last executing test programs: 44.300645577s ago: executing program 2 (id=18): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) r4 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r5, 0xfffff000, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x3}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x3, 0x0}, 0x8) (async) r8 = socket(0x1e, 0x5, 0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r8, 0xffffffffffffffff, 0x3, 0x20, 0x0, @void, @void, @void, @value=r7}, 0x20) setrlimit(0x8, &(0x7f0000000380)) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10) (async, rerun: 64) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000ff000040"]) (async, rerun: 64) ioctl$RTC_UIE_ON(r0, 0x7003) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe}]}}}]}, 0x38}}, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 44.161862885s ago: executing program 2 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000080)="f00fb326c26266b9200000400f3266b9b500004066b86000000066ba000000000f3066b8010000000f01c1673e660f3839700b660ff3d7ba420066ed6567f4f3360f350f01d1", 0x46}], 0x1, 0x64, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 23) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 43.960234468s ago: executing program 2 (id=22): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000e618010040"]) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_init_net_socket$ax25(0x3, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x48380, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=ANY=[@ANYBLOB="e0000000150021"], 0xe0}], 0x1, 0x0, 0x0, 0x41}, 0x4000800) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x1}}]}, {0xf}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffe7}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 43.692025967s ago: executing program 2 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 43.690998044s ago: executing program 2 (id=24): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x2, 0x7, 0xdd3, 0x34325258, [0x5, 0x400], [0x2, 0x7], 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x6, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x3, 0x10001, 0x64, 0x5, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x4, 0x6, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@bcast, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 43.501052388s ago: executing program 2 (id=26): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 28.141722189s ago: executing program 32 (id=26): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 10.251069793s ago: executing program 4 (id=376): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x453, 0x100, 0x70bd27, 0x25dfdbfb, "b3ed9d5929d3705bb9ab69f665364ac0a9c0e31d0ab8013860f2c6b0265c5e81c5de6b402fbae931875b811978b645886453a22bec9456fbb61e99eb540f44e51ebb847b32ed3c49a488172986cfd90476cfc7476d1872f72f759d0f82c2dfb61822d02963d35066eb05703651883792dfd98b271f98446b20551b65", [""]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008880) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FITHAW(r3, 0xc0045878) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000240)=0x2c) writev(r2, &(0x7f00000015c0)=[{&(0x7f0000000280)="8b199b1ca7780dca243656111461e712d799344111ad66e030b8b92e31d75f16e04fc5337f96dd8a0b153b341ace7220443bf67fd00ee81f5dc0780562d0183702ca321f4c9f21ea3e0aa622580490c2a74ef3d9", 0x54}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="73ec839d183d1726c4452ea303e510f7b25ed6611342c8485e70e178a5db24f545e9f5704acbab61a4b47a0be9e6b269c070577f1752", 0x36}, {&(0x7f0000001340)="e9b6d5c3c462086402b2f5f8e89fabcab924c21ea23a46d179909b6ae3b3f194f64d37bf3ae5ccccbcb6c7f2ad10771d128536171fb7667a0ecc4ba5b6df272c4ceabbd4f6a96c75f718a79bd06e131f11c4d489", 