last executing test programs: 2m5.262974209s ago: executing program 0 (id=666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.259934728s ago: executing program 0 (id=667): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="23090000000000000000010000000500070000000000"], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48044}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r3], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) readv(r3, &(0x7f00000015c0)=[{&(0x7f0000000580)=""/24, 0x18}], 0x1) 2m5.259814236s ago: executing program 0 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000140)="04dac489", 0x4, r0) keyctl$unlink(0x9, r1, r0) chdir(&(0x7f0000000340)='./file0/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/170, 0xaa) 2m5.19359364s ago: executing program 0 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x80) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) syz_fuse_handle_req(r5, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @local, 0xce}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getenv(0x4201, r8, 0x19, &(0x7f0000000000)) statx(r5, &(0x7f0000000300)='./file0\x00', 0x1000, 0x909fd40f883419b3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000b00)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)=[{&(0x7f0000000500)={0x3bc, 0x1b, 0x400, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x136, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1dc, 0x139, 0x0, 0x1, [@generic="f7b397e7997309a3dc89ffb9d1b54424807775b15636a326e5d5446c460a3d716f58905a763d1a759ab236639ae69ea7549b350117af3442047c28a9dbd32e20f171d225a96aa18db2d7509d83a673913880aea5ef2dcf315d65deed290efac827cdf4b778a3463d6ab66db1c2e987ef", @generic="7f1d416624d2ec3524f2ad18ba95f969d3c5bcaedf3a429438891ff88bdf2aa47e36b288c4b64514e15a9977b250a03efc911195466d46881ca7f2ad1bdc56aeace7b9d1441391e2eded5f41af35a3c6bf371387dad02528053efa16adc0bfbb076c2bca0f6cf6077735fd7b634c3b6b3a2e5c21bc8ab703e08e44ae2cc27e01355dd783f18e8c1ae7bf690dfd1e0fe4ef9b29b00ae5", @generic="bec3d539fde787d7026b3a47d7680108caf9", @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x10e}, @generic="9dc1fec5e7fc46f71fe10f758d3d602ea1c312b40b2b72ced8a0120e3945c26e1e6b81368963e694d9d078d3769dae515bc9b64749df23f11b262d9ff146448fbeb7977b28490bef5ff55f332684f3f5b0b15b140a2fc2dc889b37bf7dd48a07c8336ee7ddff6ad38f7ae8c844d1f8b9c08b7aeb682897f6f66761c7ae5d6099eceb504edd5b5d8d6e1c68f49f82bdcda13b7f45560f93addca8155c", @nested={0x4, 0x5f}, @typed={0x8, 0xa5, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x1b3, 0x11e, 0x0, 0x1, [@typed={0xc, 0x147, 0x0, 0x0, @u64=0x4}, @generic="52399ce90a535ce24b67a0bf9c713d064711bcfd21db8ae41ac1a9901326f3c3a8d6d642912183ab31b1551d06e9f3be9b49bc58d07618098ea3c7c80124cac81596c4fd54c948cedbdd68a358e685f0f8163b371c57e8b57287aa555632babd381f74a2245d6e382a001fdbb645e6f53eabd106d1bde4925955b60ccc4745e17a90d667cbbd2cc634983ac98e5318f6c51a5a1bfda2", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r4}, @typed={0x8, 0xc3, 0x0, 0x0, @pid=r8}, @generic="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"]}, @nested={0x14, 0xbe, 0x0, 0x1, [@nested={0x4, 0xfe}, @nested={0x4, 0xa1}, @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0x3bc}, {&(0x7f00000008c0)={0x1ec, 0x15, 0x20, 0x70bd28, 0x25dfdbfc, "", [@nested={0x8, 0x107, 0x0, 0x1, [@nested={0x4, 0x4b}]}, @nested={0xc, 0x117, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0x63}]}, @generic="6c443e8ca3647c57b40f8c8ccc8662473048bd37835e06cee972e4e8e54b30cc30b84ae6d28d5848e8579429e9f03427e108843a357a06ccdb110cda95f60e26c220197fb900c1b9863703fc9e5ae4f95b3bdeb1f39a411a316ea6c5aa16a1819b1a58b98fd3768a8a026d40b1989e4dd07245203a818f30256544f0624b39e4acaeee701b840dda8bc9021e7297b10a79d07084baf98a757b34cb85d36b76b64e787fcf62ea6d5be77a36641c568ea5c472911d864a2ceb6a5d2927d0e7e653b18b", @nested={0x10, 0xee, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x4, 0x4d}, @nested={0x4, 0xd2}]}, @typed={0xc, 0x7b, 0x0, 0x0, @u64=0xc}, @typed={0x5f, 0x123, 0x0, 0x0, @binary="03a0f3b595cd969a9dc1361a2f8e598fbab1b37ef584530949a5e552cd49862298fc5511cfde9a4c71708c1cbe650034af78356724beb6d48f2b3b577fdce28e299b27c1a7ae17d5472ae5a5556eedaa8129797eff8b7eafd43e79"}, @nested={0x10, 0xb3, 0x0, 0x1, [@nested={0x4, 0xb4}, @typed={0x8, 0x72, 0x0, 0x0, @u32=0xffffff75}]}, @generic="c393657051afdbf2ab91ad79db2f213829539b8acdd4bfc74711397f6d254cbf342716c49e49ba03b26f6e37e82282c52108142a4cc92e6597e2202dc3ffc6edbb0b6097af300261", @nested={0x30, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x122, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xf0}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x66}, @nested={0x4, 0x35}]}]}, 0x1ec}, {&(0x7f0000004080)={0x233c, 0x22, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@generic="1b7d55ecd6c0a12cbcf730c33389629f29c2d2e9d0b73c571f587f1e421ecf442244491c0cdcff533f8546c2bac46ef4445ca83552d113a6bf1ebdeb0d04995be5d8cb4a33d8d5b3274a6ebcaacdb6029a684e3c3f23ab224c359778f734dcd11b6a2a8dd634", @nested={0x2085, 0x70, 0x0, 0x1, [@generic="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", @typed={0x1004, 0x12c, 0x0, 0x0, @binary="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"}, @generic="c4033c3cbbad6f9b6dfe15084d38648328a4c92507b15e3c9836714faa7c6aa45f2595ff6e4f8e50daf6188988d64bd94ec5f017eef0b5dda0949c2f7c9ecb904870f343c21fccbc12230f89ecc51f6d627062c3a8c8cf5778fc7970c64454a4ce9d5cf63b2d361a9dd11cf3a91848c02507730cdbee8e83848587dc35"]}, @nested={0x8, 0x8c, 0x0, 0x1, [@nested={0x4, 0x57}]}, @generic="50f1c563d36541448c8f01189acdf0f81395c0306b2ee336de7ad4dac9acc937172c816f95b88bb6ce18b0c8a09d84fa9db12fc42fa0733137a0107844a40952088650db5ff4dfe3ec8d6043bf7821bfee6a4a5751fa6f4fdf8a6a8d115d4bc8c102b5686a8aca4030543b852f658b2bc46fd8329bc51c0a88eba3a91bd9b38b8cf80403a0521184c39a187a4364c79186070ecb5bc1aa34d2e61648cfaca79bab1fe8b054fd8516ebac2f41d6380d475ab8864ad4bf3161c47f0709c86ea310e3aded77a86d06b430dc51a58a68938bd218b28a1c5d9095f8569ceb4c30985631f98851296b", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x3}, @generic="dba4fb67d4c8f2a732e17f665abfb38c3cb09c1d4f727ce58146015d47cdfbbe75cf39a72d0c6f5f937f13be7960b424b8a1ffb07d0144a89b6421c742d006cee331320ce81f7c713dfa44d5c37aded1f5d7061dbf5076fee6f1c7cf8670907c10291f5c3f36eb920b313adab6d60aae3bd5213a2477e304f09e756b9a132d9c060984233a6d203a3249806d39d3c4efc4819668a2e676aff56f8b53b720bc", @nested={0x8, 0x70, 0x0, 0x1, [@nested={0x4, 0x29}]}, @generic="3a149b1a9aaf578eb380f0641a20831b0cc899c36e9e802c77a5356cb81931e552fbd112d0da378eb0e2239f05db7d951d2f7c83259567a52b3b2727b0dfbacfd32b78319d773756724d376358c9324f85a6157c87e29ec4c823e6eb02301ea79fd4bc301650e5786c75c86ef556488b5501166a57b5b1fd70c1cade8c523c985b7f9f672831948f8d330186cc85d012ca8ce6ded0dd628733a686"]}, 0x233c}, {&(0x7f0000000440)={0x10, 0x3b, 0x4, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x4, 0x0, 0x0, 0x24004041}, 0x4008004) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0xb1c07, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x4}) readv(r7, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r7, r7, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000000039a0040008000c00018006000600894f0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2m5.083325603s ago: executing program 0 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b34, 0x3bf) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="81b641f1f3843704b6", 0x9}, {&(0x7f0000000180)="99325a89d5fb01b7f01ba92fdd6f382a3283791678fb2118d72f4cf5714173c2e30c361c238568c15f46bfe810a81ebf505f96912eabd1eeb08cefac263573ee1d39c14700511859dfef52e4d28da1d4630ab753e76b0ba6ec51f8e80476391d6f1513df5b", 0x65}, {&(0x7f0000000400)="ceb5ed60f330586d1fab52921e95f5b4f073ccfc19f98868dd99d4fbb7ecffdc0ffb178d955fd880e3336f1e54916ca75779be8eb789f0da5752f1d2b6897fed0274790bf52a00716543dc23f1db7fafa468bc4671d64e7db5bd446efe3c7d3a5cf740344cf0a87cfc8612b0cffb1ef483d853b41b32e8e3adaa4d492a9e609a8d41d4d95ee0cc741e68f0f94b0d46554173b03a051673b562eeb95318a73adb70599b1612d87668fbe9c0395d52a757f010fdf3adcb30bfe400f226f1d9d10e", 0xc0}, {&(0x7f0000000580)="53dbef424971e493a7e44e61e6bf19d85bfdc9161d7a0e29dbea2fefd77f07a58388bc7a61d92b760ddeebc8999cd51d9b1465314d8eb5fcafe466bc0476eb52bd597aa0a9d3019f29fd804fb1bdbc12c4951edc1a30f5200bfc469357e6e4843abf30aadf3e4cd1857768c734524cb3458ad1c49bc40348f2519977689acd65b424a053ee55f9e21a04c04cad5177d5d61f999cc4213da3d84bd001ee81c5b908c06e0e337d987f3f9e7b7a27f097c6aa996e6dccb5659a85ea64a105bd6e7fb47954b0479c7909a32a215e", 0xcc}], 0x4}, 0x4048080) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r7, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x6, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2m4.893842852s ago: executing program 0 (id=671): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x802) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2m4.855417303s ago: executing program 32 (id=671): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x802) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m6.932556645s ago: executing program 3 (id=1589): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @empty, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xfe80}, 0x5b4}], 0x1, 0x850) 1m6.882095973s ago: executing program 3 (id=1590): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x8, 0x90, 0x8, 0x97, 0xca, 0xffffffff, 0xd}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x0, @remote, 0x68fb6411}}, [0x1, 0x7, 0x4, 0x6, 0xe5, 0x5, 0x4, 0x9, 0x8, 0x4, 0x1, 0x8, 0x1, 0x21, 0x3]}, &(0x7f0000000340)=0x100) recvmsg$can_j1939(r4, &(0x7f0000000900)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/129, 0x81}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/40, 0x28}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f00000006c0)=""/222, 0xde}], 0x6, &(0x7f0000000840)=""/174, 0xae}, 0x41) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000940)={r5, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x9, 0x7, 0x9, 0x90}, &(0x7f0000000a00)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000a40)={r3, 0xff7f, 0x400, 0x6, 0x1, 0x2c2}, 0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @initdev, @private}, &(0x7f0000000b00)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@newtclass={0x78, 0x28, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {0xffe0, 0xb}, {0x9, 0x2}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x41c}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6500000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}]}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x94, 0x3}}]}, 0x78}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'sit0\x00', r7, 0x7800, 0x80, 0x4, 0x2, {{0xf, 0x4, 0x1, 0xc, 0x3c, 0x66, 0x0, 0x7f, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x66, [@rand_addr=0x64010100]}, @end, @generic={0x82, 0xa, "2413f019f63573d3"}, @cipso={0x86, 0x13, 0x2, [{0x0, 0xd, "8976eb7e5ddd7b1106afb9"}]}]}}}}}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000dc0)={0x2, 0x1, 0xff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000e00)={r3, 0x1, 0x4, [0x4, 0x6, 0x3, 0xb9]}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000e40)={0x2, @pix_mp={0x35, 0x8, 0x30364d54, 0x5, 0xc3daeed0d84df148, [{0x328, 0x6}, {0xbd2c, 0x200}, {0xfffffff8}, {0x2, 0x7}, {0x9, 0x7fff}, {0x7}, {0x80, 0x80000000}, {0x7, 0xfffffff9}], 0x0, 0x1, 0x3, 0x2, 0x6}}) r8 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000f40), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000f80)) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), r1) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000001140)=0xfff, 0x4) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f0000001180)="275bfc773bcc3f2f9b18b5de8f072d7c42bac5636a51e6bb46f95c515a2d3eb9b6b7e7540ad83374e4a1edde1d45a68361248c55553a52ed0b84589da9d9929aba9f6dbcec33018c1484fb9a35eba82cc52ec537ddfdabbc2faeee75e8338152188928906003f903ee356b789309884fa37b405c8ee9079a287fde44dd8f2d14213364118f7382795aad6387bf8455979e94754bea58aafbb7e9d9a92f67459e7387b7f840e08cb76f85fe052b97bbccd7164ba60d9d2d4126e44d7be92511c0bab4ed", 0xc3, 0x4000004, &(0x7f0000001280)={0xa, 0x4e21, 0x5ca3, @mcast1, 0xfffff001}, 0x1c) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), r0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r11, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000001400)=@gcm_256={{0x303}, "2dc62804f3ec4710", "62b60a7ecff50e42537d3e9e067096340554631f2047d7d9fddb6993bd7bde96", "12e0a4d1", "cedd50a6b1c9143b"}, 0x38) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000001440)={0x10}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f00000014c0)=@deltaction={0x350, 0x31, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x9c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa643}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0000}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1d599510}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f23}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8af}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xd4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb0}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000019c0)={@ifindex=r6, 0x32, 0x1, 0xd2fd, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1m6.881420464s ago: executing program 3 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1m6.82293074s ago: executing program 3 (id=1593): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x1a, &(0x7f0000000200)={0x40, 0x7, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) renameat2(r0, &(0x7f0000000100)='./bus\x00', r0, &(0x7f0000000180)='./file1\x00', 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x0, 0x3, 0x0, 0x100000000, 0xf, 0x0, {0x0, 0x20000, 0x0, 0x3, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.732753984s ago: executing program 3 (id=1597): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c9d661e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311c", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e1", 0x2}], 0x1}}], 0x2, 0x44008090) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x66f, 0x18}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @empty}, &(0x7f00000001c0)=0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x25, 0x3, 0xfffffff6, 0x5, 0x21008, r6, 0x7, '\x00', r7, r8, 0x2, 0x5, 0x4}, 0x50) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000480)=0x7fffffff, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="860c976fc1c31843ca0102173661c115f639c7f6025c9e5f7e04218f1437b14584afb86c9222610d031e12bdc3eba5993c297f56f8affa2393402686ebbffbaea756a1709969e0d56d7cb69bb0cd3d1e57a5647902b50296883904dd57921c230bf2c2923b017062e43f4d5df8fcba0c8010d9a1815b792f7a271495d382e492ba111b31d3f1e3922d2277f1", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf25050000001800018014000200776c616e3100000000000000000000000500070006000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc1000008}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 1m6.652079593s ago: executing program 3 (id=1599): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r0, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0xa6ffffff}, 0x0) 1m6.604999588s ago: executing program 33 (id=1599): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r0, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0xa6ffffff}, 0x0) 3.420961702s ago: executing program 5 (id=2591): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, r1], 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9120008c}], 0x1) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) close_range(r6, 0xffffffffffffffff, 0x0) 3.262837882s ago: executing program 5 (id=2592): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffffe}, 0xb00}, 0x1c, 0x0}, 0x0) 3.262579644s ago: executing program 5 (id=2593): syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000fc00000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.192623793s ago: executing program 5 (id=2594): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18b500f, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000280)="ca59", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r7, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 1.200857572s ago: executing program 4 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1.200684418s ago: executing program 4 (id=2632): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 1.147167783s ago: executing program 4 (id=2633): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc4c03d12, &(0x7f0000000380)={0x4, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4081, 0xff1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xf589}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4001) write$dsp(r3, &(0x7f0000001380)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3957437c00a11e1378d64c0b4afb412eba762ba0a0a7bb728425a700980fdbb3a3bdd63765256630a6e9b5771443434578a2e32161ecddb68ff66813e0f9ff0e1ddcfb3e2d924549910828aba35db573f7e2d131bf35403be0ad44221e8211eef04e127ca06575c2631c7e99525348e2a675bd3757aea46f5baf0377c11028bd19a8beba48e521a149c983a38813a2a54384a987ab84862887c6fffed1b6b875f4301b82ec32f90b1e8ff6a7c484c6e29bbfe31b6d83398c39ebbe5779dfb054c42753c86c145bf28ee8d44e2997edb404d4c8a0ae57f037d624edbe0c2d67fe6efd112f389ffa9", 0xffffffffffffffdc) 1.093912641s ago: executing program 4 (id=2635): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f00000001c0)) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) read$FUSE(r7, &(0x7f0000001900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000180)={0x10, 0x0, r9}, 0x10) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 976.592827ms ago: executing program 2 (id=2638): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001840)=ANY=[@ANYBLOB="540000000206df0100000000000000000000000105000100070000000900020073797a30000000000c000780050015e300000000050004000000000010000300686173683a69702c6d616302050005000a000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 976.37604ms ago: executing program 2 (id=2639): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x800, 0xfffc, {0x4, 0x1}, {0x7f, 0x2}, @cond=[{0x7, 0x3, 0x200, 0xfe2d, 0xb, 0xfbfe}, {0xff, 0x3, 0xfffb, 0x801, 0x0, 0x529}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket(0x1, 0x803, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) 783.968362ms ago: executing program 2 (id=2640): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x1c}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc0ff, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 783.776417ms ago: executing program 2 (id=2641): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x100002, 0x0, [0xffffffff, 0x3ff, 0xb, 0x9, 0xaf1, 0x10001, 0x0, 0xfd6]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x2, 0x8}, {0x5, 0xe}]}) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 719.836259ms ago: executing program 2 (id=2642): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x84, 0x0, 0x0, 0x6}], "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"}}}}}, 0x0) (async) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x3, 0x0, 0x0, 0x4}]}, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) syz_emit_ethernet(0x14, &(0x7f00000000c0)={@random="008a02dd6a00", @empty, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@generic={0x88ca, "0f9c"}}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) (async) io_uring_enter(r0, 0x47be, 0x0, 0x60, 0x0, 0x0) 644.504344ms ago: executing program 2 (id=2643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000d80), 0x4) 276.950924ms ago: executing program 1 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0xd, "a465d3", 0x4, 0xaa}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0xfc, 0x4}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) 276.834983ms ago: executing program 1 (id=2646): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0xf1ff}, {0x8, 0x2}, {0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000090}, 0x40000) 206.873209ms ago: executing program 1 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}, 0x1, 0x0, 0x700000000000000}, 0x0) 206.386964ms ago: executing program 1 (id=2648): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x800, 0xfffc, {0x4, 0x1}, {0x7f, 0x2}, @cond=[{0x7, 0x3, 0x200, 0xfe2d, 0xb, 0xfbfe}, {0xff, 0x3, 0xfffb, 0x801, 0x0, 0x529}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket(0x1, 0x803, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) 67.553214ms ago: executing program 4 (id=2649): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000140)={0x4a, 0x0, 0x1, 0x0, 'syz1\x00'}) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000700)=0x1b0, 0x4) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) 67.366079ms ago: executing program 4 (id=2650): r0 = syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x800}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x501, 0x0, 0x27dfdbfb}, 0x14}}, 0x4000) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x8d}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d0822475", 0x23}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc7", 0x15}], 0x3}}], 0x1, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r4, 0x1) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x2040, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 3.270805ms ago: executing program 1 (id=2651): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0100002010ff"}) 3.075143ms ago: executing program 5 (id=2652): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0x850003d1) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 2.99219ms ago: executing program 1 (id=2653): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01'], 0x2000}) 0s ago: executing program 5 (id=2654): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0x4f27, 0x200f, 0x5, 0x7, 0x7451, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x0, 0x1, 0x1, 0x6, 0x7537e116, 0x101, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xc, 0x20001e58, 0x8, 0x6, 0x3c, 0x8, 0x6, 0x10001, 0xfffffff8]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'amplc_pc236\x00', [0x7, 0x6, 0xfffffffc, 0x10000, 0x16d6, 0x2, 0x4, 0x6, 0x9, 0x79, 0x401, 0x5, 0x0, 0x7, 0x40, 0x8000, 0x6, 0xd9c1, 0x8, 0x0, 0x3ff, 0x2, 0x6, 0x7, 0x2749f7cd, 0x0, 0xfffffff8, 0x14d6, 0xd48e, 0x1ff, 0x0, 0x4]}) kernel console output (not intermixed with test programs): 89.024311][T11683] [ 189.024318][T11683] dump_stack_lvl+0x16c/0x1f0 [ 189.024354][T11683] should_fail_ex+0x512/0x640 [ 189.024385][T11683] _copy_to_user+0x32/0xd0 [ 189.024409][T11683] simple_read_from_buffer+0xcb/0x170 [ 189.024430][T11683] proc_fail_nth_read+0x197/0x240 [ 189.024450][T11683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.024470][T11683] ? rw_verify_area+0xcf/0x6c0 [ 189.024495][T11683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.024515][T11683] vfs_read+0x1e1/0xcf0 [ 189.024536][T11683] ? __pfx___mutex_lock+0x10/0x10 [ 189.024554][T11683] ? __pfx_vfs_read+0x10/0x10 [ 189.024578][T11683] ? __fget_files+0x20e/0x3c0 [ 189.024604][T11683] ksys_read+0x12a/0x250 [ 189.024620][T11683] ? __pfx_ksys_read+0x10/0x10 [ 189.024644][T11683] do_syscall_64+0xcd/0x4c0 [ 189.024664][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.024682][T11683] RIP: 0033:0x7f2a6cf8d5fc [ 189.024697][T11683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.024714][T11683] RSP: 002b:00007f2a6dd61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.024731][T11683] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8d5fc [ 189.024742][T11683] RDX: 000000000000000f RSI: 00007f2a6dd610a0 RDI: 0000000000000006 [ 189.024752][T11683] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 189.024762][T11683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.024772][T11683] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 189.024797][T11683] [ 189.347849][T11696] IPVS: Error connecting to the multicast addr [ 189.435254][T11699] netlink: zone id is out of range [ 189.437436][T11699] netlink: zone id is out of range [ 189.439102][T11699] netlink: zone id is out of range [ 189.441279][T11699] netlink: zone id is out of range [ 189.442930][T11699] netlink: zone id is out of range [ 189.444725][T11699] netlink: zone id is out of range [ 189.446351][T11699] netlink: zone id is out of range [ 189.448248][T11699] netlink: zone id is out of range [ 189.450030][T11699] netlink: zone id is out of range [ 189.466304][T11699] netlink: set zone limit has 4 unknown bytes [ 189.720855][T11708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11708 comm=syz.1.1958 [ 189.731922][ T40] audit: type=1400 audit(1755193273.567:31505): avc: denied { create } for pid=11707 comm="syz.1.1958" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 189.773369][ T60] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 189.925261][ T60] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 189.928163][ T60] usb 10-1: config 0 has no interface number 0 [ 189.930462][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.931001][T11710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 189.934279][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 189.937190][T11710] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.942667][T11710] vhci_hcd vhci_hcd.0: Device attached [ 189.943163][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 189.949452][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 189.953165][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 189.957115][ T60] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.961450][ T60] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 189.964706][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.973616][ T60] usb 10-1: config 0 descriptor?? [ 189.976178][T11705] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 189.979077][T11705] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 189.987616][ T60] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 190.183388][ T6055] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 190.270745][ T839] usb 10-1: USB disconnect, device number 2 [ 190.279339][ T839] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 190.340141][T11714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11714 comm=syz.2.1960 [ 190.372916][T11711] vhci_hcd: unknown pdu 2 [ 190.379901][ T9316] vhci_hcd: stop threads [ 190.382462][ T9316] vhci_hcd: release socket [ 190.385505][ T9316] vhci_hcd: disconnect device [ 190.657749][ T5981] Bluetooth: hci1: unexpected event for opcode 0x204e [ 190.926845][T11732] kvm: emulating exchange as write [ 190.970096][T11742] FAULT_INJECTION: forcing a failure. [ 190.970096][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 190.977129][T11742] CPU: 1 UID: 0 PID: 11742 Comm: syz.1.1970 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 190.977148][T11742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.977155][T11742] Call Trace: [ 190.977160][T11742] [ 190.977165][T11742] dump_stack_lvl+0x16c/0x1f0 [ 190.977182][T11742] should_fail_ex+0x512/0x640 [ 190.977196][T11742] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 190.977233][T11742] should_failslab+0xc2/0x120 [ 190.977248][T11742] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 190.977260][T11742] ? alloc_vmap_area+0x58e/0x29c0 [ 190.977276][T11742] ? alloc_vmap_area+0xdc8/0x29c0 [ 190.977293][T11742] alloc_vmap_area+0xdc8/0x29c0 [ 190.977316][T11742] ? __pfx_alloc_vmap_area+0x10/0x10 [ 190.977336][T11742] __get_vm_area_node+0x1ca/0x330 [ 190.977356][T11742] __vmalloc_node_range_noprof+0x271/0x14b0 [ 190.977374][T11742] ? vhost_task_create+0x1d2/0x2e0 [ 190.977386][T11742] ? local_lock_release+0x99/0x140 [ 190.977407][T11742] ? vhost_task_create+0x1d2/0x2e0 [ 190.977418][T11742] ? rcu_read_unlock+0x17/0x60 [ 190.977435][T11742] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.977459][T11742] ? vhost_task_create+0x1d2/0x2e0 [ 190.977470][T11742] __vmalloc_node_noprof+0xad/0xf0 [ 190.977488][T11742] ? vhost_task_create+0x1d2/0x2e0 [ 190.977501][T11742] copy_process+0x2c70/0x7690 [ 190.977526][T11742] ? __pfx_copy_process+0x10/0x10 [ 190.977545][T11742] ? lockdep_init_map_type+0x5c/0x280 [ 190.977558][T11742] ? lockdep_init_map_type+0x5c/0x280 [ 190.977570][T11742] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 190.977587][T11742] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 190.977613][T11742] vhost_task_create+0x1d2/0x2e0 [ 190.977629][T11742] ? __pfx_vhost_task_create+0x10/0x10 [ 190.977646][T11742] ? __pfx_vhost_task_fn+0x10/0x10 [ 190.977666][T11742] kvm_mmu_post_init_vm+0x1b7/0x380 [ 190.977681][T11742] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 190.977699][T11742] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 190.977719][T11742] kvm_vcpu_ioctl+0x5eb/0x1690 [ 190.977737][T11742] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.977753][T11742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.977769][T11742] ? do_vfs_ioctl+0x128/0x14f0 [ 190.977788][T11742] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.977806][T11742] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.977831][T11742] ? hook_file_ioctl_common+0x145/0x410 [ 190.977848][T11742] ? selinux_file_ioctl+0x180/0x270 [ 190.977864][T11742] ? selinux_file_ioctl+0xb4/0x270 [ 190.977882][T11742] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.977898][T11742] __x64_sys_ioctl+0x18b/0x210 [ 190.977918][T11742] do_syscall_64+0xcd/0x4c0 [ 190.977947][T11742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.977960][T11742] RIP: 0033:0x7fb2d6d8ebe9 [ 190.977970][T11742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.977982][T11742] RSP: 002b:00007fb2d7b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.977994][T11742] RAX: ffffffffffffffda RBX: 00007fb2d6fb5fa0 RCX: 00007fb2d6d8ebe9 [ 190.978002][T11742] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 190.978009][T11742] RBP: 00007fb2d7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 190.978016][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.978023][T11742] R13: 00007fb2d6fb6038 R14: 00007fb2d6fb5fa0 R15: 00007ffc68042608 [ 190.978039][T11742] [ 191.112667][T11742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.199568][T11757] binder_alloc: 11755: binder_alloc_buf, no vma [ 191.356229][T11767] overlayfs: failed to resolve './file0': -2 [ 191.887402][T11785] netlink: 'syz.2.1988': attribute type 4 has an invalid length. [ 191.899180][T11785] netlink: 'syz.2.1988': attribute type 4 has an invalid length. [ 192.145327][T11803] __nla_validate_parse: 4 callbacks suppressed [ 192.145339][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1993'. [ 192.247661][ T40] audit: type=1400 audit(1755193276.087:31506): avc: denied { name_connect } for pid=11816 comm="syz.2.1999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 192.248227][ T5981] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 192.259528][ T5981] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 192.326845][ T40] audit: type=1400 audit(1755193276.167:31507): avc: denied { create } for pid=11834 comm="syz.4.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 192.341859][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2006'. [ 192.370882][T11843] netlink: 'syz.5.2008': attribute type 6 has an invalid length. [ 192.404554][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 192.408352][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 192.438910][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2011'. [ 192.439834][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 192.472365][T11858] FAULT_INJECTION: forcing a failure. [ 192.472365][T11858] name failslab, interval 1, probability 0, space 0, times 0 [ 192.476678][T11858] CPU: 1 UID: 0 PID: 11858 Comm: syz.4.2012 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 192.476695][T11858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.476701][T11858] Call Trace: [ 192.476705][T11858] [ 192.476709][T11858] dump_stack_lvl+0x16c/0x1f0 [ 192.476745][T11858] should_fail_ex+0x512/0x640 [ 192.476763][T11858] ? __kmalloc_noprof+0xbf/0x510 [ 192.476776][T11858] ? ip_options_get+0xad/0x4d0 [ 192.476787][T11858] should_failslab+0xc2/0x120 [ 192.476800][T11858] __kmalloc_noprof+0xd2/0x510 [ 192.476814][T11858] ip_options_get+0xad/0x4d0 [ 192.476824][T11858] ? _copy_from_iter+0x15d/0x16f0 [ 192.476840][T11858] ? __pfx_ip_options_get+0x10/0x10 [ 192.476852][T11858] ? __pfx__copy_from_iter+0x10/0x10 [ 192.476869][T11858] ip_cmsg_send+0x94c/0xb90 [ 192.476888][T11858] ping_v4_sendmsg+0x65a/0x1a40 [ 192.476906][T11858] ? register_lock_class+0x41/0x4c0 [ 192.476924][T11858] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 192.476940][T11858] ? __lock_acquire+0xb97/0x1ce0 [ 192.476962][T11858] ? reacquire_held_locks+0xcd/0x1f0 [ 192.476978][T11858] ? release_sock+0x21/0x220 [ 192.476992][T11858] ? find_held_lock+0x2b/0x80 [ 192.477008][T11858] ? inet_autobind+0x145/0x1a0 [ 192.477021][T11858] ? __local_bh_enable_ip+0xa4/0x120 [ 192.477036][T11858] ? inet_autobind+0x14a/0x1a0 [ 192.477049][T11858] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 192.477065][T11859] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2013'. [ 192.477064][T11858] inet_sendmsg+0x11c/0x140 [ 192.477080][T11858] ____sys_sendmsg+0x973/0xc70 [ 192.477096][T11858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.477117][T11858] ___sys_sendmsg+0x134/0x1d0 [ 192.477129][T11858] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.477151][T11858] ? __mutex_unlock_slowpath+0x100/0x800 [ 192.477172][T11858] __sys_sendmsg+0x16d/0x220 [ 192.477183][T11858] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.477202][T11858] do_syscall_64+0xcd/0x4c0 [ 192.477215][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.477226][T11858] RIP: 0033:0x7f2a6cf8ebe9 [ 192.477235][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.477245][T11858] RSP: 002b:00007f2a6dd61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.477256][T11858] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8ebe9 [ 192.477263][T11858] RDX: 0000000020000810 RSI: 0000200000000600 RDI: 0000000000000003 [ 192.477270][T11858] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 192.477276][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.477282][T11858] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 192.477296][T11858] [ 192.506193][T11862] syz.4.2014: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 192.508285][T11859] FAULT_INJECTION: forcing a failure. [ 192.508285][T11859] name failslab, interval 1, probability 0, space 0, times 0 [ 192.510675][T11862] ,cpuset= [ 192.512733][T11859] CPU: 0 UID: 0 PID: 11859 Comm: syz.5.2013 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 192.512756][T11859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.512767][T11859] Call Trace: [ 192.512775][T11859] [ 192.512782][T11859] dump_stack_lvl+0x16c/0x1f0 [ 192.512804][T11859] should_fail_ex+0x512/0x640 [ 192.512820][T11859] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 192.512846][T11859] should_failslab+0xc2/0x120 [ 192.512864][T11859] __kmalloc_cache_noprof+0x6a/0x3e0 [ 192.512889][T11859] ? trace_kmalloc+0x2b/0xd0 [ 192.512906][T11859] ? call_usermodehelper_setup+0xaf/0x360 [ 192.512928][T11859] ? __pfx_free_modprobe_argv+0x10/0x10 [ 192.512949][T11859] call_usermodehelper_setup+0xaf/0x360 [ 