. [ 99.640120][ T6384] kvm: user requested TSC rate below hardware speed [ 99.694320][ T65] Bluetooth: hci1: command tx timeout [ 99.844775][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 99.844787][ T39] audit: type=1400 audit(1728804412.148:494): avc: denied { read } for pid=6387 comm="syz.0.270" path="socket:[15218]" dev="sockfs" ino=15218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.431746][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.621113][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.780231][ T6315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.784401][ T65] Bluetooth: hci1: command tx timeout [ 101.799038][ T6315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.837423][ T6315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.878612][ T6315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.062349][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.115322][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.144219][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.146118][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.169632][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.171627][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.362044][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.389845][ T6315] veth0_vlan: entered promiscuous mode [ 102.399146][ T6315] veth1_vlan: entered promiscuous mode [ 102.428482][ T6315] veth0_macvtap: entered promiscuous mode [ 102.431308][ T6315] veth1_macvtap: entered promiscuous mode [ 102.443933][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.458402][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.460967][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.473896][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.482580][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.496113][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.498067][ T6417] FAULT_INJECTION: forcing a failure. [ 102.498067][ T6417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.499803][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.502462][ T6417] CPU: 2 UID: 0 PID: 6417 Comm: syz.3.275 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 102.507077][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.509840][ T6417] Call Trace: [ 102.510717][ T6417] [ 102.511498][ T6417] dump_stack_lvl+0x16c/0x1f0 [ 102.512732][ T6417] should_fail_ex+0x497/0x5b0 [ 102.513964][ T6417] _copy_to_user+0x30/0xc0 [ 102.515149][ T6417] simple_read_from_buffer+0xd0/0x160 [ 102.516544][ T6417] proc_fail_nth_read+0x198/0x270 [ 102.517891][ T6417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.519327][ T6417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.520780][ T6417] vfs_read+0x1ce/0xbd0 [ 102.521882][ T6417] ? __fget_files+0x23a/0x3f0 [ 102.523106][ T6417] ? fdget_pos+0x24c/0x360 [ 102.524274][ T6417] ? __pfx_lock_release+0x10/0x10 [ 102.525597][ T6417] ? trace_lock_acquire+0x14a/0x1d0 [ 102.526972][ T6417] ? __pfx_vfs_read+0x10/0x10 [ 102.528216][ T6417] ? __pfx___mutex_lock+0x10/0x10 [ 102.529540][ T6417] ? __fget_files+0x244/0x3f0 [ 102.530769][ T6417] ksys_read+0x12f/0x260 [ 102.531888][ T6417] ? __pfx_ksys_read+0x10/0x10 [ 102.533166][ T6417] do_syscall_64+0xcd/0x250 [ 102.534356][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.535895][ T6417] RIP: 0033:0x7f8d8f77ca3c [ 102.537065][ T6417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 102.542028][ T6417] RSP: 002b:00007f8d90593030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.544170][ T6417] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77ca3c [ 102.546262][ T6417] RDX: 000000000000000f RSI: 00007f8d905930a0 RDI: 0000000000000005 [ 102.548290][ T6417] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 102.550327][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.552370][ T6417] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 102.554417][ T6417] [ 102.567026][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.569759][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.572272][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.575716][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.578438][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.582177][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.588955][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.600065][ T6315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.602371][ T6315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.604786][ T6315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.607147][ T6315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.661591][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.663838][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.681904][ T6420] netlink: 'syz.3.276': attribute type 21 has an invalid length. [ 102.693999][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.696261][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.746640][ T39] audit: type=1400 audit(1728804415.058:495): avc: denied { ioctl } for pid=6421 comm="syz.1.252" path="socket:[15473]" dev="sockfs" ino=15473 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.545958][ T39] audit: type=1400 audit(1728804415.858:496): avc: denied { open } for pid=6442 comm="syz.1.280" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 103.679093][ T39] audit: type=1400 audit(1728804415.988:497): avc: denied { create } for pid=6442 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.864301][ T65] Bluetooth: hci1: command tx timeout [ 104.116319][ T6452] FAULT_INJECTION: forcing a failure. [ 104.116319][ T6452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.120037][ T6452] CPU: 2 UID: 0 PID: 6452 Comm: syz.3.282 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 104.122755][ T6452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.125521][ T6452] Call Trace: [ 104.126389][ T6452] [ 104.127160][ T6452] dump_stack_lvl+0x16c/0x1f0 [ 104.128338][ T6452] should_fail_ex+0x497/0x5b0 [ 104.129570][ T6452] _copy_from_user+0x30/0xf0 [ 104.130765][ T6452] vhost_vsock_dev_ioctl+0x224/0xb50 [ 104.132132][ T6452] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 104.133644][ T6452] ? selinux_file_ioctl+0xb4/0x270 [ 104.134966][ T6452] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 104.136466][ T6452] __x64_sys_ioctl+0x18f/0x220 [ 104.137717][ T6452] do_syscall_64+0xcd/0x250 [ 104.138895][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.140428][ T6452] RIP: 0033:0x7f8d8f77dff9 [ 104.141604][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.146530][ T6452] RSP: 002b:00007f8d90593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.148677][ T6452] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77dff9 [ 104.150726][ T6452] RDX: 0000000020000040 RSI: 000000004004af61 RDI: 0000000000000003 [ 104.152804][ T6452] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 104.154957][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.157011][ T6452] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 104.159113][ T6452] [ 104.251699][ T39] audit: type=1400 audit(1728804416.558:498): avc: denied { unmount } for pid=5657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.854108][ T39] audit: type=1400 audit(1728804417.158:499): avc: denied { create } for pid=6459 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.754405][ T5564] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 106.247392][ T5564] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.249682][ T5564] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.252292][ T5564] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.254949][ T5564] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.257829][ T5564] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.262319][ T5564] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.274336][ T5564] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.276534][ T5564] usb 8-1: Product: syz [ 106.277641][ T5564] usb 8-1: Manufacturer: syz [ 106.286370][ T5564] cdc_wdm 8-1:1.0: skipping garbage [ 106.287762][ T5564] cdc_wdm 8-1:1.0: skipping garbage [ 106.290446][ T5564] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 106.292026][ T5564] cdc_wdm 8-1:1.0: Unknown control protocol [ 106.496029][ T35] usb 8-1: USB disconnect, device number 3 [ 106.773217][ T6489] FAULT_INJECTION: forcing a failure. [ 106.773217][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 106.781046][ T6489] CPU: 3 UID: 0 PID: 6489 Comm: syz.2.293 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 106.783807][ T6489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.786387][ T6489] Call Trace: [ 106.787203][ T6489] [ 106.788059][ T6489] dump_stack_lvl+0x16c/0x1f0 [ 106.789493][ T6489] should_fail_ex+0x497/0x5b0 [ 106.790972][ T6489] should_failslab+0xc2/0x120 [ 106.792354][ T6489] __kmalloc_cache_noprof+0x6b/0x300 [ 106.793950][ T6489] ? avc_policy_seqno+0x9/0x20 [ 106.795203][ T6489] ? io_arm_poll_handler+0x3f5/0xc50 [ 106.796583][ T6489] io_arm_poll_handler+0x3f5/0xc50 [ 106.798161][ T6489] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 106.799660][ T6489] ? io_write+0x46a/0x1160 [ 106.801161][ T6489] io_queue_async+0xaa/0x4b0 [ 106.802645][ T6489] io_submit_sqes+0x16ef/0x2530 [ 106.804260][ T6489] __do_sys_io_uring_enter+0xc0f/0x1170 [ 106.805923][ T6489] ? __fget_files+0x244/0x3f0 [ 106.807229][ T6489] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 106.809141][ T6489] ? fput+0x30/0x390 [ 106.810382][ T6489] ? ksys_write+0x1ad/0x260 [ 106.811819][ T6489] ? __pfx_ksys_write+0x10/0x10 [ 106.813032][ T6489] do_syscall_64+0xcd/0x250 [ 106.814497][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.816255][ T6489] RIP: 0033:0x7f01c4d7dff9 [ 106.817641][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.823658][ T6489] RSP: 002b:00007f01c5c66038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 106.826289][ T6489] RAX: ffffffffffffffda RBX: 00007f01c4f35f80 RCX: 00007f01c4d7dff9 [ 106.828792][ T6489] RDX: 0000000000000000 RSI: 0000000000006256 RDI: 0000000000000004 [ 106.831043][ T6489] RBP: 00007f01c5c66090 R08: 0000000000000000 R09: 0000000000000000 [ 106.833388][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.835846][ T6489] R13: 0000000000000000 R14: 00007f01c4f35f80 R15: 00007ffd6c2a46f8 [ 106.838302][ T6489] [ 107.434229][ T35] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 107.564363][ T35] usb 5-1: device descriptor read/64, error -71 [ 107.804361][ T35] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 107.934898][ T6519] FAULT_INJECTION: forcing a failure. [ 107.934898][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.939752][ T6519] CPU: 3 UID: 0 PID: 6519 Comm: syz.3.303 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 107.942778][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.946130][ T6519] Call Trace: [ 107.947651][ T6519] [ 107.948740][ T6519] dump_stack_lvl+0x16c/0x1f0 [ 107.950496][ T6519] should_fail_ex+0x497/0x5b0 [ 107.952284][ T6519] _copy_from_user+0x30/0xf0 [ 107.953987][ T6519] video_usercopy+0xed4/0x1600 [ 107.955741][ T6519] ? __pfx___video_do_ioctl+0x10/0x10 [ 107.957736][ T6519] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.959606][ T6519] ? __pfx_video_usercopy+0x10/0x10 [ 107.961036][ T6519] v4l2_ioctl+0x1ba/0x250 [ 107.962630][ T6519] ? __pfx_v4l2_ioctl+0x10/0x10 [ 107.964418][ T6519] __x64_sys_ioctl+0x18f/0x220 [ 107.966182][ T6519] do_syscall_64+0xcd/0x250 [ 107.967848][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.970001][ T6519] RIP: 0033:0x7f8d8f77dff9 [ 107.971621][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.978119][ T6519] RSP: 002b:00007f8d90593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.980490][ T6519] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77dff9 [ 107.983338][ T6519] RDX: 0000000020000240 RSI: 00000000402c5639 RDI: 0000000000000003 [ 107.985992][ T6519] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 107.988010][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.990737][ T6519] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 107.993597][ T6519] [ 107.995795][ T35] usb 5-1: device descriptor read/64, error -71 [ 108.104535][ T35] usb usb5-port1: attempt power cycle [ 108.106626][ T39] audit: type=1400 audit(1728804420.418:500): avc: denied { read } for pid=6522 comm="syz.3.305" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.162224][ T39] audit: type=1400 audit(1728804420.468:501): avc: denied { setopt } for pid=6522 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.170454][ T39] audit: type=1400 audit(1728804420.478:502): avc: denied { ioctl } for pid=6522 comm="syz.3.305" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.199901][ T6525] FAULT_INJECTION: forcing a failure. [ 108.199901][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.203335][ T6525] CPU: 2 UID: 0 PID: 6525 Comm: syz.3.306 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 108.205999][ T6525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.208961][ T6525] Call Trace: [ 108.209866][ T6525] [ 108.210680][ T6525] dump_stack_lvl+0x16c/0x1f0 [ 108.212188][ T6525] should_fail_ex+0x497/0x5b0 [ 108.213701][ T6525] _copy_from_user+0x30/0xf0 [ 108.215284][ T6525] sctp_getsockopt+0x1f66/0x74a0 [ 108.216845][ T6525] ? avc_has_perm_noaudit+0x119/0x3a0 [ 108.218561][ T6525] ? __pfx_lock_release+0x10/0x10 [ 108.220160][ T6525] ? trace_lock_acquire+0x14a/0x1d0 [ 108.221730][ T6525] ? __pfx_mark_lock+0x10/0x10 [ 108.222985][ T6525] ? __pfx_sctp_getsockopt+0x10/0x10 [ 108.224371][ T6525] ? avc_has_perm+0x11b/0x1c0 [ 108.225548][ T6525] ? __pfx___lock_acquire+0x10/0x10 [ 108.226903][ T6525] ? find_held_lock+0x2d/0x110 [ 108.228158][ T6525] ? __might_fault+0x13b/0x190 [ 108.229433][ T6525] ? __pfx_lock_release+0x10/0x10 [ 108.230750][ T6525] ? trace_lock_acquire+0x14a/0x1d0 [ 108.232109][ T6525] ? lock_acquire+0x2f/0xb0 [ 108.233309][ T6525] ? __might_fault+0xe3/0x190 [ 108.234537][ T6525] ? __might_fault+0xe3/0x190 [ 108.235809][ T6525] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 108.237356][ T6525] ? do_sock_getsockopt+0x3fe/0x800 [ 108.238703][ T6525] do_sock_getsockopt+0x3fe/0x800 [ 108.240009][ T6525] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 108.241460][ T6525] ? __fget_files+0x244/0x3f0 [ 108.242688][ T6525] __sys_getsockopt+0x1a1/0x270 [ 108.243953][ T6525] ? __pfx___sys_getsockopt+0x10/0x10 [ 108.245377][ T6525] ? fput+0x30/0x390 [ 108.246402][ T6525] ? ksys_write+0x1ad/0x260 [ 108.247593][ T6525] ? __pfx_ksys_write+0x10/0x10 [ 108.248863][ T6525] __x64_sys_getsockopt+0xbd/0x160 [ 108.250205][ T6525] ? do_syscall_64+0x91/0x250 [ 108.251439][ T6525] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.252787][ T6525] do_syscall_64+0xcd/0x250 [ 108.253985][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.255510][ T6525] RIP: 0033:0x7f8d8f77dff9 [ 108.256670][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.261629][ T6525] RSP: 002b:00007f8d90593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 108.263778][ T6525] RAX: ffffffffffffffda RBX: 00007f8d8f935f80 RCX: 00007f8d8f77dff9 [ 108.265655][ T6525] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 108.267653][ T6525] RBP: 00007f8d90593090 R08: 0000000020000880 R09: 0000000000000000 [ 108.269695][ T6525] R10: 0000000020000840 R11: 0000000000000246 R12: 0000000000000001 [ 108.271749][ T6525] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 108.273799][ T6525] [ 108.484215][ T35] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 108.504646][ T35] usb 5-1: device descriptor read/8, error -71 [ 108.744415][ T35] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.766200][ T35] usb 5-1: device descriptor read/8, error -71 [ 108.874775][ T35] usb usb5-port1: unable to enumerate USB device [ 111.715746][ T6581] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 111.717836][ T6581] audit: out of memory in audit_log_start [ 111.934987][ T6583] capability: warning: `syz.3.323' uses 32-bit capabilities (legacy support in use) [ 112.011769][ T39] audit: type=1400 audit(1728804424.318:503): avc: denied { shutdown } for pid=6582 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.022538][ T39] audit: type=1400 audit(1728804424.328:504): avc: denied { read } for pid=6582 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.187169][ T6592] random: crng reseeded on system resumption [ 113.193286][ T39] audit: type=1400 audit(1728804425.498:505): avc: denied { append } for pid=6591 comm="syz.3.326" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.513646][ T39] audit: type=1400 audit(1728804425.818:506): avc: denied { read append } for pid=6591 comm="syz.3.326" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.521909][ T39] audit: type=1400 audit(1728804425.818:507): avc: denied { open } for pid=6591 comm="syz.3.326" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.530450][ T39] audit: type=1400 audit(1728804425.828:508): avc: denied { map } for pid=6591 comm="syz.3.326" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.536908][ T39] audit: type=1400 audit(1728804425.828:509): avc: denied { write execute } for pid=6591 comm="syz.3.326" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.674266][ T5380] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 113.831301][ T5380] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.834913][ T5380] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 113.839206][ T5380] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.843462][ T5380] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.849995][ T5380] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.853142][ T5380] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.856685][ T5380] usb 7-1: Product: syz [ 113.858493][ T5380] usb 7-1: Manufacturer: syz [ 113.871553][ T5380] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 114.098005][ T5564] usb 7-1: USB disconnect, device number 2 [ 115.092851][ T6613] FAULT_INJECTION: forcing a failure. [ 115.092851][ T6613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.097283][ T6613] CPU: 2 UID: 0 PID: 6613 Comm: syz.1.332 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 115.100025][ T6613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.102813][ T6613] Call Trace: [ 115.103695][ T6613] [ 115.104463][ T6613] dump_stack_lvl+0x16c/0x1f0 [ 115.105665][ T6613] should_fail_ex+0x497/0x5b0 [ 115.106895][ T6613] _copy_from_user+0x30/0xf0 [ 115.108110][ T6613] video_usercopy+0xed4/0x1600 [ 115.109362][ T6613] ? __pfx___video_do_ioctl+0x10/0x10 [ 115.110665][ T6613] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.112538][ T6613] ? __pfx_video_usercopy+0x10/0x10 [ 115.113910][ T6613] v4l2_ioctl+0x1ba/0x250 [ 115.114987][ T6613] ? __pfx_v4l2_ioctl+0x10/0x10 [ 115.116337][ T6613] __x64_sys_ioctl+0x18f/0x220 [ 115.117594][ T6613] do_syscall_64+0xcd/0x250 [ 115.118800][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.120348][ T6613] RIP: 0033:0x7f031517dff9 [ 115.121539][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.126502][ T6613] RSP: 002b:00007f0315ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.128544][ T6613] RAX: ffffffffffffffda RBX: 00007f0315335f80 RCX: 00007f031517dff9 [ 115.130587][ T6613] RDX: 00000000200005c0 RSI: 00000000c058560f RDI: 0000000000000003 [ 115.132627][ T6613] RBP: 00007f0315ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.134674][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.136707][ T6613] R13: 0000000000000000 R14: 00007f0315335f80 R15: 00007ffc755956f8 [ 115.138750][ T6613] [ 115.273674][ T6620] Bluetooth: MGMT ver 1.23 [ 117.622036][ T6637] 9pnet: Unknown protocol version 9p200 [ 117.634351][ T6637] No control pipe specified [ 119.532143][ T6652] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 119.535392][ T6652] audit: out of memory in audit_log_start [ 119.537402][ T39] audit: type=1400 audit(1728804431.848:510): avc: denied { nlmsg_write } for pid=6651 