0x54}, {&(0x7f00000013c0)="40140fb94a521b18c0d3a5a4a444211d48670f1fa92514ff3eb79b5f3b8318155e5ee2651244fb69e1241e170227246b7859b229285614c43a4f03bfc54b24a145948c2a636ff3a8c6954bc2637c3c0c7e83a4dd7ac2446095466ef265955605ffe73629f25333880a86ad0b4bec1d0734ec95b23a77e58602d1518d43613d1e0ae087d31981d0fc1b2b1d541a993c971e1852f70c43ce541c7bbe95712019453749b8218f08c8b11116a2061be9ac983947611b4dbeaaa8899a3982facc8ac2201b92b91681a9f4f8", 0xc9}, {&(0x7f00000014c0)="a9a3b6ef4ed995b70cee6dd8b469c87f9e247c63e34d33fd93fee6f0f8a09af969554694f50854d03a6862abaeb69caf1b43c56a7aebc01aad78c8a385ecbe7d8b716da54af312dff0c8fc473cd2f13f5663ae9c1f7cdc946c079df446e73a019a49fa40f361c7eb0759e74868fc2ef8d25a0de5dc77e833c67d55a15f9cafc8f0cd2362e5eeaee78c144f8b179fc808f101c2562632886969cf61afa720970251e55bd6986ad43b8544d33d7d05763e9a49ef94cdab3bf5ec06c9d9bdf5beecb86fc75368f88f42eb", 0xc9}], 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000001640), &(0x7f0000001680)=0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000016c0), 0x140) prctl$PR_GET_NO_NEW_PRIVS(0x27) socket$igmp(0x2, 0x3, 0x2) connect$rds(r2, &(0x7f0000001700)={0x2, 0x4e22, @remote}, 0x10) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000001780)={0x9, 0x1848, 0x1}) readv(r3, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/27, 0x1b}, {&(0x7f0000001800)=""/4, 0x4}, {&(0x7f0000001840)=""/108, 0x6c}, {&(0x7f00000018c0)=""/103, 0x67}, {&(0x7f0000001940)=""/100, 0x64}, {&(0x7f00000019c0)=""/115, 0x73}, {&(0x7f0000001a40)=""/41, 0x29}, {&(0x7f0000001a80)=""/225, 0xe1}], 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001c00)={0x2, 'geneve0\x00', {0x4}, 0x5}) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000001c40)=0x164) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000001c80)={'syzkaller1\x00'}) prctl$PR_GET_NO_NEW_PRIVS(0x27) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000001cc0)={0x68d2, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001d80)={'batadv_slave_1\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001e00)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000001dc0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000001e40), r7) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r7) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'batadv_slave_1\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '*$'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x40400d1) 9.411296292s ago: executing program 4 (id=385): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008885}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/156, &(0x7f0000000100)=0x9c) 9.410653622s ago: executing program 4 (id=387): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) setsockopt(0xffffffffffffffff, 0x9, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0x2}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) 9.330505139s ago: executing program 4 (id=389): syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2b, 0x2}, {0xfe6b}}}}, 0xf) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000a00)=0x40000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1ffffff, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x6, 0x200], 0x0, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$FUSE(r7, &(0x7f0000001400)={0x2020}, 0x2020) r8 = socket(0xa, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) 9.17189656s ago: executing program 4 (id=394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x1}, {0x2}, 0x0, 0x6e6bbe, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 5.671825053s ago: executing program 3 (id=433): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffff7b, 0x27}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') write$nbd(r5, 0x0, 0x0) listen(r4, 0x1ad72f7) listen(r4, 0xda90) socket(0x1d, 0x2, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r6 = socket(0x3a, 0x5, 0xfffffffe) write(r6, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 5.461540238s ago: executing program 3 (id=434): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x401) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000380)=0x1) 4.600678103s ago: executing