192.512973][T11859] __request_module+0x3bd/0x690 [ 192.512991][T11859] ? __pfx___request_module+0x10/0x10 [ 192.513011][T11859] ? __pfx_netdev_run_todo+0x10/0x10 [ 192.513048][T11859] tcf_proto_lookup_ops+0x124/0x150 [ 192.513075][T11859] tc_new_tfilter+0xf34/0x2340 [ 192.513103][T11859] ? avc_has_perm_noaudit+0x117/0x3b0 [ 192.513124][T11859] ? __pfx_tc_new_tfilter+0x10/0x10 [ 192.513151][T11859] ? __lock_acquire+0x62e/0x1ce0 [ 192.513204][T11859] ? find_held_lock+0x2b/0x80 [ 192.513226][T11859] ? __pfx_tc_new_tfilter+0x10/0x10 [ 192.513242][T11859] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 192.513263][T11859] ? __pfx_tc_new_tfilter+0x10/0x10 [ 192.513281][T11859] rtnetlink_rcv_msg+0x95b/0xe90 [ 192.513316][T11859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.513340][T11859] ? ref_tracker_free+0x37c/0x830 [ 192.513363][T11859] netlink_rcv_skb+0x158/0x420 [ 192.513383][T11859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.513403][T11859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.513429][T11859] ? netlink_deliver_tap+0x1ae/0xd30 [ 192.513452][T11859] netlink_unicast+0x5a7/0x870 [ 192.513473][T11859] ? __pfx_netlink_unicast+0x10/0x10 [ 192.513506][T11859] netlink_sendmsg+0x8d1/0xdd0 [ 192.513528][T11859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.513556][T11859] ____sys_sendmsg+0xa98/0xc70 [ 192.513579][T11859] ? copy_msghdr_from_user+0x10a/0x160 [ 192.513596][T11859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.513628][T11859] ___sys_sendmsg+0x134/0x1d0 [ 192.513646][T11859] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.513683][T11859] ? __mutex_unlock_slowpath+0x100/0x800 [ 192.513709][T11859] __sys_sendmsg+0x16d/0x220 [ 192.513727][T11859] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.513759][T11859] do_syscall_64+0xcd/0x4c0 [ 192.513779][T11859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.513797][T11859] RIP: 0033:0x7f3b80b8ebe9 [ 192.513811][T11859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.513828][T11859] RSP: 002b:00007f3b8199d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.513845][T11859] RAX: ffffffffffffffda RBX: 00007f3b80db5fa0 RCX: 00007f3b80b8ebe9 [ 192.513857][T11859] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 192.513867][T11859] RBP: 00007f3b8199d090 R08: 0000000000000000 R09: 0000000000000000 [ 192.513876][T11859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.513887][T11859] R13: 00007f3b80db6038 R14: 00007f3b80db5fa0 R15: 00007fff51ce0738 [ 192.513909][T11859] [ 192.694493][ T8207] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 192.694500][T11862] /,mems_allowed=0-1 [ 192.700861][T11862] CPU: 2 UID: 0 PID: 11862 Comm: syz.4.2014 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 192.700884][T11862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.700894][T11862] Call Trace: [ 192.700901][T11862] [ 192.700908][T11862] dump_stack_lvl+0x16c/0x1f0 [ 192.700930][T11862] warn_alloc+0x248/0x3a0 [ 192.700949][T11862] ? __pfx_warn_alloc+0x10/0x10 [ 192.700976][T11862] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 192.700999][T11862] ? __vmalloc_node_noprof+0xad/0xf0 [ 192.701028][T11862] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 192.701059][T11862] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 192.701088][T11862] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.701120][T11862] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 192.701142][T11862] vmalloc_user_noprof+0x9e/0xe0 [ 192.701165][T11862] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 192.701189][T11862] vb2_vmalloc_alloc+0x135/0x3f0 [ 192.701228][T11862] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 192.701252][T11862] __vb2_queue_alloc+0x8c6/0x1280 [ 192.701287][T11862] vb2_core_reqbufs+0xa90/0xfe0 [ 192.701314][T11862] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 192.701334][T11862] ? __pfx___might_resched+0x10/0x10 [ 192.701359][T11862] ? __mutex_lock+0x1c4/0x10b0 [ 192.701375][T11862] ? avc_has_extended_perms+0x47c/0x1090 [ 192.701402][T11862] vb2_reqbufs+0x1a3/0x1f0 [ 192.701420][T11862] ? __pfx_vb2_reqbufs+0x10/0x10 [ 192.701436][T11862] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 192.701455][T11862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.701474][T11862] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 192.701494][T11862] v4l_reqbufs+0x152/0x1e0 [ 192.701520][T11862] __video_do_ioctl+0xb3d/0xfc0 [ 192.701549][T11862] ? __might_fault+0xe3/0x190 [ 192.701565][T11862] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.701665][T11862] video_usercopy+0x4d0/0x1720 [ 192.701699][T11862] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.701727][T11862] ? selinux_kernel_read_file+0x120/0x130 [ 192.701751][T11862] ? __pfx_video_usercopy+0x10/0x10 [ 192.701782][T11862] v4l2_ioctl+0x1ba/0x250 [ 192.701796][T11862] ? __pfx_v4l2_ioctl+0x10/0x10 [ 192.701823][T11862] __x64_sys_ioctl+0x18b/0x210 [ 192.701849][T11862] do_syscall_64+0xcd/0x4c0 [ 192.701869][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.701886][T11862] RIP: 0033:0x7f2a6cf8ebe9 [ 192.701901][T11862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.701916][T11862] RSP: 002b:00007f2a6dd40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.701933][T11862] RAX: ffffffffffffffda RBX: 00007f2a6d1b6090 RCX: 00007f2a6cf8ebe9 [ 192.701943][T11862] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 192.701953][T11862] RBP: 00007f2a6d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.701963][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.701972][T11862] R13: 00007f2a6d1b6128 R14: 00007f2a6d1b6090 R15: 00007ffdd86c8ef8 [ 192.701994][T11862] [ 192.702081][T11862] Mem-Info: [ 192.816344][T11862] active_anon:11808 inactive_anon:2938 isolated_anon:0 [ 192.816344][T11862] active_file:6349 inactive_file:50001 isolated_file:0 [ 192.816344][T11862] unevictable:1768 dirty:199 writeback:0 [ 192.816344][T11862] slab_reclaimable:12208 slab_unreclaimable:81928 [ 192.816344][T11862] mapped:25769 shmem:5261 pagetables:1481 [ 192.816344][T11862] sec_pagetables:312 bounce:0 [ 192.816344][T11862] kernel_misc_reclaimable:0 [ 192.816344][T11862] free:440629 free_pcp:7634 free_cma:0 [ 192.834867][T11862] Node 0 active_anon:47180kB inactive_anon:11752kB active_file:20532kB inactive_file:199804kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103000kB dirty:796kB writeback:0kB shmem:17508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15696kB pagetables:5600kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 192.845126][ T8207] usb 6-1: device descriptor read/64, error -71 [ 192.845938][T11862] Node 1 active_anon:12kB inactive_anon:0kB active_file:4864kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.859233][T11862] Node 0 DMA free:11140kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.870309][T11862] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 192.872622][T11862] Node 0 DMA32 free:136052kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47144kB inactive_anon:11748kB active_file:20532kB inactive_file:199804kB unevictable:3536kB writepending:796kB present:2080628kB managed:1263512kB mlocked:0kB bounce:0kB free_pcp:30468kB local_pcp:10300kB free_cma:0kB [ 192.884826][T11862] lowmem_reserve[]: 0 0 0 0 0 [ 192.886341][T11862] Node 1 Normal free:1615252kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:4864kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:32kB free_cma:0kB [ 192.897781][T11862] lowmem_reserve[]: 0 0 0 0 0 [ 192.899704][T11862] Node 0 DMA: 3*4kB (U) 5*8kB (U) 11*16kB (UME) 11*32kB (UME) 11*64kB (UME) 5*128kB (UM) 6*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11140kB [ 192.905322][T11862] Node 0 DMA32: 1305*4kB (UME) 1251*8kB (UME) 625*16kB (UME) 670*32kB (UME) 243*64kB (UME) 51*128kB (UME) 84*256kB (UM) 53*512kB (UM) 14*1024kB (UM) 2*2048kB (M) 0*4096kB = 135820kB [ 192.911960][T11862] Node 1 Normal: 53*4kB (UME) 46*8kB (UME) 91*16kB (UME) 215*32kB (UME) 113*64kB (UME) 49*128kB (UME) 16*256kB (UME) 15*512kB (UM) 10*1024kB (UM) 11*2048kB (UME) 378*4096kB (UM) = 1615252kB [ 192.920375][T11862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.925108][T11862] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.928956][T11862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.931913][T11862] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.934863][T11862] 61607 total pagecache pages [ 192.936377][T11862] 0 pages in swap cache [ 192.937657][T11862] Free swap = 124996kB [ 192.938965][T11862] Total swap = 124996kB [ 192.940280][T11862] 1048443 pages RAM [ 192.941483][T11862] 0 pages HighMem/MovableOnly [ 192.942943][T11862] 283252 pages reserved [ 192.944569][T11862] 0 pages cma reserved [ 192.985906][T11868] usb usb8: usbfs: process 11868 (syz.5.2016) did not claim interface 0 before use [ 192.991074][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2016'. [ 193.012847][T11868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11868 comm=syz.5.2016 [ 193.047369][T11873] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 193.083462][ T8207] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 193.085801][T11877] o2cb: This node has not been configured. [ 193.086753][ T40] audit: type=1400 audit(1755193276.927:31508): avc: denied { create } for pid=11876 comm="syz.5.2019" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 193.088120][T11877] o2cb: Cluster check failed. Fix errors before retrying. [ 193.088139][T11877] (syz.5.2019,11877,2):user_dlm_register:674 ERROR: status = -22 [ 193.102326][T11877] (syz.5.2019,11877,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 193.110852][ T40] audit: type=1400 audit(1755193276.947:31509): avc: denied { ioctl } for pid=11879 comm="syz.2.2020" path="socket:[48045]" dev="sockfs" ino=48045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.184548][T11886] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2022'. [ 193.223278][ T8207] usb 6-1: device descriptor read/64, error -71 [ 193.333666][ T8207] usb usb6-port1: attempt power cycle [ 193.441929][T11902] 9pnet_fd: Insufficient options for proto=fd [ 193.486148][T11904] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2028'. [ 193.492740][T11904] tmpfs: Bad value for 'size' [ 193.693346][ T8207] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 193.715439][ T8207] usb 6-1: device descriptor read/8, error -71 [ 193.740867][T11916] netlink: 'syz.5.2032': attribute type 1 has an invalid length. [ 193.763380][T11916] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 193.767309][T11916] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 193.813932][T11915] gretap1: entered promiscuous mode [ 193.817622][T11915] bond1: (slave gretap1): making interface the new active one [ 193.820501][T11915] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.831249][T11915] macvlan2: entered promiscuous mode [ 193.832983][T11915] macvlan2: entered allmulticast mode [ 193.836011][T11915] bond1: entered promiscuous mode [ 193.838904][T11915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.844430][T11915] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 193.848606][T11915] bond1: left promiscuous mode [ 193.963510][ T8207] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 193.984048][ T8207] usb 6-1: device descriptor read/8, error -71 [ 194.103583][ T8207] usb usb6-port1: unable to enumerate USB device [ 194.212845][T11929] FAULT_INJECTION: forcing a failure. [ 194.212845][T11929] name failslab, interval 1, probability 0, space 0, times 0 [ 194.217119][T11929] CPU: 2 UID: 0 PID: 11929 Comm: syz.4.2037 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 194.217136][T11929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.217143][T11929] Call Trace: [ 194.217147][T11929] [ 194.217151][T11929] dump_stack_lvl+0x16c/0x1f0 [ 194.217167][T11929] should_fail_ex+0x512/0x640 [ 194.217180][T11929] ? fs_reclaim_acquire+0xae/0x150 [ 194.217196][T11929] ? tomoyo_encode2+0x100/0x3e0 [ 194.217211][T11929] should_failslab+0xc2/0x120 [ 194.217225][T11929] __kmalloc_noprof+0xd2/0x510 [ 194.217239][T11929] tomoyo_encode2+0x100/0x3e0 [ 194.217257][T11929] tomoyo_encode+0x29/0x50 [ 194.217273][T11929] tomoyo_realpath_from_path+0x18f/0x6e0 [ 194.217291][T11929] ? tomoyo_profile+0x47/0x60 [ 194.217303][T11929] tomoyo_path_number_perm+0x245/0x580 [ 194.217316][T11929] ? tomoyo_path_number_perm+0x237/0x580 [ 194.217331][T11929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.217346][T11929] ? find_held_lock+0x2b/0x80 [ 194.217375][T11929] ? find_held_lock+0x2b/0x80 [ 194.217388][T11929] ? hook_file_ioctl_common+0x145/0x410 [ 194.217402][T11929] ? __fget_files+0x20e/0x3c0 [ 194.217417][T11929] security_file_ioctl+0x9b/0x240 [ 194.217434][T11929] __x64_sys_ioctl+0xb7/0x210 [ 194.217452][T11929] do_syscall_64+0xcd/0x4c0 [ 194.217467][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.217483][T11929] RIP: 0033:0x7f2a6cf8ebe9 [ 194.217497][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.217513][T11929] RSP: 002b:00007f2a6dd61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.217532][T11929] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8ebe9 [ 194.217542][T11929] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 194.217552][T11929] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 194.217563][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.217574][T11929] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 194.217593][T11929] [ 194.217604][T11929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.286246][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416536][T11936] geneve2: entered promiscuous mode [ 194.418274][T11936] geneve2: entered allmulticast mode [ 194.467326][ T40] audit: type=1400 audit(1755193278.307:31510): avc: denied { connect } for pid=11935 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.607754][T11947] comedi comedi1: dac02: I/O port conflict (0x4,8) [ 194.611168][ T40] audit: type=1400 audit(1755193278.447:31511): avc: denied { ioctl } for pid=11946 comm="syz.2.2043" path="socket:[50380]" dev="sockfs" ino=50380 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.625245][T11949] FAULT_INJECTION: forcing a failure. [ 194.625245][T11949] name failslab, interval 1, probability 0, space 0, times 0 [ 194.631063][T11949] CPU: 2 UID: 0 PID: 11949 Comm: syz.4.2044 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 194.631092][T11949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.631102][T11949] Call Trace: [ 194.631122][T11949] [ 194.631129][T11949] dump_stack_lvl+0x16c/0x1f0 [ 194.631155][T11949] should_fail_ex+0x512/0x640 [ 194.631179][T11949] should_failslab+0xc2/0x120 [ 194.631201][T11949] __kmalloc_cache_noprof+0x6a/0x3e0 [ 194.631225][T11949] ? sctp_add_bind_addr+0xae/0x3f0 [ 194.631252][T11949] sctp_add_bind_addr+0xae/0x3f0 [ 194.631279][T11949] sctp_copy_local_addr_list+0x349/0x550 [ 194.631373][T11949] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 194.631403][T11949] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 194.631423][T11949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.631449][T11949] sctp_bind_addr_copy+0xe0/0x530 [ 194.631476][T11949] sctp_connect_new_asoc+0x1c9/0x770 [ 194.631497][T11949] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 194.631524][T11949] sctp_sendmsg+0x1560/0x1e10 [ 194.631549][T11949] ? __pfx_sctp_sendmsg+0x10/0x10 [ 194.631570][T11949] ? __pfx_sock_has_perm+0x10/0x10 [ 194.631598][T11949] ? __import_iovec+0x1dd/0x650 [ 194.631623][T11949] ? __pfx_sctp_sendmsg+0x10/0x10 [ 194.631643][T11949] inet_sendmsg+0x11c/0x140 [ 194.631669][T11949] ____sys_sendmsg+0x973/0xc70 [ 194.631693][T11949] ? copy_msghdr_from_user+0x10a/0x160 [ 194.631709][T11949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.631735][T11949] ? __pfx__kstrtoull+0x10/0x10 [ 194.631766][T11949] ___sys_sendmsg+0x134/0x1d0 [ 194.631785][T11949] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.631815][T11949] ? find_held_lock+0x2b/0x80 [ 194.631852][T11949] __sys_sendmmsg+0x200/0x420 [ 194.631872][T11949] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.631899][T11949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.631930][T11949] ? fput+0x9b/0xd0 [ 194.631953][T11949] ? ksys_write+0x1ac/0x250 [ 194.631969][T11949] ? __pfx_ksys_write+0x10/0x10 [ 194.632027][T11949] __x64_sys_sendmmsg+0x9c/0x100 [ 194.632045][T11949] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.632063][T11949] do_syscall_64+0xcd/0x4c0 [ 194.632084][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.632102][T11949] RIP: 0033:0x7f2a6cf8ebe9 [ 194.632117][T11949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.632134][T11949] RSP: 002b:00007f2a6dd61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.632152][T11949] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8ebe9 [ 194.632162][T11949] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 194.632172][T11949] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 194.632182][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.632192][T11949] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 194.632217][T11949] [ 194.745735][T11952] tty tty1: ldisc open failed (-12), clearing slot 0 [ 194.752965][T11951] tty tty1: ldisc open failed (-12), clearing slot 0 [ 194.786763][T11956] tipc: Cannot configure node identity twice [ 195.303462][ T6055] vhci_hcd: vhci_device speed not set [ 195.620379][T11985] netlink: 'syz.5.2056': attribute type 10 has an invalid length. [ 195.637533][T11985] team0: Port device geneve0 added [ 