last executing test programs: 6.645579786s ago: executing program 1 (id=1271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x49}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000161, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xd7}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x9, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/787], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r7, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) 5.671481171s ago: executing program 1 (id=1274): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000d0000000d00000002000000050000000000000f01000000d90000000010"], 0x0, 0x2a}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77bc53c49fbe03bb66ec", 0xa}], 0x1, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000015c0)=ANY=[@ANYRES16=r0], 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000980), 0x76, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000136f56e8d5ad8bec40cd95a8208b407200004000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200002d454ca6639661e100b703000000000020850000f223b79ef951f29c90e55e16d53300"], &(0x7f0000000840)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0xfffffffffffffeef, &(0x7f00000045c0)={0xffffffffffffffff, 0x0, 0x8000, 0x280000000000002, 0x4, 0x0, 0x7fffffff, 0x7fffffffffffffff}, 0x0, &(0x7f0000000480)={0xde5, 0x0, 0x100, 0xffffffffffffe000, 0x100000002, 0x1}, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000740)={0x2, 0x0, [{0x4000, 0x80, &(0x7f0000000400)=""/128}, {0xd000, 0xc3, &(0x7f00000004c0)=""/195}]}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r3, r4) readv(r6, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/125, 0x48}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) capset(&(0x7f0000000080)={0x20071026}, 0x0) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x5}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="98ade6d81acbfa3ac76feaefb4c7585a5edd027d603699693fb8b7848826496459fc1c305bcb0f70137cd6545d6597a679e4133d88f9643cbdb4fcef6f703a19c5ffa60875363f12f7b332cab241c554140f85032088d8ee1b7d88eb1ab88f66560aa13807d38b34776b7dac87bf773af438f69c39317cbddb99467505cd86d570612692b017d0c9be32dc657100dc140116a814d8d56a68452dd4bbd21355944b139a28dd055acc385ac1a4fdc89cc2d19ae928765b6173cbb66fc50e023190f63efa8b1318ab8106873c", @ANYRESDEC=r1, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) socketpair(0x1d, 0x5, 0x5, &(0x7f0000000640)) 5.081409654s ago: executing program 2 (id=1282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001800010000000000000000000a00000000000000000000000c000900", @ANYBLOB="100016800c0000e00f000000000000000600150008000000050014"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/79, &(0x7f0000000480)=""/74}) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000480)}) symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000020071118800000000009324000008000000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000280)={0x81, 0x0, 0x0, 0x0, 0x15, "cd2c683c06000081a0f200b7fc380eb6f86d22"}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x80a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x106}, 0xe) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="85100000ffffffff852000000300000085200000030000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000124a000085000000060000009500000000000000185700000e000000000000000000000018110000", @ANYRES32, @ANYBLOB="added3000000000b0097090000a5acff070000000000000bd4fba2000000000000070d0000b8ffff32b703003679f2010050000085691549bb5c00000082000000188ff898bf604d989290499b3d7ef79fd6c26c70c99a0cf5f854423863590dbbe8690750192eb85b316eaf70e9f252386032ec83fa263d7ccb44931d869573cc42f354b21e8a7fdcab6b1067ad5833585f3a04ab7aa50eb650b5ae7b0e5d91bfd4cf53d1459e5d8d2f90e360a8415a923bfcae15be446281d8e8a41710d428c1b7be5f314b10d15bada62f29aa4c7974db", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0xf}, 0x90) 4.682392756s ago: executing program 1 (id=1284): bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0x3, &(0x7f0000000340)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc6}, @call={0x85, 0x0, 0x0, 0x88}], &(0x7f0000000380)='GPL\x00', 0x3, 0xdf, &(0x7f0000000ac0)=""/223, 0x41000, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x6, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000850000000000020000000900020073797a310000000008000440000000000900010073797a30000000001912cff9000000651ddd30f66e360901140000001100010000000000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000980)=ANY=[@ANYBLOB="44480000004f031439ac69ebcebd2432b4736a64d37fecb45eea5fb39e89c2db8fcfafd193cef69b544bc258242c7d32cc60a43d355accea1005a26ebf08099004ed04b48edfe6e401b611ec25cb28ed065c0556360ce9ce76df7a34a6e716b35dc1d1479902295d08e505d0cb4d87e8f846740f588afe4e91cd66f61e2d552f67a3ac027ec017d442a704654411073291a131f644332113a1c3509ac2b24497c65de7bc4e7eb9f0d4200c5011664d947958e601fca190123f60ca44314f35c34b949d", @ANYRES16=0x0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c000180080001000000000008000180"], 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c}}}]}, 0x48}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000740)={{{@in=@empty, @in6=@private2}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000840)=0xe8) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r7, 0x0, &(0x7f0000004c80)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$KDFONTOP_GET(r8, 0x560f, 0x0) 4.494836884s ago: executing program 1 (id=1285): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="38003300c0000000e7ffffffffff080211000000"], 0x54}}, 0x0) readv(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x408041) syz_emit_ethernet(0x72, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@hopopts={0x67, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x8}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x18b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x300) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000042006bab9e3fe3d86e17aa31026b876c1d0000007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) 3.897799439s ago: executing program 2 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) 3.800843376s ago: executing program 2 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) ioctl$EVIOCGBITSND(r1, 0x8000451a, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000240)=""/75, 0x4b) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) munlock(&(0x7f00008b2000/0x4000)=nil, 0x4000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_XDP={0x4}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7b0, &(0x7f0000000140)={{@any, 0x802}, 0x0, 0x8}) 3.351273668s ago: executing program 1 (id=1292): socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x2, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, r1, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rmdir(&(0x7f0000000380)='./file0/../file0\x00') io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x10}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) 2.320995779s ago: executing program 1 (id=1300): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001700), 0x20102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/slabinfo\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r4, &(0x7f00000003c0)=ANY=[], 0x82) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a00000001090212000100f0ff0009040000009d269b00"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x2}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xa}) ioctl$KVM_RUN(r8, 0xae80, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 2.184650644s ago: executing program 0 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, 0x0, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) setns(r4, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x2, 0x12) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000b00)={{0x2, 0x0, 0x80, {0x1000, 0x4000, 0x1}}, "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", "9dee2742a71f6c3d1e99bf56c087898551aa774b708f05636277c8a14035be32bfea02cda96eadbb523ec2ed005999a6092e18230ac5fe47a2d4769c949d3510a765548a37e923160f48f61710cceffea600e3f0324258818a9e634cdf5dc4cb1281bdd9dbe2a5ed4504dd7aeade3a6cdd8fd987ff733ccdd5cba6f07f5a8fd053704154007fa093678428b7955ff28006e5ec1e4a6e9467919a8b2bd9668b629f1d8313b8c8c24bf2b8160971babebb9e083d3214eb9cd06ac4ca89ec3cbb0bba7accb84f1e836fae0457a476adcdf0ed24985bf8dad2958ae0d0278b2d4a1070a1f31cea9dd460a214c5cc773bf07de12c8757c502d0a169507458349032565dd7dabbe836627b830c397a5e7845b14b0807002ae980620d439c7896430af6eeb66418ccb3fd39478d72add72c9e646490c4053fa31765a5f406c1c82bc8721a87e30212df7b6628bf7b41d56ff5a91a449312f4265562b96a1d10c9911f60a4fc870b67567666a0b37741c28255a19c9fa145ec0c48886e419d84e1a1494eee393a7cab889adbd729228a14a4298c3037a202d3afe4fa62cb27404afb374809ab2dcb36fbec674e06c17e71a2c6ba5ff7363caad3039221718c162804775a3f8f05d30b63488fb5e4afce75576b428ef6b57b387d8b1127c1e79654438b3b8c808c20112281c25de1036149ac4dfceb589e2296da8ac141284cd26e432aecab5255d63578e5e7835fbab697edb6d3ca4dd74683b243524e38f380881309f2c9890eff308c739000141d9cb2e9b1f902e5e3d1ac0d81d6e40281c207ffae49e38ab943cbfae6577ec340bcedf9865c8e8fccbaa705c0929982e6ad25c69e939741873b31606474fc79c0dd975317710a1b48f79b6cbad8dd6854b77681b5148b9e6c4ab499c89bc7302f9ede7b47537d075d4442a9cf3db04ec6b62849b4d0f285c2d9ebf7c6f44259e3380d3af9dd48ed9b5f0e8f7c7605b253a1dc366ed93b1dd1111f50c14897feeb77f5637155ea1916044648301d5a5cd52f290527bfb2cf4ab5fad911f2954f797cf546c49120799fd78fa689125ce90dddc7d40eed196f6b56ea58257c795832be8d2cffc9f5e88469c2d14950ac4ee9a6f252f9704d960526640621f156a5dc692e5503f61761e507da0322fd71d03ca8c9fdfa219bf501ce6f806d23eaaacff9fef87c90756ae27e459c9b4fa8f31c744d2050e433694ab5f10a81439ed3fd44256b77e99b9f42b225b2c272b899f25621a24906286f3315ab98a6016550162be415e61aa550a4abeecbff6d8fcef1f7caa6ed62da61096f24be10f7fc2b8f9c251df2cf148597b600405a805e6069acca2c9b9edad0f903b584f61c2a7cf3162432d70a78dd63bd1e68d92f8a3483cd183eb15f8e2596c18de12408477ce6e9d3529158f754d11e65dfd374bdbd90c4772c8ece3d4d45d6d27b0dd8191e687e808e8e6ee450ab162aeeeb46ee066e5ac305873e58fabb90cd0a60fe345b1c5ffe5e95876603113ea4f01849b33e3b31adba919077a481f7295bc57fdf7532855517f9e579391798a8f942af4b377d3d3d28e427e2ca4117f62b831faf62a9b36204f41a320aafce68345ccf7c915385582e5e4073a99e733e9943c286d535a440d29c4beb0b40e0222c6e8a04e7131e2a935ec9a55e9370a5d4237d31d08bdff150037cf1a71bb074e450aa7ae3d8b563c3b18a119cc1c91664b556f91f3e01ffe29ea6b923c894706f5cd4857e346997da4763a9e4271757e603a060b9d261485f912f67ec69d96b5c1ed4560e330e32882283ddb92ebc162cd416cda0f69dfe710ad7bbd9ad53654ef2138b6cc045b4ee67ca8bb662cb67ec368245d97d63be345a72586fff02d8fe28ba5a098b4564261e4756b1b90c17b5e2ae992cba3177714cb20a167b119db26e2269ec52fa5a64041354e59002f1ce76bb077ef60a6a3cf2da0f663404e8407b2f6d99099c065b7441b1373113d48a25b37558fb82db5c2575a259b079766197b493c37effa23af43741eddaaf61904f5935d3e01116a723d43487ddd80c4124cb704d45d800413537e53c5d0dbaf628ee7d7727fe21dbad4c29534ee67bd9d66defeb765fa449e8c615ed39732c1671c2249ba9197e7ef4edb34e9015e35654936e52b19c0836c26c90705b8d977c531b00e6aa592c25573709756f2efd70ac3376374dc0ca9a0fe5a7b5dc62d85b6b1c907e83e4778bf9dfa8ef738033401bc1b6c8a695a26f94e997ee308ce3fc06703741f35e97f57e159c28cf1feceb2aa06b29f0325e064089004fec4d8dab8b8741d16ad388e9d3e86300fbbbf0dc1564c176d9b90ff17b4ad4cbf7010f483fb08b8af807fb9be3da45c276d503edd3d8f1b18aa93c6dec9c1a2350dad53ce17629c549d4169b1f6d71598583a9a3409b91b2111d39fbcf069e769ed4049061d42e1901a7ddf45b6742940ac54117c6a480d1fd7f2d7f1c21f6c8c68d7fbf9b5d432590b6324095d3d256ce5b9f9ba175aa37b9d4acdd48994c46be36ea06d48663fa31a2ed0bb2b413ac21d072e826cdfed99c0d1ddeb068d4ca3e8693b2c6a552b4394da26840c9096f494cd2342ff09bc4e81bbebfefa2c4cf07cb6736e07c7b882aeff5349ffbd600c79ce902d15d7e6b5025e7ba795ccecbe4e64bc101f74162c7efa368defb62ada3529c80be16f401161fc2f0b45f9fc6cb62a7275e5a3d3fda97ed6a63d3b9d4cdcfff370399ba16cf5c2e19e23a8cfecf8e8be69b6c04abe2011b891ff7b29535ee8c435e4a637cbfa4381aae7452015b77511f5f481987bd7b5a2cd5df6cd27a861480bfcf6d37b6070351360c9f73a8df4f67ca3cfd7b53d9dc52f5be7ba7423dee16732f20c12432f12677d7c1ac062febeef5d7498a48d07cd0b17d20291fcb770fd244d4a8d331e3224297f070b9dbc69bd7a34526d7bde8cb2adabc22b0ba5f691fb691c914dd978b2f56b742e3766343f7548c45dd6699b3aca2f154e5ea22bcc94fce2c253225b8a0306b318e5f183c1dd14429c47c4b3ef182d13ef9e256f7f4782f8e229289b24e85b03f107bad089d4e9577e58eabbbcf5c4e1346fea3c3e81423e4d57d078154fbc2ea61b1cc06a73bdbad756752ad2e7f625c1dbc79b5860696f5dd41085b1220479fe3c29918cb9f1ccd4f488e0c0312744ebd4c53668321bef340cd6dd676aaaa64d489cf53314b59653fb1a3e62c7bcf1549accc233fbbed87249046c9ee0fe2cb81177acf8d9df56a963acd1193e8304630b0d22b8a868a5ba882cc4bd650f3bffd235bd9e3005ed550b0253f8a842cfb36fbf38c3f577443a6053c04ec21a283b03079fbc663dc217f461d2c5f01ad859e821204b9a18c461a8a44e14df8e8af8ad0f0f6432d4affcf123ed86cb4dd8c0101473f0a1caae037e15afca7c54c10c48d941d9c472d68dbc5fac97c58f5fa8be3b0ddf838137d92a44d9a5e942c55deae35843f649d4ed4cbb1a77d2afc89864ab39d6326a62bd35c21cb09fc4a4742697d7badc7685de481a9e65775ceeaf18042582fc0a132ed1138426ba2d940b16473b1c1c160998b2e38d0aa307f7833d3c1d2edec6129c26dca8520b87a9fa3d592678f4467d0893f1966c0a1a517ba0e5ad81af019b50ecf557c85e6ea8cbd81cf3173a40d47d602afa22a43226e4612a41aa8503714dd54015b4b29f8d4db8662bdc93dd3c81c825831c367c9e5c19e47ed2ae7250054716c950420aeb3b4897107db032cd516965af55f6e21077a02dfc23a17d61d31b33580705d259768c89c1ee25043819d20ac85d664e8fdcb23f6b4d32e10414673512a1f339bd970ef27a832847df0e42c58f93c4fe8113f006bffd40d90c280f98352d7e85c8ae99f87d16ea84f6aa81f9a134edb3b4429986072f4dd558bf06d33f86c07b4de669e88dfa6c43787c198cd089fb9b5203e54285cc6e4a6351692b08dcb6c1ae02affda680dc899d691141af8058314985b1d8b196e253a4511929b2c86074088d95327267836be68fd9cdb588ffa35a7d811e8535232974e1543d8254cd5a7f7f71566d66502b676c5803a2ed71b3f4281a8a9a279b6c5f859634b4641a5334afc3b6ed48a1f51bb3b2282007e3467de6486b5fb8d655ed458e3e23045522d1f2bd5dbc3c399ed27cd57f2bf059c595c925c55dc765793e987d92499a779e7982e451fbd17af4f908763a0b02bccb8395b82f3e14abeca977b280ea6f124ff73e230f6ae2c1e0d60d5bed1f007b5755d8c30de92ed1888864c031b42d99bebffd1beb5fdba21453151eb37b051620240c2167c8018b941ca2c0e322b9ccb0e94ce73d867c064327a01c8392db7c7f6a12bdd9d3e8eb3f46d32b3e024f54fca5701d99839e0d7831ec6bb78f2a254f231091cab56e61969ab7a36df46fb683ae60c4bc3a915b3cb227c4d148356cc4edacbb8e753c2c72b78e490065be651bae318141039e7e1874e3873c90ce8e6bced59571488c4a3d4608a919f07e668c1256034b8299f9bad35d707850d7368c07331d0f08413faadca7bceb33ee9fe7134e2f5191e1a491fb06cdf0be801705ea837753249a53cb0a301f4f9a4d0d9806cc3cd89cfe47693e12ed51e6d14132c7976c1f331c5033b3f130a3f424d2d4cde26294fc0e2319a26a6f988f1a6c299b623c872892bcb628ba5a21556e3ec3b722fe9bfae0596aa26f784086e7b85dd4e943973ac755127b374841b11161352df40b2ae0be6de1e9c8dcdc72eff3094f3ef614c8d163663738cfab4e5fa563358d091fc521b1ea12a43483e7effb188793b34a88a8ebbe9e2b52cdbe0ef70ac78daa521f51c5c9ebd8dff890bdefbea1500a32d7e5e212699e0d39f5013286f9641807d8cbf830cd2fc65ea2e021c10993648870a5c37e9c379b02dd2e31a60b88997a65687ca71734bb5fd8a592941f3dd8b9793d5df417813b7254d8d35bb5ae3a64abd69f7f8ecc684f577d838b8e4f378c91735424becc4100664c04233584f5284b6cab32a089605ca45dea789de3a7b05c517761a2100cb93306a8e5bc7fb42868a397a5beaef455340239b2597f522ca096cd02d264e052afa937af8c07e8be89fcb82b1fc72467422c68b71df0f1e459c236f646b9fa80fa0c9ea3066b2a55e06ae5b68b45ec3aa0547fc96f56f4c12140c5de9cd397673da4a0e4557ed149c68eec136eaaaef5992a8e512d85677e3afa911c9d0706d237e5ba953ebef99dc0e56e240ec5459c541a5065978b3edd764a6282e8708dbace5973c021ce5f9f29dbe285a65108d33839e31f52b7070eb681db34256035111e3dc130c5907edc47f745c2d79ebddc40d33492214b1f82f0e613e57827d658cdbdf995d1818aba269b3e37823f3491e79cd81b6642840d698b1787ea5d74a43b44450db6bd4549a1f0e372686000bb394a0c936933d2e8b2bc7ea1e5ddfe8e9231aa308e8647ff2af7f00b15cfb6d733f0dc0f46e8172bdada306c2c406b288c24f126a98085fdf27cdbe950a64289ab66362a1532e252f8ad111e70d57741a8df1826fc5df2efb17aab783e05141e5ef60285dda9160c111b91574aa6ec6006fa6fbc5528a0483c98dc7ad579e379b22aff09d434d3b26f244b956cde7093ebf98d85f2a0aaf3ff382475372cf465aab971fb53e518d838159a70a0f92eb6e23f44baad0d0916508c4bb70cf558c5df0dfc6290dfc346b23a19bf60e4c8b2dd736a3e064952f84ee926e1054e867938ef7ef339361a0b6fea09ca6f1d4201c01942d"}) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000002080)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 1.881837869s ago: executing program 0 (id=1306): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) 1.881367624s ago: executing program 0 (id=1307): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) io_setup(0x40, &(0x7f0000001140)) clock_nanosleep(0x1, 0x1, &(0x7f0000001200)={0x0, 0x3938700}, &(0x7f0000001240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) 1.855145968s ago: executing program 3 (id=1308): syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioperm(0x0, 0x4, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 1.633953254s ago: executing program 3 (id=1309): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgrou\x81\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x12) (async) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x12) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r5 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) socket(0x1e, 0x1, 0x0) (async) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000015000000070014005b2d2e0008000100", @ANYRES32], 0x24}}, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) close(r5) 1.41987796s ago: executing program 3 (id=1310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.302082573s ago: executing program 3 (id=1311): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 772.873651ms ago: executing program 0 (id=1312): bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0x3, &(0x7f0000000340)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc6}, @call={0x85, 0x0, 0x0, 0x88}], &(0x7f0000000380)='GPL\x00', 0x3, 0xdf, &(0x7f0000000ac0)=""/223, 0x41000, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x6, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000850000000000020000000900020073797a310000000008000440000000000900010073797a30000000001912cff9000000651ddd30f66e360901140000001100010000000000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000980)=ANY=[@ANYBLOB="44480000004f031439ac69ebcebd2432b4736a64d37fecb45eea5fb39e89c2db8fcfafd193cef69b544bc258242c7d32cc60a43d355accea1005a26ebf08099004ed04b48edfe6e401b611ec25cb28ed065c0556360ce9ce76df7a34a6e716b35dc1d1479902295d08e505d0cb4d87e8f846740f588afe4e91cd66f61e2d552f67a3ac027ec017d442a704654411073291a131f644332113a1c3509ac2b24497c65de7bc4e7eb9f0d4200c5011664d947958e601fca190123f60ca44314f35c34b949d", @ANYRES16=0x0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c000180080001000000000008000180"], 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c}}}]}, 0x48}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000740)={{{@in=@empty, @in6=@private2}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000840)=0xe8) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0), 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000940)={0x0, 