program 3 (id=439): r0 = io_uring_setup(0x6ecc, &(0x7f0000000140)={0x0, 0xae60, 0x400, 0x20002, 0x10a}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000100)="c4e189f4adfeefffffc441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000001440)=[{&(0x7f0000000940)="03000000000201", 0x7}], 0x1) 4.531592083s ago: executing program 3 (id=440): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="969e6e02000000040803000000000000000000050000060500030001000000060002403ff90000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdfe9ccc65fe5abba250300000008003c000800000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x4004) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b44, 0x10000000000004) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f0000001a40)=[{&(0x7f0000000880)="9c", 0x1}], 0x1, 0xd) ioctl$sock_SIOCINQ(r9, 0x541b, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000140)="f30fc7b701000f01caba4200b0b8ee66b9c40a00000f32ea3200140136660f3a0a51fcb76766c7442400ca118a086766c74424027cb2572e6766c744240600000000670f011c242e2e0f01c30f2253670f32", 0x52}], 0x1, 0x41, &(0x7f0000000200), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) syz_usbip_server_init(0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000002440)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r11, r11) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000002540)={'trans=virtio,', {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '@:('}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, 'uid<'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@uid_lt={'uid<', r10}}, {@uid_gt={'uid>', r11}}]}}) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r12, &(0x7f0000000400)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="d514c4e17a111866b872008ec8650fc7288fe9b89b18f36d66b8ec008ee86567660f383c50f166b881000f00d00f013e", 0x30}], 0x1, 0x6, &(0x7f0000000340)=[@cstype0], 0x1) 4.025391201s ago: executing program 4 (id=394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x1}, {0x2}, 0x0, 0x6e6bbe, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 3.841538001s ago: executing program 3 (id=460): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r5, &(0x7f0000000300)) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="70c5c368d055486cbe6a7bbd0188c75aa2b2760938d89675cbeaaf57af89766c29968a7e059f4dbfb02d9e7b24d83bf296bc1ebc38e4c0d1c06f1312c7a3d8eb0f7fae26115b4d843e5b9c66a389e4e774420ebfb6046bb235c1dd89e94f77c3331c2b51977093231de757f5fb1ac2bb6f068115dc74b94dd687b4cfaf30de41bc6be6896127f9c8b7d1a2d2d458fa996a564838d6e36a9c4f092915", @ANYRES64=0x0, @ANYRESOCT=r4, @ANYBLOB="7f240b6c9fe6e2a677e172aa749386b65169861a33a45c479385d11d8b354ce9af02927b2c02bab188c4249d1a01468b3cecd5d74c69c0be2da296cae3934743315348777f824ff6184ff396979c52c12b044ae765b9f8e5a8f3af338ac18a92ef9f08f1c039ee629aac95de58323c124544044e495248e7b956ff571c6f7f93", @ANYRES64=0x0, @ANYRES8=r2, @ANYRES16=r2], 0x12f}, 0x44844) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9}) prctl$PR_CAPBSET_DROP(0x2f, 0x2) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000100)=ANY=[], 0x118) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) ioctl$CEC_ADAP_G_PHYS_ADDR(r6, 0x80026101, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.941719213s ago: executing program 3 (id=469): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto(r1, 0x0, 0x0, 0x4014, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400000004000000e0ffffff00000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000000000000000000000000000b80000c2ddf24453dedc1a6e9b72afc3d7c88565ee0431293b6866f1849742f62b34d034f105c367"], 0x50) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$VT_GETSTATE(r7, 0x5603, 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x13) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000040)={@lba=0x9, 0x1, 0x2e, &(0x7f0000000080)=""/46}) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x5f3e2b59, 