195.802138][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.802410][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.807208][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.815740][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.816092][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.816139][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.023322][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.026507][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.063290][ T8207] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 196.194302][ T8207] usb 10-1: device descriptor read/64, error -71 [ 196.232772][T12001] FAULT_INJECTION: forcing a failure. [ 196.232772][T12001] name failslab, interval 1, probability 0, space 0, times 0 [ 196.239009][T12001] CPU: 3 UID: 0 PID: 12001 Comm: syz.1.2060 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 196.239039][T12001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.239051][T12001] Call Trace: [ 196.239058][T12001] [ 196.239066][T12001] dump_stack_lvl+0x16c/0x1f0 [ 196.239092][T12001] should_fail_ex+0x512/0x640 [ 196.239114][T12001] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 196.239145][T12001] should_failslab+0xc2/0x120 [ 196.239167][T12001] __kmalloc_cache_noprof+0x6a/0x3e0 [ 196.239202][T12001] ? __inet_diag_dump_start+0x8f/0x7f0 [ 196.239233][T12001] __inet_diag_dump_start+0x8f/0x7f0 [ 196.239268][T12001] __netlink_dump_start+0x60e/0x990 [ 196.239294][T12001] inet_diag_handler_cmd+0x282/0x2e0 [ 196.239321][T12001] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 196.239348][T12001] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 196.239373][T12001] ? __pfx_inet_diag_dump+0x10/0x10 [ 196.239398][T12001] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 196.239446][T12001] ? sock_diag_lock_handler+0x10f/0x2e0 [ 196.239483][T12001] sock_diag_rcv_msg+0x438/0x790 [ 196.239515][T12001] netlink_rcv_skb+0x158/0x420 [ 196.239537][T12001] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 196.239567][T12001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.239600][T12001] ? netlink_deliver_tap+0x1ae/0xd30 [ 196.239627][T12001] netlink_unicast+0x5a7/0x870 [ 196.239652][T12001] ? __pfx_netlink_unicast+0x10/0x10 [ 196.239674][T12001] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 196.239704][T12001] netlink_sendmsg+0x8d1/0xdd0 [ 196.239731][T12001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.239765][T12001] sock_write_iter+0x4fc/0x5b0 [ 196.239791][T12001] ? __pfx_sock_write_iter+0x10/0x10 [ 196.239885][T12001] ? __pfx_file_has_perm+0x10/0x10 [ 196.239914][T12001] do_iter_readv_writev+0x662/0x9e0 [ 196.239948][T12001] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 196.239976][T12001] ? selinux_file_permission+0x126/0x660 [ 196.240006][T12001] ? bpf_lsm_file_permission+0x9/0x10 [ 196.240029][T12001] ? security_file_permission+0x71/0x210 [ 196.240058][T12001] ? rw_verify_area+0xcf/0x6c0 [ 196.240088][T12001] vfs_writev+0x35f/0xde0 [ 196.240109][T12001] ? __lock_acquire+0x62e/0x1ce0 [ 196.240140][T12001] ? __pfx_vfs_writev+0x10/0x10 [ 196.240163][T12001] ? find_held_lock+0x2b/0x80 [ 196.240205][T12001] ? __fget_files+0x20e/0x3c0 [ 196.240224][T12001] ? __fget_files+0x140/0x3c0 [ 196.240251][T12001] ? do_writev+0x28c/0x340 [ 196.240266][T12001] do_writev+0x28c/0x340 [ 196.240284][T12001] ? __pfx_do_writev+0x10/0x10 [ 196.240308][T12001] do_syscall_64+0xcd/0x4c0 [ 196.240331][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.240350][T12001] RIP: 0033:0x7fb2d6d8ebe9 [ 196.240367][T12001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.240387][T12001] RSP: 002b:00007fb2d7b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 196.240407][T12001] RAX: ffffffffffffffda RBX: 00007fb2d6fb5fa0 RCX: 00007fb2d6d8ebe9 [ 196.240419][T12001] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 196.240431][T12001] RBP: 00007fb2d7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 196.240443][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.240454][T12001] R13: 00007fb2d6fb6038 R14: 00007fb2d6fb5fa0 R15: 00007ffc68042608 [ 196.240482][T12001] [ 196.382299][ C3] vkms_vblank_simulate: vblank timer overrun [ 196.513356][ T8207] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 196.644562][ T8207] usb 10-1: device descriptor read/64, error -71 [ 196.754799][ T8207] usb usb10-port1: attempt power cycle [ 197.103257][ T8207] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 197.128314][ T8207] usb 10-1: device descriptor read/8, error -71 [ 197.383276][ T8207] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 197.423655][ T8207] usb 10-1: device descriptor read/8, error -71 [ 197.463561][T12036] __nla_validate_parse: 5 callbacks suppressed [ 197.463579][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2075'. [ 197.470338][T12036] fuse: Bad value for 'user_id' [ 197.470363][T12036] fuse: Bad value for 'user_id' [ 197.471097][T12036] overlayfs: failed to resolve './file0/file0': -2 [ 197.534468][ T8207] usb usb10-port1: unable to enumerate USB device [ 197.730156][T12040] binder: 12039:12040 unknown command 0 [ 197.730177][T12040] binder: 12039:12040 ioctl c0306201 200000000080 returned -22 [ 197.744832][T12040] qnx4: no qnx4 filesystem (no root dir). [ 197.849917][T12046] net_ratelimit: 2 callbacks suppressed [ 197.849928][T12046] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 197.866491][T12046] lo speed is unknown, defaulting to 1000 [ 198.316579][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 199.020248][T12092] can0: slcan on ptm0. [ 199.037037][T12094] netlink: 'syz.5.2094': attribute type 29 has an invalid length. [ 199.084363][T12091] can0 (unregistered): slcan off ptm0. [ 199.239029][T12105] netlink: 'syz.4.2099': attribute type 2 has an invalid length. [ 199.522271][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'. [ 199.586956][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2112'. [ 200.259203][T12156] efs: device does not support 512 byte blocks [ 200.261287][T12156] device does not support 512 byte blocks [ 200.261287][T12156] [ 200.355630][T12159] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20000 [ 200.480265][T12167] netlink: 'syz.4.2122': attribute type 1 has an invalid length. [ 200.496422][T12167] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 200.500298][T12167] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 200.548588][T12164] gretap2: entered promiscuous mode [ 200.554957][T12164] bond1: (slave gretap2): making interface the new active one [ 200.557772][T12164] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 200.568262][T12164] macvlan0: entered promiscuous mode [ 200.570116][T12164] macvlan0: entered allmulticast mode [ 200.574968][T12164] bond1: entered promiscuous mode [ 200.577182][T12164] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 200.582295][T12164] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 200.594092][T12164] bond1: left promiscuous mode [ 200.594432][T12177] Bluetooth: Invalid esc byte 0xf7 [ 200.751280][T12186] /dev/sg0: Can't lookup blockdev [ 200.799981][T12190] macvlan0: entered promiscuous mode [ 200.801705][T12190] bond0: entered promiscuous mode [ 200.803685][T12190] bond_slave_0: entered promiscuous mode [ 200.805608][T12190] bond_slave_1: entered promiscuous mode [ 200.807566][T12190] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 200.809950][T12190] macvlan0: entered allmulticast mode [ 200.811692][T12190] bond0: entered allmulticast mode [ 200.813819][T12190] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 200.817177][T12190] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 200.820406][T12190] bond0: left allmulticast mode [ 200.822028][T12190] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 200.824620][T12190] bond0: left promiscuous mode [ 200.826159][T12190] bond_slave_0: left promiscuous mode [ 200.828000][T12190] bond_slave_1: left promiscuous mode [ 200.829955][T12190] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 200.960799][T12199] 9pnet: Unknown protocol version 9p20\++} [ 200.963039][T12199] binder: 12198:12199 unknown command 0 [ 200.965071][T12199] binder: 12198:12199 ioctl c0306201 200000000300 returned -22 [ 201.002200][T12203] program syz.5.2135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.045943][T12207] tipc: Enabled bearer , priority 0 [ 201.048492][T12207] syzkaller0: entered promiscuous mode [ 201.050284][T12207] syzkaller0: entered allmulticast mode [ 201.055051][T12207] openvswitch: netlink: Key type 179 is out of range max 32 [ 201.070934][T12207] tipc: Resetting bearer [ 201.082007][T12206] tipc: Resetting bearer [ 201.099954][T12206] tipc: Disabling bearer [ 201.313530][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.000076][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2149'. [ 202.004048][T12229] nbd: must specify at least one socket [ 202.081711][ T40] audit: type=1804 audit(1755193285.917:31512): pid=12233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2151" name="/newroot/370/file0" dev="tmpfs" ino=2037 res=1 errno=0 [ 202.082908][T12233] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 202.098738][T12233] ref_ctr increment failed for inode: 0x7f5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802caaab00 [ 202.123432][ T8207] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 202.133469][ T6055] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 202.264486][ T6055] usb 6-1: device descriptor read/64, error -71 [ 202.278620][ T8207] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.283029][ T8207] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 202.290777][ T8207] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.295065][ T8207] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.302397][ T8207] usb 10-1: config 0 descriptor?? [ 202.316546][ T8207] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 202.400152][T12241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=12241 comm=syz.4.2154 [ 202.409653][T12239] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2154'. [ 202.503331][ T6055] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 202.510205][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.525458][ T840] usb 10-1: USB disconnect, device number 7 [ 202.633482][ T6055] usb 6-1: device descriptor read/64, error -71 [ 202.743556][ T6055] usb usb6-port1: attempt power cycle [ 202.860858][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 202.867239][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 203.093564][T12276] devpts: Unknown parameter 'maxfs' [ 203.103363][ T6055] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 203.124016][ T6055] usb 6-1: device descriptor read/8, error -71 [ 203.164330][ T5981] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 203.166711][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 203.171281][ T40] audit: type=1400 audit(1755193287.007:31513): avc: denied { getopt } for pid=12283 comm="syz.2.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.363357][ T6055] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 203.385986][ T6055] usb 6-1: device descriptor read/8, error -71 [ 203.495637][ T6055] usb usb6-port1: unable to enumerate USB device [ 203.800488][T12301] trusted_key: encrypted_key: insufficient parameters specified [ 204.145127][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2182'. [ 204.348925][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2187'. [ 204.373576][ T840] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 204.400013][T12334] netlink: 'syz.2.2189': attribute type 11 has an invalid length. [ 204.513660][ T840] usb 9-1: device descriptor read/64, error -71 [ 204.739517][T12347] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 204.771336][T12347] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 204.779151][T12347] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 204.783315][ T840] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 204.805613][T12349] netlink: 'syz.1.2193': attribute type 21 has an invalid length. [ 204.808180][T12349] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2193'. [ 204.811108][T12349] netlink: 'syz.1.2193': attribute type 4 has an invalid length. [ 204.813818][T12349] netlink: 'syz.1.2193': attribute type 5 has an invalid length. [ 204.816293][T12349] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2193'. [ 204.825417][T12344] gretap1: entered promiscuous mode [ 204.829964][T12344] bond2: (slave gretap1): making interface the new active one [ 204.832662][T12344] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 204.845639][T12344] macvlan2: entered promiscuous mode [ 204.847465][T12344] macvlan2: entered allmulticast mode [ 204.849662][T12344] bond2: entered promiscuous mode [ 204.851641][T12344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.865074][T12344] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 204.870315][T12344] bond2: left promiscuous mode [ 204.923290][ T840] usb 9-1: device descriptor read/64, error -71 [ 205.043747][ T840] usb usb9-port1: attempt power cycle [ 205.393397][ T840] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 205.414314][ T840] usb 9-1: device descriptor read/8, error -71 [ 205.653359][ T840] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 205.677381][ T840] usb 9-1: device descriptor read/8, error -71 [ 205.793567][ T840] usb usb9-port1: unable to enumerate USB device [ 205.836219][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 205.923288][ T840] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 205.947137][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 205.956762][T12375] bridge0: port 1(syz_tun) entered disabled state [ 205.976924][T12375] syz_tun (unregistering): left allmulticast mode [ 205.979013][T12375] syz_tun (unregistering): left promiscuous mode [ 205.981218][T12375] bridge0: port 1(syz_tun) entered disabled state [ 206.073374][ T840] usb 9-1: device descriptor read/64, error -71 [ 206.081895][T12385] FAULT_INJECTION: forcing a failure. [ 206.081895][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 206.087325][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.5.2206 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 206.087356][T12385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.087368][T12385] Call Trace: [ 206.087374][T12385] [ 206.087383][T12385] dump_stack_lvl+0x16c/0x1f0 [ 206.087409][T12385] should_fail_ex+0x512/0x640 [ 206.087432][T12385] should_failslab+0xc2/0x120 [ 206.087454][T12385] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 206.087473][T12385] ? skb_clone+0x190/0x3f0 [ 206.087494][T12385] skb_clone+0x190/0x3f0 [ 206.087512][T12385] netlink_deliver_tap+0xabd/0xd30 [ 206.087535][T12385] netlink_unicast+0x71f/0x870 [ 206.087559][T12385] ? __pfx_netlink_unicast+0x10/0x10 [ 206.087591][T12385] netlink_ack+0x696/0xb80 [ 206.087618][T12385] netlink_rcv_skb+0x332/0x420 [ 206.087637][T12385] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.087663][T12385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.087692][T12385] ? ns_capable+0xd7/0x110 [ 206.087715][T12385] nfnetlink_rcv+0x1b3/0x430 [ 206.087738][T12385] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 206.087761][T12385] ? netlink_deliver_tap+0x1ae/0xd30 [ 206.087787][T12385] netlink_unicast+0x5a7/0x870 [ 206.087810][T12385] ? __pfx_netlink_unicast+0x10/0x10 [ 206.087830][T12385] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 206.087857][T12385] netlink_sendmsg+0x8d1/0xdd0 [ 206.087879][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.087906][T12385] ____sys_sendmsg+0xa98/0xc70 [ 206.087927][T12385] ? copy_msghdr_from_user+0x10a/0x160 [ 206.087945][T12385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.087983][T12385] ___sys_sendmsg+0x134/0x1d0 [ 206.088003][T12385] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.088043][T12385] ? __mutex_unlock_slowpath+0x100/0x800 [ 206.088070][T12385] __sys_sendmsg+0x16d/0x220 [ 206.088087][T12385] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.088120][T12385] do_syscall_64+0xcd/0x4c0 [ 206.088140][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.088159][T12385] RIP: 0033:0x7f3b80b8ebe9 [ 206.088175][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.088208][T12385] RSP: 002b:00007f3b8199d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.088227][T12385] RAX: ffffffffffffffda RBX: 00007f3b80db5fa0 RCX: 00007f3b80b8ebe9 [ 206.088239][T12385] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 206.088249][T12385] RBP: 00007f3b8199d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.088259][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.088269][T12385] R13: 00007f3b80db6038 R14: 00007f3b80db5fa0 R15: 00007fff51ce0738 [ 206.088293][T12385] [ 206.314061][ T840] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 206.443259][ T840] usb 9-1: device descriptor read/64, error -71 [ 206.473593][ T7152] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 206.553566][ T840] usb usb9-port1: attempt power cycle [ 206.623262][ T7152] usb 6-1: Using ep0 maxpacket: 8 [ 206.626860][ T7152] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.630799][ T7152] usb 6-1: config 0 has no interfaces? [ 206.640585][ T7152] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 206.644396][ T7152] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 206.647492][ T7152] usb 6-1: Product: syz [ 206.649137][ T7152] usb 6-1: Manufacturer: syz [ 206.650966][ T7152] usb 6-1: SerialNumber: syz [ 206.657559][ T7152] usb 6-1: config 0 descriptor?? [ 206.862665][ T7152] usb 6-1: USB disconnect, device number 37 [ 206.903340][ T840] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 