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.512495][ T39] audit: type=1400 audit(1728804432.818:511): avc: denied { connect } for pid=6645 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.517789][ T39] audit: type=1400 audit(1728804432.818:512): avc: denied { setopt } for pid=6645 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.523071][ T39] audit: type=1400 audit(1728804432.818:513): avc: denied { lock } for pid=6645 comm="syz.1.341" path="socket:[16106]" dev="sockfs" ino=16106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 120.529612][ T39] audit: type=1400 audit(1728804432.828:514): avc: denied { unmount } for pid=5657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.048490][ T4765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.054479][ T4765] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.059264][ T4765] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.066333][ T4765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.086809][ T4765] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 121.102837][ T4765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.323004][ T6673] chnl_net:caif_netlink_parms(): no params data found [ 121.543343][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.555116][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.558307][ T6673] bridge_slave_0: entered allmulticast mode [ 121.561178][ T6673] bridge_slave_0: entered promiscuous mode [ 121.565792][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.567781][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.569759][ T6673] bridge_slave_1: entered allmulticast mode [ 121.571818][ T6673] bridge_slave_1: entered promiscuous mode [ 121.627683][ T6673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.631714][ T6673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.655149][ T6673] team0: Port device team_slave_0 added [ 121.658238][ T6673] team0: Port device team_slave_1 added [ 121.678523][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.680328][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.686969][ T6673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.690584][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.692370][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.701989][ T6673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.745055][ T6673] hsr_slave_0: entered promiscuous mode [ 121.747255][ T6673] hsr_slave_1: entered promiscuous mode [ 121.749149][ T6673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.751168][ T6673] Cannot create hsr debugfs directory [ 121.892154][ T6673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.473881][ T6673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.619164][ T6673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.743169][ T6673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.854325][ T6673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.858969][ T6673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.978170][ T6673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.987639][ T6673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.136758][ T65] Bluetooth: hci6: command tx timeout [ 123.164766][ T6673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.215327][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.225489][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.227337][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.241471][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.243272][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.449363][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.468657][ T6673] veth0_vlan: entered promiscuous mode [ 123.477852][ T6673] veth1_vlan: entered promiscuous mode [ 123.495942][ T6673] veth0_macvtap: entered promiscuous mode [ 123.514677][ T6673] veth1_macvtap: entered promiscuous mode [ 123.528318][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.531212][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.533783][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.540120][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.542736][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.546276][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.548845][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.552209][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.558218][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.563658][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.566913][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.569503][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.572169][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.577070][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.579807][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.582309][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.585707][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.589137][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.593754][ T6673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.598429][ T6673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.600695][ T6673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.602966][ T6673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.650972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.653415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.672095][ T6381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.678722][ T6381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.851694][ T6731] can: request_module (can-proto-4) failed. [ 125.008586][ T6738] bridge0: entered allmulticast mode [ 125.098528][ T6737] dccp_close: ABORT with 584 bytes unread [ 125.214308][ T65] Bluetooth: hci6: command tx timeout [ 127.296193][ T65] Bluetooth: hci6: command tx timeout [ 129.375297][ T65] Bluetooth: hci6: command tx timeout [ 129.499345][ T39] audit: type=1326 audit(1728804441.808:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.373" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d8f77dff9 code=0x0 [ 132.495750][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.497539][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.737625][ T39] audit: type=1400 audit(1728804448.048:516): avc: denied { create } for pid=6848 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.744859][ T39] audit: type=1400 audit(1728804448.058:517): avc: denied { read } for pid=6848 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.544922][ T5380] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 141.694221][ T5380] usb 8-1: Using ep0 maxpacket: 8 [ 141.701261][ T5380] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 141.706747][ T5380] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.712669][ T5380] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.718319][ T5380] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.731664][ T5380] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.734844][ T5380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.944737][ T5380] usb 8-1: GET_CAPABILITIES returned 0 [ 141.946297][ T5380] usbtmc 8-1:16.0: can't read capabilities [ 142.173490][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 142.179569][ T35] usb 8-1: USB disconnect, device number 4 [ 144.625437][ T39] audit: type=1400 audit(1728804456.928:518): avc: denied { ioctl } for pid=6919 comm="syz.3.410" path="socket:[19352]" dev="sockfs" ino=19352 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.014293][ T5380] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.050792][ T6956] tipc: Started in network mode [ 148.052221][ T6956] tipc: Node identity ac1414aa, cluster identity 4711 [ 148.054401][ T6956] tipc: New replicast peer: 100.1.1.1 [ 148.056098][ T6956] tipc: Enabled bearer , priority 10 [ 148.109969][ T6956] block nbd0: shutting down sockets [ 148.175817][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.178717][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.182088][ T5380] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.186476][ T5380] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.189498][ T5380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.193905][ T5380] usb 6-1: config 0 descriptor?? [ 148.616018][ T5380] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 148.619218][ T5380] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 148.625423][ T5380] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 148.802701][ T39] audit: type=1400 audit(1728804461.108:519): avc: denied { create } for pid=6968 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 148.803321][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 148.928921][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 148.935400][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 149.070034][ T829] tipc: Node number set to 2886997162 [ 149.115806][ T39] audit: type=1400 audit(1728804461.428:520): avc: denied { create } for pid=6976 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.124422][ T39] audit: type=1400 audit(1728804461.428:521): avc: denied { connect } for pid=6976 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.853853][ T39] audit: type=1400 audit(1728804463.158:522): avc: denied { getopt } for pid=6989 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.865670][ T6993] Invalid option length (1031570) for dns_resolver key [ 151.096565][ T39] audit: type=1400 audit(1728804463.408:523): avc: denied { connect } for pid=6997 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.205082][ T39] audit: type=1400 audit(1728804463.508:524): avc: denied { ioctl } for pid=6997 comm="syz.1.432" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 151.231675][ T5947] usb 6-1: USB disconnect, device number 4 [ 151.272103][ T39] audit: type=1400 audit(1728804463.578:525): avc: denied { bind } for pid=6999 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.290843][ T7005] netlink: 'syz.3.433': attribute type 11 has an invalid length. [ 151.303806][ T39] audit: type=1400 