0x5, 0x2, 0x385a}}) 1.521500189s ago: executing program 1 (id=484): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) sendmmsg$alg(r0, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="2e6317eeb4996fc12c56f9c2f8d685bb6e544a6b5d9f98195b42e8fb9231293fe4bba353f90d6a3f1bd1db3854f30926bce6bbca6ab724f56a2c741b599926d3fc9b59efed1acfed7a1c44d03f9cedfa3ad700046251323492e287ade024cd0e72484f7448d79a532698dbe19d447b36f9c28be4c01d22496f1bb8fd409baf66b87c8fa12a2f7adb1cb04d9d1341ab4f750bce13d7b22f953d9a0235d80892c421ff25d985c917d657361220a431f3b850849ce48e6b9b5f010ed6afc5d25432bb989d6c753f95629c78010cac9723c9b730c600bf62faeefdb0e3068a413629cf1bb6d0684a0c950524ca1542f1f61ca12772a5f2edeabe4316b7b3", 0xfc}, {&(0x7f0000005e40)="5a5436e041d6699d80bbf5152b5b128b002093e8c09184f207fc49982e8b9e85948cbc55330c2407bffd581a9c5597c1df6f8f64d42a0320c8bc9576a5986ff05802d9ea79bbe408c8d3d5b7afdc78330b1af5feb2d6579b23da5ac8c4035db8a82970aeb1820e861e49ed396bf0f460ff2f1bc21d8ba029309e3f27e2957a0ff87b92b26837cece7e003e9a2463956bac13d8c62f8cba58574bdd4e867880ded804b9ce245dccb183d4e49249a002bda03160070f127dbb8700fbc510c4a14f1cd5caa622d7adb4ba6b085f4addfeabdedd47", 0xd3}, {&(0x7f0000000400)="bde05a1a5e99bfb9502ebde4e4978a00268b298c9cdaffb85f0c6f6d7089141abac4cf61b654777d722bf311b2ffa8cfc63da994952fd139c6542cfac0ede62305eda8a8ea190db952535782b9fa7e7c4e5bc5ec3b55c85d679959b5fe4c2408b0019676a2fb80da2f418a4db0aef7ff654295283456b31058130d0bec1546ca07ba19149fb013b08075616e32e3b34c4519c879d41cc09b881927fd74db0b501b28e26131e9cc9c193344bbd26ebc2bf6e044017a787bd59ea0ccde375c1c1f5cc339ab7459f4be896868486cc8b4495ba8d3748fad8e23667b18af04be3076", 0xe0}, {&(0x7f0000000240)="655c92726e6d1030e980d44fe7add1e21fdcdd63553fd849de60ae6740faf624d52305a0e58d64635b6ce825075b98fd0a68fbac0165a0a4c8b2f76e3c30bcc8c38fd2", 0x43}, {&(0x7f0000000500)="242e6f924a0ede32901b0674d6f8a8702b7c78ad978e146a263fb76a45f4a38df80fc4972d6326b8678a20aaf6c6a5dd1b0a8748b9bae0763c5876cf41df0a939168756bceb56e144606ba", 0x4b}, {&(0x7f0000000580)="71d14be3b1bf56a0e4ea2385abdfe79c8be4b26744ec2eecb06888760f29ca0c263b8196f557f275383e4c15111102a85f211da5e452a8e73057db253a", 0x3d}, {&(0x7f00000005c0)="635ef8a3d420a699bf4cbf9cda781f10ebc5f7a3a6c9b118012824960e6224356df195835d471e9e0be57e832d3c54b1ebdb0ea5895eb6413efcae4a319f", 0x3e}, {&(0x7f0000000600)="ce6d3f4bab9e60f010dd702146bf72de643854db91c9e6350f79f762704869355139783c219c75e05fb2e3da59ef742de03da45e97d7553aedb391ad55d972b4c5eb558e76a25c8c99b99117cc859b9af88c00461ed06f3cc824914716b523f34e6cd557bf6f", 0x66}, {&(0x7f0000000680)="1282e9ba6aaf", 0x6}, {&(0x7f00000006c0)="00ee1ed2bae06ba0c9f550cff93f1603fed8fe7fe86f33e4a8bd0eb834b09dc45d95b16825672293b71bdbb02062df10ad2832d351f19d1131602936845e7993034ff0d56ec39303385167da5f0ff87ad2a33176b09831ee52c736fba96ea5e846548217a6fe02e1e7d1312b3068fed30390bb0f7c1fbb413835bf76d4b5e25303b541fa6ae324adf8574afdf03904030b19646a065c67df107c", 0x9a}], 0xa, &(0x7f0000000840)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18}], 0x78, 0x4000804}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000008c0)="33277388e812daa8f9eda91cc74ee53c3119ed3fc747e0c5f5d4d563c6890a5e7bd86ef42fdadb72416b61f585106933edfab54db69bb058b2c7423fe57769b8031deae4676b15b77863b3e68c0feb9d346358c702d74463447290220d5d1b004eeb1c940761a5db193c0b2d407c908d614a2260cf53ae5befd5445595f90a582832db56f0db617a", 0x88}, {&(0x7f0000000980)="09aab6e500eb79089347e4f3a161ef3d72e6e5c5df38a8937f746d7ab9889a06aa23fc9021878cc7b8cdb7141b6517f0bea7c0e4a832516100cb9c103779495ba7b632a9303abf0a59f25c", 0x4b}, {&(0x7f0000000a00)="e75ec24c9a5e378c198b4a59cfc1933ee649b9532715166e2f5709aaad5a0822d6df3d50af11668f578790f1d2f7882017c903a2e1cb4f0b6063c839d3eee94d824c5f5d064b948662b8b4c12e154e05418074c3b79ae8ce9d1f2d660d3f13c61dfc2adbbb1fe22a4f6bfdb6ebece9d0eee9deb4c5d61c9cde77d959954b535cd6fa8a3bc7fc9e2ee1b8313ab79d30b9d2e9337f9af6d49265b7a130a15a32dc605bdb9c7c45b51fa960", 