206.933958][ T840] usb 9-1: device descriptor read/8, error -71 [ 207.244623][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.298131][T12414] sp0: Synchronizing with TNC [ 207.305441][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.940952][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 207.948263][T12429] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 207.977014][T12429] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 207.982337][T12429] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 208.029859][T12418] gretap1: entered promiscuous mode [ 208.036576][T12418] bond3: (slave gretap1): making interface the new active one [ 208.039359][T12418] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 208.051885][T12418] macvlan3: entered promiscuous mode [ 208.054878][T12418] macvlan3: entered allmulticast mode [ 208.057783][T12418] bond3: entered promiscuous mode [ 208.060568][T12418] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 208.068320][T12418] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 208.075385][T12418] bond3: left promiscuous mode [ 208.201468][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2223'. [ 208.218909][T12439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=12439 comm=syz.1.2223 [ 208.325800][T12448] overlayfs: missing 'lowerdir' [ 208.395387][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 208.417795][T12456] FAULT_INJECTION: forcing a failure. [ 208.417795][T12456] name failslab, interval 1, probability 0, space 0, times 0 [ 208.423051][T12456] CPU: 0 UID: 0 PID: 12456 Comm: syz.5.2229 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 208.423077][T12456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.423088][T12456] Call Trace: [ 208.423094][T12456] [ 208.423102][T12456] dump_stack_lvl+0x16c/0x1f0 [ 208.423127][T12456] should_fail_ex+0x512/0x640 [ 208.423148][T12456] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 208.423185][T12456] should_failslab+0xc2/0x120 [ 208.423208][T12456] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 208.423224][T12456] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 208.423252][T12456] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 208.423276][T12456] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 208.423308][T12456] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 208.423344][T12456] mmu_topup_memory_caches+0x25/0x170 [ 208.423366][T12456] kvm_mmu_load+0xd6/0x23c0 [ 208.423385][T12456] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 208.423406][T12456] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 208.423427][T12456] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 208.423456][T12456] ? __pfx_kvm_mmu_load+0x10/0x10 [ 208.423474][T12456] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 208.423503][T12456] ? kvm_check_and_inject_events+0x71c/0x1310 [ 208.423534][T12456] vcpu_run+0x358c/0x5580 [ 208.423560][T12456] ? __lock_acquire+0xb97/0x1ce0 [ 208.423593][T12456] ? __pfx_vcpu_run+0x10/0x10 [ 208.423623][T12456] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 208.423646][T12456] ? __local_bh_enable_ip+0xa4/0x120 [ 208.423674][T12456] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 208.423697][T12456] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 208.423728][T12456] kvm_vcpu_ioctl+0x5eb/0x1690 [ 208.423756][T12456] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.423781][T12456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.423804][T12456] ? do_vfs_ioctl+0x128/0x14f0 [ 208.423831][T12456] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 208.423858][T12456] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 208.423894][T12456] ? hook_file_ioctl_common+0x145/0x410 [ 208.423921][T12456] ? selinux_file_ioctl+0x180/0x270 [ 208.423945][T12456] ? selinux_file_ioctl+0xb4/0x270 [ 208.423970][T12456] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.423996][T12456] __x64_sys_ioctl+0x18b/0x210 [ 208.424030][T12456] do_syscall_64+0xcd/0x4c0 [ 208.424053][T12456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.424069][T12456] RIP: 0033:0x7f3b80b8ebe9 [ 208.424084][T12456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.424101][T12456] RSP: 002b:00007f3b8199d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.424120][T12456] RAX: ffffffffffffffda RBX: 00007f3b80db5fa0 RCX: 00007f3b80b8ebe9 [ 208.424133][T12456] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 208.424143][T12456] RBP: 00007f3b8199d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.424152][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.424164][T12456] R13: 00007f3b80db6038 R14: 00007f3b80db5fa0 R15: 00007fff51ce0738 [ 208.424188][T12456] [ 208.471636][T12460] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 208.594854][T12460] macvlan0: entered promiscuous mode [ 208.596809][T12460] macvlan0: entered allmulticast mode [ 208.599203][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 208.599799][T12460] bond2: entered promiscuous mode [ 208.605142][T12460] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 208.612376][T12460] bond2: left promiscuous mode [ 208.689738][ T40] audit: type=1400 audit(1755193292.527:31514): avc: denied { accept } for pid=12476 comm="syz.1.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.962612][T12505] overlay: ./file0 is not a directory [ 209.003686][T12510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12510 comm=syz.5.2248 [ 209.048951][T12513] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 209.081219][T12517] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2250'. [ 209.085397][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2250'. [ 209.086145][T12513] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 209.095629][T12513] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 209.132844][T12509] macvlan0: entered promiscuous mode [ 209.134796][T12509] macvlan0: entered allmulticast mode [ 209.137261][T12509] bond3: entered promiscuous mode [ 209.139105][T12509] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 209.146266][T12509] bond3: left promiscuous mode [ 209.173591][ T8205] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 209.236301][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 209.334511][ T8205] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 209.337645][T12541] FAULT_INJECTION: forcing a failure. [ 209.337645][T12541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.340232][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.342997][T12541] CPU: 3 UID: 0 PID: 12541 Comm: syz.4.2260 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 209.343018][T12541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.343033][T12541] Call Trace: [ 209.343038][T12541] [ 209.343044][T12541] dump_stack_lvl+0x16c/0x1f0 [ 209.343065][T12541] should_fail_ex+0x512/0x640 [ 209.343086][T12541] _copy_to_user+0x32/0xd0 [ 209.343109][T12541] simple_read_from_buffer+0xcb/0x170 [ 209.343128][T12541] proc_fail_nth_read+0x197/0x240 [ 209.343148][T12541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.343181][T12541] ? rw_verify_area+0xcf/0x6c0 [ 209.343207][T12541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.343226][T12541] vfs_read+0x1e1/0xcf0 [ 209.343246][T12541] ? __pfx___mutex_lock+0x10/0x10 [ 209.343263][T12541] ? __pfx_vfs_read+0x10/0x10 [ 209.343286][T12541] ? __fget_files+0x20e/0x3c0 [ 209.343311][T12541] ksys_read+0x12a/0x250 [ 209.343326][T12541] ? __pfx_ksys_read+0x10/0x10 [ 209.343350][T12541] do_syscall_64+0xcd/0x4c0 [ 209.343369][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.343385][T12541] RIP: 0033:0x7f2a6cf8d5fc [ 209.343398][T12541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.343413][T12541] RSP: 002b:00007f2a6dd61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.343428][T12541] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8d5fc [ 209.343438][T12541] RDX: 000000000000000f RSI: 00007f2a6dd610a0 RDI: 0000000000000004 [ 209.343448][T12541] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 209.343457][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.343466][T12541] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 209.343489][T12541] [ 209.368613][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2259'. [ 209.407607][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.410960][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.414915][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.418497][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.422237][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.426334][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.429304][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.432672][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.435790][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.438978][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.442786][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.446250][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.449416][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.453411][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.457148][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.460712][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.473288][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.476495][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.479672][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.483610][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.486900][ T8205] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.493023][ T8205] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.497041][ T8205] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.500730][ T8205] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.503958][ T8205] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.506596][ T8205] usb 7-1: Product: syz [ 209.507930][ T8205] usb 7-1: Manufacturer: syz [ 209.509896][ T8205] usb 7-1: SerialNumber: syz [ 209.520267][ T8205] usb 7-1: config 0 descriptor?? [ 209.527991][ T8205] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 209.563869][T12557] netlink: 'syz.1.2265': attribute type 21 has an invalid length. [ 209.566311][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 209.569532][T12557] netlink: 'syz.1.2265': attribute type 21 has an invalid length. [ 209.572350][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 209.806440][T12574] netlink: 'syz.4.2271': attribute type 10 has an invalid length. [ 210.094469][T12591] tipc: Resetting bearer [ 210.126814][T12591] veth1_macvtap: left allmulticast mode [ 210.152066][ T9328] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.155097][ T9328] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.158339][ T9328] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.161107][ T9328] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.283523][T12595] nftables ruleset with unbound chain [ 210.474301][ T5981] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 210.499601][T12606] program syz.1.2282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.830012][T12619] tmpfs: Bad value for 'huge' [ 210.885844][ T40] audit: type=1400 audit(1755193294.727:31515): avc: denied { setopt } for pid=12618 comm="syz.1.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 211.150953][ T40] audit: type=1400 audit(1755193294.987:31516): avc: denied { associate } for pid=12626 comm="syz.1.2290" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 211.170939][ T40] audit: type=1400 audit(1755193295.007:31517): avc: denied { read write } for pid=5975 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.178582][ T40] audit: type=1400 audit(1755193295.007:31518): avc: denied { open } for pid=5975 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.186153][ T40] audit: type=1400 audit(1755193295.007:31519): avc: denied { ioctl } for pid=5975 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.238921][T12631] netlink: 'syz.4.2292': attribute type 3 has an invalid length. [ 211.246693][ T40] audit: type=1400 audit(1755193295.087:31520): avc: denied { mount } for pid=12630 comm="syz.4.2292" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 211.249603][T12631] ptrace attach of "/syz-executor exec"[8032] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 211.253791][ T40] audit: type=1400 audit(1755193295.087:31521): avc: denied { remount } for pid=12630 comm="syz.4.2292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 211.293458][ T40] audit: type=1400 audit(1755193295.137:31522): avc: denied { unmount } for pid=8032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 211.393422][T12539] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 211.556732][ T5981] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 211.561990][T12657] FAULT_INJECTION: forcing a failure. [ 211.561990][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 211.566199][T12657] CPU: 0 UID: 0 PID: 12657 Comm: syz.1.2301 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 211.566215][T12657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.566222][T12657] Call Trace: [ 211.566226][T12657] [ 211.566231][T12657] dump_stack_lvl+0x16c/0x1f0 [ 211.566251][T12657] should_fail_ex+0x512/0x640 [ 211.566266][T12657] should_failslab+0xc2/0x120 [ 211.566280][T12657] __kmalloc_cache_noprof+0x6a/0x3e0 [ 211.566297][T12657] ? sctp_add_bind_addr+0xae/0x3f0 [ 211.566316][T12657] sctp_add_bind_addr+0xae/0x3f0 [ 211.566334][T12657] sctp_copy_local_addr_list+0x349/0x550 [ 211.566354][T12657] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 211.566374][T12657] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 211.566386][T12657] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.566401][T12657] sctp_bind_addr_copy+0xe0/0x530 [ 211.566421][T12657] sctp_connect_new_asoc+0x1c9/0x770 [ 211.566435][T12657] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.566453][T12657] sctp_sendmsg+0x1560/0x1e10 [ 211.566471][T12657] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.566486][T12657] ? __pfx_sock_has_perm+0x10/0x10 [ 211.566505][T12657] ? __import_iovec+0x1dd/0x650 [ 211.566522][T12657] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.566535][T12657] inet_sendmsg+0x11c/0x140 [ 211.566553][T12657] ____sys_sendmsg+0x973/0xc70 [ 211.566568][T12657] ? copy_msghdr_from_user+0x10a/0x160 [ 211.566579][T12657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.566596][T12657] ? __pfx__kstrtoull+0x10/0x10 [ 211.566630][T12657] ___sys_sendmsg+0x134/0x1d0 [ 211.566642][T12657] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.566661][T12657] ? find_held_lock+0x2b/0x80 [ 211.566685][T12657] __sys_sendmmsg+0x200/0x420 [ 211.566698][T12657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 211.566714][T12657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.566733][T12657] ? fput+0x9b/0xd0 [ 211.566748][T12657] ? ksys_write+0x1ac/0x250 [ 211.566759][T12657] ? __pfx_ksys_write+0x10/0x10 [ 211.566773][T12657] __x64_sys_sendmmsg+0x9c/0x100 [ 211.566809][T12657] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.566821][T12657] do_syscall_64+0xcd/0x4c0 [ 211.566834][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.566846][T12657] RIP: 0033:0x7fb2d6d8ebe9 [ 211.566855][T12657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.566867][T12657] RSP: 002b:00007fb2d7b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 211.566878][T12657] RAX: ffffffffffffffda RBX: 00007fb2d6fb5fa0 RCX: 00007fb2d6d8ebe9 [ 211.566885][T12657] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 211.566892][T12657] RBP: 00007fb2d7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 211.566899][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.566905][T12657] R13: 00007fb2d6fb6038 R14: 00007fb2d6fb5fa0 R15: 00007ffc68042608 [ 211.566920][T12657] [ 211.670993][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.739436][ T40] audit: type=1400 audit(1755193295.577:31523): avc: denied { accept } for pid=12660 comm="syz.1.