0x989680}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$KDFONTOP_GET(r7, 0x560f, 0x0) 609.844607ms ago: executing program 2 (id=1313): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 609.166236ms ago: executing program 0 (id=1314): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) (fail_nth: 1) 409.063842ms ago: executing program 2 (id=1315): eventfd(0x7) r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r5}, 0x8) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000100)={0x80000, 0x0, [0x0, 0x8001, 0x5, 0x6, 0x10001, 0x1000, 0x200020000000000, 0x9]}) r7 = accept4(r4, 0x0, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80800) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000440)={0x2, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x2400c890) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/137, 0x89}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000700)=""/190, 0xbe}], 0x5, 0x0) pipe2$9p(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 398.675105ms ago: executing program 3 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "d2142300", "a4774ec6", "15b188e5e74e13ed"}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0xe74, 0x2c, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x92, 0x20000003, 0x8f4, 0x7, 0x4, {0x0, 0x0, 0xfff, 0x8, 0x9, 0x7}, {0x6, 0x1, 0x923, 0x1, 0x2, 0x8}, 0x3, 0x80000000, 0x1}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0xde0, 0x2, [@TCA_FW_ACT={0xd64, 0x4, [@m_nat={0x114, 0x1f, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x5, 0x6, 0xa013, 0x1}, @multicast1, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8000, 0x8, 0x2, 0xb111}, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100}}]}, {0x9a, 0x6, "4db305ada535480dcfbb3e4717d13c4b09e300af60b4f8ea0d28909290b32e86a3d6e42ec93a041da1d5686cc73f060e72283efd4a8a354c622cf46566ab2adf6d1808017d49c795f2d4c4476a81ff14d911644d25cdcb2dc2ad4ca3052c7be8828b93710505bb6acd18d87a1fbd191533393e6cfccc6b0b9bd929af6b9bd0ca29d198e28037f295b4ca8cdd1a2ff50c43a386234118"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xac, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="920a99cf629b"}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa, 0x3, @random="9050a20ef359"}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x5b, 0x6, "ca6e88080b1d7b3c8dce1ed84ef8b6d0767e4eb0bee172d6dd101263722ca828886077a8e7e5312cfa42d4748c8cc018120b214c8b5a7495649b1cbea70ba7ebae539773f93fcdabe2619397944db980fbfe0cec8174db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x108, 0x17, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x3, 0xf883, 0xeb4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdfb}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x717}]}, {0xaf, 0x6, "745ecc8d3ccf9140afc110e864fb6588dd0ed657e00c8d55662888c8a6a2b901523653833a044570918493a5977560014359a775dad85661d3dcfa92dc0a349de301a4bbe379a4fd3db2423b5a060a119b6d0ceaa8cdd04fc3c0c1c44d9abf7403811f91bd2bd9a620529c9339de55c0b35cf6036e5c5c8887c1911cd5924321e274c98a3f9baf96dbfe88a23a357a898c2e903c5c0c40a7eb3be318ecfd46e7e13a505f38b9cf472add26"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xbc, 0x5, 0x9}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa4f, 0xa, 0x4, 0x6}, {0xe, 0x9, 0xa, 0x9a9a}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x7, 0x5}, {0xfffd, 0x5, 0x6b, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0x5b, 0x6, "9a9e9203690535c90763e4cbfd1e2a412ab5aedcecf9d2e2534c29b13e874040c59091202df734d48cce7b22433a4d5208918bb94b3942756df4fbfe2d9518c0fde6d7d1a04fa3639f49e683d0aebe5efdecc82c58876f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_police={0x8a8, 0x15, 0x0, 0x0, {{0xb}, {0x820, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xa4a9, 0x80, 0x9, 0x1, 0x1, 0x100, 0x9f8, 0x7d, 0x0, 0x6, 0x1000, 0x9, 0xf0000000, 0x400, 0x4, 0xe2, 0x0, 0x0, 0x4, 0x2, 0xa, 0x4000ffff, 0x7, 0x9, 0x9, 0x10001, 0x2, 0xd, 0x4, 0x0, 0x1, 0x8, 0x1, 0x1, 0x7f, 0x1ff, 0x2, 0x9, 0x82d, 0x80000000, 0x6, 0x3, 0x25d, 0x3, 0x8, 0x10001, 0x5, 0x100, 0xd910, 0x8, 0x4, 0x4f, 0x7fff, 0x1, 0x4, 0x0, 0x101, 0x4, 0x200, 0xf, 0x2, 0x6, 0x10000000, 0x7f, 0x0, 0x4, 0x8, 0xe5, 0xc296, 0x800, 0x1e7, 0x0, 0xb3200, 0xffff1b97, 0x5237dcd0, 0x1ff, 0x6, 0x9f83, 0x71, 0x401, 0xc1, 0x0, 0xd27f, 0x3, 0x15f2, 0xe36, 0x4, 0xfffffff9, 0x5, 0x800, 0x9, 0x0, 0x7, 0x0, 0xfffffff8, 0xc, 0x5, 0x6, 0x4, 0x6, 0x3, 0x255, 0x8, 0x40, 0x0, 0xffff8001, 0xa, 0x4, 0xc576, 0xffffff7f, 0x5, 0x8, 0xeb8, 0x9, 0xfffeffff, 0x0, 0x6, 0xd, 0x20200, 0xa, 0xfff, 0x3ff, 0x6a582f3f, 0x5, 0x200, 0x9, 0x0, 0x5, 0x400, 0x1, 0x3, 0x7, 0x7fffffff, 0x8, 0x8, 0x8, 0xe, 0xa2, 0xbd11, 0x9, 0x9, 0x8, 0xc, 0x5, 0x4, 0x2, 0x2, 0x7, 0xc, 0x8, 0x4, 0x0, 0xe3, 0xad30, 0x9, 0x6, 0x7, 0x9, 0x7, 0x5, 0x1, 0x7ff, 0x4, 0x1, 0x2, 0x70, 0x6, 0x9e, 0x3ec, 0xffffffff, 0x5, 0x9, 0x8001, 0x3, 0x8001, 0x1, 0x1, 0xff, 0x9, 0x8036, 0x5, 0x63bb, 0x5, 0xfffffff0, 0x8, 0x18, 0x200, 0x5, 0x200, 0x6b, 0x101, 0x25f, 0x4, 0x6847, 0x0, 0x3, 0x8, 0xffffffff, 0x6, 0x8, 0xfff, 0x4, 0xffff, 0x10001, 0x7, 0x92, 0x10, 0xfff, 0x81, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xc5a, 0x1, 0xfffffffa, 0x9, 0xf74, 0x4, 0x6, 0x9, 0x6, 0x0, 0x2daa11d1, 0x4, 0x9, 0xbbfc, 0x5, 0x101, 0xe7a, 0x8, 0x1, 0x0, 0xffffac4d, 0x2, 0x3, 0x5, 0xc01, 0x1, 0x2, 0x9, 0x2, 0x6, 0x1, 0x5f4, 0xf, 0x6, 0x6ef595e9, 0xfffffff8, 0x8, 0x5, 0x5, 0xd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x5, 0x2, 0x4, 0x5, 0x8001, 0xf89, 0xd, 0x0, 0x10001, 0xff, 0xb, 0x3, 0x1, 0x2, 0x1, 0x8, 0x4, 0xb, 0x7ff, 0x100, 0x3, 0x7fff, 0xf, 0x5, 0x10001, 0x1ff, 0x0, 0x4, 0xffffffc0, 0x5, 0x20000, 0x100, 0x57601349, 0x3, 0x8, 0x5e0, 0x2, 0x6, 0x0, 0xfffffffe, 0xc00000, 0x8, 0x10000, 0x800, 0x0, 0xfffff67d, 0x9, 0x7fffffff, 0x4, 0x6, 0x100, 0x3, 0x0, 0xfffffe00, 0x6, 0x81, 0x2, 0x4b7dde0f, 0x2, 0x6, 0x7fff80, 0x9, 0x2, 0x8c5a, 0x40b7b36a, 0x0, 0x10001, 0x5, 0xf, 0x2, 0x6, 0x74ba, 0x81, 0x10000, 0x7, 0x5, 0x2, 0x1, 0x4, 0x6, 0x2, 0xffffffff, 0x2, 0x3, 0x26, 0x9, 0x949c, 0x5, 0x7fffffff, 0x3, 0x3, 0x1200000, 0x10001, 0xfffffffa, 0x5, 0xbc, 0x5, 0x68000000, 0x6, 0x3, 0x2, 0x4, 0x1, 0x400, 0xdf3, 0x4, 0x100, 0x8, 0x7, 0x9, 0x8, 0xffffffff, 0x6, 0x10001, 0x1ff, 0xb, 0x2, 0x3, 0x0, 0x8, 0x600000, 0xbde, 0x10000, 0xb5e, 0xfffffff2, 0xfff, 0x0, 0x7ab6d9b5, 0x4, 0x422, 0xa87, 0x400, 0xe56, 0x7, 0x2, 0x2, 0x8, 0xfff, 0x9, 0x6, 0x80000001, 0x0, 0x1ff, 0x0, 0xfffffffe, 0x101, 0x400000, 0x4, 0x2, 0xd, 0x6, 0x3, 0x2, 0xb98, 0x9635, 0x770, 0xf, 0x80000001, 0x4, 0x2, 0x5, 0x99b, 0xe, 0x2, 0x6, 0x0, 0x80, 0xff, 0x8b2, 0xd97, 0x4, 0x7f, 0x1ff, 0x40, 0x6, 0x0, 0x2c, 0x8fb, 0x6, 0x5, 0x3, 0x4, 0x40, 0x401, 0xa3c2, 0x0, 0x6ee5, 0x3, 0x57, 0x8, 0x19, 0x149d, 0x3, 0x7, 0x6, 0xf0, 0x0, 0x9, 0x1700000, 0x8, 0xb5, 0x4, 0x0, 0x3, 0x2, 0x2, 0x101, 0x25b, 0x5, 0x1, 0x7, 0x9, 0x7e42017d, 0x3, 0x7fffffff, 0x3, 0x100400, 0x9, 0x1, 0xf1, 0x5, 0x6, 0x944f, 0x5, 0x9, 0x9, 0x3, 0x10, 0x3411, 0xd, 0x7, 0x8, 0x9, 0x8, 0xe1d, 0xf, 0x4, 0x6, 0x1f68, 0x9, 0x8, 0xffffff80, 0x7, 0x5, 0xd, 0x8, 0x40, 0xd, 0x200, 0x8001, 0x5, 0x5, 0x3, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]]}, {0x5f, 0x6, "88652cedeac3a5c66e2b4aa9ec18940eefbb7a86d8a7cc1e8d3ccba39a008acd0327f7c38d81a12daafa2875cf4684868c472d3ab089e4911a80d264d89248a79ad4f47739989d43415c35e3c19ebe68a7467e9f05436ae10c46cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xf4, 0x7, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x9, 0x8, 0x1000, 0x3ca39265}, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0xa, 0x0, 0x3, 0x101}, @private=0xa010102, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x0, 0x20000000, 0x892, 0x4}, @broadcast, @multicast1, 0xffffff00}}]}, {0x54, 0x6, "94df951c0dd6ef8a6581caedc2b92c60fcfba8dcd26c4e041fb39a5ab5a4e641f284983298d2b55c6534969920586bb107b4562103697c2178eda629347d4991bcce19b6911f983a8577026f8426b180"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xfd}]}}]}, 0xe74}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x54}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fanotify_init(0x200, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r8, &(0x7f0000003100)=[{&(0x7f0000000440)='\x00', 0x4000}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 391.834943ms ago: executing program 0 (id=1317): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004", 0x8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, "0000fa00ea8000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000004000c0002"], 0x30}}, 0x0) ioctl$TIOCSETD(r4, 0x541b, &(0x7f0000000ec0)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 139.113108ms ago: executing program 2 (id=1318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r0, &(0x7f0000000180)='\x00', 0x37000}]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}}, 0x4000042) r8 = socket(0x1a, 0x803, 0x0) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000140)=""/2, &(0x7f0000000240)=0x2) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x54583, 0x100e2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 0s ago: executing program 3 (id=1319): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002180), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): setting to 1024 [ 566.780442][ T5425] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 566.784442][ T5425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.800514][ T5425] hub 6-1:1.0: bad descriptor, ignoring hub [ 566.803241][ T5425] hub 6-1:1.0: probe with driver hub failed with error -5 [ 566.807433][ T5425] cdc_wdm 6-1:1.0: skipping garbage [ 566.809554][ T5425] cdc_wdm 6-1:1.0: skipping garbage [ 566.814587][ T5425] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 566.817481][ T5425] cdc_wdm 6-1:1.0: Unknown control protocol [ 567.163979][ T39] audit: type=1400 audit(1724731941.079:584): avc: denied { listen } for pid=8399 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 567.174166][ T39] audit: type=1400 audit(1724731941.089:585): avc: denied { accept } for pid=8399 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 567.281387][ T8406] hfsplus: unable to parse mount options [ 567.284685][ T5485] wlan1: Trigger new scan to find an IBSS to join [ 567.291103][ T39] audit: type=1400 audit(1724731941.209:586): avc: denied { append } for pid=8399 comm="syz.0.838" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 567.304928][ T5897] usb 6-1: USB disconnect, device number 21 [ 567.309513][ T8404] can: request_module (can-proto-5) failed. [ 568.085306][ T39] audit: type=1800 audit(1724731942.009:587): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.841" name="/" dev="fuse" ino=1 res=0 errno=0 [ 568.233702][ T39] audit: type=1326 audit(1724731942.149:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8417 comm="syz.1.843" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 568.468658][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.472202][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.534594][ T39] audit: type=1326 audit(1724731942.449:589): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.1.847" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 568.535319][ T8435] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 568.899172][ T39] audit: type=1326 audit(1724731942.819:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8442 comm="syz.2.852" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 569.024634][ T25] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 569.123679][ T8446] can: request_module (can-proto-5) failed. [ 569.214603][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 569.218576][ T25] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.221859][ T25] usb 8-1: config 0 has no interface number 0 [ 569.224126][ T25] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 569.228110][ T25] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 569.232765][ T25] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 569.236271][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.242121][ T25] usb 8-1: config 0 descriptor?? [ 569.245200][ T8437] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 569.253074][ T25] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 569.543491][ T5897] usb 8-1: USB disconnect, device number 20 [ 569.545628][ C3] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 569.550124][ T8443] can: request_module (can-proto-5) failed. [ 569.557586][ T5897] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected [ 569.615418][ T39] audit: type=1400 audit(1724731943.529:591): avc: denied { watch watch_reads } for pid=8448 comm="syz.1.853" path="pipe:[5614]" dev="pipefs" ino=5614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 570.365647][ T5425] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 570.539466][ T5425] usb 7-1: device descriptor read/64, error -71 [ 570.610600][ T8472] netlink: 'syz.0.858': attribute type 2 has an invalid length. [ 570.617770][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 570.804891][ T5425] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 570.984832][ T5425] usb 7-1: device descriptor read/64, error -71 [ 571.120714][ T5425] usb usb7-port1: attempt power cycle [ 571.275048][ T57] wlan1: Trigger new scan to find an IBSS to join [ 571.353317][ T39] audit: type=1400 audit(1724731945.269:592): avc: denied { view } for pid=8473 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 571.574737][ T5425] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 571.615644][ T5425] usb 7-1: device descriptor read/8, error -71 [ 571.718783][ T8476] sp0: Synchronizing with TNC [ 571.770733][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.865'. [ 571.893771][ T8505] FAULT_INJECTION: forcing a failure. [ 571.893771][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 571.910810][ T8505] CPU: 0 UID: 0 PID: 8505 Comm: syz.3.866 Not tainted 6.11.0-rc5-syzkaller #0 [ 571.914696][ T8505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 571.919624][ T8505] Call Trace: [ 571.921206][ T8505] [ 571.922574][ T8505] dump_stack_lvl+0x16c/0x1f0 [ 571.925372][ T8505] should_fail_ex+0x497/0x5b0 [ 571.927373][ T8505] ? fs_reclaim_acquire+0xae/0x160 [ 571.929549][ T8505] should_failslab+0xc2/0x120 [ 571.932008][ T8505] __kmalloc_noprof+0xcb/0x400 [ 571.934862][ T8505] ? d_absolute_path+0x137/0x1b0 [ 571.937045][ T8505] tomoyo_encode2+0x100/0x3e0 [ 571.939288][ T8505] tomoyo_encode+0x29/0x50 [ 571.941215][ T8505] tomoyo_realpath_from_path+0x19d/0x720 [ 571.943647][ T8505] tomoyo_path_number_perm+0x245/0x590 [ 571.946076][ T8505] ? tomoyo_path_number_perm+0x232/0x590 [ 571.948553][ T8505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.951233][ T8505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 571.954178][ T8505] ? __fget_files+0x256/0x400 [ 571.956665][ T8505] security_file_ioctl+0x75/0xc0 [ 571.959000][ T8505] __x64_sys_ioctl+0xbb/0x220 [ 571.961517][ T8505] do_syscall_64+0xcd/0x250 [ 571.963914][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.967086][ T8505] RIP: 0033:0x7f3e1c979e79 [ 571.969969][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.980224][ T8505] RSP: 002b:00007f3e1c3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.987743][ T8505] RAX: ffffffffffffffda RBX: 00007f3e1cb15f80 RCX: 00007f3e1c979e79 [ 571.993633][ T8505] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003 [ 571.998949][ T8505] RBP: 00007f3e1c3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 572.003373][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.008275][ T8505] R13: 0000000000000000 R14: 00007f3e1cb15f80 R15: 00007ffc2cc0f388 [ 572.012389][ T8505] [ 572.024829][ T8505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.033890][ T8508] netlink: 'syz.1.867': attribute type 2 has an invalid length. [ 572.043161][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'. [ 572.060632][ T5425] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 572.140106][ T5425] usb 7-1: device descriptor read/8, error -71 [ 572.262937][ T5425] usb usb7-port1: unable to enumerate USB device [ 572.300537][ T8516] FAULT_INJECTION: forcing a failure. [ 572.300537][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 572.306354][ T8516] CPU: 2 UID: 0 PID: 8516 Comm: syz.3.870 Not tainted 6.11.0-rc5-syzkaller #0 [ 572.310442][ T8516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.316086][ T8516] Call Trace: [ 572.317675][ T8516] [ 572.318844][ T8516] dump_stack_lvl+0x16c/0x1f0 [ 572.320692][ T8516] should_fail_ex+0x497/0x5b0 [ 572.323592][ T8516] should_failslab+0xc2/0x120 [ 572.326421][ T8516] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 572.328851][ T8516] ? skb_clone+0x190/0x3f0 [ 572.331596][ T8516] skb_clone+0x190/0x3f0 [ 572.334244][ T8516] netlink_deliver_tap+0xab3/0xd90 [ 572.336807][ T8516] netlink_unicast+0x6b4/0x7f0 [ 572.338960][ T8516] ? __pfx_netlink_unicast+0x10/0x10 [ 572.341307][ T8516] ? __pfx_nf_tables_abort+0x10/0x10 [ 572.343610][ T8516] netlink_ack+0x6a8/0xb90 [ 572.345559][ T8516] nfnetlink_rcv_batch+0x1634/0x2500 [ 572.347917][ T8516] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 572.350370][ T8516] ? find_held_lock+0x2d/0x110 [ 572.352317][ T8516] ? avc_has_perm_noaudit+0x119/0x3a0 [ 572.354757][ T8516] ? avc_has_perm_noaudit+0x143/0x3a0 [ 572.357284][ T8516] ? __nla_parse+0x40/0x60 [ 572.359523][ T8516] nfnetlink_rcv+0x3c3/0x430 [ 572.361693][ T8516] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 572.363916][ T8516] netlink_unicast+0x53c/0x7f0 [ 572.366067][ T8516] ? __pfx_netlink_unicast+0x10/0x10 [ 572.369259][ T8516] netlink_sendmsg+0x8b8/0xd70 [ 572.371730][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.374085][ T8516] ? __import_iovec+0x1fd/0x6e0 [ 572.376495][ T8516] ____sys_sendmsg+0xab5/0xc90 [ 572.378413][ T8516] ? copy_msghdr_from_user+0x10b/0x160 [ 572.380520][ T8516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.382595][ T8516] ? find_held_lock+0x2d/0x110 [ 572.384488][ T8516] ? __pfx___lock_acquire+0x10/0x10 [ 572.386805][ T8516] ___sys_sendmsg+0x135/0x1e0 [ 572.388857][ T8516] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.391103][ T8516] ? ksys_write+0x21c/0x260 [ 572.393107][ T8516] ? __fget_light+0x173/0x210 [ 572.395163][ T8516] __sys_sendmsg+0x117/0x1f0 [ 572.397371][ T8516] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.399368][ T8516] do_syscall_64+0xcd/0x250 [ 572.401341][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.404167][ T8516] RIP: 0033:0x7f3e1c979e79 [ 572.406628][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.415561][ T8516] RSP: 002b:00007f3e1c3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.419121][ T8516] RAX: ffffffffffffffda RBX: 00007f3e1cb15f80 RCX: 00007f3e1c979e79 [ 572.422745][ T8516] RDX: 0000000000040800 RSI: 0000000020001a80 RDI: 0000000000000003 [ 572.425987][ T8516] RBP: 00007f3e1c3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 572.429001][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.432652][ T8516] R13: 0000000000000000 R14: 00007f3e1cb15f80 R15: 00007ffc2cc0f388 [ 572.436988][ T8516] [ 572.571044][ T8520] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 572.575067][ T8520] netlink: 636 bytes leftover after parsing attributes in process `syz.3.872'. [ 573.909816][ T5897] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 574.125026][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 574.139632][ T5897] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 574.159655][ T5897] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 574.164421][ T5897] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 574.178723][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 574.187297][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 574.194047][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 574.208370][ T5897] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 574.214139][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.257281][ T5897] usb 7-1: config 0 descriptor?? [ 574.485892][ T5897] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 574.692354][ C0] usblp0: nonzero read bulk status received: -71 [ 574.694350][ T39] audit: type=1400 audit(1724731948.599:593): avc: denied { read write } for pid=8535 comm="syz.2.877" name="lp0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 574.702081][ T5423] usb 7-1: USB disconnect, device number 27 [ 574.730709][ T39] audit: type=1400 audit(1724731948.599:594): avc: denied { open } for pid=8535 comm="syz.2.877" path="/dev/usb/lp0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 574.928212][ T8551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 574.956133][ T8536] usblp0: removed [ 575.237567][ T5897] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 575.411354][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.883'. [ 575.444622][ T5897] usb 8-1: device descriptor read/64, error -71 [ 575.720423][ T5897] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 575.835611][ T39] audit: type=1800 audit(1724731949.739:595): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.885" name="/" dev="fuse" ino=1 res=0 errno=0 [ 575.877529][ T5897] usb 8-1: device descriptor read/64, error -71 [ 575.994879][ T5897] usb usb8-port1: attempt power cycle [ 576.235463][ T5485] wlan1: Trigger new scan to find an IBSS to join [ 576.404605][ T5897] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 576.441450][ T5897] usb 8-1: device descriptor read/8, error -71 [ 576.714713][ T5897] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 576.745842][ T5897] usb 8-1: device descriptor read/8, error -71 [ 576.875108][ T5897] usb usb8-port1: unable to enumerate USB device [ 577.124979][ T8590] ip6gretap0 speed is unknown, defaulting to 1000 [ 577.148812][ T5428] wlan1: Creating new IBSS network, BSSID 4a:fd:8d:fc:fe:90 [ 577.745019][ T39] audit: type=1800 audit(1724731951.659:596): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.894" name="/" dev="fuse" ino=1 res=0 errno=0 [ 577.955919][ T8606] FAULT_INJECTION: forcing a failure. [ 577.955919][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.962608][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.3.895 Not tainted 6.11.0-rc5-syzkaller #0 [ 577.966483][ T8606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 577.971249][ T8606] Call Trace: [ 577.972734][ T8606] [ 577.973984][ T8606] dump_stack_lvl+0x16c/0x1f0 [ 577.975826][ T8606] should_fail_ex+0x497/0x5b0 [ 577.977682][ T8606] strncpy_from_user+0x38/0x320 [ 577.979598][ T8606] getname_flags.part.0+0x8f/0x550 [ 577.981622][ T8606] getname_flags+0x93/0xf0 [ 577.983390][ T8606] __x64_sys_renameat2+0xc7/0x130 [ 577.985440][ T8606] do_syscall_64+0xcd/0x250 [ 577.987470][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.990094][ T8606] RIP: 0033:0x7f3e1c979e79 [ 577.992054][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.000948][ T8606] RSP: 002b:00007f3e1c3bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 578.004650][ T8606] RAX: ffffffffffffffda RBX: 00007f3e1cb16130 RCX: 00007f3e1c979e79 [ 578.008146][ T8606] RDX: 0000000000000008 RSI: 0000000020000380 RDI: 0000000000000008 [ 578.011678][ T8606] RBP: 00007f3e1c3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 578.015199][ T8606] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 578.018638][ T8606] R13: 0000000000000000 R14: 00007f3e1cb16130 R15: 00007ffc2cc0f388 [ 578.022292][ T8606] [ 578.162553][ T8610] FAULT_INJECTION: forcing a failure. [ 578.162553][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 578.168845][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.1.898 Not tainted 6.11.0-rc5-syzkaller #0 [ 578.173299][ T8610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 578.178209][ T8610] Call Trace: [ 578.179721][ T8610] [ 578.181119][ T8610] dump_stack_lvl+0x16c/0x1f0 [ 578.183967][ T8610] should_fail_ex+0x497/0x5b0 [ 578.186152][ T8610] ? fs_reclaim_acquire+0xae/0x160 [ 578.188572][ T8610] should_failslab+0xc2/0x120 [ 578.190934][ T8610] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 578.193308][ T8610] ? copy_sighand+0x43/0x2c0 [ 578.195371][ T8610] copy_sighand+0x43/0x2c0 [ 578.197330][ T8610] copy_process+0x2773/0x8e90 [ 578.199425][ T8610] ? __might_fault+0x13b/0x190 [ 578.201663][ T8610] ? __pfx___lock_acquire+0x10/0x10 [ 578.204060][ T8610] ? __pfx_copy_process+0x10/0x10 [ 578.206388][ T8610] ? get_pid_task+0xfc/0x250 [ 578.208456][ T8610] ? __pfx_lock_release+0x10/0x10 [ 578.210694][ T8610] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 578.213489][ T8610] ? find_held_lock+0x2d/0x110 [ 578.215686][ T8610] ? find_held_lock+0x2d/0x110 [ 578.217864][ T8610] kernel_clone+0xfd/0x960 [ 578.219821][ T8610] ? __pfx_kernel_clone+0x10/0x10 [ 578.222153][ T8610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 578.225165][ T8610] __do_sys_clone+0xba/0x100 [ 578.227701][ T8610] ? __pfx___do_sys_clone+0x10/0x10 [ 578.230428][ T8610] do_syscall_64+0xcd/0x250 [ 578.232615][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.235421][ T8610] RIP: 0033:0x7f97ff179e79 [ 578.237498][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.247463][ T8610] RSP: 002b:00007f97fff9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 578.251795][ T8610] RAX: ffffffffffffffda RBX: 00007f97ff315f80 RCX: 00007f97ff179e79 [ 578.255660][ T8610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.259188][ T8610] RBP: 00007f97fff9b090 R08: 0000000000000000 R09: 0000000000000000 [ 578.263321][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.267511][ T8610] R13: 0000000000000000 R14: 00007f97ff315f80 R15: 00007fffbc31ac78 [ 578.271230][ T8610] [ 579.324849][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 579.389711][ T8627] loop4: detected capacity change from 0 to 2 [ 579.421688][ T39] audit: type=1400 audit(1724731953.339:597): avc: denied { getopt } for pid=8621 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 579.970277][ T39] audit: type=1400 audit(1724731953.879:598): avc: denied { ioctl } for pid=8638 comm="syz.0.908" path="/dev/usbmon7" dev="devtmpfs" ino=745 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 579.981774][ T8643] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ00000000000000000000004 [ 580.309007][ T8658] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 580.325226][ T39] audit: type=1400 audit(1724731954.229:599): avc: denied { relabelto } for pid=8636 comm="syz.3.907" name="file0" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 580.363573][ T39] audit: type=1400 audit(1724731954.239:600): avc: denied { associate } for pid=8636 comm="syz.3.907" name="file0" dev="tmpfs" ino=550 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0" [ 581.517644][ T39] audit: type=1400 audit(1724731955.439:601): avc: denied { mount } for pid=8665 comm="syz.1.913" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 581.553898][ T39] audit: type=1400 audit(1724731955.469:602): avc: denied { unmount } for pid=5377 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 582.097759][ T6139] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 582.285338][ T6139] usb 6-1: Using ep0 maxpacket: 8 [ 582.289616][ T6139] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.293984][ T6139] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 582.298789][ T6139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 582.303927][ T6139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 582.308789][ T6139] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 582.313255][ T6139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.322795][ T6139] hub 6-1:1.0: bad descriptor, ignoring hub [ 582.325905][ T6139] hub 6-1:1.0: probe with driver hub failed with error -5 [ 582.329390][ T6139] cdc_wdm 6-1:1.0: skipping garbage [ 582.331632][ T6139] cdc_wdm 6-1:1.0: skipping garbage [ 582.335846][ T6139] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 582.338397][ T6139] cdc_wdm 6-1:1.0: Unknown control protocol [ 582.855729][ T25] usb 6-1: USB disconnect, device number 22 [ 583.189521][ T8679] FAULT_INJECTION: forcing a failure. [ 583.189521][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 583.198991][ T8679] CPU: 3 UID: 0 PID: 8679 Comm: syz.3.917 Not tainted 6.11.0-rc5-syzkaller #0 [ 583.203224][ T8679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 583.208571][ T8679] Call Trace: [ 583.209985][ T8679] [ 583.211251][ T8679] dump_stack_lvl+0x16c/0x1f0 [ 583.213278][ T8679] should_fail_ex+0x497/0x5b0 [ 583.215262][ T8679] ? map_id_range_down+0x2b6/0x3a0 [ 583.217494][ T8679] should_failslab+0xc2/0x120 [ 583.219540][ T8679] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 583.221827][ T8679] ? slab_build_skb+0x48/0x400 [ 583.224002][ T8679] slab_build_skb+0x48/0x400 [ 583.226007][ T8679] bpf_prog_test_run_skb+0x356/0x20f0 [ 583.228309][ T8679] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 583.230844][ T8679] ? fput+0x32/0x390 [ 583.232527][ T8679] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 583.234987][ T8679] __sys_bpf+0x10d2/0x4a00 [ 583.236882][ T8679] ? ksys_write+0x21c/0x260 [ 583.238803][ T8679] ? reacquire_held_locks+0x420/0x4c0 [ 583.241058][ T8679] ? __pfx___sys_bpf+0x10/0x10 [ 583.243190][ T8679] ? vfs_write+0x14d/0x1140 [ 583.244944][ T8679] ? __mutex_unlock_slowpath+0x164/0x650 [ 583.247128][ T8679] ? fput+0x32/0x390 [ 583.248656][ T8679] ? ksys_write+0x1ab/0x260 [ 583.250423][ T8679] ? __pfx_ksys_write+0x10/0x10 [ 583.252559][ T8679] __x64_sys_bpf+0x78/0xc0 [ 583.254310][ T8679] ? lockdep_hardirqs_on+0x7c/0x110 [ 583.256318][ T8679] do_syscall_64+0xcd/0x250 [ 583.258090][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.260354][ T8679] RIP: 0033:0x7f3e1c979e79 [ 583.262306][ T8679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.270782][ T8679] RSP: 002b:00007f3e1c3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.274332][ T8679] RAX: ffffffffffffffda RBX: 00007f3e1cb16058 RCX: 00007f3e1c979e79 [ 583.277713][ T8679] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 583.281133][ T8679] RBP: 00007f3e1c3de090 R08: 0000000000000000 R09: 0000000000000000 [ 583.284568][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.288042][ T8679] R13: 0000000000000000 R14: 00007f3e1cb16058 R15: 00007ffc2cc0f388 [ 583.291560][ T8679] [ 583.293025][ C3] vkms_vblank_simulate: vblank timer overrun [ 583.572792][ T39] audit: type=1400 audit(1724731957.489:603): avc: denied { listen } for pid=8681 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 583.831007][ T5420] Bluetooth: Configuration file not found ar3k/ramps_0xd2b9879d_0.dfu [ 583.838900][ T5420] Bluetooth: Loading sysconfig file failed [ 583.844068][ T5420] ath3k 5-1:0.0: probe with driver ath3k failed with error -110 [ 583.858053][ T5420] usb 5-1: USB disconnect, device number 13 [ 584.353744][ T39] audit: type=1800 audit(1724731958.269:604): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.921" name="/" dev="fuse" ino=1 res=0 errno=0 [ 584.556709][ T8702] block device autoloading is deprecated and will be removed. [ 584.572767][ T39] audit: type=1400 audit(1724731958.489:605): avc: denied { ioctl } for pid=8700 comm="syz.2.924" path="/35/file0/file0" dev="fuse" ino=0 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 584.630341][ T5420] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 584.646414][ T8701] md0: using deprecated bitmap file support [ 584.649765][ T8701] md0: error: bitmap file must be a regular file [ 584.769684][ T8707] FAULT_INJECTION: forcing a failure. [ 584.769684][ T8707] name failslab, interval 1, probability 0, space 0, times 0 [ 584.769713][ T8707] CPU: 2 UID: 0 PID: 8707 Comm: syz.3.925 Not tainted 6.11.0-rc5-syzkaller #0 [ 584.769739][ T8707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 584.769751][ T8707] Call Trace: [ 584.769758][ T8707] [ 584.769765][ T8707] dump_stack_lvl+0x16c/0x1f0 [ 584.769789][ T8707] should_fail_ex+0x497/0x5b0 [ 584.769807][ T8707] ? fs_reclaim_acquire+0xae/0x160 [ 584.769826][ T8707] should_failslab+0xc2/0x120 [ 584.769847][ T8707] __kmalloc_noprof+0xcb/0x400 [ 584.769867][ T8707] ? __pfx_lock_acquire+0x10/0x10 [ 584.769889][ T8707] fbcon_set_font+0x434/0xb60 [ 584.769913][ T8707] ? __pfx_fbcon_set_font+0x10/0x10 [ 584.769936][ T8707] con_font_op+0x7fd/0xf50 [ 584.769955][ T8707] ? __pfx_con_font_op+0x10/0x10 [ 584.769972][ T8707] ? __pfx___might_resched+0x10/0x10 [ 584.769995][ T8707] ? avc_has_extended_perms+0x927/0xf90 [ 584.770017][ T8707] ? __might_fault+0xe3/0x190 [ 584.770034][ T8707] vt_ioctl+0x4ca/0x2f80 [ 584.770057][ T8707] ? __pfx_vt_ioctl+0x10/0x10 [ 584.770078][ T8707] ? kfree+0x12a/0x3b0 [ 584.770095][ T8707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 584.770119][ T8707] ? do_vfs_ioctl+0x515/0x1ad0 [ 584.770141][ T8707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 584.770163][ T8707] ? tty_jobctrl_ioctl+0x152/0xe00 [ 584.770184][ T8707] ? __pfx_vt_ioctl+0x10/0x10 [ 584.770205][ T8707] tty_ioctl+0x65d/0x15f0 [ 584.770222][ T8707] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 [ 584.770242][ T8707] ? __pfx_tty_ioctl+0x10/0x10 [ 584.770257][ T8707] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 584.770279][ T8707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.770305][ T8707] ? selinux_file_ioctl+0x180/0x270 [ 584.770323][ T8707] ? selinux_file_ioctl+0xb4/0x270 [ 584.770342][ T8707] ? __pfx_tty_ioctl+0x10/0x10 [ 584.770357][ T8707] __x64_sys_ioctl+0x193/0x220 [ 584.770379][ T8707] do_syscall_64+0xcd/0x250 [ 584.770404][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.770421][ T8707] RIP: 0033:0x7f3e1c979e79 [ 584.770434][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.770451][ T8707] RSP: 002b:00007f3e1c3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.770471][ T8707] RAX: ffffffffffffffda RBX: 00007f3e1cb16058 RCX: 00007f3e1c979e79 [ 584.770483][ T8707] RDX: 0000000020000100 RSI: 0000000000004b72 RDI: 0000000000000006 [ 584.770494][ T8707] RBP: 00007f3e1c3de090 R08: 0000000000000000 R09: 0000000000000000 [ 584.770505][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.770516][ T8707] R13: 0000000000000000 R14: 00007f3e1cb16058 R15: 00007ffc2cc0f388 [ 584.770530][ T8707] [ 584.790924][ T39] audit: type=1326 audit(1724731958.709:606): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8705 comm="syz.1.926" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 584.824599][ T5420] usb 5-1: Using ep0 maxpacket: 8 [ 584.923245][ T5420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.928151][ T5420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 584.932927][ T5420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 584.938697][ T5420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 584.943520][ T5420] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 584.948026][ T5420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.959012][ T5420] hub 5-1:1.0: bad descriptor, ignoring hub [ 584.962426][ T5420] hub 5-1:1.0: probe with driver hub failed with error -5 [ 584.967600][ T5420] cdc_wdm 5-1:1.0: skipping garbage [ 584.970061][ T5420] cdc_wdm 5-1:1.0: skipping garbage [ 584.975872][ T5420] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 584.978683][ T5420] cdc_wdm 5-1:1.0: Unknown control protocol [ 585.343869][ T39] audit: type=1400 audit(1724731959.259:607): avc: denied { module_request } for pid=8705 comm="syz.1.926" kmod="can-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 585.386080][ T8720] can: request_module (can-proto-5) failed. [ 585.515586][ T8725] use of bytesused == 0 is deprecated and will be removed in the future, [ 585.520543][ T8725] use the actual size instead. [ 585.685156][ T25] usb 5-1: USB disconnect, device number 14 [ 585.826719][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 586.763223][ T8747] trusted_key: encrypted_key: insufficient parameters specified [ 586.809947][ T39] audit: type=1326 audit(1724731960.729:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.2.939" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 586.905373][ T8749] capability: warning: `syz.1.940' uses 32-bit capabilities (legacy support in use) [ 586.981340][ T8756] netlink: 'syz.1.941': attribute type 2 has an invalid length. [ 586.984968][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'. [ 587.071829][ T39] audit: type=1326 audit(1724731960.989:609): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.1.942" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 587.329094][ T8764] netlink: 'syz.0.944': attribute type 2 has an invalid length. [ 587.335448][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 587.695220][ T8771] can: request_module (can-proto-5) failed. [ 587.819692][ T8781] netlink: 'syz.3.947': attribute type 2 has an invalid length. [ 587.830811][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.947'. [ 588.027600][ T8787] 9pnet_fd: Insufficient options for proto=fd [ 588.074659][ T39] audit: type=1400 audit(1724731961.989:610): avc: denied { write } for pid=8786 comm="syz.1.949" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 588.204605][ T5423] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 588.364598][ T1430] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 588.396060][ T5423] usb 5-1: no configurations [ 588.398409][ T5423] usb 5-1: can't read configurations, error -22 [ 588.574780][ T5423] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 588.577205][ T1430] usb 7-1: no configurations [ 588.583493][ T1430] usb 7-1: can't read configurations, error -22 [ 588.622953][ T39] audit: type=1326 audit(1724731962.539:611): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.3.953" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c979e79 code=0x0 [ 588.734903][ T5354] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 588.745170][ T1430] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 588.766795][ T5423] usb 5-1: no configurations [ 588.769557][ T5423] usb 5-1: can't read configurations, error -22 [ 588.782902][ T5423] usb usb5-port1: attempt power cycle [ 588.934645][ T5354] usb 6-1: Using ep0 maxpacket: 8 [ 588.945506][ T5354] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.951878][ T5354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.956971][ T5354] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 588.962952][ T5354] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 588.969299][ T1430] usb 7-1: no configurations [ 588.971455][ T1430] usb 7-1: can't read configurations, error -22 [ 588.974096][ T5354] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 588.978645][ T1430] usb usb7-port1: attempt power cycle [ 588.981474][ T5354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.998990][ T5354] hub 6-1:1.0: bad descriptor, ignoring hub [ 589.002328][ T5354] hub 6-1:1.0: probe with driver hub failed with error -5 [ 589.008101][ T5354] cdc_wdm 6-1:1.0: skipping garbage [ 589.010321][ T5354] cdc_wdm 6-1:1.0: skipping garbage [ 589.017200][ T5354] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 589.020604][ T5354] cdc_wdm 6-1:1.0: Unknown control protocol [ 589.205268][ T8804] can: request_module (can-proto-5) failed. [ 589.214743][ T5423] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 589.250773][ T5423] usb 5-1: no configurations [ 589.253470][ T5423] usb 5-1: can't read configurations, error -22 [ 589.394968][ T1430] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 589.414865][ T5423] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 589.427468][ T1430] usb 7-1: no configurations [ 589.430145][ T1430] usb 7-1: can't read configurations, error -22 [ 589.456742][ T5423] usb 5-1: no configurations [ 589.459696][ T5423] usb 5-1: can't read configurations, error -22 [ 589.493765][ T5423] usb usb5-port1: unable to enumerate USB device [ 589.555371][ T56] usb 6-1: USB disconnect, device number 23 [ 589.569861][ T8809] netlink: 'syz.3.954': attribute type 2 has an invalid length. [ 589.577141][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'. [ 589.591814][ T1430] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 589.639548][ T1430] usb 7-1: no configurations [ 589.641755][ T1430] usb 7-1: can't read configurations, error -22 [ 589.648779][ T1430] usb usb7-port1: unable to enumerate USB device [ 590.161158][ T8814] syzkaller1: entered promiscuous mode [ 590.163967][ T8814] syzkaller1: entered allmulticast mode [ 590.179689][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.956'. [ 590.326328][ T39] audit: type=1326 audit(1724731964.249:612): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.1.957" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 590.884688][ T39] audit: type=1400 audit(1724731964.789:613): avc: denied { read write } for pid=8818 comm="syz.0.958" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.899653][ T39] audit: type=1400 audit(1724731964.809:614): avc: denied { open } for pid=8818 comm="syz.0.958" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.929925][ T8820] can: request_module (can-proto-5) failed. [ 590.945352][ T39] audit: type=1400 audit(1724731964.859:615): avc: denied { map } for pid=8818 comm="syz.0.958" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.958113][ T39] audit: type=1400 audit(1724731964.859:616): avc: denied { execute } for pid=8818 comm="syz.0.958" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.969158][ T39] audit: type=1326 audit(1724731964.889:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.960" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 590.971153][ T8824] Trying to write to read-only block-device nullb0 [ 590.978351][ T39] audit: type=1400 audit(1724731964.889:618): avc: denied { ioctl } for pid=8818 comm="syz.0.958" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 591.160129][ T8830] /dev/nullb0: Can't open blockdev [ 591.169806][ T39] audit: type=1326 audit(1724731965.089:619): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.962" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c979e79 code=0x0 [ 591.794601][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 591.800237][ T8845] can: request_module (can-proto-5) failed. [ 591.853258][ T39] audit: type=1400 audit(1724731965.769:620): avc: denied { ioctl } for pid=8849 comm="syz.2.967" path="socket:[29778]" dev="sockfs" ino=29778 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 591.978628][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 591.985268][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.990733][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.995420][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 592.000446][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 592.005991][ T25] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 592.009980][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.018964][ T25] hub 6-1:1.0: bad descriptor, ignoring hub [ 592.022063][ T25] hub 6-1:1.0: probe with driver hub failed with error -5 [ 592.035050][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 592.038087][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 592.052621][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 592.055789][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 592.194771][ T56] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 592.198130][ T39] audit: type=1326 audit(1724731966.109:621): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.2.970" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 592.398017][ T56] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 592.402810][ T56] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 592.422384][ T56] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 592.426981][ T56] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 592.432078][ T56] usb 5-1: Manufacturer: syz [ 592.435168][ T56] usb 5-1: SerialNumber: syz [ 592.636312][ T5354] usb 6-1: USB disconnect, device number 24 [ 592.848599][ T8868] can: request_module (can-proto-5) failed. [ 593.230843][ T39] audit: type=1400 audit(1724731967.149:622): avc: denied { write } for pid=8872 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.433722][ T5381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.443572][ T5381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.454623][ T5381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.469655][ T5381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.475221][ T5381] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 594.479683][ T5381] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.542644][ T8890] ip6gretap0 speed is unknown, defaulting to 1000 [ 594.689524][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 594.805214][ T56] usb 5-1: USB disconnect, device number 19 [ 594.858144][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.861049][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.864039][ T8890] bridge_slave_0: entered allmulticast mode [ 594.868079][ T8890] bridge_slave_0: entered promiscuous mode [ 594.872537][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.875568][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.878437][ T8890] bridge_slave_1: entered allmulticast mode [ 594.882003][ T8890] bridge_slave_1: entered promiscuous mode [ 594.942481][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.949872][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.030229][ T8890] team0: Port device team_slave_0 added [ 595.038649][ T8890] team0: Port device team_slave_1 added [ 595.050590][ T8904] trusted_key: encrypted_key: insufficient parameters specified [ 595.103728][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.111735][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.121855][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.128419][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.131122][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.143493][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.252378][ T8890] hsr_slave_0: entered promiscuous mode [ 595.256182][ T8890] hsr_slave_1: entered promiscuous mode [ 595.261336][ T8890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.264445][ T8890] Cannot create hsr debugfs directory [ 595.508900][ T8890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.620804][ T8890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.729111][ T8890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.813890][ T8890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.954877][ T1103] bridge_slave_1: left allmulticast mode [ 595.958345][ T1103] bridge_slave_1: left promiscuous mode [ 595.961091][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.986333][ T1103] bridge_slave_0: left allmulticast mode [ 595.988259][ T1103] bridge_slave_0: left promiscuous mode [ 595.990336][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.413517][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.424880][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.437664][ T1103] bond0 (unregistering): Released all slaves [ 596.532461][ T8918] netlink: 'syz.2.987': attribute type 2 has an invalid length. [ 596.548433][ T5384] Bluetooth: hci0: command tx timeout [ 596.609587][ T8890] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 596.669317][ T8890] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 596.698618][ T8890] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 596.713066][ T8890] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 596.718347][ T5384] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 596.732811][ T8930] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 597.034287][ T1103] hsr_slave_0: left promiscuous mode [ 597.046935][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 597.046948][ T39] audit: type=1400 audit(1724731970.969:627): avc: denied { block_suspend } for pid=8923 comm="syz.2.992" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 597.060819][ T1103] hsr_slave_1: left promiscuous mode [ 597.083588][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.090659][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.114685][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.118896][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.173433][ T1103] veth1_macvtap: left promiscuous mode [ 597.176213][ T1103] veth0_macvtap: left promiscuous mode [ 597.180840][ T1103] veth1_vlan: left promiscuous mode [ 597.183341][ T1103] veth0_vlan: left promiscuous mode [ 597.235015][ T5425] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 597.440025][ T5425] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 597.446067][ T5425] usb 6-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 597.483524][ T5425] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 597.487403][ T5425] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 597.491148][ T5425] usb 6-1: Manufacturer: syz [ 597.493380][ T5425] usb 6-1: SerialNumber: syz [ 598.012082][ T5384] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 598.012851][ T5384] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 598.013024][ T5384] CPU: 3 UID: 0 PID: 5384 Comm: kworker/u33:3 Not tainted 6.11.0-rc5-syzkaller #0 [ 598.013047][ T5384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 598.013061][ T5384] Workqueue: hci4 hci_rx_work [ 598.013084][ T5384] Call Trace: [ 598.013091][ T5384] [ 598.013099][ T5384] dump_stack_lvl+0x16c/0x1f0 [ 598.013119][ T5384] sysfs_warn_dup+0x7f/0xa0 [ 598.013141][ T5384] sysfs_create_dir_ns+0x24d/0x2b0 [ 598.013162][ T5384] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 598.013181][ T5384] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.013206][ T5384] ? do_raw_spin_unlock+0x172/0x230 [ 598.013229][ T5384] kobject_add_internal+0x2c8/0x990 [ 598.013251][ T5384] kobject_add+0x16f/0x240 [ 598.013272][ T5384] ? __pfx_kobject_add+0x10/0x10 [ 598.013292][ T5384] ? do_raw_spin_unlock+0x172/0x230 [ 598.013315][ T5384] ? kobject_put+0xab/0x5a0 [ 598.013335][ T5384] device_add+0x289/0x1a70 [ 598.013359][ T5384] ? __pfx_dev_set_name+0x10/0x10 [ 598.013384][ T5384] ? __pfx_device_add+0x10/0x10 [ 598.013406][ T5384] ? mgmt_send_event_skb+0x2f2/0x460 [ 598.013431][ T5384] hci_conn_add_sysfs+0x17e/0x230 [ 598.013450][ T5384] le_conn_complete_evt+0x1078/0x1d80 [ 598.013475][ T5384] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 598.013499][ T5384] ? trace_contention_end+0xea/0x140 [ 598.013520][ T5384] ? __mutex_lock+0x1a6/0x9c0 [ 598.013553][ T5384] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 598.013580][ T5384] ? skb_pull_data+0x166/0x210 [ 598.013607][ T5384] hci_le_meta_evt+0x2e2/0x5d0 [ 598.013624][ T5384] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 598.013649][ T5384] hci_event_packet+0x666/0x1180 [ 598.013673][ T5384] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 598.013698][ T5384] ? __pfx_hci_event_packet+0x10/0x10 [ 598.013721][ T5384] ? mark_held_locks+0x9f/0xe0 [ 598.013741][ T5384] ? kcov_remote_start+0x3cf/0x6e0 [ 598.013764][ T5384] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.013787][ T5384] hci_rx_work+0x2c6/0x1610 [ 598.013804][ T5384] process_one_work+0x9c5/0x1b40 [ 598.013829][ T5384] ? __pfx_lock_acquire+0x10/0x10 [ 598.013849][ T5384] ? __pfx_process_one_work+0x10/0x10 [ 598.013871][ T5384] ? assign_work+0x1a0/0x250 [ 598.013891][ T5384] worker_thread+0x6c8/0xed0 [ 598.013915][ T5384] ? __pfx_worker_thread+0x10/0x10 [ 598.013938][ T5384] kthread+0x2c1/0x3a0 [ 598.013954][ T5384] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.013974][ T5384] ? __pfx_kthread+0x10/0x10 [ 598.013989][ T5384] ret_from_fork+0x45/0x80 [ 598.014013][ T5384] ? __pfx_kthread+0x10/0x10 [ 598.014029][ T5384] ret_from_fork_asm+0x1a/0x30 [ 598.014056][ T5384] [ 598.014086][ T5384] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 598.014122][ T5384] Bluetooth: hci4: failed to register connection device [ 598.093360][ T8949] trusted_key: encrypted_key: insufficient parameters specified [ 598.103966][ T39] audit: type=1326 audit(1724731972.019:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.0.996" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 598.634597][ T5384] Bluetooth: hci0: command tx timeout [ 598.894111][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 599.042769][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 599.777370][ T5425] usb 6-1: USB disconnect, device number 25 [ 600.065837][ T5384] Bluetooth: hci4: command tx timeout [ 600.141973][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.172121][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.194805][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.198378][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.206459][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.210686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.300940][ T39] audit: type=1326 audit(1724731974.219:629): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.2.1001" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 600.442609][ T39] audit: type=1326 audit(1724731974.359:630): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.1.1003" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 600.519182][ T8973] syzkaller1: entered promiscuous mode [ 600.521420][ T8973] syzkaller1: entered allmulticast mode [ 600.541581][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 600.587539][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.690220][ T8890] veth0_vlan: entered promiscuous mode [ 600.710816][ T8890] veth1_vlan: entered promiscuous mode [ 600.715445][ T5384] Bluetooth: hci0: command tx timeout [ 600.779680][ T8890] veth0_macvtap: entered promiscuous mode [ 600.786761][ T5384] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 600.790960][ T5384] Bluetooth: hci3: Injecting HCI hardware error event [ 600.796866][ T5384] Bluetooth: hci3: hardware error 0x00 [ 600.799379][ T8890] veth1_macvtap: entered promiscuous mode [ 600.819783][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.825880][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.831527][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.836132][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.840309][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.844735][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.858808][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.862941][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.889275][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.898572][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.903056][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.910099][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.915907][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.921187][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.927693][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.933657][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.938300][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.943672][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.952846][ T8890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.957657][ T8890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.961302][ T8890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.964718][ T8890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.987542][ T8975] can: request_module (can-proto-5) failed. [ 601.099630][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.104680][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.183708][ T8977] can: request_module (can-proto-5) failed. [ 601.293393][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.313278][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.540507][ T39] audit: type=1326 audit(1724731975.459:631): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.3.981" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 601.620249][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 602.034668][ T6139] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 602.130273][ T9002] can: request_module (can-proto-5) failed. [ 602.216419][ T6139] usb 6-1: too many configurations: 180, using maximum allowed: 8 [ 602.249152][ T6139] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 602.253083][ T6139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.257965][ T6139] usb 6-1: Product: syz [ 602.259749][ T6139] usb 6-1: Manufacturer: syz [ 602.261756][ T6139] usb 6-1: SerialNumber: syz [ 602.311516][ T6139] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 602.375408][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 602.486337][ T39] audit: type=1326 audit(1724731976.409:632): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.3.1013" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 602.784675][ T5381] Bluetooth: hci0: command tx timeout [ 602.945076][ T5384] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 603.250217][ T9017] can: request_module (can-proto-5) failed. [ 603.262623][ T6139] usb 6-1: USB disconnect, device number 26 [ 603.664758][ T25] usb 6-1: Service connection timeout for: 256 [ 603.668230][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 603.690389][ T25] ath9k_htc: Failed