0xaa}, {&(0x7f0000000ac0)="a21a304695b464b6001ddb11ed460607b0fc7a72391ec48b2285c9e1cad88d86fbf79f39eebd5b5618a987f6b74bb4240b3e171e4b6ecf8b1e23d9a36778d92f9625c88d49c310995ef6d9927b98842a16a33ac839301679c6ad698c27e4b902558c294e18d572e5cb4c89545087f4c774a9da9269605f522af6fd3f60833912ab2e0bb292efb9706b539fc516fd65a7b54b8cd658c36e8606794862ab60b873d8f1f567e6b665ba6d2aa4037d23185cc8287818fce83d1a88efc8b936e1c1778c6f2a", 0xc3}, {&(0x7f0000000bc0)="141db36807960bd003a989a66cb5f2bfc4854e0a430f665fec343d444005f3c2d920032eb71c207f781b7d93058e35afbd8af972ad0059e67b0b149c9d3d55e0ec06af32b0d4f61772331b54e273867b2bcd6e043bc6f654b11cbf285f2d59c62daf2956e922a8ccafd2ea3f6a305cfc1a76566794a38abfad5a00247b224c8cea6018806dfc0337cc878a86fa0de3dfbd1af28628b5e96b74e6a49abe86d2e4e6fc7ab127711f6fc9ac", 0xaa}, {&(0x7f0000000c80)="66c0ffbb37c404f51cd4c4f56e81fd44e03c8d5def74b283c4f72e3a4e2e1046fb703ab09e189da401c5e29a76de2e94e77d0ef617b6403852bc9ebccaca83d853293250c4f1fa44304ed6f2daf0060ec1d14f105330f61f20c2e08e1c80af460a8fa55a258443bf8e27fda3fb32aabe35b994a08fd55a6aa6d7a033", 0x7c}, {&(0x7f0000002700)="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", 0x1000}], 0x7, &(0x7f0000000d80)=[@iv={0xa8, 0x117, 0x2, 0x94, "d3b1fbfbf42347a66ca8618a5b03959f0fa33f1932265d039cac5801cf10e35ad2daa2ce308a65697054b19d90c702ab0f74f64b64cc080f0e99f8ad0d0ee1264f4f23754d167c58d6cc573255d409f7d875055327e1c8f79ff2d23a665db02a048394940d45745722c48652b769ad3983acb633551e41f71975617748e98701b2690b828b3f33b9f574f87c55e146bfa11e9cd4"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb3, "8f962795a3471d38402a42da01412224523d7f7e908964c334c1fba5ddcf5f602277a2891f59128b092812dc14ae69c6d7b72f6b34dc11c9e8d810358bcb3c280f0157450e75ef1965fc1ada38b4b1a06d2187b0d5adb4d12d9174fa7f74267a928353950f0f175d9694f1f03dcb177c5514a0d1962d51c8fdfe676cbada38ec7cbdb46ac280e9628edddf334c6cddafd6fb66f78740145b88e4a111e45a0ef10dde747333ee16f73ef3952b1ef549d8e0dc19"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xfc, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x40, 0x117, 0x2, 0x28, "02ce54d59544af6c7da9479dd14524283877157eea799a47a72f5ee8f55d3a7423f6af3bdf2d1c11"}], 0x308, 0x4000}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001140)="14fe47bd5324d4ab37a1208ea29636933f63b2c0bf1e3bb0930b2475751a3ed9bb95ecc676d6f8443c812b9a63edc44adea46d5a3d5c632d2e2863bd21b653bea15e829db742ac3ffdbc9448374b6de5f5d6d482", 0x54}, {&(0x7f0000001200)="77dad2f60a20ed95b555bd34a11066361e95a6af2865b8d6ec51fda031579a742e19a02a2de76c578f4163aea560e421dd476590bfac9ead2bb59b5bb4a8f967bfc2cc15a71a1e27828da1af38341f21b1a88f86d0c4b231e2b49e64c139951081ebaa28f1324e56594c566763c21bdf532f1b488d7c2e895e184ffbd37a0bad9b983ce4cedb7e166e266cc396786a7b10b458ab7e10a5f52b80416b63fdd5850f9135623ae94b1f5ca7c22041789a86f9a41ba357e9cf281fc747", 0xbb}, {&(0x7f00000012c0)="92186ad65696696682734f820d8970c8e71e38d449e6320e3211cdaee54510206fe7b2c0e884d48fb850adec28d3e2d721a04cb575b473f1b8ec3081ff09cfea95e771babaeaba30b3dd3a1897f366774db4ec5032432fca5c73c352f2a29f7074f2a21c83b954245297f7ffffff7521d3be6766d9a32e1443bc970a4a97eefc820277f4dd64c3edb78afde21703715a07b48bce93040bb74d9e403c54da21e80dab39dc0f40ae10896e8b3bc8bdbd0b25d5af6af5", 0xb5}, {&(0x7f0000003700)="4310297e8cf417c3a3bd66148f67c5c3055a0560bb6cec1227f16602d6902b3e2ea083414dd7fade19dd7fcb48f44eaf9c14851a51619b7763e7f783d1c8436fbbe7a01656b20f8f57cf21ce0b1d3f5df453680b836562775f3a17838db5bf6b35d749e5c7bdf6ed712fbc091a6dce04854890b828808cb750cdcfa81d22f8f886688b8d1945e5842fb4d795fe6d76bd9c0d002fc9bd5df4bf401f12da498c5166471d9dcb58b285b3fe48f875a7b84908352f593eb9197568b82f24471d1c42e99d76a361ce09d28400ec8fca96c4e568025df58ce74e30a9c1003389259b0e5b9c80d4b79931e4167e8e5ec59d25f84d02f3fe70f5ea871f2b41df8c38a667e776bf88dbfa15587f54ee50952355af64d3528d2d3255fce48005cba44f1363713110a0bb6f15e679e7b333177eaa4a65b02d24f1850c1900cb850e5119b801e07ec9237e129b3188e4d2a1acc3fa91c61533f77db9752b6eabff3d16989a6ee7536bb80756e06e25fad253675c903d82a4fdb5a95d35606981e315b5997e73f9b1c8d2238c7d623c5f5e050a570c4417e3104eae5bbd7f0b2858f238555746e5bcd4481b2872ef0c291776a943b00fc4b6c92b273b209aa4ebd2919e40b6eb5bd6e4159e4eda885d1b7917a81cadd592968a9e7644a52b72d0b562443d887dd199845dfe5cd1e3181a7cba1e43564fec96b517c81e107f9903cfc0a1f568816c1054e6a110655e7ac148c498e05cf9ffe56a3355501be816e6bbc8f3c438986cfbdd9c241c2ed7ff5b75e22f673ccbee6f1427a42dca1c9b04b646372335f7e8a6ec81fe126e19c539a8954fff2a426f6cb991e13c1ec106384fc80fefd03ea2f094c0eb947d18e9d4bf8ea4dc5ca0c8ecb32624f468075f8bfda9e3939abedd05e54b8da33c4f3de94d2b0904481a887ecb1a33bf03e14933e330cd4dc7c82bb8f96600bdea154f2cf6631078b34c994ec758ad7e9fd12a24ada52b69afe5e60e9c91e81d2992c960f5edff6d443c33ec8f0c952b062a562dc3963aa115333d1e24a4e35bc8d4df4965b4d0bafa248ad2c84d1a5b509024382d5604ab94bd96093480707aa3c47de1fb44685a3e71b79c6a939fba86ce17a9e58fe2b52246967588cb025f229fe90376855eb8a9a19bcaf06983724dd798ff8ffe08cb7698676e43cbc1d612e19b29637ce45c1c82f9dca45d77e9998d45071934cdf66711b82ff5958bf6949d16f588e5ec649f3511f47dc2f240916199eea064ddb73fcdd2d98c6f9639dbe1ef12be15278ddd006e0b2ad6d199bd3c1ac3f79e45c205299851a24a2dcff08cc51cd590f4c8df8dde5eb0762076e858c04e690dfcabe69a9f0406cfae8decc5ccfd771501bba63189e3c445ef1e7e9214ad75aa867de13eedfcbeb398138e438ab532cdee46e52d164d6cd2ffa1dbd3fd383c9e0a2701e0e05f1ae4758d4b5dba3baed79ab4ba597360345bbc901547af50739a851e459a479bb108e27943e3e990c08eac8f8ab5dc2113fe10a88a956f9f65bac2e7357b3a1f28efc5555666f214baae425f1a622f1d860cead155abe56aea04714cde88934ec2456ddd48134e8dccb2142aef67f623634ae6a7dfab84d1bd7ca924fd0c30ee90a1de201890bd0fd1cfcc1a822e3ce600319c615676e6a659f6385d84c6a65b8d29e83fb38376c259479e7004759552e383864b91f6c415e5e480c506817d721e9b0b9d8fd22c80dd0de9584baf86522b2bc417954b50caa65aa89b7984376f2f51e82c6dbb7b61d97faecf9769bdb916f2729cf4d8766ee5ff1ab50f11e510b46d90e9b62b00f39b4c17bd739a2fa8b7c863155e768168e0da404a99a0670ff21c78e523dfa8a43e7307ca5a7887d7a84734e9a49a10ac27fb30c2c2c8d301c5f75ad97c6adfd5533574bd0cc04d036d424b16e67a9e1f6bbe59d61cb16b639ef6878d95d38de1af535eb0bd9625fde16200f3ac60bc341dae67377085dc7fee65a90946c8aefb561c3453c599d7215814142bf8b0904d0eda9b42b3ea9c80b1c107af43f1a049223e5354e07ea24bb8051382cdf88b8ff7263d0582bda48ae86f7a1be9a7eb4dfbd14920fa1776fa3511dc9cfe28c0cde5bbc529251d8813c2c2649ff8855e0fdfcee8869ce890614600eba668887f73ff1e41b4f830bb5f0343c26228b9f44bffdac7fa43ed709686d4e3794177796a0197f8fe58139f357865564fda2b73f97de295e77b23842b55e13bf678378c1d4fc5f1e8084874468a405ac22c2f4f427a154216efd9153fd4c49836ac79a31c745d5d769eec1f68e8e3d09673a1b64df60672143090119fbf5a879cd54524017b3471a34b0532d706c4dc43d695f07dc3c93ef1ec4da7f07eff0d349eb66814b519036ace00b8ff101e6a6a91ebc54afb5039b6a4e308228c9c935d5a285c8b4e938a32dd73cc659125e25b951b8558410b512c6c79e007d5ce165ac66e79a8c9a4f6472d2a05079c1332f42dbc38929db1d54857620489455f23ba15df2bb705172b6d4c43431d8b2f409e29de4bd8bb9d8f46298e839ee38a8f5358edcfda307f9fcd7bc0608e319271724b6ef856ef3c78ebf044addf65cb603c7cec9a2bf51a53267e0f6cb292b47d3d0da8b2f498669dfe948952c6018b38fcdd4e9aa29d354295cb5127d5e9c9ad64ae4e61ad6d3e688b1bd110cd95d6314bf82e0df50a972737500cb597a004bc3840aa7c7dea627483ffcc1cd2ddda1e3aad81dde7421879f38c00b9c04f6ce7d8d88a9f7e8cbb492ad70f2a1c0425425b3451e5300a3108552756670f46a61813292930e8090bdead4348c80271aec891198ebb5250a206a843c2b249f8cf6d7fd85d237569cfc4fef8bbe0044c5e1cb03f2aa5bd09466c38f38933f4e3b64a4c0e66acb6294df5586b0bebef8efc229eb10d97b46e42fff9a31103cd186c0e5ea678fb433acaac7aa09ae4f2bb959f0e2f709b0c3cdd123e14166236f3278dc5db7571f93ad4e83cac1af8fc14d8b468e3763032679884deb28dba0d2505cffb5e05088fee9c0f098f0e3e976b709e90deefc5db186fd6618973e4b0020d3c889bd35a80ee8879bd1ecc2f39c3f5e5f72fb8e1099b3927656c08159118671b78fcd9b02d2abd2dbb097bdacf002330800f8504429a0019a7a075fc4984ec0812f2a8f29b7d01377b6957e679af06019fb0ff6e54e9854050518e4efbd97873a4d5ef24acd0146c459a3010593976ce7ab377138b891ee9c868c7bc99035c7c861ad1166b070496a6ee986