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 211.947060][ T60] usb 7-1: USB disconnect, device number 15 [ 211.951257][ T60] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 211.988440][T12675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.097385][T12683] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.255110][T12698] netlink: zone id is out of range [ 212.256748][T12698] netlink: zone id is out of range [ 212.258364][T12698] netlink: zone id is out of range [ 212.260032][T12698] netlink: zone id is out of range [ 212.261707][T12698] netlink: zone id is out of range [ 212.263932][T12698] netlink: zone id is out of range [ 212.265712][T12698] netlink: zone id is out of range [ 212.267360][T12698] netlink: zone id is out of range [ 212.300200][T12702] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 212.322057][T12702] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 212.329497][T12702] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 212.329712][ T5981] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 212.540927][T12725] FAULT_INJECTION: forcing a failure. [ 212.540927][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 212.546117][T12725] CPU: 2 UID: 0 PID: 12725 Comm: syz.4.2324 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 212.546148][T12725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.546160][T12725] Call Trace: [ 212.546168][T12725] [ 212.546178][T12725] dump_stack_lvl+0x16c/0x1f0 [ 212.546207][T12725] should_fail_ex+0x512/0x640 [ 212.546229][T12725] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 212.546256][T12725] should_failslab+0xc2/0x120 [ 212.546276][T12725] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 212.546291][T12725] ? sock_diag_rcv_msg+0x438/0x790 [ 212.546321][T12725] ? netlink_rcv_skb+0x158/0x420 [ 212.546340][T12725] ? __alloc_skb+0x2b2/0x380 [ 212.546370][T12725] ? vfs_writev+0x35f/0xde0 [ 212.546392][T12725] __alloc_skb+0x2b2/0x380 [ 212.546424][T12725] ? __pfx___alloc_skb+0x10/0x10 [ 212.546466][T12725] netlink_dump+0x19b/0xd30 [ 212.546489][T12725] ? __pfx_netlink_dump+0x10/0x10 [ 212.546524][T12725] ? __inet_diag_dump_start+0x434/0x7f0 [ 212.546555][T12725] __netlink_dump_start+0x6d6/0x990 [ 212.546581][T12725] inet_diag_handler_cmd+0x282/0x2e0 [ 212.546611][T12725] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 212.546641][T12725] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 212.546669][T12725] ? __pfx_inet_diag_dump+0x10/0x10 [ 212.546695][T12725] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 212.546718][T12725] ? sock_diag_lock_handler+0x10f/0x2e0 [ 212.546751][T12725] sock_diag_rcv_msg+0x438/0x790 [ 212.546807][T12725] netlink_rcv_skb+0x158/0x420 [ 212.546826][T12725] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 212.546853][T12725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.546888][T12725] ? netlink_deliver_tap+0x1ae/0xd30 [ 212.546916][T12725] netlink_unicast+0x5a7/0x870 [ 212.546942][T12725] ? __pfx_netlink_unicast+0x10/0x10 [ 212.546967][T12725] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 212.546996][T12725] netlink_sendmsg+0x8d1/0xdd0 [ 212.547022][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.547052][T12725] sock_write_iter+0x4fc/0x5b0 [ 212.547079][T12725] ? __pfx_sock_write_iter+0x10/0x10 [ 212.547117][T12725] ? __pfx_file_has_perm+0x10/0x10 [ 212.547144][T12725] do_iter_readv_writev+0x662/0x9e0 [ 212.547176][T12725] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 212.547205][T12725] ? selinux_file_permission+0x126/0x660 [ 212.547237][T12725] ? bpf_lsm_file_permission+0x9/0x10 [ 212.547261][T12725] ? security_file_permission+0x71/0x210 [ 212.547290][T12725] ? rw_verify_area+0xcf/0x6c0 [ 212.547323][T12725] vfs_writev+0x35f/0xde0 [ 212.547346][T12725] ? __lock_acquire+0x62e/0x1ce0 [ 212.547377][T12725] ? __pfx_vfs_writev+0x10/0x10 [ 212.547397][T12725] ? find_held_lock+0x2b/0x80 [ 212.547437][T12725] ? __fget_files+0x20e/0x3c0 [ 212.547458][T12725] ? __fget_files+0x140/0x3c0 [ 212.547487][T12725] ? do_writev+0x28c/0x340 [ 212.547505][T12725] do_writev+0x28c/0x340 [ 212.547524][T12725] ? __pfx_do_writev+0x10/0x10 [ 212.547551][T12725] do_syscall_64+0xcd/0x4c0 [ 212.547574][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.547592][T12725] RIP: 0033:0x7f2a6cf8ebe9 [ 212.547607][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.547624][T12725] RSP: 002b:00007f2a6dd61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 212.547643][T12725] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8ebe9 [ 212.547655][T12725] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 212.547667][T12725] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 212.547678][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.547690][T12725] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 212.547714][T12725] [ 212.793400][T12740] netlink: 'syz.5.2330': attribute type 21 has an invalid length. [ 212.800527][ T9328] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.800538][T12740] netlink: 'syz.5.2330': attribute type 21 has an invalid length. [ 212.808293][ T9328] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.812127][ T9328] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.817645][ T9328] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.006076][T12752] __nla_validate_parse: 14 callbacks suppressed [ 213.006091][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2333'. [ 213.690583][T12775] netlink: 'syz.2.2343': attribute type 21 has an invalid length. [ 213.694273][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 213.698285][T12775] netlink: 'syz.2.2343': attribute type 21 has an invalid length. [ 213.701750][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 213.800155][T12801] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2346'. [ 213.859965][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 213.859977][ T40] audit: type=1400 audit(1755193297.697:31525): avc: denied { read } for pid=5364 comm="acpid" name="mouse2" dev="devtmpfs" ino=3258 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 213.869949][ T40] audit: type=1400 audit(1755193297.697:31526): avc: denied { open } for pid=5364 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3258 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 213.877230][ T40] audit: type=1400 audit(1755193297.697:31527): avc: denied { ioctl } for pid=5364 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3258 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 213.972446][T12827] SELinux: policydb version 16149 does not match my version range 15-35 [ 213.976243][T12827] SELinux: failed to load policy [ 214.369318][T12862] binder: 12861:12862 unknown command 0 [ 214.371171][T12862] binder: 12861:12862 ioctl c0306201 200000000080 returned -22 [ 214.428261][T12868] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2372'. [ 214.569890][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'. [ 214.709653][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 214.712576][T12902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2386'. [ 214.718448][T12902] geneve2: entered promiscuous mode [ 214.720119][T12902] geneve2: entered allmulticast mode [ 214.722632][ T9314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.725541][ T9314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.728315][ T9314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.731050][ T9314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.810787][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 215.309699][ T40] audit: type=1400 audit(1755193299.147:31528): avc: denied { listen } for pid=12923 comm="syz.4.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 215.464984][T12934] netlink: 'syz.1.2394': attribute type 142 has an invalid length. [ 215.465241][T12935] netlink: 'syz.1.2394': attribute type 142 has an invalid length. [ 215.482264][ T40] audit: type=1400 audit(1755193299.317:31529): avc: denied { execute } for pid=12936 comm="syz.5.2395" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.532859][T12941] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 215.875761][T12951] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2403'. [ 216.107374][ T40] audit: type=1400 audit(1755193299.947:31530): avc: denied { append } for pid=12974 comm="syz.2.2411" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.107789][T12975] loop6: detected capacity change from 0 to 524287999 [ 216.214260][T12982] tmpfs: Group quota block hardlimit too large. [ 216.217747][T12982] tmpfs: Group quota block hardlimit too large. [ 216.219544][T12979] tipc: Enabled bearer , priority 0 [ 216.224490][T12979] syzkaller0: entered promiscuous mode [ 216.227359][T12979] syzkaller0: entered allmulticast mode [ 216.245262][T12979] tipc: Resetting bearer [ 216.251383][T12978] tipc: Resetting bearer [ 216.266674][T12978] tipc: Disabling bearer [ 216.317473][T12990] netlink: 'syz.4.2417': attribute type 1 has an invalid length. [ 216.333264][ T7152] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 216.334833][T12990] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 216.339337][T12990] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 216.345216][ T40] audit: type=1400 audit(1755193300.187:31531): avc: denied { setopt } for pid=12992 comm="syz.2.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 216.355407][ T40] audit: type=1400 audit(1755193300.197:31532): avc: denied { getopt } for pid=12992 comm="syz.2.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 216.474603][T13000] macvlan0: entered promiscuous mode [ 216.476770][T13000] macvlan0: entered allmulticast mode [ 216.489610][ T7152] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.497407][ T7152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.501126][ T7152] usb 6-1: Product: syz [ 216.504562][ T7152] usb 6-1: Manufacturer: ꥮ斫êŒë‰¥ç±…ᤄå®â­¿î¨·è€®é…¨êœ§è¥Šì礳⚉碦렠ꩲ막뻒ㅴ뮗퓽扡檌੯ꀃ泊ã¨â€ˆï¸¯î•è¦ã½¨à¤¬ã”¾å«´êž¿Óî¼í¦ã•¼ã¿¿â¦ºêŽŽâ™Šé¹½âµºæŸ´ì¹‘궲ᚧ [ 216.512076][ T7152] usb 6-1: SerialNumber: syz [ 216.642050][T13006] batadv_slave_1: entered promiscuous mode [ 216.656967][T13006] batadv_slave_1: left allmulticast mode [ 216.863027][T13022] netlink: 'syz.5.2428': attribute type 1 has an invalid length. [ 216.870316][ T7152] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 216.875196][ T7152] usb 6-1: unit 5 not found! [ 216.888818][T13022] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 216.890081][ T7152] usb 6-1: USB disconnect, device number 38 [ 216.892693][T13022] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 217.061330][T13031] macvlan2: entered promiscuous mode [ 217.064109][T13031] macvlan2: entered allmulticast mode [ 217.652503][T13090] [U]  [ 217.759552][T13098] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 217.764689][T13098] cramfs: wrong magic [ 217.789736][ T40] audit: type=1400 audit(1755193301.627:31533): avc: denied { write } for pid=13089 comm="syz.5.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.853419][T13092] nbd1: detected capacity change from 0 to 7 [ 217.860528][ T5981] block nbd1: Receive control failed (result -32) [ 217.861945][ T8375] block nbd1: Send control failed (result -32) [ 217.868146][ T8375] block nbd1: Request send failed, requeueing [ 217.872689][ T8375] block nbd1: Dead connection, failed to find a fallback [ 217.878403][ T1188] blk_print_req_error: 10 callbacks suppressed [ 217.878414][ T8375] block nbd1: shutting down sockets [ 217.878415][ T1188] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.880672][ T8375] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.884031][ T1188] buffer_io_error: 19 callbacks suppressed [ 217.884045][ T1188] Buffer I/O error on dev nbd1, logical block 0, async page read [ 217.886685][ T8375] Buffer I/O error on dev nbd1, logical block 1, async page read [ 217.898557][ T8375] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.901509][ T8375] Buffer I/O error on dev nbd1, logical block 2, async page read [ 217.904095][ T8375] Buffer I/O error on dev nbd1, logical block 3, async page read [ 217.906600][ T8375] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.909619][ T8375] Buffer I/O error on dev nbd1, logical block 0, async page read [ 217.912558][ T8375] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.915844][ T8375] Buffer I/O error on dev nbd1, logical block 1, async page read [ 217.918659][ T8375] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.921643][ T8375] Buffer I/O error on dev nbd1, logical block 2, async page read [ 217.924394][ T8375] Buffer I/O error on dev nbd1, logical block 3, async page read [ 217.927388][ T8375] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.931418][ T8375] Buffer I/O error on dev nbd1, logical block 0, async page read [ 217.934799][ T8375] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.938000][ T8375] Buffer I/O error on dev nbd1, logical block 1, async page read [ 217.940680][ T8375] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.944400][ T8375] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.948307][ T8375] ldm_validate_partition_table(): Disk read failed. [ 217.952343][ T8375] Dev nbd1: unable to read RDB block 0 [ 217.955243][ T8375] nbd1: unable to read partition table [ 217.957106][ T8375] nbd1: partition table beyond EOD, truncated [ 217.962859][ T8375] ldm_validate_partition_table(): Disk read failed. [ 217.966153][ T8375] Dev nbd1: unable to read RDB block 0 [ 217.968524][ T8375] nbd1: unable to read partition table [ 217.970462][ T8375] nbd1: partition table beyond EOD, truncated [ 218.041355][T13103] __nla_validate_parse: 3 callbacks suppressed [ 218.041374][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2454'. [ 218.138677][T13109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 218.188693][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2455'. [ 218.239817][ T40] audit: type=1400 audit(1755193302.077:31534): avc: denied { getopt } for pid=13114 comm="syz.5.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.285536][T13119] netlink: 'syz.5.2458': attribute type 11 has an invalid length. [ 218.336379][T13121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2459'. [ 218.386710][T13127] QAT: Device 5 not found [ 218.392989][T13129] binder: 13128:13129 unknown command 0 [ 218.395874][T13129] binder: 13128:13129 ioctl c0306201 2000000004c0 returned -22 [ 218.451152][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 218.532464][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 218.536520][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 218.541810][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 218.545689][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 218.551610][T13136] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 218.556030][T13136] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 219.265737][T13150] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 219.290116][T13150] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 219.295771][T13150] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 219.455816][T13159] kvm: user requested TSC rate below hardware speed [ 219.520260][ T40] audit: type=1400 audit(1755193303.357:31535): avc: denied { name_bind } for pid=13163 comm="syz.4.2475" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 219.631506][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 219.636076][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2480'. [ 219.639046][T13174] netlink: 'syz.5.2480': attribute type 20 has an invalid length. [ 219.642226][T13174] netlink: 'syz.5.2480': attribute type 20 has an invalid length. [ 219.649457][T13175] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 219.676419][T13175] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 219.681856][T13175] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 219.770213][T13180] macvlan3: entered promiscuous mode [ 219.772476][T13180] macvlan3: entered allmulticast mode [ 219.925046][T13186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.954604][T13186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.193373][ T6055] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 220.357783][ T6055] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.371075][ T6055] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.376769][ T6055] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.379622][ T6055] usb 10-1: SerialNumber: syz [ 220.391089][T13200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.449796][T13201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.521925][ T5981] Bluetooth: hci3: unexpected event for opcode 0x204e [ 220.617001][T13208] netlink: 'syz.1.2490': attribute type 1 has an invalid length. [ 220.637567][T13208] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 220.641569][T13208] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 221.004099][ T6055] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 221.012958][T13228] sp0: Synchronizing with TNC [ 221.202777][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.213450][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.228631][ T8209] usb 10-1: USB disconnect, device number 8 [ 221.238042][ T8209] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 221.889000][T13260] netlink: 'syz.5.2499': attribute type 1 has an invalid length. [ 221.917606][T13260] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 221.922450][T13260] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 222.720186][T13289] netlink: 'syz.2.2517': attribute type 12 has an invalid length. [ 222.963971][ T40] audit: type=1400 audit(1755193306.807:31536): avc: denied { watch_sb } for pid=13306 comm="syz.2.2516" path="/597" dev="tmpfs" ino=3215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 223.037625][T13311] netlink: 'syz.4.2519': attribute type 4 has an invalid length. [ 223.055329][ T5981] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 223.164747][T13311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13311 comm=syz.4.2519 [ 223.236169][T13322] __nla_validate_parse: 6 callbacks suppressed [ 223.236182][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'. [ 223.283353][T13324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2522'. [ 223.359261][T13326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2522'. [ 223.632213][ T40] audit: type=1400 audit(1755193307.467:31537): avc: denied { write } for pid=13330 comm="syz.4.2524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 224.037853][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 224.100685][ T40] audit: type=1400 audit(1755193307.937:31538): avc: denied { map } for pid=13354 comm="syz.1.2534" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.110316][ T40] audit: type=1400 audit(1755193307.937:31539): avc: denied { execute } for pid=13354 comm="syz.1.2534" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.177060][T13363] program syz.1.2537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.179164][ T5984] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.184523][ T5984] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.196305][ T5984] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.208145][ T5984] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.212886][ T5984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.242235][T13365] lo speed is unknown, defaulting to 1000 [ 224.316658][T13377] vivid-003: disconnect [ 224.319471][T13376] vivid-003: reconnect [ 224.485975][T13365] chnl_net:caif_netlink_parms(): no params data found [ 224.551929][T13392] netlink: 'syz.4.2548': attribute type 10 has an invalid length. [ 224.554792][T13392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2548'. [ 224.566175][T13392] dummy0: entered promiscuous mode [ 224.569001][T13392] bridge0: port 3(dummy0) entered blocking state [ 224.571896][T13392] bridge0: port 3(dummy0) entered disabled state [ 224.575653][T13392] dummy0: entered allmulticast mode [ 224.580223][T13392] bridge0: port 3(dummy0) entered blocking state [ 224.582446][T13392] bridge0: port 3(dummy0) entered forwarding state [ 224.645704][T13389] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2547'. [ 224.646076][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.651892][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.658154][T13365] bridge_slave_0: entered allmulticast mode [ 224.662062][T13365] bridge_slave_0: entered promiscuous mode [ 224.671159][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.674634][ T8210] IPVS: starting estimator thread 0... [ 224.675002][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.679434][T13365] bridge_slave_1: entered allmulticast mode [ 224.684395][T13365] bridge_slave_1: entered promiscuous mode [ 224.738472][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.754539][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.777563][T13410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2554'. [ 224.784954][T13404] IPVS: using max 42 ests per chain, 100800 per kthread [ 224.791595][T13411] FAULT_INJECTION: forcing a failure. [ 224.791595][T13411] name failslab, interval 1, probability 0, space 0, times 0 [ 224.795412][T13365] team0: Port device team_slave_0 added [ 224.796839][T13411] CPU: 0 UID: 0 PID: 13411 Comm: syz.1.2553 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 224.796856][T13411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.796863][T13411] Call Trace: [ 224.796867][T13411] [ 224.796872][T13411] dump_stack_lvl+0x16c/0x1f0 [ 224.796888][T13411] should_fail_ex+0x512/0x640 [ 224.796901][T13411] ? fs_reclaim_acquire+0xae/0x150 [ 224.796918][T13411] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 224.796936][T13411] should_failslab+0xc2/0x120 [ 224.796949][T13411] __kmalloc_noprof+0xd2/0x510 [ 224.796964][T13411] tomoyo_realpath_from_path+0xc2/0x6e0 [ 224.796982][T13411] ? tomoyo_profile+0x47/0x60 [ 224.796994][T13411] tomoyo_path_number_perm+0x245/0x580 [ 224.797007][T13411] ? tomoyo_path_number_perm+0x237/0x580 [ 224.797022][T13411] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.797037][T13411] ? find_held_lock+0x2b/0x80 [ 224.797064][T13411] ? find_held_lock+0x2b/0x80 [ 224.797077][T13411] ? hook_file_ioctl_common+0x145/0x410 [ 224.797095][T13411] ? __fget_files+0x20e/0x3c0 [ 224.797114][T13411] security_file_ioctl+0x9b/0x240 [ 224.797131][T13411] __x64_sys_ioctl+0xb7/0x210 [ 224.797149][T13411] do_syscall_64+0xcd/0x4c0 [ 224.797163][T13411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.797174][T13411] RIP: 0033:0x7fb2d6d8ebe9 [ 224.797184][T13411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.797196][T13411] RSP: 002b:00007fb2d7b16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.797207][T13411] RAX: ffffffffffffffda RBX: 00007fb2d6fb5fa0 RCX: 00007fb2d6d8ebe9 [ 224.797215][T13411] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 224.797221][T13411] RBP: 00007fb2d7b16090 R08: 0000000000000000 R09: 0000000000000000 [ 224.797228][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.797234][T13411] R13: 00007fb2d6fb6038 R14: 00007fb2d6fb5fa0 R15: 00007ffc68042608 [ 224.797249][T13411] [ 224.797253][T13411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.799853][T13365] team0: Port device team_slave_1 added [ 224.895297][T13419] Trying to write to read-only block-device nullb0 [ 224.907317][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.909548][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.918609][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.924227][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.926631][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.935182][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.994460][T13365] hsr_slave_0: entered promiscuous mode [ 224.996974][T13365] hsr_slave_1: entered promiscuous mode [ 224.999235][T13365] debugfs: 'hsr0' already exists in 'hsr' [ 225.001023][T13365] Cannot create hsr debugfs directory [ 225.055833][T13433] FAULT_INJECTION: forcing a failure. [ 225.055833][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 225.059802][T13433] CPU: 2 UID: 0 PID: 13433 Comm: syz.4.2562 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 225.059818][T13433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.059825][T13433] Call Trace: [ 225.059830][T13433] [ 225.059834][T13433] dump_stack_lvl+0x16c/0x1f0 [ 225.059854][T13433] should_fail_ex+0x512/0x640 [ 225.059870][T13433] should_failslab+0xc2/0x120 [ 225.059884][T13433] __kmalloc_cache_noprof+0x6a/0x3e0 [ 225.059902][T13433] ? sctp_add_bind_addr+0xae/0x3f0 [ 225.059921][T13433] sctp_add_bind_addr+0xae/0x3f0 [ 225.059938][T13433] sctp_copy_local_addr_list+0x349/0x550 [ 225.059958][T13433] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 225.059978][T13433] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 225.059991][T13433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.060006][T13433] sctp_bind_addr_copy+0xe0/0x530 [ 225.060025][T13433] sctp_connect_new_asoc+0x1c9/0x770 [ 225.060039][T13433] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 225.060058][T13433] sctp_sendmsg+0x1560/0x1e10 [ 225.060075][T13433] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.060091][T13433] ? __pfx_sock_has_perm+0x10/0x10 [ 225.060111][T13433] ? __import_iovec+0x1dd/0x650 [ 225.060127][T13433] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.060141][T13433] inet_sendmsg+0x11c/0x140 [ 225.060158][T13433] ____sys_sendmsg+0x973/0xc70 [ 225.060174][T13433] ? copy_msghdr_from_user+0x10a/0x160 [ 225.060185][T13433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.060202][T13433] ? __pfx__kstrtoull+0x10/0x10 [ 225.060222][T13433] ___sys_sendmsg+0x134/0x1d0 [ 225.060234][T13433] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.060252][T13433] ? find_held_lock+0x2b/0x80 [ 225.060275][T13433] __sys_sendmmsg+0x200/0x420 [ 225.060288][T13433] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.060304][T13433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.060323][T13433] ? fput+0x9b/0xd0 [ 225.060338][T13433] ? ksys_write+0x1ac/0x250 [ 225.060349][T13433] ? __pfx_ksys_write+0x10/0x10 [ 225.060362][T13433] __x64_sys_sendmmsg+0x9c/0x100 [ 225.060373][T13433] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.060384][T13433] do_syscall_64+0xcd/0x4c0 [ 225.060397][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.060409][T13433] RIP: 0033:0x7f2a6cf8ebe9 [ 225.060418][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.060429][T13433] RSP: 002b:00007f2a6dd61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.060440][T13433] RAX: ffffffffffffffda RBX: 00007f2a6d1b5fa0 RCX: 00007f2a6cf8ebe9 [ 225.060447][T13433] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 225.060453][T13433] RBP: 00007f2a6dd61090 R08: 0000000000000000 R09: 0000000000000000 [ 225.060460][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.060467][T13433] R13: 00007f2a6d1b6038 R14: 00007f2a6d1b5fa0 R15: 00007ffdd86c8ef8 [ 225.060481][T13433] [ 225.200717][T13365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.266844][T13365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.324563][T13365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.392532][T13365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.533322][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 225.558979][T13365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.564534][T13365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.570369][T13365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.580054][T13365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.627298][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.654176][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.666969][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.669294][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.675583][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.677870][ T9328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.697391][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.701356][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.704868][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 225.707751][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.720961][ T10] usb 9-1: config 0 descriptor?? [ 225.752769][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.779046][T13365] veth0_vlan: entered promiscuous mode [ 225.783955][T13365] veth1_vlan: entered promiscuous mode [ 225.802516][T13365] veth0_macvtap: entered promiscuous mode [ 225.807454][T13365] veth1_macvtap: entered promiscuous mode [ 225.815800][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.822975][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.830573][ T9314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.833709][ T9316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.837726][ T9316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.840909][ T9316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.876392][ T9327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.878966][ T9327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.894913][ T9316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.897408][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.927578][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 225.929655][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 225.935175][ T10] usb 9-1: USB disconnect, device number 16 [ 226.034881][T13466] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 226.150068][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 226.168392][T13469] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.265880][ T5984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.274368][ T5970] Bluetooth: hci4: command tx timeout [ 226.289626][ T5984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.293633][ T5984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.297032][ T5984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.299770][ T5984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.307625][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2574'. [ 226.311897][T13476] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 226.315585][T13476] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (255) [ 226.328637][T13471] lo speed is unknown, defaulting to 1000 [ 226.502185][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805cce0c00: rx timeout, send abort [ 226.505285][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804b048000: rx timeout, send abort [ 226.508511][T13471] chnl_net:caif_netlink_parms(): no params data found [ 226.508878][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cce0c00: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 226.508910][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b048000: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 226.550972][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'. [ 226.577794][T13485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.613024][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.615480][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.617741][T13471] bridge_slave_0: entered allmulticast mode [ 226.620415][T13471] bridge_slave_0: entered promiscuous mode [ 226.636404][T13489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.639508][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.641781][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.645291][T13471] bridge_slave_1: entered allmulticast mode [ 226.648000][T13471] bridge_slave_1: entered promiscuous mode [ 226.684761][T13471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.692164][T13471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.705822][T13496] ufs: You didn't specify the type of your ufs filesystem [ 226.705822][T13496] [ 226.705822][T13496] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 226.705822][T13496] [ 226.705822][T13496] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 226.717130][T13496] ufs: ufstype=old is supported read-only [ 226.721807][T13496] syz.5.2578: attempt to access beyond end of device [ 226.721807][T13496] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 226.751569][T13471] team0: Port device team_slave_0 added [ 226.767137][T13471] team0: Port device team_slave_1 added [ 226.801923][T13471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.805248][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.813738][T13471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.818790][T13471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.821231][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.831464][T13471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.885707][T13471] hsr_slave_0: entered promiscuous mode [ 226.888767][T13471] hsr_slave_1: entered promiscuous mode [ 226.891312][T13471] debugfs: 'hsr0' already exists in 'hsr' [ 226.893748][T13471] Cannot create hsr debugfs directory [ 227.010054][T13471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.014231][T13471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.183019][T13520] net_ratelimit: 4 callbacks suppressed [ 227.183026][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.200463][T13523] FAULT_INJECTION: forcing a failure. [ 227.200463][T13523] name failslab, interval 1, probability 0, space 0, times 0 [ 227.205130][T13523] CPU: 2 UID: 0 PID: 13523 Comm: syz.5.2587 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 227.205146][T13523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.205153][T13523] Call Trace: [ 227.205158][T13523] [ 227.205163][T13523] dump_stack_lvl+0x16c/0x1f0 [ 227.205178][T13523] should_fail_ex+0x512/0x640 [ 227.205191][T13523] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 227.205205][T13523] should_failslab+0xc2/0x120 [ 227.205219][T13523] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 227.205231][T13523] ? __alloc_skb+0x2b2/0x380 [ 227.205252][T13523] __alloc_skb+0x2b2/0x380 [ 227.205269][T13523] ? __pfx___alloc_skb+0x10/0x10 [ 227.205289][T13523] ? avc_has_perm+0x144/0x1f0 [ 227.205302][T13523] alloc_skb_with_frags+0xe0/0x860 [ 227.205319][T13523] sock_alloc_send_pskb+0x7fb/0x990 [ 227.205337][T13523] ? avc_has_perm_noaudit+0x149/0x3b0 [ 227.205351][T13523] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 227.205368][T13523] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 227.205383][T13523] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 227.205403][T13523] unix_dgram_sendmsg+0x3e9/0x17f0 [ 227.205419][T13523] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 227.205438][T13523] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 227.205458][T13523] ____sys_sendmsg+0xa98/0xc70 [ 227.205473][T13523] ? copy_msghdr_from_user+0x10a/0x160 [ 227.205484][T13523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.205500][T13523] ? kfree+0x24f/0x4d0 [ 227.205520][T13523] ___sys_sendmsg+0x134/0x1d0 [ 227.205531][T13523] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.205554][T13523] ? __pfx___might_resched+0x10/0x10 [ 227.205572][T13523] __sys_sendmmsg+0x200/0x420 [ 227.205584][T13523] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.205600][T13523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.205618][T13523] ? fput+0x9b/0xd0 [ 227.205634][T13523] ? ksys_write+0x1ac/0x250 [ 227.205645][T13523] ? __pfx_ksys_write+0x10/0x10 [ 227.205658][T13523] __x64_sys_sendmmsg+0x9c/0x100 [ 227.205669][T13523] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.205680][T13523] do_syscall_64+0xcd/0x4c0 [ 227.205693][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.205705][T13523] RIP: 0033:0x7f3b80b8ebe9 [ 227.205714][T13523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.205725][T13523] RSP: 002b:00007f3b8199d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.205736][T13523] RAX: ffffffffffffffda RBX: 00007f3b80db5fa0 RCX: 00007f3b80b8ebe9 [ 227.205743][T13523] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 227.205750][T13523] RBP: 00007f3b8199d090 R08: 0000000000000000 R09: 0000000000000000 [ 227.205757][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.205764][T13523] R13: 00007f3b80db6038 R14: 00007f3b80db5fa0 R15: 00007fff51ce0738 [ 227.205778][T13523] [ 227.343958][T13471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.347735][T13471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.452429][T13471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.457528][T13471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.554231][T13471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.557935][T13471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.657241][T13545] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 227.681566][T13545] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 227.686190][T13545] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 