audit(1728804463.608:526): avc: denied { read } for pid=7006 comm="syz.0.434" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.313078][ T39] audit: type=1400 audit(1728804463.618:527): avc: denied { map } for pid=7006 comm="syz.0.434" path="/dev/video3" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 151.317517][ T7007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.323346][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.326019][ T7007] netlink: 31 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.329039][ T7007] netlink: 'syz.0.434': attribute type 3 has an invalid length. [ 151.331924][ T7007] netlink: 'syz.0.434': attribute type 2 has an invalid length. [ 151.338446][ T7007] netlink: 31 bytes leftover after parsing attributes in process `syz.0.434'. [ 152.432513][ T39] audit: type=1400 audit(1728804464.738:528): avc: denied { cmd } for pid=7025 comm="syz.3.440" path="socket:[21606]" dev="sockfs" ino=21606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.820526][ T7037] Invalid option length (1031570) for dns_resolver key [ 157.771609][ T39] audit: type=1400 audit(1728804470.078:529): avc: denied { write } for pid=7063 comm="syz.3.452" name="task" dev="proc" ino=20749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 157.781552][ T39] audit: type=1400 audit(1728804470.088:530): avc: denied { add_name } for pid=7063 comm="syz.3.452" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 157.790617][ T39] audit: type=1400 audit(1728804470.088:531): avc: denied { create } for pid=7063 comm="syz.3.452" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 157.796043][ T39] audit: type=1400 audit(1728804470.088:532): avc: denied { associate } for pid=7063 comm="syz.3.452" name="cgroup.controllers" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 158.003749][ T7064] netlink: 264 bytes leftover after parsing attributes in process `syz.3.452'. [ 158.006591][ T39] audit: type=1400 audit(1728804470.318:533): avc: denied { watch } for pid=7063 comm="syz.3.452" path="/proc/412/task" dev="proc" ino=20749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.685033][ T39] audit: type=1400 audit(1728804470.998:534): avc: denied { create } for pid=7070 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.700088][ T39] audit: type=1400 audit(1728804471.008:535): avc: denied { getopt } for pid=7070 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 160.202758][ T5345] Bluetooth: hci0: command 0x0406 tx timeout [ 160.205279][ T5345] Bluetooth: hci2: command 0x0406 tx timeout [ 160.209066][ T5345] Bluetooth: hci3: command 0x0406 tx timeout [ 162.602634][ T7113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 162.650592][ T5346] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.656188][ T5346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.660322][ T5346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.671883][ T5346] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.675199][ T5346] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.678149][ T5346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.810656][ T39] audit: type=1400 audit(1728804475.118:536): avc: denied { create } for pid=7112 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 162.823078][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 163.037476][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.039375][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.041633][ T7110] bridge_slave_0: entered allmulticast mode [ 163.050839][ T7110] bridge_slave_0: entered promiscuous mode [ 163.054594][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.061149][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.063789][ T7110] bridge_slave_1: entered allmulticast mode [ 163.069719][ T7110] bridge_slave_1: entered promiscuous mode [ 163.144116][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.148437][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.305305][ T7110] team0: Port device team_slave_0 added [ 163.308107][ T7110] team0: Port device team_slave_1 added [ 163.363205][ T7131] mkiss: ax0: crc mode is auto. [ 163.383028][ T39] audit: type=1400 audit(1728804475.688:537): avc: denied { create } for pid=7128 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.430687][ T7131] netlink: 211388 bytes leftover after parsing attributes in process `syz.3.465'. [ 163.481940][ T39] audit: type=1404 audit(1728804475.788:538): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 163.482915][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.487884][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.494749][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.497685][ T39] audit: type=1400 audit(1728804475.798:539): avc: denied { ioctl } for pid=7132 comm="syz.2.466" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 163.514323][ T39] audit: type=1400 audit(1728804475.808:540): avc: denied { read } for pid=7132 comm="syz.2.466" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 163.549424][ T39] audit: type=1400 audit(1728804475.858:541): avc: denied { read write } for pid=6098 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.605783][ T39] audit: type=1400 audit(1728804475.918:542): avc: denied { name_bind } for pid=7135 comm="syz.2.467" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 163.639017][ T39] audit: type=1400 audit(1728804475.928:543): avc: denied { create } for pid=7135 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 163.669360][ T39] audit: type=1400 audit(1728804475.928:544): avc: denied { create } for pid=7135 comm="syz.2.467" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 163.729011][ T39] audit: type=1400 audit(1728804475.938:545): avc: denied { execute } for pid=7135 comm="syz.2.467" path="/73/cpu.stat" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 163.937554][ T1100] bridge_slave_1: left allmulticast mode [ 163.939872][ T1100] bridge_slave_1: left promiscuous mode [ 163.944350][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.955891][ T1100] bridge_slave_0: left allmulticast mode [ 163.958170][ T1100] bridge_slave_0: left promiscuous mode [ 163.960243][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.735014][ T5342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.740352][ T5342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.744575][ T5342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.748143][ T5342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.750980][ T5342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.753711][ T5342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.862618][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.873032][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.887420][ T1100] bond0 (unregistering): Released all slaves [ 165.143191][ T7148] chnl_net:caif_netlink_parms(): no params data found [ 165.226085][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.312848][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 165.410479][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 166.180274][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.182977][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.186194][ T7148] bridge_slave_0: entered allmulticast mode [ 166.189561][ T7148] bridge_slave_0: entered promiscuous mode [ 166.195422][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.198117][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.200802][ T7148] bridge_slave_1: entered allmulticast mode [ 166.204110][ T7148] bridge_slave_1: entered promiscuous mode [ 166.271154][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.290078][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.429545][ T7148] team0: Port device team_slave_0 added [ 166.432260][ T7148] team0: Port device team_slave_1 added [ 166.501898][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.503744][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.510611][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.515426][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.522948][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.530686][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.598584][ T7148] hsr_slave_0: entered promiscuous mode [ 166.607430][ T7148] hsr_slave_1: entered promiscuous mode [ 166.614377][ T7148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.616385][ T7148] Cannot create hsr debugfs directory [ 166.817266][ T5346] Bluetooth: hci1: command tx timeout [ 166.826158][ T7148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.884823][ T7148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.953521][ T7148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.026972][ T7148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.112880][ T1100] bridge_slave_1: left allmulticast mode [ 167.116050][ T1100] bridge_slave_1: left promiscuous mode [ 167.120274][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.133169][ T1100] bridge_slave_0: left allmulticast mode [ 167.137732][ T1100] bridge_slave_0: left promiscuous mode [ 167.141120][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.414874][ T1100] bridge0 (unregistering): left allmulticast mode [ 167.614698][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.644734][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.659223][ T1100] bond0 (unregistering): Released all slaves [ 167.886773][ T7148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.891058][ T7148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.894763][ T7148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.899387][ T7148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.932793][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.941494][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.945640][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.947519][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.952651][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.954590][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.997301][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 