c3b177052deaa688e084178e1808a497fb854202105f947291c0caf4d5125108ae4d5ee3b25b86de674ec046fa2c1cdc5eafa57a9d1035c2cd39ed98fe8866c7866bf3886b080f1559db03fec14a9f95d3c1a9f07f5070d557b0b23351425db1b3dac09905e4eb7f2d7691f1cafd60bcf9e269d020f03295ebe32905ac6a537534a7b634ab97436fe4f9b42aef7cd8a7fc2ed4032f3a0e2ac7a6f3837bbeebece171c5164f8c6977c4d626c52f90c3151c499ad88decf71327181038c3478b0429220b6380141ff9efc33a53888881eef867d6c3e424a2d7c59b75d083f1d6e612bd6f7b22025b3d766c44908f84654f05fc6214fa60453f5a047d248c0d793e3c0bf45b8b1d70002219d1059bdfc55a8b3e230837c07da5198141f2624c9534bf1671db13a93b59a7abf13589114d85982b3426d1382dbe24f44b103685da2d111481607e9fca91a35190b118371ba605c1c0a8595162ca77feaa698582095e8ec383c3db9029ec1c3bd0a1cd92528a933aabb6736d649fb2da2159abc49bbfe8b34c6ac317f9e359a9b44ce6edc076d46710828262fe62f3824847f5b12c587939ba2a91669d1141412f417ea48a8ccf41ceb4cc2fece266bea7175e2084ac8bc34373e66ce944c4ae0576416a85c6145a05d3ed3d49b808d84ad625754b858b27b63646dfa2b361892dec3754832ff7993f170affad6e00123f20411742024f183f7a25e2b099690a0607ae936d4dd68adc858ab5aca9c8022d58cc314e3cf57b9e4d0347b762f3a1d546f77b3174f2569dac1872ab8616a8e2c58f3c1243293f881bd218a96676b6d2d7a6c2f1a3bd56ec59d22bb1315223ab0b2ff1bdef678cc6ee82ffea534e8f8cb2623a19f4d3d0c594237002bbbce720b5c42e9af0c7e22e5e01fa4bcbee73211b85c890ea6f8e2dd98b08eab71d4742a2c55db556d2c7ef8b8a9178583df78109828546f01a133a397b124be4d1f3748083cc563e679fdad499b79f1a6908a06214cedd8e9ef5a3747418f2d537edb3a1e094dfca6dca9ea17b209d3eb1cd033a42fe2d47a46f3ae56054fa7a6a651ca9ab23416491bcbf7ea37467724426d76ec1143c5e4be9f0bd571cf5e7a17942d95f29a7866fe1ee5c999aaf8c7cf255b5d14e104694cc4f7261a61f8cfe69826948ce51443251d1cfbe73a011e26b496249e47b284f8b54828c2748036ae3eb6ee52ff13dafb1a26767523bd34b232946daf55c391d8a8b45abe94d5ec9ba57ae2ca9d701a4332c0c18ff863fb860c0299357916fe5b1fee0eeac69559a8e18bdf85ae9e103cb18936038ecfd5be056e861168b9bd3c5c39de715c9a50e5810b2a53212e656e97903464e420e4751e48a624c36a08eb631db50669c6dfc5c8eec3aaa9fb10ba4218e5d1104799380b0fa04f8fb6f5696815e99dc5bfd664bcb99b68b4e35b000b660717bae9066de20eb4e358f45b0c8219f6dd72a4061ca85b6ff8433e4ffbbe065c5cb99e342b864c7c87b3b2cc3ab7e4af29652146981061c55c9bdcbfe58ed6178dcbf6be1a034219b9a899bf6ca408f057a654cb0a10d70fb89f2426dd7b87c373d1d140bf3d5687bf578292241b4bbd78856565398a5b9d7795a407c612fa8f1c46bf8d4e0533a73abd5f954dd62b427eb082f962f17a3013a1a9303a308db3ac0d81a86fcb1b3c9285c97c06b47ef81f338c750aa7fd3aad340a580b79699320a85dc50bb4f41787960bdd72edba76158388dda35c515a5e804d79aee345fb4db6f77251993c19efff84517ee7c1119e7a27cd1d1884203977e326f60a9bb8804fe97e2384f401a4a57a47427a081351b233daacfd6d15d53046cc45fbdd503d1f01d2599b83968e02903af6d767f1730fc2712047568021b795864780ab93052eb4c8ec3f622c5f0ecff3080159cd02c5126de25d70b905caeb5ea42a4313c5c976b24622a404a4ab399d8ddb9a6c8c0c7cca078f62b2e5d43987fb71df43e392e65e3520228132047bb84aec30168a0380c1ac75bacaccd9051119468c736a402402301030301f65a1bc0a354bb42a21303fdc21fdafa941db8c0ede5ccee20f3ddbb253af1b2b9dacf7e9bfd42828f695f86b8696bfb4f7b04e1032ae496e787e0ee9a5f686d4747fa8989df230c1e210a053dd79c2c78e0fc003081ec59f6d50e6d28c9e9589f23520832fe80d151a9fcf002eae4823d20be9ded2af6cf77197a9f9f5a392d94038312f63b0e4b903ffc79a485e2d4089134b7d0fbc3901bba8fb7d2fe7a50fd8acfeef5d6a4958c5041885a5dbcbe1426ad0fe6f087187ebcb7f4ff1125412f926f7e1bd2021856acf925ba1929d47e3fb345b9337f6262b41a750540cea6597a0733ee02108a804d87f6f96e57f1c0fc460472003bee280c19bc4ef8e7372659971b52136e41abf0b2f13081fe9d0438c7e3891f8be85fb61ef7c33a9bd072cd300a85a9cd553487476650ef127b1cfa4730ae44e", 0xff4}, {&(0x7f0000001380)="84e4fe9f2dd17d138cfe253b742cf9f172e00063d609287ea4bad926509f3d438a7f6b6e190b47910b167581003df82ce35a8ecfc64cca934b409aedc309b573e0ab83f44635de2eaf7dd69949c4f07f4e3a054a50011226b9e715755efe9ab1765061d7614e2dc5da91333f215ab42988c6140150211df2ffa3098b15ea984144289c79a77f705b89ac4a07825923bbc5787cbc06e88458c66bf2be0e5d40873d282edf38209fd81ef10cc384ab06e99c61efa6d42da2fb1ee8f4e97327375ccdc5bfd1c3448dec03cd61a1ee0583f4eea4f935a9933d5ec43d9bf935fcad90715152b70cc494", 