227.759214][T13471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.769857][T13471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.788744][T13471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.799281][T13471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.841648][T13560] tipc: Started in network mode [ 227.847906][T13560] tipc: Node identity , cluster identity 4711 [ 227.850052][T13560] tipc: Failed to obtain node identity [ 227.851850][T13560] tipc: Enabling of bearer rejected, failed to enable media [ 227.898590][T13471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.911038][T13471] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.917742][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.920851][ T9313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.934094][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.937341][ T9328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.101294][T13471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.124417][T13582] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 228.177337][T13578] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 228.181211][T13578] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 228.200318][T13471] veth0_vlan: entered promiscuous mode [ 228.206649][T13471] veth1_vlan: entered promiscuous mode [ 228.227732][T13471] veth0_macvtap: entered promiscuous mode [ 228.232926][T13471] veth1_macvtap: entered promiscuous mode [ 228.247309][T13471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.258458][T13471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.268164][ T9313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.274046][ T9313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.279720][T13589] __nla_validate_parse: 7 callbacks suppressed [ 228.279730][T13589] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2607'. [ 228.280199][ T9313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.289454][ T9313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.349821][ T9313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.353746][ T5984] Bluetooth: hci2: command tx timeout [ 228.356207][ T9313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.364464][ T5984] Bluetooth: hci4: command tx timeout [ 228.374529][ T9336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.377239][ T9336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.377297][T13597] lo: entered allmulticast mode [ 228.383009][T13597] tunl0: entered allmulticast mode [ 228.388107][T13597] gre0: entered allmulticast mode [ 228.394318][T13597] gretap0: entered allmulticast mode [ 228.399912][T13597] erspan0: entered allmulticast mode [ 228.405137][T13597] ip_vti0: entered allmulticast mode [ 228.409006][T13597] ip6_vti0: entered allmulticast mode [ 228.414324][T13597] sit0: entered allmulticast mode [ 228.420398][T13597] ip6tnl0: entered allmulticast mode [ 228.424131][T13597] ip6gre0: entered allmulticast mode [ 228.428288][T13597] syz_tun: entered allmulticast mode [ 228.432379][T13597] ip6gretap0: entered allmulticast mode [ 228.436386][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.438907][T13597] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.441893][T13597] bridge0: entered allmulticast mode [ 228.445870][T13597] vcan0: entered allmulticast mode [ 228.451359][T13597] bond0: entered allmulticast mode [ 228.453121][T13597] bond_slave_0: entered allmulticast mode [ 228.455007][T13597] bond_slave_1: entered allmulticast mode [ 228.459014][T13597] team0: entered allmulticast mode [ 228.460877][T13597] team_slave_0: entered allmulticast mode [ 228.462811][T13597] team_slave_1: entered allmulticast mode [ 228.466791][T13597] dummy0: entered allmulticast mode [ 228.470762][T13597] nlmon0: entered allmulticast mode [ 228.474771][T13597] caif0: entered allmulticast mode [ 228.477166][T13597] batadv0: entered allmulticast mode [ 228.481730][T13597] vxcan0: entered allmulticast mode [ 228.485323][T13597] vxcan1: entered allmulticast mode [ 228.489333][T13597] veth0: entered allmulticast mode [ 228.494831][T13597] veth1: entered allmulticast mode [ 228.499267][T13597] wg0: entered allmulticast mode [ 228.502894][T13597] wg1: entered allmulticast mode [ 228.508106][T13597] wg2: entered allmulticast mode [ 228.512684][T13597] veth0_to_bridge: entered allmulticast mode [ 228.521421][T13597] veth1_to_bridge: entered allmulticast mode [ 228.532081][T13597] veth0_to_bond: entered allmulticast mode [ 228.539249][T13597] veth1_to_bond: entered allmulticast mode [ 228.547694][T13597] veth0_to_team: entered allmulticast mode [ 228.556380][T13597] veth1_to_team: entered allmulticast mode [ 228.564334][T13597] veth0_to_batadv: entered allmulticast mode [ 228.568924][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.572903][T13597] batadv_slave_0: entered allmulticast mode [ 228.577837][T13597] veth1_to_batadv: entered allmulticast mode [ 228.582029][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.585817][T13597] batadv_slave_1: entered allmulticast mode [ 228.590615][T13597] xfrm0: entered allmulticast mode [ 228.595009][T13597] veth0_to_hsr: entered allmulticast mode [ 228.598545][T13597] hsr_slave_0: entered allmulticast mode [ 228.603242][T13597] veth1_to_hsr: entered allmulticast mode [ 228.606683][T13597] hsr_slave_1: entered allmulticast mode [ 228.612617][T13597] hsr0: entered allmulticast mode [ 228.617312][T13597] veth1_virt_wifi: entered allmulticast mode [ 228.622587][T13597] veth0_virt_wifi: entered allmulticast mode [ 228.625901][T13597] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 228.629591][T13597] veth1_vlan: entered allmulticast mode [ 228.634264][T13597] veth0_vlan: entered allmulticast mode [ 228.642271][T13597] vlan0: entered allmulticast mode [ 228.643995][T13597] vlan1: entered allmulticast mode [ 228.646031][T13597] macvlan0: entered allmulticast mode [ 228.649417][T13597] macvlan1: entered allmulticast mode [ 228.652510][T13597] ipvlan0: entered allmulticast mode [ 228.654347][T13597] ipvlan1: entered allmulticast mode [ 228.657500][T13597] veth1_macvtap: entered allmulticast mode [ 228.662056][T13597] veth0_macvtap: entered allmulticast mode [ 228.666318][T13597] macvtap0: entered allmulticast mode [ 228.669699][T13597] macsec0: entered allmulticast mode [ 228.673597][T13597] geneve0: entered allmulticast mode [ 228.678513][T13597] geneve1: entered allmulticast mode [ 228.682241][T13597] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 228.687693][T13597] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 228.691766][T13597] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 228.698205][T13597] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 228.705163][T13597] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 228.714795][T13597] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 228.720637][ T9318] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.723629][ T9318] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.731132][ T9318] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.735354][ T9318] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.812130][T13609] netlink: 'syz.4.2614': attribute type 1 has an invalid length. [ 228.832612][T13613] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 228.839533][T13609] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 228.843607][T13609] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 228.930174][T13618] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 229.095851][T13628] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2623'. [ 229.450705][T13649] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 229.475864][T13649] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 229.480204][T13649] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 229.514775][T13653] comedi comedi2: dt2814: a I/O base address must be specified [ 229.582474][T13655] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2631'. [ 229.683043][T13661] netlink: 'syz.2.2634': attribute type 11 has an invalid length. [ 229.802814][T13672] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2638'. [ 229.805992][T13672] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2638'. [ 229.897901][T13677] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 230.502436][T13693] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.577817][ T5984] Bluetooth: hci4: command tx timeout [ 230.577935][ T5981] Bluetooth: hci2: command tx timeout [ 230.656370][T13700] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 230.757012][ T40] audit: type=1326 audit(1755193314.433:31540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.5.2594" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b80b8ebe9 code=0x7fc00000 [ 230.843191][T13715] ------------[ cut here ]------------ [ 230.844513][ T40] audit: type=1400 audit(1755193314.517:31541): avc: denied { setopt } for pid=13714 comm="syz.1.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 230.847596][T13715] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 230.857882][T13715] shift exponent 8207 is too large for 32-bit type 'int' [ 230.860906][T13715] CPU: 2 UID: 0 PID: 13715 Comm: syz.5.2654 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.860923][T13715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.860931][T13715] Call Trace: [ 230.860935][T13715] [ 230.860940][T13715] dump_stack_lvl+0x16c/0x1f0 [ 230.860956][T13715] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 230.860981][T13715] pcl726_attach.cold+0x19/0x1e [ 230.860999][T13715] comedi_device_attach+0x3b3/0x900 [ 230.861017][T13715] do_devconfig_ioctl+0x1b1/0x710 [ 230.861031][T13715] ? __mutex_lock+0x1c4/0x10b0 [ 230.861052][T13715] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 230.861076][T13715] ? find_held_lock+0x2b/0x80 [ 230.861093][T13715] comedi_unlocked_ioctl+0x165d/0x2f00 [ 230.861114][T13715] ? futex_wake+0x1ad/0x530 [ 230.861126][T13715] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 230.861146][T13715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.861160][T13715] ? do_vfs_ioctl+0x128/0x14f0 [ 230.861178][T13715] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.861196][T13715] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.861217][T13715] ? hook_file_ioctl_common+0x145/0x410 [ 230.861233][T13715] ? selinux_file_ioctl+0x180/0x270 [ 230.861248][T13715] ? selinux_file_ioctl+0xb4/0x270 [ 230.861264][T13715] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 230.861282][T13715] __x64_sys_ioctl+0x18b/0x210 [ 230.861300][T13715] do_syscall_64+0xcd/0x4c0 [ 230.861313][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.861325][T13715] RIP: 0033:0x7f3b80b8ebe9 [ 230.861338][T13715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.861349][T13715] RSP: 002b:00007f3b8199d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.861361][T13715] RAX: ffffffffffffffda RBX: 00007f3b80db5fa0 RCX: 00007f3b80b8ebe9 [ 230.861368][T13715] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 230.861376][T13715] RBP: 00007f3b80c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 230.861382][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.861389][T13715] R13: 00007f3b80db6038 R14: 00007f3b80db5fa0 R15: 00007fff51ce0738 [ 230.861403][T13715] [ 230.861407][T13715] ---[ end trace ]--- [ 230.944525][T13715] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 230.946856][T13715] CPU: 2 UID: 0 PID: 13715 Comm: syz.5.2654 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 230.950726][T13715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.954115][T13715] Call Trace: [ 230.955179][T13715] [ 230.956110][T13715] dump_stack_lvl+0x3d/0x1f0 [ 230.957557][T13715] vpanic+0x6e8/0x7a0 [ 230.958875][T13715] ? __pfx_vpanic+0x10/0x10 [ 230.960295][T13715] ? __pfx_vprintk_emit+0x10/0x10 [ 230.961931][T13715] panic+0xca/0xd0 [ 230.963110][T13715] ? __pfx_panic+0x10/0x10 [ 230.964506][T13715] ? check_panic_on_warn+0x1f/0xb0 [ 230.966109][T13715] check_panic_on_warn+0xab/0xb0 [ 230.967664][T13715] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 230.969735][T13715] pcl726_attach.cold+0x19/0x1e [ 230.971338][T13715] comedi_device_attach+0x3b3/0x900 [ 230.972975][T13715] do_devconfig_ioctl+0x1b1/0x710 [ 230.974550][T13715] ? __mutex_lock+0x1c4/0x10b0 [ 230.976055][T13715] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 230.977784][T13715] ? find_held_lock+0x2b/0x80 [ 230.979297][T13715] comedi_unlocked_ioctl+0x165d/0x2f00 [ 230.981050][T13715] ? futex_wake+0x1ad/0x530 [ 230.982505][T13715] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 230.984328][T13715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.986175][T13715] ? do_vfs_ioctl+0x128/0x14f0 [ 230.987682][T13715] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.989287][T13715] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.991668][T13715] ? hook_file_ioctl_common+0x145/0x410 [ 230.993408][T13715] ? selinux_file_ioctl+0x180/0x270 [ 230.994986][T13715] ? selinux_file_ioctl+0xb4/0x270 [ 230.996589][T13715] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 230.998388][T13715] __x64_sys_ioctl+0x18b/0x210 [ 230.999938][T13715] do_syscall_64+0xcd/0x4c0 [ 231.001346][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.003148][T13715] RIP: 0033:0x7f3b80b8ebe9 [ 231.004541][T13715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.010404][T13715] RSP: 002b:00007f3b8199d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.013312][T13715] RAX: ffffffffffffffda RBX: 00007f3b80db5fa0 RCX: 00007f3b80b8ebe9 [ 231.015837][T13715] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 231.018350][T13715] RBP: 00007f3b80c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 231.020950][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.023499][T13715] R13: 00007f3b80db6038 R14: 00007f3b80db5fa0 R15: 00007fff51ce0738 [ 231.026020][T13715] [ 231.027542][T13715] Kernel Offset: disabled [ 231.028971][T13715] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:41:54 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90005978001 RBX=ffffc90005977bb8 RCX=ffffc90005978001 RDX=ffffc90005977bc0 RSI=ffffc90005977b88 RDI=ffffc90005977788 RBP=0000000000000001 RSP=ffffc90005977700 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=000000000003ea9f R12=ffffc900059777c8 R13=ffffc90005977778 R14=ffffc90005977bb8 R15=ffffc900059777ac RIP=ffffffff8b935160 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000154c0 CR3=00000000651ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1f4355f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1f435776 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1f435776 00007ffc1f43577c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3735412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3735412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3735412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3735412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3735412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3735412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff914e73f1 RBX=0000000000000001 RCX=ffffffff914e73ee RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff914e73f0 RBP=ffffc900035df8b0 RSP=ffffc900035df7f8 R8 =1ffffffff229ce7e R9 =0000000000000000 R10=0000000000000001 R11=0000000000011754 R12=ffffc900035df8b8 R13=ffffc900035df868 R14=ffffc900035dfc58 R15=ffffc900035df89c RIP=ffffffff816afa24 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557ea61500 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb188ce7d60 CR3=000000004e98d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7bccf430 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7bccf5b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7bccf5b6 00007ffd7bccf5bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bc1212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bc1212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bc1212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bc1212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bc1212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bc1212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85640d15 RDI=ffffffff9b10dfa0 RBP=ffffffff9b10df60 RSP=ffffc90003a1f490 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b10df60 R15=ffffffff85640cb0 RIP=ffffffff85640d3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3b8199d6c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31663fff CR3=000000004c26d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51ce0c46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51ce0c46 00007fff51ce0c4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80d874a8 00007f3b80d874a0 00007f3b80d87498 00007f3b80d87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b818ed100 00007f3b80d87460 00007f3b80d87478 00007f3b80d874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80d874b8 00007f3b80d874b0 00007f3b80d874a8 00007f3b80d874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001e72ef RBX=0000000000000003 RCX=ffffffff8b935c29 RDX=0000000000000000 RSI=ffffffff8de4f22d RDI=ffffffff8c162500 RBP=ffffed1003c57000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2b8000 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b93478f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1bc20cbf98 CR3=000000003388a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51ce0ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51ce0c46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51ce0c46 00007fff51ce0c4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b80c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000