167.997313][ T39] audit: type=1400 audit(1728804480.308:602): avc: denied { sys_module } for pid=7148 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 168.073453][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.092537][ T7148] veth0_vlan: entered promiscuous mode [ 168.103909][ T7148] veth1_vlan: entered promiscuous mode [ 168.113322][ T7148] veth0_macvtap: entered promiscuous mode [ 168.119534][ T7148] veth1_macvtap: entered promiscuous mode [ 168.126007][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.129526][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.134307][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.137771][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.145683][ T39] audit: type=1400 audit(1728804480.448:603): avc: denied { read } for pid=7181 comm="syz.3.474" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.153630][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.157633][ T39] audit: type=1400 audit(1728804480.448:604): avc: denied { open } for pid=7181 comm="syz.3.474" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.169568][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.172836][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.176026][ T39] audit: type=1400 audit(1728804480.448:605): avc: denied { ioctl } for pid=7181 comm="syz.3.474" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.182332][ T39] audit: type=1400 audit(1728804480.448:606): avc: denied { set_context_mgr } for pid=7181 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 168.187664][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.194331][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.198039][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.210028][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.212899][ T39] audit: type=1400 audit(1728804480.478:607): avc: denied { map } for pid=7184 comm="syz.3.476" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.219933][ T39] audit: type=1400 audit(1728804480.478:608): avc: denied { read write } for pid=7184 comm="syz.3.476" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.226243][ T39] audit: type=1400 audit(1728804480.478:609): avc: denied { create } for pid=7180 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.233067][ T39] audit: type=1400 audit(1728804480.488:610): avc: denied { read } for pid=7180 comm="syz.2.483" path="socket:[22219]" dev="sockfs" ino=22219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.261536][ T39] audit: type=1400 audit(1728804480.568:611): avc: denied { create } for pid=7184 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.363546][ T1100] hsr_slave_0: left promiscuous mode [ 168.368709][ T1100] hsr_slave_1: left promiscuous mode [ 168.380038][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.382049][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.424678][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.427261][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.622202][ T1100] veth1_macvtap: left promiscuous mode [ 168.627432][ T1100] veth0_macvtap: left promiscuous mode [ 168.629456][ T1100] veth1_vlan: left promiscuous mode [ 168.631326][ T1100] veth0_vlan: left promiscuous mode [ 168.899825][ T5346] Bluetooth: hci1: command tx timeout [ 170.974342][ T5346] Bluetooth: hci1: command tx timeout [ 172.315888][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 172.477463][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 172.756367][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 173.054244][ T5346] Bluetooth: hci1: command tx timeout [ 173.403644][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.407389][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.410738][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.414498][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.417947][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.422050][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.427497][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.431054][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.436170][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.442929][ T7148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.445902][ T7148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.448929][ T7148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.451874][ T7148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.568993][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.571960][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.606158][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.608256][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.628019][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 173.628031][ T39] audit: type=1400 audit(1728804485.938:628): avc: denied { mounton } for pid=7148 comm="syz-executor" path="/syzkaller.JECnuZ/syz-tmp" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 173.650848][ T39] audit: type=1400 audit(1728804485.948:629): avc: denied { mount } for pid=7148 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.659234][ T39] audit: type=1400 audit(1728804485.948:630): avc: denied { mount } for pid=7148 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 173.665874][ T39] audit: type=1400 audit(1728804485.948:631): avc: denied { mounton } for pid=7148 comm="syz-executor" path="/syzkaller.JECnuZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 173.674236][ T39] audit: type=1400 audit(1728804485.958:632): avc: denied { mounton } for pid=7148 comm="syz-executor" path="/syzkaller.JECnuZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 173.688246][ T39] audit: type=1400 audit(1728804485.968:633): avc: denied { unmount } for pid=7148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 173.707754][ T39] audit: type=1400 audit(1728804486.008:634): avc: denied { mounton } for pid=7148 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 173.738939][ T39] audit: type=1400 audit(1728804486.008:635): avc: denied { mounton } for pid=7148 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 174.390793][ T39] audit: type=1400 audit(1728804486.698:636): avc: denied { unmount } for pid=5657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.320039][ T39] audit: type=1400 audit(1728804487.628:637): avc: denied { create } for pid=7246 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.079080][ T35] kernel write not supported for file /snd/seq (pid: 35 comm: kworker/3:0) [ 178.054386][ T6386] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.204367][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 178.214929][ T6386] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.218154][ T6386] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.221267][ T6386] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.227707][ T6386] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.232676][ T6386] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.236246][ T6386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.451127][ T6386] usb 5-1: GET_CAPABILITIES returned 0 [ 178.452677][ T6386] usbtmc 5-1:16.0: can't read capabilities [ 178.570961][ T7299] FAULT_INJECTION: forcing a failure. [ 178.570961][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.590909][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.2.511 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 178.593751][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.596671][ T7299] Call Trace: [ 178.597607][ T7299] [ 178.598389][ T7299] dump_stack_lvl+0x16c/0x1f0 [ 178.599649][ T7299] should_fail_ex+0x497/0x5b0 [ 178.600928][ T7299] _copy_from_iter+0x2a1/0x1540 [ 178.602225][ T7299] ? __pfx__copy_from_iter+0x10/0x10 [ 178.603612][ T7299] ? __virt_addr_valid+0x1a4/0x590 [ 178.604953][ T7299] ? __virt_addr_valid+0x5e/0x590 [ 178.606283][ T7299] ? __phys_addr_symbol+0x30/0x80 [ 178.607603][ T7299] ? __check_object_size+0x488/0x710 [ 178.608985][ T7299] kernfs_fop_write_iter+0x19d/0x500 [ 178.610367][ T7299] vfs_write+0x6b5/0x1140 [ 178.611507][ T7299] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 178.613041][ T7299] ? trace_lock_acquire+0x14a/0x1d0 [ 178.614404][ T7299] ? __pfx_vfs_write+0x10/0x10 [ 178.615668][ T7299] ? __pfx___mutex_lock+0x10/0x10 [ 178.617006][ T7299] ksys_write+0x12f/0x260 [ 178.618135][ T7299] ? __pfx_ksys_write+0x10/0x10 [ 178.619414][ T7299] do_syscall_64+0xcd/0x250 [ 178.620624][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.622166][ T7299] RIP: 0033:0x7f01c4d7dff9 [ 178.623344][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.628326][ T7299] RSP: 002b:00007f01c5c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.630524][ T7299] RAX: ffffffffffffffda RBX: 00007f01c4f35f80 RCX: 00007f01c4d7dff9 [ 178.632573][ T7299] RDX: 000000000000002f RSI: 0000000020000340 RDI: 0000000000000005 [ 178.634628][ T7299] RBP: 00007f01c5c66090 R08: 0000000000000000 R09: 0000000000000000 [ 178.636692][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.638732][ T7299] R13: 0000000000000000 R14: 00007f01c4f35f80 R15: 00007ffd6c2a46f8 [ 178.640900][ T7299] [ 178.651450][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 178.651460][ T39] audit: type=1400 audit(1728804490.958:647): avc: denied { write } for pid=7281 comm="syz.0.505" name="usbtmc0" dev="devtmpfs" ino=2460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 178.660395][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 178.681449][ T39] audit: type=1400 audit(1728804490.988:648): avc: denied { ioctl } for pid=7281 comm="syz.0.505" path="socket:[22601]" dev="sockfs" ino=22601 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.700645][ T39] audit: type=1400 audit(1728804490.998:649): avc: denied { mounton } for pid=7281 comm="syz.0.505" path="/proc/125/cgroup" dev="proc" ino=22623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 178.706938][ T39] audit: type=1400 audit(1728804491.008:650): avc: denied { mounton } for pid=7281 comm="syz.0.505" path="/proc/125/cgroup" dev="nsfs" ino=4026533168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.715162][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.731360][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.360566][ T39] audit: type=1400 audit(1728804491.668:651): avc: denied { ioctl } for pid=7314 comm="syz.1.516" path="socket:[22653]" dev="sockfs" ino=22653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.367913][ T39] audit: type=1400 audit(1728804491.668:652): avc: denied { setopt } for pid=7314 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.376390][ T39] audit: type=1400 audit(1728804491.678:653): avc: denied { write } for pid=7314 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.070126][ T7325] FAULT_INJECTION: forcing a failure. [ 180.070126][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 180.073389][ T7325] CPU: 3 UID: 0 PID: 7325 Comm: syz.1.519 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 180.076138][ T7325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.078938][ T7325] Call Trace: [ 180.079780][ T7325] [ 180.080586][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 180.081830][ T7325] should_fail_ex+0x497/0x5b0 [ 180.083069][ T7325] ? fs_reclaim_acquire+0xae/0x150 [ 180.084447][ T7325] should_failslab+0xc2/0x120 [ 180.085674][ T7325] __kmalloc_noprof+0xcb/0x400 [ 180.086915][ T7325] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 180.088745][ T7325] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 180.090165][ T7325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.091754][ T7325] ? bpf_lsm_capable+0x9/0x10 [ 180.092998][ T7325] ? security_capable+0x7e/0x260 [ 180.094410][ T7325] ? ns_capable+0xd7/0x110 [ 180.095593][ T7325] genl_rcv_msg+0x565/0x800 [ 180.097503][ T7325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.098847][ T7325] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 180.100272][ T7325] netlink_rcv_skb+0x16b/0x440 [ 180.101562][ T7325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.102882][ T7325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.104483][ T7325] ? down_read+0xc9/0x330 [ 180.105845][ T7325] ? __pfx_down_read+0x10/0x10 [ 180.107113][ T7325] ? netlink_deliver_tap+0x1ae/0xd90 [ 180.108505][ T7325] genl_rcv+0x28/0x40 [ 180.109640][ T7325] netlink_unicast+0x53c/0x7f0 [ 180.110895][ T7325] ? __pfx_netlink_unicast+0x10/0x10 [ 180.112275][ T7325] netlink_sendmsg+0x8b8/0xd70 [ 180.113546][ T7325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.114924][ T7325] ? __import_iovec+0x1fd/0x6e0 [ 180.116211][ T7325] ____sys_sendmsg+0xaaf/0xc90 [ 180.117468][ T7325] ? copy_msghdr_from_user+0x10b/0x160 [ 180.118875][ T7325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.120259][ T7325] ? __pfx___lock_acquire+0x10/0x10 [ 180.121634][ T7325] ___sys_sendmsg+0x135/0x1e0 [ 180.122864][ T7325] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.124397][ T7325] ? lock_acquire+0x2f/0xb0 [ 180.125599][ T7325] ? __fget_files+0x40/0x3f0 [ 180.126806][ T7325] ? fdget+0x176/0x210 [ 180.128746][ T7325] __sys_sendmsg+0x117/0x1f0 [ 180.128768][ T7325] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.128783][ T7325] ? __fget_files+0x244/0x3f0 [ 180.128807][ T7325] do_syscall_64+0xcd/0x250 [ 180.128823][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.128836][ T7325] RIP: 0033:0x7f32c197dff9 [ 180.128847][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.128857][ T7325] RSP: 002b:00007f32c26e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.128869][ T7325] RAX: ffffffffffffffda RBX: 00007f32c1b35f80 RCX: 00007f32c197dff9 [ 180.128876][ T7325] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 180.128883][ T7325] RBP: 00007f32c26e3090 R08: 0000000000000000 R09: 0000000000000000 [ 180.128890][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.128896][ T7325] R13: 0000000000000000 R14: 00007f32c1b35f80 R15: 00007fffbc9137e8 [ 180.128910][ T7325] [ 180.251878][ T39] audit: type=1400 audit(1728804492.558:654): avc: denied { read write } for pid=7328 comm="syz.2.521" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.259863][ T39] audit: type=1400 audit(1728804492.558:655): avc: denied { open } for pid=7328 comm="syz.2.521" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.264342][ T7334] mmap: syz.2.521 (7334) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.271033][ T39] audit: type=1400 audit(1728804492.568:656): avc: denied { lock } for pid=7328 comm="syz.2.521" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.282483][ T7334] bond_slave_0: entered promiscuous mode [ 180.284854][ T7334] bond_slave_1: entered promiscuous mode [ 180.293657][ T7334] vlan2: entered promiscuous mode [ 180.297790][ T7334] bond0: entered promiscuous mode [ 180.306548][ T7334] bond0: left promiscuous mode [ 180.311575][ T7334] bond_slave_0: left promiscuous mode [ 180.314827][ T7334] bond_slave_1: left promiscuous mode [ 180.657272][ T5346] Bluetooth: hci4: command 0x0406 tx timeout [ 180.999801][ T7094] usb 5-1: USB disconnect, device number 6 [ 181.095853][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.097990][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.100481][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.102660][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.104918][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.108377][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.110486][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.112631][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.112695][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.117356][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.119328][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.119341][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.119385][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.126978][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.128919][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.130876][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.132852][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.134866][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.136854][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.138844][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.140811][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.142764][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.145247][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.147225][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.149750][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.151716][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.154050][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.156637][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.159177][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.161751][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.164380][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.166962][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.169508][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.172033][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.174106][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.176135][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.178440][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.180670][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.183214][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.185354][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.187473][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.189598][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.191785][ T5374] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 181.207373][ T5374] hid-generic 0000:0004:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 181.276540][ T7347] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 181.278620][ T7347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.523'. [ 181.412151][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 185.125849][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 185.125860][ T39] audit: type=1400 audit(1728804497.428:663): avc: denied { write } for pid=7373 comm="syz.1.532" path="socket:[23752]" dev="sockfs" ino=23752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.233690][ T39] audit: type=1400 audit(1728804497.538:664): avc: denied { read write } for pid=7379 comm="syz.1.536" name="file0" dev="9p" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.239808][ T39] audit: type=1400 audit(1728804497.548:665): avc: denied { ioctl open } for pid=7379 comm="syz.1.536" path="/15/file0/file0" dev="9p" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.260035][ T39] audit: type=1400 audit(1728804497.568:666): avc: denied { getopt } for pid=7374 comm="syz.3.533" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.266618][ T39] audit: type=1400 audit(1728804497.568:667): avc: denied { ioctl } for pid=7377 comm="syz.0.535" path="/dev/sg0" dev="devtmpfs" ino=705 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.274940][ T39] audit: type=1400 audit(1728804497.568:668): avc: denied { write } for pid=7377 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.285155][ T39] audit: type=1400 audit(1728804497.588:669): avc: denied { bind } for pid=7374 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.290154][ T39] audit: type=1400 audit(1728804497.598:670): avc: denied { name_bind } for pid=7374 comm="syz.3.533" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 185.295797][ T39] audit: type=1400 audit(1728804497.608:671): avc: denied { node_bind } for pid=7374 comm="syz.3.533" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 185.303134][ T39] audit: type=1400 audit(1728804497.608:672): avc: denied { connect } for pid=7374 comm="syz.3.533" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.419569][ T7383] xt_connbytes: Forcing CT accounting to be enabled [ 185.423428][ T7383] Cannot find add_set index 0 as target [ 185.804339][ T5947] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.954261][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 185.957651][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.961978][ T5947] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 185.970123][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.973691][ T5947] usb 6-1: config 0 descriptor?? [ 185.979365][ T5947] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 186.300817][ T6386] usb 6-1: USB disconnect, device number 5 [ 187.507650][ T11] Bluetooth: (null): Too short H5 packet [ 187.519085][ T11] Bluetooth: (null): Invalid header checksum [ 187.522095][ T11] Bluetooth: (null): Invalid header checksum [ 187.614394][ T6182] Bluetooth: (null): Invalid header checksum [ 187.726688][ T69] Bluetooth: (null): Invalid header checksum [ 187.834593][ T69] Bluetooth: (null): Invalid header checksum [ 187.947077][ T12] Bluetooth: (null): Invalid header checksum [ 188.024374][ T5947] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.062669][ T11] Bluetooth: (null): Invalid header checksum [ 188.164670][ T11] Bluetooth: (null): Invalid header checksum [ 188.184462][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 188.188801][ T5947] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 188.191359][ T5947] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 188.191376][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 188.191386][ T5947] usb 7-1: Product: syz [ 188.191394][ T5947] usb 7-1: Manufacturer: syz [ 188.191402][ T5947] usb 7-1: SerialNumber: syz [ 188.195902][ T5947] usb 7-1: config 0 descriptor?? [ 188.200011][ T7418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.275401][ T1100] Bluetooth: (null): Invalid header checksum [ 188.385162][ T1100] Bluetooth: (null): Invalid header checksum [ 188.464921][ T7417] [U]  [ 188.468664][ T5564] usb 7-1: USB disconnect, device number 3 [ 188.501626][ T11] Bluetooth: (null): Invalid header checksum [ 189.644847][ T7448] FAULT_INJECTION: forcing a failure. [ 189.644847][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.644883][ T7448] CPU: 3 UID: 0 PID: 7448 Comm: syz.3.553 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 189.644896][ T7448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.644902][ T7448] Call Trace: [ 189.644906][ T7448] [ 189.644910][ T7448] dump_stack_lvl+0x16c/0x1f0 [ 189.644928][ T7448] should_fail_ex+0x497/0x5b0 [ 189.644945][ T7448] _copy_from_user+0x30/0xf0 [ 189.644957][ T7448] kstrtouint_from_user+0xd7/0x1c0 [ 189.644969][ T7448] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 189.644986][ T7448] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 189.644999][ T7448] proc_fail_nth_write+0x84/0x250 [ 189.645011][ T7448] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.645025][ T7448] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.645035][ T7448] vfs_write+0x28e/0x1140 [ 189.645050][ T7448] ? __fget_files+0x23a/0x3f0 [ 189.645063][ T7448] ? fdget_pos+0x24c/0x360 [ 189.645076][ T7448] ? __pfx_lock_release+0x10/0x10 [ 189.645085][ T7448] ? trace_lock_acquire+0x14a/0x1d0 [ 189.645097][ T7448] ? __pfx_vfs_write+0x10/0x10 [ 189.645110][ T7448] ? __pfx___mutex_lock+0x10/0x10 [ 189.645126][ T7448] ? __fget_files+0x244/0x3f0 [ 189.645143][ T7448] ksys_write+0x12f/0x260 [ 189.645156][ T7448] ? __pfx_ksys_write+0x10/0x10 [ 189.645174][ T7448] do_syscall_64+0xcd/0x250 [ 189.645189][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.645201][ T7448] RIP: 0033:0x7f8d8f77cadf [ 189.645210][ T7448] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 189.645219][ T7448] RSP: 002b:00007f8d90593030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 189.645230][ T7448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d8f77cadf [ 189.645237][ T7448] RDX: 0000000000000001 RSI: 00007f8d905930a0 RDI: 0000000000000004 [ 189.645243][ T7448] RBP: 00007f8d90593090 R08: 0000000000000000 R09: 0000000000000000 [ 189.645249][ T7448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 189.645255][ T7448] R13: 0000000000000000 R14: 00007f8d8f935f80 R15: 00007ffdcf4dde28 [ 189.645269][ T7448] [ 190.034462][ T5564] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 190.254340][ T5564] usb 8-1: Using ep0 maxpacket: 32 [ 190.256379][ T5564] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 190.256395][ T5564] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.256406][ T5564] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.256425][ T5564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.256436][ T5564] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.256453][ T5564] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.256471][ T5564] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.256483][ T5564] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.257791][ T5564] usb 8-1: config 0 descriptor?? [ 190.474938][ T5564] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 190.481904][ T5564] usb 8-1: USB disconnect, device number 5 [ 190.495160][ T5564] usblp0: removed [ 191.054367][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 191.204259][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 191.205614][ T35] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 191.205630][ T35] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 191.205640][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 191.205657][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.205667][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 191.205678][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 191.205696][ T35] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 191.205707][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.206646][ T35] usb 8-1: config 0 descriptor?? [ 191.422414][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.436358][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.437666][ T7468] ================================================================== [ 191.437679][ T7468] BUG: KASAN: slab-use-after-free in raw_process_ep_io+0x848/0xb90 [ 191.437713][ T7468] Read of size 1 at addr ffff888106e28ee2 by task syz.3.556/7468 [ 191.437730][ T7468] [ 191.437735][ T7468] CPU: 3 UID: 0 PID: 7468 Comm: syz.3.556 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 191.437757][ T7468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.437767][ T7468] Call Trace: [ 191.437772][ T7468] [ 191.437779][ T7468] dump_stack_lvl+0x116/0x1f0 [ 191.437804][ T7468] print_report+0xc3/0x620 [ 191.437828][ T7468] ? __virt_addr_valid+0x5e/0x590 [ 191.437849][ T7468] ? __phys_addr+0xc6/0x150 [ 191.437871][ T7468] kasan_report+0xd9/0x110 [ 191.437891][ T7468] ? raw_process_ep_io+0x848/0xb90 [ 191.437915][ T7468] ? raw_process_ep_io+0x848/0xb90 [ 191.437940][ T7468] raw_process_ep_io+0x848/0xb90 [ 191.437965][ T7468] ? __pfx_raw_process_ep_io+0x10/0x10 [ 191.437989][ T7468] ? __might_fault+0xe3/0x190 [ 191.438017][ T7468] ? memdup_user+0x88/0xd0 [ 191.438038][ T7468] raw_ioctl+0xa4d/0x2b90 [ 191.438065][ T7468] ? __pfx_raw_ioctl+0x10/0x10 [ 191.438097][ T7468] ? selinux_file_ioctl+0xb4/0x270 [ 191.438117][ T7468] ? __pfx_raw_ioctl+0x10/0x10 [ 191.438141][ T7468] __x64_sys_ioctl+0x18f/0x220 [ 191.438166][ T7468] do_syscall_64+0xcd/0x250 [ 191.438191][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.438213][ T7468] RIP: 0033:0x7f8d8f77dbfb [ 191.438228][ T7468] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 191.438245][ T7468] RSP: 002b:00007f8d90570f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.438264][ T7468] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d8f77dbfb [ 191.438279][ T7468] RDX: 00007f8d90570ff0 RSI: 0000000040085507 RDI: 0000000000000003 [ 191.438291][ T7468] RBP: 0000000000000003 R08: 00007f8d8fa60320 R09: 0000000000000000 [ 191.438303][ T7468] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 191.438316][ T7468] R13: 000000000000000a R14: 00007f8d8f936058 R15: 00007ffdcf4dde28 [ 191.438335][ T7468] [ 191.438341][ T7468] [ 191.438345][ T7468] Allocated by task 7468: [ 191.438355][ T7468] kasan_save_stack+0x33/0x60 [ 191.438375][ T7468] kasan_save_track+0x14/0x30 [ 191.438393][ T7468] __kasan_kmalloc+0xaa/0xb0 [ 191.438411][ T7468] __kmalloc_node_track_caller_noprof+0x20f/0x430 [ 191.438434][ T7468] memdup_user+0x2a/0xd0 [ 191.438450][ T7468] raw_ioctl+0xbc4/0x2b90 [ 191.438472][ T7468] __x64_sys_ioctl+0x18f/0x220 [ 191.438493][ T7468] do_syscall_64+0xcd/0x250 [ 191.438513][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.438551][ T7468] [ 191.438555][ T7468] Freed by task 7454: [ 191.438563][ T7468] kasan_save_stack+0x33/0x60 [ 191.438580][ T7468] kasan_save_track+0x14/0x30 [ 191.438596][ T7468] kasan_save_free_info+0x3b/0x60 [ 191.438618][ T7468] __kasan_slab_free+0x51/0x70 [ 191.438633][ T7468] kfree+0x14f/0x4b0 [ 191.438645][ T7468] dev_free+0x446/0x700 [ 191.438663][ T7468] raw_release+0x168/0x2b0 [ 191.438682][ T7468] __fput+0x3f6/0xb60 [ 191.438698][ T7468] __fput_sync+0x45/0x50 [ 191.438713][ T7468] __x64_sys_close+0x86/0x100 [ 191.438730][ T7468] do_syscall_64+0xcd/0x250 [ 191.438748][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.438767][ T7468] [ 191.438770][ T7468] The buggy address belongs to the object at ffff888106e28ee0 [ 191.438770][ T7468] which belongs to the cache kmalloc-16 of size 16 [ 191.438783][ T7468] The buggy address is located 2 bytes inside of [ 191.438783][ T7468] freed 16-byte region [ffff888106e28ee0, ffff888106e28ef0) [ 191.438799][ T7468] [ 191.438803][ T7468] The buggy address belongs to the physical page: [ 191.438809][ T7468] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106e28 [ 191.438823][ T7468] anon flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 191.438837][ T7468] page_type: f5(slab) [ 191.438851][ T7468] raw: 057ff00000000000 ffff88801b042640 0000000000000000 dead000000000001 [ 191.438866][ T7468] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 