to initialize the device [ 603.704913][ T6139] usb 6-1: ath9k_htc: USB layer deinitialized [ 603.710102][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 604.086749][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 604.696642][ T39] audit: type=1326 audit(1724731978.619:633): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.2.1021" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 605.040286][ T39] audit: type=1326 audit(1724731978.959:634): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.1024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 605.062980][ T9049] netlink: 'syz.0.1023': attribute type 4 has an invalid length. [ 605.079272][ T9049] netlink: 'syz.0.1023': attribute type 4 has an invalid length. [ 605.302370][ T9051] can: request_module (can-proto-5) failed. [ 605.697227][ T9056] can: request_module (can-proto-5) failed. [ 605.967482][ T39] audit: type=1400 audit(1724731979.889:635): avc: denied { read append } for pid=9075 comm="syz.0.1032" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 605.988218][ T9082] tipc: Started in network mode [ 605.990440][ T9082] tipc: Node identity 0a8a0421fb65, cluster identity 4711 [ 605.994358][ T9082] tipc: Enabled bearer , priority 10 [ 605.995014][ T39] audit: type=1400 audit(1724731979.889:636): avc: denied { open } for pid=9075 comm="syz.0.1032" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 606.178659][ T9087] sd 0:0:0:0: PR command failed: 1026 [ 606.181400][ T9087] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 606.184702][ T9087] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 606.555640][ T9095] netlink: 'syz.2.1037': attribute type 2 has an invalid length. [ 606.567931][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1037'. [ 607.005995][ T9102] can: request_module (can-proto-0) failed. [ 607.118373][ T1430] tipc: Node number set to 4058973217 [ 607.163286][ T39] audit: type=1326 audit(1724731981.079:637): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9107 comm="syz.0.1041" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 607.182062][ T9111] input: syz0 as /devices/virtual/input/input10 [ 607.394379][ T9115] FAULT_INJECTION: forcing a failure. [ 607.394379][ T9115] name failslab, interval 1, probability 0, space 0, times 0 [ 607.399997][ T9115] CPU: 3 UID: 0 PID: 9115 Comm: syz.1.1044 Not tainted 6.11.0-rc5-syzkaller #0 [ 607.403462][ T9115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 607.407116][ T9115] Call Trace: [ 607.408248][ T9115] [ 607.409233][ T9115] dump_stack_lvl+0x16c/0x1f0 [ 607.410788][ T9115] should_fail_ex+0x497/0x5b0 [ 607.412357][ T9115] should_failslab+0xc2/0x120 [ 607.413946][ T9115] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 607.415734][ T9115] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 607.418101][ T9115] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 607.420420][ T9115] idr_get_free+0x528/0xa40 [ 607.422114][ T9115] idr_alloc_u32+0x191/0x2f0 [ 607.423868][ T9115] ? __pfx_idr_alloc_u32+0x10/0x10 [ 607.425789][ T9115] ? do_raw_spin_lock+0x12d/0x2c0 [ 607.427735][ T9115] l2tp_tunnel_register+0xfd/0xc80 [ 607.429722][ T9115] ? __pfx___debug_object_init+0x10/0x10 [ 607.431692][ T9115] ? sprintf+0xcd/0x110 [ 607.433297][ T9115] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 607.435422][ T9115] ? lockdep_init_map_type+0x16d/0x7d0 [ 607.437533][ T9115] ? lockdep_init_map_type+0x16d/0x7d0 [ 607.439629][ T9115] ? l2tp_tunnel_create+0x2f9/0x4a0 [ 607.441624][ T9115] ? l2tp_tunnel_create+0x3ae/0x4a0 [ 607.443555][ T9115] l2tp_nl_cmd_tunnel_create+0x3e3/0x8f0 [ 607.445631][ T9115] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 607.447917][ T9115] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 607.450660][ T9115] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 607.453848][ T9115] genl_family_rcv_msg_doit+0x202/0x2f0 [ 607.456070][ T9115] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 607.458420][ T9115] ? ns_capable+0xd7/0x110 [ 607.460153][ T9115] genl_rcv_msg+0x565/0x800 [ 607.461922][ T9115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.463857][ T9115] ? __pfx___lock_acquire+0x10/0x10 [ 607.465906][ T9115] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 607.468279][ T9115] netlink_rcv_skb+0x16b/0x440 [ 607.470137][ T9115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.472103][ T9115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.474107][ T9115] ? down_read+0xc9/0x330 [ 607.475718][ T9115] ? __pfx_down_read+0x10/0x10 [ 607.477531][ T9115] ? netlink_deliver_tap+0x1ae/0xd90 [ 607.479519][ T9115] genl_rcv+0x28/0x40 [ 607.481044][ T9115] netlink_unicast+0x53c/0x7f0 [ 607.482861][ T9115] ? __pfx_netlink_unicast+0x10/0x10 [ 607.484832][ T9115] netlink_sendmsg+0x8b8/0xd70 [ 607.486669][ T9115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.488686][ T9115] ? __import_iovec+0x1fd/0x6e0 [ 607.490587][ T9115] ____sys_sendmsg+0xab5/0xc90 [ 607.492554][ T9115] ? copy_msghdr_from_user+0x10b/0x160 [ 607.494658][ T9115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.496642][ T9115] ? __pfx___lock_acquire+0x10/0x10 [ 607.498608][ T9115] ? rcu_is_watching+0x12/0xc0 [ 607.500419][ T9115] ? trace_bpf_trace_printk+0x169/0x1e0 [ 607.502449][ T9115] ___sys_sendmsg+0x135/0x1e0 [ 607.504221][ T9115] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.506235][ T9115] ? ksys_write+0x21c/0x260 [ 607.507942][ T9115] ? __fget_light+0x173/0x210 [ 607.509727][ T9115] __sys_sendmsg+0x117/0x1f0 [ 607.511539][ T9115] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.513429][ T9115] ? bpf_trace_run2+0x2a6/0x590 [ 607.515285][ T9115] ? rcu_is_watching+0x12/0xc0 [ 607.517122][ T9115] do_syscall_64+0xcd/0x250 [ 607.518860][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.521113][ T9115] RIP: 0033:0x7f97ff179e79 [ 607.522844][ T9115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.530091][ T9115] RSP: 002b:00007f97fff9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.533146][ T9115] RAX: ffffffffffffffda RBX: 00007f97ff315f80 RCX: 00007f97ff179e79 [ 607.536045][ T9115] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 607.539043][ T9115] RBP: 00007f97fff9b090 R08: 0000000000000000 R09: 0000000000000000 [ 607.542090][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.545046][ T9115] R13: 0000000000000000 R14: 00007f97ff315f80 R15: 00007fffbc31ac78 [ 607.548053][ T9115] [ 607.768414][ T9119] can: request_module (can-proto-5) failed. [ 607.797944][ T9118] netlink: 'syz.1.1045': attribute type 2 has an invalid length. [ 607.832027][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1045'. [ 608.443968][ T9129] netlink: 7962 bytes leftover after parsing attributes in process `syz.0.1047'. [ 608.481804][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'. [ 609.687516][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1049'. [ 610.005831][ T39] audit: type=1326 audit(1724731983.929:638): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9151 comm="syz.2.1055" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 610.456072][ T9156] netlink: 7962 bytes leftover after parsing attributes in process `syz.0.1056'. [ 610.469225][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 610.642724][ T9158] can: request_module (can-proto-5) failed. [ 611.033390][ T39] audit: type=1400 audit(1724731984.949:639): avc: denied { setattr } for pid=9163 comm="syz.2.1058" name="L2CAP" dev="sockfs" ino=28478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 611.718545][ T9168] vlan2: entered promiscuous mode [ 611.721188][ T9168] 0ªX¹¦D: entered promiscuous mode [ 611.724227][ T9168] vlan2: entered allmulticast mode [ 612.097170][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'. [ 612.125965][ T9177] ip6gretap0 speed is unknown, defaulting to 1000 [ 612.227614][ T39] audit: type=1326 audit(1724731986.149:640): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9183 comm="syz.3.1066" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 612.290201][ T9191] 9pnet_fd: Insufficient options for proto=fd [ 612.370654][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 612.672946][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'. [ 612.897672][ T9201] can: request_module (can-proto-5) failed. [ 613.178380][ T39] audit: type=1326 audit(1724731987.099:641): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9209 comm="syz.3.1073" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 613.544712][ T5356] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 613.734636][ T5356] usb 7-1: Using ep0 maxpacket: 8 [ 613.742165][ T5356] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.751681][ T5356] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 613.756974][ T5356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 613.765710][ T5356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 613.772263][ T5356] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 613.777584][ T5356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.795107][ T5356] hub 7-1:1.0: bad descriptor, ignoring hub [ 613.803263][ T5356] hub 7-1:1.0: probe with driver hub failed with error -5 [ 613.809610][ T5356] cdc_wdm 7-1:1.0: skipping garbage [ 613.812299][ T5356] cdc_wdm 7-1:1.0: skipping garbage [ 613.822248][ T5356] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 613.826790][ T5356] cdc_wdm 7-1:1.0: Unknown control protocol [ 613.841359][ T9216] can: request_module (can-proto-5) failed. [ 614.164594][ T39] audit: type=1800 audit(1724731988.079:642): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1076" name="/" dev="fuse" ino=1 res=0 errno=0 [ 614.244589][ T39] audit: type=1326 audit(1724731988.159:643): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.0.1079" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 614.344001][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1080'. [ 614.674645][ T5897] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 614.885905][ T9241] can: request_module (can-proto-5) failed. [ 614.896337][ T5897] usb 8-1: Using ep0 maxpacket: 8 [ 614.902151][ T5897] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.912043][ T5897] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 614.915846][ T5897] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 614.920371][ T5897] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 614.925499][ T5897] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 614.929363][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.937649][ T5897] hub 8-1:1.0: bad descriptor, ignoring hub [ 614.940855][ T5897] hub 8-1:1.0: probe with driver hub failed with error -5 [ 614.946130][ T5897] cdc_wdm 8-1:1.0: skipping garbage [ 614.949186][ T5897] cdc_wdm 8-1:1.0: skipping garbage [ 614.954878][ T5897] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 614.958424][ T5897] cdc_wdm 8-1:1.0: Unknown control protocol [ 615.407333][ T39] audit: type=1326 audit(1724731989.329:644): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9248 comm="syz.0.1083" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 616.037482][ T9263] can: request_module (can-proto-5) failed. [ 616.149645][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.152888][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.157753][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.160716][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.163583][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.166159][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.168852][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.171579][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.174148][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.176890][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.179514][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.182149][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.184396][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.187172][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.189631][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.194363][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.197156][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.199581][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.202419][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 616.205210][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 616.209481][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 616.212071][ T25] usb 7-1: USB disconnect, device number 32 [ 616.379668][ T5897] usb 8-1: USB disconnect, device number 25 [ 616.687237][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 617.243488][ T39] audit: type=1400 audit(1724731991.159:645): avc: denied { mount } for pid=9276 comm="syz.3.1091" name="/" dev="rpc_pipefs" ino=30939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 617.402593][ T39] audit: type=1400 audit(1724731991.329:646): avc: denied { unmount } for pid=8890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 617.485026][ T39] audit: type=1401 audit(1724731991.389:647): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 617.685699][ T9293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1096'. [ 617.696208][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'. [ 617.701487][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 617.721594][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1096'. [ 617.808685][ T9295] trusted_key: encrypted_key: insufficient parameters specified [ 617.833438][ T39] audit: type=1400 audit(1724731991.749:648): avc: denied { unmount } for pid=5386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 618.017323][ T9305] netlink: 'syz.3.1100': attribute type 2 has an invalid length. [ 618.250426][ T6139] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 618.314626][ T5420] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 618.343184][ T39] audit: type=1326 audit(1724731992.259:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9307 comm="syz.3.1101" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 618.458920][ T6139] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.467151][ T6139] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.471034][ T6139] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.475523][ T6139] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.482547][ T9303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.489829][ T6139] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.504641][ T5420] usb 5-1: Using ep0 maxpacket: 8 [ 618.523911][ T5420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.540512][ T5420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 618.556412][ T5420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 618.562865][ T5420] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 618.568684][ T5420] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 618.573128][ T5420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.591674][ T5420] hub 5-1:1.0: bad descriptor, ignoring hub [ 618.597840][ T5420] hub 5-1:1.0: probe with driver hub failed with error -5 [ 618.601942][ T5420] cdc_wdm 5-1:1.0: skipping garbage [ 618.604253][ T5420] cdc_wdm 5-1:1.0: skipping garbage [ 618.611991][ T5420] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 618.621772][ T5420] cdc_wdm 5-1:1.0: Unknown control protocol [ 618.765837][ T5425] usb 7-1: USB disconnect, device number 33 [ 619.085590][ T5356] usb 5-1: USB disconnect, device number 20 [ 619.123337][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 619.280107][ T9320] syz.3.1103: attempt to access beyond end of device [ 619.280107][ T9320] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 619.286350][ T9320] efs: cannot read volume header [ 619.314705][ T5525] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 619.432854][ T9323] fuse: Bad value for 'group_id' [ 619.435780][ T9324] fuse: Bad value for 'group_id' [ 619.440283][ T9323] fuse: Bad value for 'group_id' [ 619.442870][ T9324] fuse: Bad value for 'group_id' [ 619.536969][ T5525] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 619.549013][ T5525] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 619.553105][ T5525] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 619.557473][ T5525] usb 6-1: Manufacturer: syz [ 619.559541][ T5525] usb 6-1: SerialNumber: syz [ 620.049467][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1108'. [ 620.082018][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 620.086353][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 620.125237][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'. [ 620.465373][ T9339] netlink: 'syz.2.1110': attribute type 2 has an invalid length. [ 620.506646][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 620.845156][ T9346] trusted_key: encrypted_key: insufficient parameters specified [ 620.852184][ T39] audit: type=1326 audit(1724731994.769:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.0.1114" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 621.124734][ T1430] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 621.138437][ T9350] overlayfs: failed to resolve './file1/file0': -2 [ 621.218803][ T9352] ax25_connect(): syz.2.1115 uses autobind, please contact jreuter@yaina.de [ 621.228486][ T39] audit: type=1400 audit(1724731995.139:651): avc: denied { connect } for pid=9349 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 621.311904][ T1430] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.316889][ T1430] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 621.321527][ T1430] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 621.328085][ T1430] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.345647][ T9345] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 621.357437][ T1430] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.817200][ T1430] usb 8-1: USB disconnect, device number 26 [ 621.956365][ T5525] usb 6-1: USB disconnect, device number 27 [ 622.168636][ T9379] syz.0.1122: attempt to access beyond end of device [ 622.168636][ T9379] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 622.175786][ T9379] exFAT-fs (nbd0): unable to read boot sector [ 622.178689][ T9379] exFAT-fs (nbd0): failed to read boot sector [ 622.181923][ T9379] exFAT-fs (nbd0): failed to recognize exfat type [ 622.299536][ T39] audit: type=1400 audit(1724731996.219:652): avc: denied { setopt } for pid=9377 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 622.370515][ T39] audit: type=1326 audit(1724731996.289:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9377 comm="syz.0.1122" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 622.594640][ T5525] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 622.636977][ T9385] netlink: 'syz.3.1123': attribute type 2 has an invalid length. [ 622.774678][ T5525] usb 6-1: Using ep0 maxpacket: 32 [ 622.787757][ T5525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.792428][ T5525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.796495][ T5525] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 622.800143][ T5525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.810368][ T5525] usb 6-1: config 0 descriptor?? [ 622.818710][ T5525] hub 6-1:0.0: USB hub found [ 622.925010][ T9387] FAULT_INJECTION: forcing a failure. [ 622.925010][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 622.930052][ T9387] CPU: 3 UID: 0 PID: 9387 Comm: syz.2.1124 Not tainted 6.11.0-rc5-syzkaller #0 [ 622.933866][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 622.938356][ T9387] Call Trace: [ 622.939805][ T9387] [ 622.941146][ T9387] dump_stack_lvl+0x16c/0x1f0 [ 622.943430][ T9387] should_fail_ex+0x497/0x5b0 [ 622.946215][ T9387] ? __pfx___ip_dev_find+0x10/0x10 [ 622.948460][ T9387] should_failslab+0xc2/0x120 [ 622.950456][ T9387] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 622.952247][ T9387] ? dst_alloc+0x99/0x1a0 [ 622.953918][ T9387] dst_alloc+0x99/0x1a0 [ 622.955593][ T9387] rt_dst_alloc+0x35/0x3a0 [ 622.957460][ T9387] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 622.959852][ T9387] ip_route_output_key_hash+0x138/0x2e0 [ 622.962261][ T9387] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 622.964942][ T9387] ? __pfx_lock_release+0x10/0x10 [ 622.967202][ T9387] ip_route_output_flow+0x27/0x150 [ 622.969446][ T9387] udp_sendmsg+0x1d06/0x2b50 [ 622.971490][ T9387] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 622.973787][ T9387] ? __pfx_udp_sendmsg+0x10/0x10 [ 622.975723][ T9387] ? avc_has_perm+0x11b/0x1c0 [ 622.977279][ T9387] ? __pfx___up_read+0x10/0x10 [ 622.978786][ T9387] ? sock_has_perm+0x25a/0x2f0 [ 622.980207][ T9387] ? __pfx_udp_sendmsg+0x10/0x10 [ 622.982278][ T9387] ? inet_sendmsg+0x105/0x140 [ 622.984020][ T9387] inet_sendmsg+0x105/0x140 [ 622.985750][ T9387] ____sys_sendmsg+0x992/0xc90 [ 622.987469][ T9387] ? copy_msghdr_from_user+0x10b/0x160 [ 622.989623][ T9387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.991736][ T9387] ? __pfx___lock_acquire+0x10/0x10 [ 622.993722][ T9387] ___sys_sendmsg+0x135/0x1e0 [ 622.995579][ T9387] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.997920][ T9387] ? __pfx_lock_release+0x10/0x10 [ 623.000033][ T9387] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 623.002242][ T9387] ? __fget_light+0x173/0x210 [ 623.004098][ T9387] __sys_sendmmsg+0x1a1/0x450 [ 623.005966][ T9387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 623.008223][ T9387] ? vfs_write+0x14d/0x1140 [ 623.010268][ T9387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 623.012925][ T9387] ? fput+0x32/0x390 [ 623.014691][ T9387] ? ksys_write+0x1ab/0x260 [ 623.016690][ T9387] ? __pfx_ksys_write+0x10/0x10 [ 623.018838][ T9387] __x64_sys_sendmmsg+0x9c/0x100 [ 623.021040][ T9387] ? lockdep_hardirqs_on+0x7c/0x110 [ 623.023251][ T9387] do_syscall_64+0xcd/0x250 [ 623.025304][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.027550][ T9387] RIP: 0033:0x7f86fd779e79 [ 623.029794][ T9387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.037816][ T9387] RSP: 002b:00007f86fe526038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 623.041073][ T9387] RAX: ffffffffffffffda RBX: 00007f86fd915f80 RCX: 00007f86fd779e79 [ 623.044473][ T9387] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003 [ 623.047925][ T9387] RBP: 00007f86fe526090 R08: 0000000000000000 R09: 0000000000000000 [ 623.051086][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.054363][ T9387] R13: 0000000000000000 R14: 00007f86fd915f80 R15: 00007ffe70f66888 [ 623.057840][ T9387] [ 623.077353][ T5525] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 623.095735][ T5525] usbhid 6-1:0.0: can't add hid device: -71 [ 623.100020][ T5525] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 623.135392][ T5525] usb 6-1: USB disconnect, device number 28 [ 623.143353][ T9389] trusted_key: encrypted_key: insufficient parameters specified [ 623.160874][ T39] audit: type=1326 audit(1724731997.079:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.2.1125" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 623.334992][ T39] audit: type=1326 audit(1724731997.249:655): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.1126" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 623.378521][ T39] audit: type=1400 audit(1724731997.299:656): avc: denied { mount } for pid=9395 comm="syz.3.1127" name="/" dev="ramfs" ino=31994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 623.396459][ T9396] input: syz0 as /devices/virtual/input/input11 [ 623.444917][ T39] audit: type=1400 audit(1724731997.369:657): avc: denied { mounton } for pid=9395 comm="syz.3.1127" path="/30/file0/file1" dev="ramfs" ino=31154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 623.445704][ T9396] overlayfs: failed to resolve './bus': -2 [ 623.513646][ T39] audit: type=1400 audit(1724731997.429:658): avc: denied { unmount } for pid=8890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 623.754519][ T9402] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 623.758544][ T9402] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 623.764258][ T9402] vhci_hcd vhci_hcd.0: Device attached [ 623.850076][ T9402] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 623.853572][ T9402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 623.879864][ T9402] vhci_hcd vhci_hcd.0: Device attached [ 623.935366][ T9410] can: request_module (can-proto-5) failed. [ 623.940944][ T9408] usbip_core: unknown command [ 623.949936][ T9408] vhci_hcd: unknown pdu 0 [ 623.952336][ T9408] usbip_core: unknown command [ 623.959152][ T1218] vhci_hcd: stop threads [ 623.961650][ T1218] vhci_hcd: release socket [ 623.964663][ T1218] vhci_hcd: disconnect device [ 624.094945][ T5525] usb 16-1: SetAddress Request (2) to port 0 [ 624.100757][ T5525] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 624.133279][ T9413] IPVS: persistence engine module ip_vs_pe_@ not found [ 624.201015][ T9417] __nla_validate_parse: 4 callbacks suppressed [ 624.201033][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1131'. [ 624.212559][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 624.213283][ T9406] vhci_hcd: connection reset by peer [ 624.218308][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 624.233079][ T57] vhci_hcd: stop threads [ 624.235554][ T57] vhci_hcd: release socket [ 624.243224][ T57] vhci_hcd: disconnect device [ 624.558638][ T39] audit: type=1400 audit(1724731998.479:659): avc: denied { read } for pid=9418 comm="syz.2.1132" name="fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 624.584641][ T9426] bridge0: entered allmulticast mode [ 624.865871][ T9433] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 624.907465][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1135'. [ 625.848201][ T9447] trusted_key: encrypted_key: insufficient parameters specified [ 625.877857][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 625.877871][ T39] audit: type=1326 audit(1724731999.799:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9446 comm="syz.1.1140" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 625.934626][ T25] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 626.114617][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 626.130118][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.134597][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.138505][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 626.143322][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 626.148479][ T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 626.152584][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.167997][ T25] hub 7-1:1.0: bad descriptor, ignoring hub [ 626.170766][ T25] hub 7-1:1.0: probe with driver hub failed with error -5 [ 626.174289][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 626.179737][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 626.190527][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 626.193214][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 626.342574][ T9451] can: request_module (can-proto-5) failed. [ 626.606090][ T9455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1141'. [ 626.663390][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1141'. [ 626.667824][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 626.836712][ T5897] usb 7-1: USB disconnect, device number 34 [ 626.881291][ T9457] netlink: 'syz.1.1143': attribute type 29 has an invalid length. [ 626.887909][ T9457] netlink: 'syz.1.1143': attribute type 29 has an invalid length. [ 626.891804][ T9457] netlink: 'syz.1.1143': attribute type 29 has an invalid length. [ 626.899485][ T9457] netlink: 'syz.1.1143': attribute type 29 has an invalid length. [ 627.012722][ T39] audit: type=1326 audit(1724732000.929:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9472 comm="syz.0.1146" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 627.154281][ T39] audit: type=1326 audit(1724732001.069:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.1.1147" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 627.645982][ T9481] netlink: 'syz.2.1148': attribute type 2 has an invalid length. [ 627.655849][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1148'. [ 627.788336][ T39] audit: type=1326 audit(1724732001.709:665): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1149" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 628.091787][ T9487] block device autoloading is deprecated and will be removed. [ 628.184906][ T9486] md0: using deprecated bitmap file support [ 628.187922][ T9486] md0: error: bitmap file must be a regular file [ 628.442465][ T9497] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 628.446724][ T9497] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.1155'. [ 628.452825][ T9498] can: request_module (can-proto-5) failed. [ 628.582546][ T39] audit: type=1400 audit(1724732002.499:666): avc: denied { connect } for pid=9504 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 628.596705][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 628.631806][ T39] audit: type=1400 audit(1724732002.549:667): avc: denied { read } for pid=9504 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 628.688207][ T39] audit: type=1400 audit(1724732002.609:668): avc: denied { write } for pid=9504 comm="syz.0.1157" path="socket:[29297]" dev="sockfs" ino=29297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 628.791990][ T9516] syz.1.1158: attempt to access beyond end of device [ 628.791990][ T9516] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 628.801286][ T9516] efs: cannot read volume header [ 628.926446][ T9525] netlink: 'syz.2.1162': attribute type 2 has an invalid length. [ 629.191336][ T5525] usb 16-1: device descriptor read/8, error -110 [ 629.586917][ T9529] FAULT_INJECTION: forcing a failure. [ 629.586917][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.598762][ T9529] CPU: 3 UID: 0 PID: 9529 Comm: syz.3.1164 Not tainted 6.11.0-rc5-syzkaller #0 [ 629.602771][ T9529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 629.607192][ T9529] Call Trace: [ 629.608611][ T9529] [ 629.609919][ T9529] dump_stack_lvl+0x16c/0x1f0 [ 629.611887][ T9529] should_fail_ex+0x497/0x5b0 [ 629.613915][ T9529] strncpy_from_user+0x38/0x320 [ 629.615987][ T9529] getname_flags.part.0+0x8f/0x550 [ 629.618215][ T9529] getname_flags+0x93/0xf0 [ 629.619915][ T9529] user_path_at+0x24/0x60 [ 629.623119][ T9529] __x64_sys_chmod+0xe8/0x1c0 [ 629.626000][ T9529] ? __pfx___x64_sys_chmod+0x10/0x10 [ 629.628285][ T9529] do_syscall_64+0xcd/0x250 [ 629.630707][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.633624][ T9529] RIP: 0033:0x7f3ebab79e79 [ 629.635782][ T9529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.644537][ T9529] RSP: 002b:00007f3ebb96c038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 629.647472][ T9529] RAX: ffffffffffffffda RBX: 00007f3ebad15f80 RCX: 00007f3ebab79e79 [ 629.650356][ T9529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 629.653366][ T9529] RBP: 00007f3ebb96c090 R08: 0000000000000000 R09: 0000000000000000 [ 629.656760][ T9529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.660298][ T9529] R13: 0000000000000000 R14: 00007f3ebad15f80 R15: 00007ffcd9e5c498 [ 629.663689][ T9529] [ 629.668628][ T5525] usb usb16-port1: attempt power cycle [ 629.739091][ T9533] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 629.743461][ T9533] __nla_validate_parse: 1 callbacks suppressed [ 629.743473][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 629.914274][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.916600][ T9541] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 629.931178][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.061747][ T9548] netlink: 'syz.1.1167': attribute type 2 has an invalid length. [ 630.100384][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'. [ 630.289864][ T39] audit: type=1400 audit(1724732004.209:669): avc: denied { checkpoint_restore } for pid=9553 comm="syz.2.1173" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.321760][ T5525] usb usb16-port1: unable to enumerate USB device [ 631.065380][ T9562] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1177'. [ 631.107443][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 631.135489][ T39] audit: type=1400 audit(1724732005.049:670): avc: denied { getopt } for pid=9559 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 631.180328][ T9567] trusted_key: encrypted_key: insufficient parameters specified [ 631.202090][ T9568] syz.1.1178: attempt to access beyond end of device [ 631.202090][ T9568] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 631.210346][ T9568] efs: cannot read volume header [ 631.221546][ T39] audit: type=1326 audit(1724732005.129:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.2.1179" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 631.367150][ T9572] trusted_key: encrypted_key: insufficient parameters specified [ 631.464591][ T39] audit: type=1326 audit(1724732005.379:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.0.1180" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 631.812290][ T9560] overlayfs: statfs failed on './file0' [ 632.093847][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1181'. [ 632.103202][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'. [ 632.113012][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 632.135112][ C3] vkms_vblank_simulate: vblank timer overrun [ 632.161641][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'. [ 632.276163][ T9588] overlay: Unknown parameter 'euid<00000000000000000000' [ 632.287390][ T39] audit: type=1400 audit(1724732006.209:673): avc: denied { create } for pid=9586 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 632.308141][ T39] audit: type=1400 audit(1724732006.219:674): avc: denied { connect } for pid=9586 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 632.341345][ T9591] ip6gretap0 speed is unknown, defaulting to 1000 [ 632.341589][ T39] audit: type=1400 audit(1724732006.219:675): avc: denied { bind } for pid=9586 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 632.956197][ T39] audit: type=1400 audit(1724732006.819:676): avc: denied { mount } for pid=9603 comm="syz.0.1190" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 633.235334][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1193'. [ 633.251127][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 633.568700][ C3] vkms_vblank_simulate: vblank timer overrun [ 633.814418][ T39] audit: type=1400 audit(1724732007.729:677): avc: denied { write } for pid=9620 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 634.023989][ T39] audit: type=1800 audit(1724732007.939:678): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1197" name="/" dev="fuse" ino=1 res=0 errno=0 [ 634.203434][ T9632] ip6gretap0 speed is unknown, defaulting to 1000 [ 635.023671][ T9644] __nla_validate_parse: 2 callbacks suppressed [ 635.023687][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1203'. [ 635.067343][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1203'. [ 635.071392][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 635.138019][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1203'. [ 635.420768][ T9649] trusted_key: encrypted_key: insufficient parameters specified [ 635.474204][ T39] audit: type=1326 audit(1724732009.389:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.1.1205" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 636.090860][ T9666] overlay: Unknown parameter 'fsuuid' [ 637.841525][ T9609] syz.2.1192: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 637.873779][ T9609] CPU: 3 UID: 0 PID: 9609 Comm: syz.2.1192 Not tainted 6.11.0-rc5-syzkaller #0 [ 637.879077][ T9609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 637.892537][ T9609] Call Trace: [ 637.894514][ T9609] [ 637.895897][ T9609] dump_stack_lvl+0x16c/0x1f0 [ 637.898695][ T9609] warn_alloc+0x24d/0x3a0 [ 637.901402][ T9609] ? __pfx_warn_alloc+0x10/0x10 [ 637.904131][ T9609] ? __get_vm_area_node+0x190/0x2d0 [ 637.907319][ T9609] ? __get_vm_area_node+0x1bc/0x2d0 [ 637.910204][ T9609] __vmalloc_node_range_noprof+0xfe8/0x14e0 [ 637.913260][ T9609] ? xt_alloc_entry_offsets+0x3a/0x60 [ 637.915890][ T9609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 637.919466][ T9609] ? rcu_is_watching+0x12/0xc0 [ 637.922295][ T9609] ? rcu_is_watching+0x12/0xc0 [ 637.926277][ T9609] ? trace_kmalloc+0x2d/0xe0 [ 637.929631][ T9609] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 637.933259][ T9609] ? xt_alloc_entry_offsets+0x3a/0x60 [ 637.936014][ T9609] __kvmalloc_node_noprof+0x14f/0x1a0 [ 637.938543][ T9609] ? xt_alloc_entry_offsets+0x3a/0x60 [ 637.941097][ T9609] xt_alloc_entry_offsets+0x3a/0x60 [ 637.944663][ T9609] translate_table+0x22e/0x1710 [ 637.947724][ T9609] ? __pfx_lock_release+0x10/0x10 [ 637.950933][ T9609] ? __pfx___might_resched+0x10/0x10 [ 637.954198][ T9609] ? __pfx_translate_table+0x10/0x10 [ 637.957265][ T9609] do_ipt_set_ctl+0x605/0xc30 [ 637.960079][ T9609] ? rcu_is_watching+0x12/0xc0 [ 637.962759][ T9609] ? trace_contention_end+0xea/0x140 [ 637.965795][ T9609] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 637.969439][ T9609] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 637.974503][ T9609] ? __pfx_avc_has_perm+0x10/0x10 [ 637.977681][ T9609] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 637.981345][ T9609] nf_setsockopt+0x8a/0xf0 [ 637.984072][ T9609] ip_setsockopt+0xcb/0xf0 [ 637.988433][ T9609] raw_setsockopt+0xb8/0x290 [ 637.992710][ T9609] ? __pfx_raw_setsockopt+0x10/0x10 [ 637.996015][ T9609] ? selinux_socket_setsockopt+0x6a/0x80 [ 637.999769][ T9609] ? sock_common_setsockopt+0x2e/0xf0 [ 638.002739][ T9609] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 638.006463][ T9609] do_sock_setsockopt+0x222/0x480 [ 638.007148][ T9685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1215'. [ 638.009504][ T9609] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 