191.438876][ T7468] page dumped because: kasan: bad access detected [ 191.438884][ T7468] page_owner tracks the page as allocated [ 191.438889][ T7468] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6098, tgid 6098 (syz-executor), ts 94295825881, free_ts 14089131590 [ 191.438917][ T7468] post_alloc_hook+0x2d1/0x350 [ 191.438935][ T7468] get_page_from_freelist+0x101e/0x3070 [ 191.438953][ T7468] __alloc_pages_noprof+0x223/0x25a0 [ 191.438971][ T7468] new_slab+0xca/0x3f0 [ 191.438985][ T7468] ___slab_alloc+0xdac/0x1880 [ 191.439000][ T7468] __slab_alloc.constprop.0+0x56/0xb0 [ 191.439015][ T7468] __kmalloc_node_noprof+0x357/0x430 [ 191.439033][ T7468] __kvmalloc_node_noprof+0xad/0x1a0 [ 191.439051][ T7468] xt_replace_table+0x1e3/0x940 [ 191.439072][ T7468] __do_replace+0x1d3/0x9e0 [ 191.439095][ T7468] do_ip6t_set_ctl+0x94b/0xc40 [ 191.439111][ T7468] nf_setsockopt+0x8a/0xf0 [ 191.439129][ T7468] ipv6_setsockopt+0x135/0x170 [ 191.439144][ T7468] tcp_setsockopt+0xa4/0x100 [ 191.439168][ T7468] do_sock_setsockopt+0x222/0x480 [ 191.439187][ T7468] __sys_setsockopt+0x1a4/0x270 [ 191.439212][ T7468] page last free pid 1104 tgid 1104 stack trace: [ 191.439221][ T7468] free_unref_page+0x5f4/0xdc0 [ 191.439239][ T7468] __put_partials+0x14c/0x170 [ 191.439254][ T7468] qlist_free_all+0x4e/0x120 [ 191.439270][ T7468] kasan_quarantine_reduce+0x192/0x1e0 [ 191.439288][ T7468] __kasan_slab_alloc+0x69/0x90 [ 191.439306][ T7468] kmem_cache_alloc_noprof+0x121/0x2f0 [ 191.439325][ T7468] copy_signal+0x50/0x830 [ 191.439342][ T7468] copy_process+0x2754/0x8db0 [ 191.439364][ T7468] kernel_clone+0xfd/0x960 [ 191.439384][ T7468] user_mode_thread+0xb4/0xf0 [ 191.439406][ T7468] call_usermodehelper_exec_work+0xcb/0x170 [ 191.439426][ T7468] process_one_work+0x9c5/0x1ba0 [ 191.439443][ T7468] worker_thread+0x6c8/0xf00 [ 191.439456][ T7468] kthread+0x2c1/0x3a0 [ 191.439476][ T7468] ret_from_fork+0x45/0x80 [ 191.439491][ T7468] ret_from_fork_asm+0x1a/0x30 [ 191.439516][ T7468] [ 191.439520][ T7468] Memory state around the buggy address: [ 191.439528][ T7468] ffff888106e28d80: fa fb fc fc 00 03 fc fc fa fb fc fc fa fb fc fc [ 191.439540][ T7468] ffff888106e28e00: 00 00 fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 191.439552][ T7468] >ffff888106e28e80: 00 03 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 191.439561][ T7468] ^ [ 191.439570][ T7468] ffff888106e28f00: fa fb fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 191.439583][ T7468] ffff888106e28f80: fa fb fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 191.439592][ T7468] ================================================================== [ 191.439602][ T7468] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.439611][ T7468] CPU: 3 UID: 0 PID: 7468 Comm: syz.3.556 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 191.439631][ T7468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.439641][ T7468] Call Trace: [ 191.439646][ T7468] [ 191.439653][ T7468] dump_stack_lvl+0x3d/0x1f0 [ 191.439679][ T7468] panic+0x71d/0x800 [ 191.439704][ T7468] ? __pfx_panic+0x10/0x10 [ 191.439727][ T7468] ? rcu_is_watching+0x12/0xc0 [ 191.439750][ T7468] ? __pfx_lock_release+0x10/0x10 [ 191.439770][ T7468] ? check_panic_on_warn+0x1f/0xb0 [ 191.439797][ T7468] check_panic_on_warn+0xab/0xb0 [ 191.439822][ T7468] end_report+0x117/0x180 [ 191.439841][ T7468] kasan_report+0xe9/0x110 [ 191.439862][ T7468] ? raw_process_ep_io+0x848/0xb90 [ 191.439888][ T7468] ? raw_process_ep_io+0x848/0xb90 [ 191.439913][ T7468] raw_process_ep_io+0x848/0xb90 [ 191.439940][ T7468] ? __pfx_raw_process_ep_io+0x10/0x10 [ 191.439962][ T7468] ? __might_fault+0xe3/0x190 [ 191.439990][ T7468] ? memdup_user+0x88/0xd0 [ 191.440009][ T7468] raw_ioctl+0xa4d/0x2b90 [ 191.440035][ T7468] ? __pfx_raw_ioctl+0x10/0x10 [ 191.440057][ T7468] ? selinux_file_ioctl+0xb4/0x270 [ 191.440094][ T7468] ? __pfx_raw_ioctl+0x10/0x10 [ 191.440119][ T7468] __x64_sys_ioctl+0x18f/0x220 [ 191.440144][ T7468] do_syscall_64+0xcd/0x250 [ 191.440167][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.440191][ T7468] RIP: 0033:0x7f8d8f77dbfb [ 191.440205][ T7468] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 191.440222][ T7468] RSP: 002b:00007f8d90570f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.440240][ T7468] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d8f77dbfb [ 191.440252][ T7468] RDX: 00007f8d90570ff0 RSI: 0000000040085507 RDI: 0000000000000003 [ 191.440263][ T7468] RBP: 0000000000000003 R08: 00007f8d8fa60320 R09: 0000000000000000 [ 191.440275][ T7468] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 191.440286][ T7468] R13: 000000000000000a R14: 00007f8d8f936058 R15: 00007ffdcf4dde28 [ 191.440322][ T7468] [ 191.440964][ T7468] Kernel Offset: disabled VM DIAGNOSIS: 07:28:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81332410 RDX=ffffffff8de957c0 RSI=ffffffff81332458 RDI=ffffffff9377a7c0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff26ef4f8 R10=ffffffff9377a7c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81332459 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffbc912e40 CR3=000000000df7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 695f875961a7668a 5562f09c3dbe30a7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e71193552696b4c b2b66824ea348cf3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d904de984a135ea7 b6b8a45f9bbc218e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bb76d2094c6d18c b806bd45a9776d35 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004500 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073b3197234cdca 22e206a376240000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000024c0073b96c e1cd0e850073bfdb ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd44b1e0d6310ee1 4f580000d7b40000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb62000011990000 0073bae4813e0000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0ebd1e964902b0b 44fb0915d9e9f277 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 14760674598b6ea1 c79f1c7447dacb1b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81332410 RDX=ffff8880226da440 RSI=ffffffff81332458 RDI=ffffffff9377a7c0 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff26ef4f8 R10=ffffffff9377a7c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81332459 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f40619796c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020ea5000 CR3=000000002a73a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=51df0096004e74a1 5167634a112044f5 51df0096004e74a1 5167634a112044f5 51df0096004e74a1 5167634a112044f5 51df0096004e74a1 5167634a112044f5 ZMM18=69b57aa8fd778365 a69d091c9ba4cc0b 69b57aa8fd778365 a69d091c9ba4cc0b 69b57aa8fd778365 a69d091c9ba4cc0b 69b57aa8fd778365 a69d091c9ba4cc0b ZMM19=5f0b000000000000 0000000000000204 5f0b000000000000 0000000000000203 5f0b000000000000 0000000000000202 5f0b000000000000 0000000000000201 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=5167634a5167634a 5167634a5167634a 5167634a5167634a 5167634a5167634a 5167634a5167634a 5167634a5167634a 5167634a5167634a 5167634a5167634a ZMM22=004e74a1004e74a1 004e74a1004e74a1 004e74a1004e74a1 004e74a1004e74a1 004e74a1004e74a1 004e74a1004e74a1 004e74a1004e74a1 004e74a1004e74a1 ZMM23=51df009651df0096 51df009651df0096 51df009651df0096 51df009651df0096 51df009651df0096 51df009651df0096 51df009651df0096 51df009651df0096 ZMM24=9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b 9ba4cc0b9ba4cc0b ZMM25=a69d091ca69d091c a69d091ca69d091c a69d091ca69d091c a69d091ca69d091c a69d091ca69d091c a69d091ca69d091c a69d091ca69d091c a69d091ca69d091c ZMM26=fd778365fd778365 fd778365fd778365 fd778365fd778365 fd778365fd778365 fd778365fd778365 fd778365fd778365 fd778365fd778365 fd778365fd778365 ZMM27=69b57aa869b57aa8 69b57aa869b57aa8 69b57aa869b57aa8 69b57aa869b57aa8 69b57aa869b57aa8 69b57aa869b57aa8 69b57aa869b57aa8 69b57aa869b57aa8 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5f0b00005f0b0000 5f0b00005f0b0000 5f0b00005f0b0000 5f0b00005f0b0000 5f0b00005f0b0000 5f0b00005f0b0000 5f0b00005f0b0000 5f0b00005f0b0000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81332410 RDX=ffff88801dae8000 RSI=ffffffff81332458 RDI=ffffffff9377a7c0 RBP=0000000000000002 RSP=ffffc90000858fd0 R8 =0000000000000001 R9 =fffffbfff26ef4f8 R10=ffffffff9377a7c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81332459 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557f0c7808 CR3=000000002a26a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4e5f4f70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a5f9f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a5f9f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a5f9f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a5f9f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a5f9f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a5f9f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a7e35 RDI=ffffffff9aae3b40 RBP=ffffffff9aae3b00 RSP=ffffc900040cf7c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000003fffc R12=0000000000000000 R13=0000000000000039 R14=ffffffff850a7dd0 R15=0000000000000000 RIP=ffffffff850a7e5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8d905726c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e0d9ee0 CR3=000000005f008000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000003fff Opmask02=00000000fffffe00 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d90571bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000002 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000003 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000002 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffff8100a2b5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000002 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffff600000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8f7f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d8f7f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000