638.009533][ T9609] ? __fget_light+0x173/0x210 [ 638.009558][ T9609] __sys_setsockopt+0x1a4/0x270 [ 638.009577][ T9609] ? __pfx___sys_setsockopt+0x10/0x10 [ 638.009595][ T9609] ? xfd_validate_state+0x5d/0x180 [ 638.009621][ T9609] __x64_sys_setsockopt+0xbd/0x160 [ 638.009640][ T9609] ? do_syscall_64+0x91/0x250 [ 638.009664][ T9609] ? lockdep_hardirqs_on+0x7c/0x110 [ 638.009686][ T9609] do_syscall_64+0xcd/0x250 [ 638.009710][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.009729][ T9609] RIP: 0033:0x7f86fd779e79 [ 638.049455][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.060766][ T9609] RSP: 002b:00007f86fe526038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 638.065336][ T9609] RAX: ffffffffffffffda RBX: 00007f86fd915f80 RCX: 00007f86fd779e79 [ 638.070496][ T9609] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 638.074474][ T9609] RBP: 00007f86fd7e793e R08: 0000000000000300 R09: 0000000000000000 [ 638.078609][ T9609] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 638.083925][ T9609] R13: 0000000000000000 R14: 00007f86fd915f80 R15: 00007ffe70f66888 [ 638.087550][ T9609] [ 638.119309][ T9609] Mem-Info: [ 638.121446][ T9609] active_anon:9887 inactive_anon:0 isolated_anon:0 [ 638.121446][ T9609] active_file:2800 inactive_file:56877 isolated_file:0 [ 638.121446][ T9609] unevictable:1768 dirty:307 writeback:0 [ 638.121446][ T9609] slab_reclaimable:10353 slab_unreclaimable:72029 [ 638.121446][ T9609] mapped:19609 shmem:2787 pagetables:843 [ 638.121446][ T9609] sec_pagetables:318 bounce:0 [ 638.121446][ T9609] kernel_misc_reclaimable:0 [ 638.121446][ T9609] free:478948 free_pcp:10811 free_cma:0 [ 638.122070][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1215'. [ 638.164738][ T9609] Node 0 active_anon:39548kB inactive_anon:0kB active_file:10824kB inactive_file:227192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:77912kB dirty:1208kB writeback:0kB shmem:7616kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:11120kB pagetables:3372kB sec_pagetables:1272kB all_unreclaimable? no [ 638.173198][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 638.176544][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'. [ 638.178179][ T9609] Node 1 active_anon:0kB inactive_anon:0kB active_file:376kB inactive_file:316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:524kB dirty:20kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 638.178223][ T9609] Node 0 DMA free:15256kB boost:0kB min:328kB low:408kB high:488kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 638.178272][ T9609] lowmem_reserve[]: 0 1313 0 0 0 [ 638.178306][ T9609] Node 0 DMA32 free:276712kB boost:0kB min:28924kB low:36152kB high:43380kB reserved_highatomic:0KB active_anon:39556kB inactive_anon:0kB active_file:10824kB inactive_file:227200kB unevictable:3536kB writepending:1208kB present:2080628kB managed:1372100kB mlocked:0kB bounce:0kB free_pcp:22312kB local_pcp:6184kB free_cma:0kB [ 638.178355][ T9609] lowmem_reserve[]: 0 0 0 0 0 [ 638.178389][ T9609] Node 1 Normal free:1623728kB boost:0kB min:38324kB low:47904kB high:57484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:376kB inactive_file:316kB unevictable:3536kB writepending:20kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:20972kB local_pcp:11856kB free_cma:0kB [ 638.178435][ T9609] lowmem_reserve[]: 0 0 0 0 0 [ 638.178466][ T9609] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (U) 2*4096kB (U) = 15256kB [ 638.178592][ T9609] Node 0 DMA32: 2*4kB (UE) 21*8kB (E) 27*16kB (UME) 280*32kB (ME) 169*64kB (ME) 79*128kB (UME) 48*256kB (M) 35*512kB (UME) 49*1024kB (UM) 23*2048kB (UM) 29*4096kB (UM) = 276768kB [ 638.178738][ T9609] Node 1 Normal: 12*4kB (UM) 20*8kB (UM) 18*16kB (UM) 18*32kB (UM) 22*64kB (UM) 20*128kB (UM) 21*256kB (UM) 23*512kB (UM) 16*1024kB (UM) 10*2048kB (UM) 382*4096kB (UM) = 1623728kB [ 638.295424][ T9609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.299641][ T9609] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.303809][ T9609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.319685][ T9609] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.323202][ T9609] 62469 total pagecache pages [ 638.334821][ T9609] 0 pages in swap cache [ 638.336831][ T9609] Free swap = 123876kB [ 638.338790][ T9609] Total swap = 124996kB [ 638.340631][ T9609] 1048443 pages RAM [ 638.354852][ T9609] 0 pages HighMem/MovableOnly [ 638.357535][ T9609] 256097 pages reserved [ 638.359958][ T9609] 0 pages cma reserved [ 638.396803][ T9692] trusted_key: encrypted_key: insufficient parameters specified [ 638.433172][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 638.433187][ T39] audit: type=1326 audit(1724732012.349:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.0.1219" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 638.439109][ T9690] tipc: Enabled bearer , priority 0 [ 638.459113][ T9690] syzkaller0: MTU too low for tipc bearer [ 638.468388][ T39] audit: type=1800 audit(1724732012.379:685): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1217" name="/" dev="fuse" ino=1 res=0 errno=0 [ 638.473961][ T9690] tipc: Disabling bearer [ 638.675408][ T9701] syz.3.1223: attempt to access beyond end of device [ 638.675408][ T9701] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 638.680441][ T9701] efs: cannot read volume header [ 638.788911][ T39] audit: type=1400 audit(1724732012.699:686): avc: denied { getopt } for pid=9703 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 638.894168][ T39] audit: type=1326 audit(1724732012.809:687): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.1221" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 639.011877][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1227'. [ 639.019254][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1227'. [ 639.317412][ T9724] bridge0: entered promiscuous mode [ 639.329592][ T9725] sctp: [Deprecated]: syz.0.1230 (pid 9725) Use of int in max_burst socket option. [ 639.329592][ T9725] Use struct sctp_assoc_value instead [ 639.531233][ T9731] can: request_module (can-proto-5) failed. [ 639.696337][ T9736] efs: device does not support 512 byte blocks [ 640.160822][ T5384] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 640.170225][ T5384] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 640.637060][ T39] audit: type=1400 audit(1724732014.559:688): avc: denied { ioctl } for pid=9743 comm="syz.1.1235" path="/dev/input/mouse0" dev="devtmpfs" ino=903 ioctlcmd=0x6430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 640.943606][ T9753] trusted_key: encrypted_key: insufficient parameters specified [ 641.067313][ T39] audit: type=1326 audit(1724732014.989:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.1.1238" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 641.081956][ T9751] __nla_validate_parse: 3 callbacks suppressed [ 641.081972][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 642.101383][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 642.208360][ T9782] netlink: 'syz.2.1244': attribute type 2 has an invalid length. [ 642.271772][ T9783] syz.1.1243: attempt to access beyond end of device [ 642.271772][ T9783] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 642.282962][ T9783] efs: cannot read volume header [ 642.314923][ T25] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 642.500868][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 642.521913][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.534233][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 642.559429][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 642.572082][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 642.585166][ T25] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 642.597442][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.628658][ T25] hub 8-1:1.0: bad descriptor, ignoring hub [ 642.631340][ T25] hub 8-1:1.0: probe with driver hub failed with error -5 [ 642.649519][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 642.710045][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 642.722141][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 642.724587][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 643.295597][ T39] audit: type=1400 audit(1724732017.209:690): avc: denied { append } for pid=9792 comm="syz.2.1247" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 643.545652][ T9803] netlink: 'syz.1.1248': attribute type 2 has an invalid length. [ 643.545778][ T9805] fuse: Bad value for 'user_id' [ 643.552962][ T9805] fuse: Bad value for 'user_id' [ 643.583991][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'. [ 643.638790][ T9807] trusted_key: encrypted_key: insufficient parameters specified [ 643.661788][ T39] audit: type=1326 audit(1724732017.579:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9806 comm="syz.2.1251" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86fd779e79 code=0x0 [ 644.765868][ T5527] usb 8-1: USB disconnect, device number 27 [ 645.065161][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'. [ 645.149674][ T39] audit: type=1400 audit(1724732019.069:692): avc: denied { read } for pid=9825 comm="syz.0.1257" name="loop-control" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 645.160519][ T39] audit: type=1400 audit(1724732019.069:693): avc: denied { open } for pid=9825 comm="syz.0.1257" path="/dev/loop-control" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 645.185099][ T9830] block nbd1: NBD_DISCONNECT [ 645.200113][ T9830] block nbd1: Disconnected due to user request. [ 645.205462][ T9830] block nbd1: shutting down sockets [ 647.354360][ T39] audit: type=1400 audit(1724732021.269:694): avc: denied { getopt } for pid=9862 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.354593][ T5897] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 647.493496][ T39] audit: type=1326 audit(1724732021.409:695): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.0.1268" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 647.554604][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 647.558899][ T5897] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.565177][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 647.568988][ T5897] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 647.580119][ T5897] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 647.587421][ T5897] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 647.587445][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.592972][ T5897] hub 7-1:1.0: bad descriptor, ignoring hub [ 647.599672][ T5897] hub 7-1:1.0: probe with driver hub failed with error -5 [ 647.605685][ T5897] cdc_wdm 7-1:1.0: skipping garbage [ 647.608497][ T5897] cdc_wdm 7-1:1.0: skipping garbage [ 647.613647][ T5897] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 647.616959][ T5897] cdc_wdm 7-1:1.0: Unknown control protocol [ 647.922480][ T39] audit: type=1800 audit(1724732021.839:696): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1270" name="/" dev="fuse" ino=1 res=0 errno=0 [ 648.113793][ T39] audit: type=1326 audit(1724732022.039:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.1271" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 648.170492][ T9881] can: request_module (can-proto-5) failed. [ 648.463508][ T39] audit: type=1326 audit(1724732022.379:698): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.0.1273" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd95779e79 code=0x0 [ 649.062463][ T39] audit: type=1326 audit(1724732022.979:699): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9889 comm="syz.1.1274" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff179e79 code=0x0 [ 649.128474][ T9892] can: request_module (can-proto-5) failed. [ 649.278397][ T1430] usb 7-1: USB disconnect, device number 35 [ 649.579484][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 649.619250][ T39] audit: type=1800 audit(1724732023.539:700): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1280" name="/" dev="fuse" ino=1 res=0 errno=0 [ 649.655450][ T9913] syz.2.1282: attempt to access beyond end of device [ 649.655450][ T9913] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 649.667709][ T9913] efs: cannot read volume header [ 649.738284][ T9915] can: request_module (can-proto-5) failed. [ 649.969525][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1284'. [ 649.995264][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 649.999243][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 650.026431][ T9923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'. [ 650.264661][ T6139] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 650.468909][ T6139] usb 5-1: Using ep0 maxpacket: 8 [ 650.474187][ T6139] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.480547][ T9926] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 650.495478][ T6139] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.505306][ T6139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 650.511649][ T6139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 650.520222][ T6139] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 650.533258][ T6139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.542494][ T6139] hub 5-1:1.0: bad descriptor, ignoring hub [ 650.547276][ T6139] hub 5-1:1.0: probe with driver hub failed with error -5 [ 650.552184][ T6139] cdc_wdm 5-1:1.0: skipping garbage [ 650.573437][ T6139] cdc_wdm 5-1:1.0: skipping garbage [ 650.582701][ T6139] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 650.586534][ T6139] cdc_wdm 5-1:1.0: Unknown control protocol [ 650.645242][ T39] audit: type=1400 audit(1724732024.559:701): avc: denied { setopt } for pid=9928 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 650.665925][ T39] audit: type=1400 audit(1724732024.569:702): avc: denied { watch } for pid=9928 comm="syz.3.1286" path="/72/net_prio.prioidx" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 650.685063][ T39] audit: type=1400 audit(1724732024.569:703): avc: denied { watch_sb watch_reads } for pid=9928 comm="syz.3.1286" path="/72/net_prio.prioidx" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 650.706851][ T39] audit: type=1400 audit(1724732024.579:704): avc: denied { watch_mount } for pid=9928 comm="syz.3.1286" path="/72" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 651.096705][ T5354] usb 5-1: USB disconnect, device number 21 [ 651.234640][ T5897] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 651.260156][ T39] audit: type=1400 audit(1724732025.179:705): avc: denied { sqpoll } for pid=9943 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 651.291197][ T39] audit: type=1800 audit(1724732025.209:706): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1291" name="/" dev="fuse" ino=1 res=0 errno=0 [ 651.371775][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1293'. [ 651.377399][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1293'. [ 651.381310][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 651.389502][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 651.417581][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 651.428912][ T5897] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.438226][ T9951] trusted_key: encrypted_key: insufficient parameters specified [ 651.444998][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.445052][ T5897] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 651.445077][ T5897] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 651.445116][ T5897] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 651.445137][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.449877][ T5897] hub 7-1:1.0: bad descriptor, ignoring hub [ 651.474467][ T39] audit: type=1326 audit(1724732025.389:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.3.1294" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ebab79e79 code=0x0 [ 651.478267][ T5897] hub 7-1:1.0: probe with driver hub failed with error -5 [ 651.508106][ T5897] cdc_wdm 7-1:1.0: skipping garbage [ 651.511298][ T5897] cdc_wdm 7-1:1.0: skipping garbage [ 651.527238][ T5897] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 651.541647][ T5897] cdc_wdm 7-1:1.0: Unknown control protocol [ 651.824383][ T39] audit: type=1400 audit(1724732025.739:708): avc: denied { create } for pid=9954 comm="syz.0.1295" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 652.328024][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1302'. [ 652.365850][ T9969] openvswitch: netlink: Missing key (keys=40, expected=100) [ 652.444893][ T9972] netlink: 'syz.3.1303': attribute type 3 has an invalid length. [ 652.666692][ T5525] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 652.827247][ T9983] FAULT_INJECTION: forcing a failure. [ 652.827247][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.833211][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.3.1308 Not tainted 6.11.0-rc5-syzkaller #0 [ 652.836846][ T9983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 652.841300][ T9983] Call Trace: [ 652.842832][ T9983] [ 652.844115][ T9983] dump_stack_lvl+0x16c/0x1f0 [ 652.846034][ T9983] should_fail_ex+0x497/0x5b0 [ 652.847717][ T9983] _copy_from_user+0x30/0xf0 [ 652.849600][ T9983] core_sys_select+0x2cf/0xb80 [ 652.851548][ T9983] ? __pfx_core_sys_select+0x10/0x10 [ 652.853848][ T9983] ? get_pid_task+0xfc/0x250 [ 652.855915][ T9983] ? set_user_sigmask+0x217/0x2a0 [ 652.858074][ T9983] ? __pfx_set_user_sigmask+0x10/0x10 [ 652.860508][ T9983] do_pselect.constprop.0+0x1a0/0x1f0 [ 652.862817][ T9983] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 652.865389][ T9983] ? native_tss_update_io_bitmap+0x3d0/0x730 [ 652.867832][ T9983] __x64_sys_pselect6+0x183/0x240 [ 652.869924][ T9983] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 652.872260][ T9983] do_syscall_64+0xcd/0x250 [ 652.874204][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.876784][ T9983] RIP: 0033:0x7f3ebab79e79 [ 652.878753][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.886866][ T9983] RSP: 002b:00007f3ebb96c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 652.889897][ T9983] RAX: ffffffffffffffda RBX: 00007f3ebad15f80 RCX: 00007f3ebab79e79 [ 652.892201][ T9983] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000040 [ 652.895136][ T9983] RBP: 00007f3ebb96c090 R08: 0000000000000000 R09: 0000000000000000 [ 652.898276][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.901912][ T9983] R13: 0000000000000000 R14: 00007f3ebad15f80 R15: 00007ffcd9e5c498 [ 652.906203][ T9983] [ 653.000397][ T9987] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 653.066708][ T9986] Invalid ELF header len 36 [ 653.309621][ T9994] trusted_key: encrypted_key: insufficient parameters specified [ 653.430089][ T5525] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 653.434173][ T5525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.439964][ T5525] usb 6-1: config 0 descriptor?? [ 653.836088][ T5420] usb 7-1: USB disconnect, device number 36 [ 654.051412][T10003] ipip0: entered promiscuous mode [ 654.059321][T10005] FAULT_INJECTION: forcing a failure. [ 654.059321][T10005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.066487][T10005] CPU: 2 UID: 0 PID: 10005 Comm: syz.0.1314 Not tainted 6.11.0-rc5-syzkaller #0 [ 654.071241][T10005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 654.076753][T10005] Call Trace: [ 654.078616][T10005] [ 654.080254][T10005] dump_stack_lvl+0x16c/0x1f0 [ 654.082450][T10005] should_fail_ex+0x497/0x5b0 [ 654.084611][T10005] _copy_from_user+0x30/0xf0 [ 654.086853][T10005] copy_msghdr_from_user+0x99/0x160 [ 654.089318][T10005] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 654.092133][T10005] ? __pfx___lock_acquire+0x10/0x10 [ 654.094505][T10005] ___sys_sendmsg+0xff/0x1e0 [ 654.096626][T10005] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.099171][T10005] ? __pfx_lock_release+0x10/0x10 [ 654.101475][T10005] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 654.104050][T10005] ? __fget_light+0x173/0x210 [ 654.106230][T10005] __sys_sendmmsg+0x1a1/0x450 [ 654.108685][T10005] ? __pfx___sys_sendmmsg+0x10/0x10 [ 654.111298][T10005] ? vfs_write+0x14d/0x1140 [ 654.113411][T10005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 654.116136][T10005] ? fput+0x32/0x390 [ 654.117923][T10005] ? ksys_write+0x1ab/0x260 [ 654.120013][T10005] ? __pfx_ksys_write+0x10/0x10 [ 654.122198][T10005] __x64_sys_sendmmsg+0x9c/0x100 [ 654.124437][T10005] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.126940][T10005] do_syscall_64+0xcd/0x250 [ 654.129325][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.132776][T10005] RIP: 0033:0x7efd95779e79 [ 654.135118][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.144300][T10005] RSP: 002b:00007efd964c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 654.148249][T10005] RAX: ffffffffffffffda RBX: 00007efd95915f80 RCX: 00007efd95779e79 [ 654.152084][T10005] RDX: 0000000000000002 RSI: 0000000020000d40 RDI: 0000000000000003 [ 654.155815][T10005] RBP: 00007efd964c3090 R08: 0000000000000000 R09: 0000000000000000 [ 654.159295][T10005] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 654.162824][T10005] R13: 0000000000000000 R14: 00007efd95915f80 R15: 00007ffe7926eef8 [ 654.166934][T10005] [ 654.168996][ C2] vkms_vblank_simulate: vblank timer overrun [ 654.605963][ T5525] usb 6-1: string descriptor 0 read error: -71 [ 654.617870][ T5525] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 654.621158][ T5525] gspca_cpia1: usb_control_msg 05, error -71 [ 654.633376][ T5525] gspca_cpia1: usb_control_msg 01, error -71 [ 654.636662][ T5525] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 654.643340][ T5525] usb 6-1: USB disconnect, device number 29 [ 654.666773][T10014] [ 654.668182][T10014] ====================================================== [ 654.674162][T10014] WARNING: possible circular locking dependency detected [ 654.677923][T10014] 6.11.0-rc5-syzkaller #0 Not tainted [ 654.681123][T10014] ------------------------------------------------------ [ 654.686460][T10014] syz.2.1318/10014 is trying to acquire lock: [ 654.688884][T10014] ffff88802b6b2798 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 654.692772][T10014] [ 654.692772][T10014] but task is already holding lock: [ 654.695666][T10014] ffff8880302e8b70 (&ctx->wb_lock){+.+.}-{3:3}, at: netfs_begin_writethrough+0x6c/0x3c0 [ 654.700407][T10014] [ 654.700407][T10014] which lock already depends on the new lock. [ 654.700407][T10014] [ 654.704865][T10014] [ 654.704865][T10014] the existing dependency chain (in reverse order) is: [ 654.708962][T10014] [ 654.708962][T10014] -> #1 (&ctx->wb_lock){+.+.}-{3:3}: [ 654.712512][T10014] __mutex_lock+0x175/0x9c0 [ 654.714653][T10014] netfs_writepages+0x5e1/0xdd0 [ 654.716980][T10014] do_writepages+0x1a3/0x7f0 [ 654.719028][T10014] filemap_fdatawrite_wbc+0x148/0x1c0 [ 654.721449][T10014] v9fs_mmap_vm_close+0x213/0x260 [ 654.723707][T10014] remove_vma+0x8b/0x180 [ 654.725738][T10014] do_vmi_align_munmap+0x1272/0x19c0 [ 654.728118][T10014] do_vmi_munmap+0x231/0x410 [ 654.730119][T10014] mmap_region+0x17f/0x2760 [ 654.732076][T10014] do_mmap+0xbfb/0xfb0 [ 654.734159][T10014] vm_mmap_pgoff+0x1ba/0x360 [ 654.736303][T10014] ksys_mmap_pgoff+0x332/0x5d0 [ 654.738492][T10014] __x64_sys_mmap+0x125/0x190 [ 654.740651][T10014] do_syscall_64+0xcd/0x250 [ 654.742925][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.746024][T10014] [ 654.746024][T10014] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 654.749476][T10014] __lock_acquire+0x24ed/0x3cb0 [ 654.751812][T10014] lock_acquire+0x1b1/0x560 [ 654.754106][T10014] down_read_killable+0x9d/0x380 [ 654.756404][T10014] lock_mm_and_find_vma+0x3a9/0x6a0 [ 654.758402][T10014] do_user_addr_fault+0x2b5/0x13f0 [ 654.760460][T10014] exc_page_fault+0x5c/0xc0 [ 654.762250][T10014] asm_exc_page_fault+0x26/0x30 [ 654.764214][T10014] fault_in_readable+0x126/0x230 [ 654.766465][T10014] fault_in_iov_iter_readable+0x101/0x2c0 [ 654.769058][T10014] netfs_perform_write+0x3ef/0x2250 [ 654.771773][T10014] netfs_buffered_write_iter_locked+0x213/0x2c0 [ 654.774893][T10014] netfs_file_write_iter+0x1e0/0x470 [ 654.777750][T10014] v9fs_file_write_iter+0xa1/0x100 [ 654.780127][T10014] aio_write+0x3c1/0x8e0 [ 654.782641][T10014] io_submit_one+0x124e/0x1db0 [ 654.785308][T10014] __x64_sys_io_submit+0x19d/0x330 [ 654.787978][T10014] do_syscall_64+0xcd/0x250 [ 654.790217][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.793508][T10014] [ 654.793508][T10014] other info that might help us debug this: [ 654.793508][T10014] [ 654.797942][T10014] Possible unsafe locking scenario: [ 654.797942][T10014] [ 654.800589][T10014] CPU0 CPU1 [ 654.802469][T10014] ---- ---- [ 654.804345][T10014] lock(&ctx->wb_lock); [ 654.806502][T10014] lock(&mm->mmap_lock); [ 654.809540][T10014] lock(&ctx->wb_lock); [ 654.812258][T10014] rlock(&mm->mmap_lock); [ 654.814599][T10014] [ 654.814599][T10014] *** DEADLOCK *** [ 654.814599][T10014] [ 654.818070][T10014] 2 locks held by syz.2.1318/10014: [ 654.820277][T10014] #0: ffff8880302e87b8 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: netfs_start_io_write+0x1f/0x70 [ 654.824934][T10014] #1: ffff8880302e8b70 (&ctx->wb_lock){+.+.}-{3:3}, at: netfs_begin_writethrough+0x6c/0x3c0 [ 654.829146][T10014] [ 654.829146][T10014] stack backtrace: [ 654.831720][T10014] CPU: 1 UID: 0 PID: 10014 Comm: syz.2.1318 Not tainted 6.11.0-rc5-syzkaller #0 [ 654.835816][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 654.840869][T10014] Call Trace: [ 654.842961][T10014] [ 654.844803][T10014] dump_stack_lvl+0x116/0x1f0 [ 654.847119][T10014] check_noncircular+0x31a/0x400 [ 654.849248][T10014] ? __pfx_check_noncircular+0x10/0x10 [ 654.851487][T10014] ? __switch_to+0x749/0x1180 [ 654.854075][T10014] ? lockdep_lock+0xc6/0x200 [ 654.856124][T10014] ? __pfx_lockdep_lock+0x10/0x10 [ 654.857952][T10014] __lock_acquire+0x24ed/0x3cb0 [ 654.859913][T10014] ? __pfx___lock_acquire+0x10/0x10 [ 654.862096][T10014] ? mark_held_locks+0x9f/0xe0 [ 654.864019][T10014] lock_acquire+0x1b1/0x560 [ 654.865986][T10014] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 654.868117][T10014] ? __pfx_lock_acquire+0x10/0x10 [ 654.870224][T10014] ? __pfx___might_resched+0x10/0x10 [ 654.872327][T10014] down_read_killable+0x9d/0x380 [ 654.874843][T10014] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 654.877594][T10014] ? __pfx_down_read_killable+0x10/0x10 [ 654.880300][T10014] ? __pfx_search_extable+0x10/0x10 [ 654.882592][T10014] ? fault_in_readable+0x126/0x230 [ 654.885052][T10014] lock_mm_and_find_vma+0x3a9/0x6a0 [ 654.887534][T10014] do_user_addr_fault+0x2b5/0x13f0 [ 654.890392][T10014] exc_page_fault+0x5c/0xc0 [ 654.892362][T10014] asm_exc_page_fault+0x26/0x30 [ 654.894334][T10014] RIP: 0010:fault_in_readable+0x126/0x230 [ 654.896718][T10014] Code: f7 bc ff 48 39 dd 0f 84 f0 00 00 00 45 31 f6 eb 11 e8 6e f7 bc ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 5d f7 bc ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 8a f9 bc ff 45 85 ff 74 d2 e8 [ 654.904722][T10014] RSP: 0018:ffffc900032d7650 EFLAGS: 00050287 [ 654.907251][T10014] RAX: 0000000000030b60 RBX: 0000000020005000 RCX: ffffc900040f9000 [ 654.910550][T10014] RDX: 0000000000040000 RSI: ffffffff81cd8213 RDI: 0000000000000005 [ 654.913768][T10014] RBP: 0000000020006000 R08: 0000000000000005 R09: 0000000000000000 [ 654.917314][T10014] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000 [ 654.920577][T10014] R13: 0000000020004180 R14: 0000000000000000 R15: 0000000000000000 [ 654.923762][T10014] ? fault_in_readable+0x123/0x230 [ 654.925999][T10014] ? __pfx_fault_in_readable+0x10/0x10 [ 654.929006][T10014] ? inode_to_bdi+0x9e/0x160 [ 654.931087][T10014] fault_in_iov_iter_readable+0x101/0x2c0 [ 654.933380][T10014] netfs_perform_write+0x3ef/0x2250 [ 654.935560][T10014] ? __pfx_netfs_perform_write+0x10/0x10 [ 654.937901][T10014] ? __mark_inode_dirty+0x638/0xe70 [ 654.939996][T10014] ? generic_update_time+0xcf/0xf0 [ 654.942165][T10014] ? mnt_put_write_access_file+0x45/0xf0 [ 654.944452][T10014] netfs_buffered_write_iter_locked+0x213/0x2c0 [ 654.947011][T10014] netfs_file_write_iter+0x1e0/0x470 [ 654.949209][T10014] v9fs_file_write_iter+0xa1/0x100 [ 654.951276][T10014] aio_write+0x3c1/0x8e0 [ 654.953079][T10014] ? __pfx_aio_write+0x10/0x10 [ 654.955079][T10014] ? find_held_lock+0x2d/0x110 [ 654.957396][T10014] ? __pfx___might_resched+0x10/0x10 [ 654.959818][T10014] ? io_submit_one+0x124e/0x1db0 [ 654.962220][T10014] io_submit_one+0x124e/0x1db0 [ 654.964238][T10014] ? __pfx_io_submit_one+0x10/0x10 [ 654.966689][T10014] ? __might_fault+0x13b/0x190 [ 654.968658][T10014] ? __pfx_lock_release+0x10/0x10 [ 654.970697][T10014] ? __might_fault+0xe3/0x190 [ 654.972953][T10014] ? __x64_sys_io_submit+0x19d/0x330 [ 654.975673][T10014] __x64_sys_io_submit+0x19d/0x330 [ 654.978320][T10014] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 654.980654][T10014] ? xfd_validate_state+0x5d/0x180 [ 654.982799][T10014] do_syscall_64+0xcd/0x250 [ 654.984770][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.987264][T10014] RIP: 0033:0x7f86fd779e79 [ 654.989235][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.997385][T10014] RSP: 002b:00007f86fe526038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 655.000899][T10014] RAX: ffffffffffffffda RBX: 00007f86fd915f80 RCX: 00007f86fd779e79 [ 655.004228][T10014] RDX: 0000000020000700 RSI: 000000000000140b RDI: 00007f86fe4fe000 [ 655.007570][T10014] RBP: 00007f86fd7e793e R08: 0000000000000000 R09: 0000000000000000 [ 655.010748][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.014039][T10014] R13: 0000000000000000 R14: 00007f86fd915f80 R15: 00007ffe70f66888 [ 655.017645][T10014] [ 655.038925][T10020] __nla_validate_parse: 7 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 655.038939][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 655.069117][T10014] input: syz0 as /devices/virtual/input/input13 [ 655.091955][T10014] netlink: 'syz.2.1318': attribute type 2 has an invalid length. [ 655.102562][T10014] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 655.185782][T10021] syz.3.1320: attempt to access beyond end of device [ 655.185782][T10021] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 655.192578][T10021] efs: cannot read volume header [ 655.747197][ T5422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.887450][ T5422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.045941][ T5422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.122074][ T5422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.331164][ T5422] bridge_slave_1: left allmulticast mode [ 656.333817][ T5422] bridge_slave_1: left promiscuous mode [ 656.336926][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.341220][ T5422] bridge_slave_0: left allmulticast mode [ 656.343487][ T5422] bridge_slave_0: left promiscuous mode [ 656.347312][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.413089][ T5422] 0ªX¹¦D: left promiscuous mode [ 656.734104][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.740998][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.748583][ T5422] bond0 (unregistering): (slave team0): Releasing backup interface [ 656.753198][ T5422] bond0 (unregistering): Released all slaves [ 656.819709][ T5422] tipc: Disabling bearer [ 656.822907][ T5422] tipc: Left network mode [ 657.122999][ T5422] hsr_slave_0: left promiscuous mode [ 657.126276][ T5422] hsr_slave_1: left promiscuous mode [ 657.130165][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.133654][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.140229][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.143077][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.148515][ T5422] veth0_macvtap: left promiscuous mode [ 657.150657][ T5422] veth1_vlan: left promiscuous mode [ 657.152720][ T5422] veth0_vlan: left promiscuous mode [ 657.610730][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 657.669187][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 658.415455][ T5422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.494986][ T5422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.564866][ T5422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.626139][ T5422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.748830][ T5422] bridge_slave_1: left allmulticast mode [ 658.751444][ T5422] bridge_slave_1: left promiscuous mode [ 658.754151][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.767157][ T5422] bridge_slave_0: left allmulticast mode [ 658.769687][ T5422] bridge_slave_0: left promiscuous mode [ 658.772472][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.887928][ T5422] bridge0 (unregistering): left allmulticast mode [ 658.985314][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.991973][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.001067][ T5422] bond0 (unregistering): Released all slaves [ 659.137688][ T5422] tipc: Disabling bearer [ 659.140578][ T5422] tipc: Left network mode [ 659.537296][ T5422] hsr_slave_0: left promiscuous mode [ 659.540624][ T5422] hsr_slave_1: left promiscuous mode [ 659.543848][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.550840][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.555419][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.558822][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.566592][ T5422] veth1_macvtap: left promiscuous mode [ 659.569337][ T5422] veth0_macvtap: left promiscuous mode [ 659.572072][ T5422] veth1_vlan: left promiscuous mode [ 659.574900][ T5422] veth0_vlan: left promiscuous mode [ 659.963339][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 660.038682][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 660.452736][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 660.452752][ T39] audit: type=1400 audit(1724732034.369:768): avc: denied { sys_chroot } for pid=10086 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 660.464097][ T39] audit: type=1400 audit(1724732034.369:769): avc: denied { setgid } for pid=10086 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 VM DIAGNOSIS: 04:13:48 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88806b02c9c0 RCX=1ffff1100d605947 RDX=0000000000000010 RSI=ffffffff81777c8d RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000007ef0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8b4f5020 R12=ffff88806b02ca04 R13=ffff88806b02ca38 R14=ffff88806b02c9c0 R15=0000009864de0e07 RIP=ffffffff81777caf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33f01ff8 CR3=00000000405be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81307d8f ffffffff81307d8f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81307d8f ffffffff81307d8f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81307d8f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd957e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd957e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd957e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd957e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd957e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd957e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820035b1 ffffffff8200357e ffffffff82003561 ffffffff820033d6 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82003a3c ffffffff820039ab ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82003631 ffffffff820035b1 ffffffff8200357e ffffffff82003561 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff84fe70a0 RDI=ffffffff9519f5a0 RBP=ffffffff9519f560 RSP=ffffc900032d6bd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=fffffbfff2a33f06 R15=dffffc0000000000 RIP=ffffffff84fe70c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f86fe5266c0 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020005000 CR3=0000000040880000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebaceb488 00007f3ebaceb480 00007f3ebaceb478 00007f3ebaceb450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebb84d100 00007f3ebaceb440 00007f3ebace0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebaceb498 00007f3ebaceb490 00007f3ebaceb488 00007f3ebaceb480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffff94000182d9f RBX=fffff94000182d9f RCX=ffffffff81d0cf59 RDX=fffff94000182d9f RSI=0000000000000004 RDI=ffffea0000c16cf4 RBP=fffff94000182d9e RSP=ffffc900035777d0 R8 =0000000000000001 R9 =fffff94000182d9e R10=ffffea0000c16cf7 R11=dffffc0000000000 R12=0000000000000008 R13=ffff88803c0c4fd8 R14=dffffc0000000000 R15=ffffea0000c16cc0 RIP=ffffffff81e79fdf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555571ea500 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3ebb8456c0 CR3=0000000057636000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000200 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd9e5c820 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ebabe88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000b3d13c RBX=0000000000000003 RCX=ffffffff8b111a99 RDX=ffffed100d666fda RSI=ffffffff8bb09a40 RDI=ffffffff8162654c RBP=ffffed100305b488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d666fd9 R10=ffff88806b337ecb R11=0000000000000001 R12=0000000000000003 R13=ffff8880182da440 R14=ffffffff9012f918 R15=0000000000000000 RIP=ffffffff8b112e8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f86fe4fcf98 CR3=0000000043cd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc31b000 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ff1e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ff1e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ff1e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ff1e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ff1e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ff1e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003d0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 00000000000003d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000