0xe7}, {&(0x7f0000001480)="59d2fe85ca02c5697edfe58e9140b4ce71889d7f673aa7aa97", 0x19}, {&(0x7f00000014c0)="2b2d88ee5f3afbd9f4efa83159b969f9aa8225a645b1aedf6c1ef3a2f13094f56fc93a", 0x23}, {&(0x7f0000001500)="db7bc06d8267a1691ec34d221e19f4d150e24c350796ae3debf1e9778b35006e15ebff4b", 0x24}, {&(0x7f0000001540)="19b3fa2d8f7cc0b085e2b73d6f8e38e0fbd0257692cf528408a51fe1ab51c92eda9929dd3d85de995105c1c804105b52b297", 0x32}, {&(0x7f0000001580)="1382d3f2982b05381044574bc1ca517b44687ff9737acbbb64bf6e1f4ee028bd89f6cea3a2c7613f4ed8718d0d79a9b3239c01c9fc8666afe41991d74ce3064ff90d455e32cbec3b75536b9a9ca487f7bc023c", 0x53}], 0xa, &(0x7f0000004700)=ANY=[], 0x168, 0x4000}, {0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f00000016c0)="e2a49f6c2ca1", 0x6}, {&(0x7f0000004880)="90b0afd3dc3b3e844457db2324b0afef75f81ae2f86ad605f203985b49cb0d316412cc12190d0010a30709bfc43630b6c7f1fa9cf30e1354cf486409195b43a4a551ac2c04f42dc5824b00313ccf0e4d6d99bc91b86c46441aa9dc22bac8a252067ae704c1959736bdf070fd697bd2485a83a1ca7b6a3a238190d4fd78425910c9a0beb8d5ae6f1a14a1463f6ead633c8bdcde80d9b765a4ef944e11100edfd26b43f533c390ca497c4acf142852727bb48824545995b4335fd353a9041efa9c5241bf31ac74c2dec93ccc54506850e5d3cc26560b3303", 0xd7}, {&(0x7f0000004980)="ccb07cdc33f5410edc160ae8d9f994941b8581fa990a3115aeec98ae2f76c1a9a1e37ffbd48952d766dae497f4d63529a7124c83e9caa1bf8a49fcb978c462dea8e0e4ecb5c04ac7", 0x48}, {&(0x7f0000004a00)="0cbde988c5f530864f031e75bb5d8edd6b88457922017d3a8ff195753611497c1ccb9d4b9eec07d17b9a927d16dfb9a5aea751628314fdb7a37ef266ff700975bfbc40515f080eeea70317a5711484a9488c5438f95a83725aca4685ef8e2b8509ce90c97d4cefb8e0bf7cdcbd85130d7d3eae58c1330f641eba0d524967a9cbffe91a979e27df56954f9ae8acc0fcdff78059188cadc7f28208fde7d5705030b8d9a80e274fe872a29749a3fd53d996e6700a510b25afb5c78baee5", 0xbc}], 0x4, &(0x7f0000005f40)=ANY=[@ANYBLOB="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"], 0x1218, 0x40}], 0x4, 0x64000000) r2 = syz_open_dev$loop(&(0x7f00000011c0), 0x10001, 0x4002) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) capset(&(0x7f0000001780)={0x19980330}, &(0x7f00000017c0)={0x0, 0x7, 0x410b, 0x3, 0x3, 0xffffffff}) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r5, 0x4}, 0x38) read$rfkill(r3, &(0x7f0000000100), 0xfffffed5) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.521178722s ago: executing program 0 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0xf3e, 0x4) ftruncate(r2, 0x3292e291) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000001000)={0x20, r4, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.519492941s ago: executing program 1 (id=486): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000180)={'wlan1\x00', @ifru_hwaddr=@random="bdc2add707a4"}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r2, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000061040000009504000094399f3352518ef9a386758814c9b56e2e7458cfd99d559005224515c6738bccf086658b51f66e37295baaad33272a035e77f8cb43cf8b2900fd7425e006d0471d71aba1b72de7eecff51a28b9c955fd8d7a917a520a43a0863491cbdcd40d2e8795d873c3acbf556698114238ae1c2f63000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 1.431871677s ago: executing program 1 (id=487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3b}, {0xfffffffffffffffc, 0x0, 0x200000000000, 0x1}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x2, 0x2b}, 0x2, @in6=@local, 0x0, 0x4, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6ea6, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.431667581s ago: executing program 1 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) fanotify_init(0x40, 0x40000) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x212f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000231e557c4673c386801000000000000000c410000000c001473797a3100000000f975a4618edee870951d2cbcbfa62fc2a7fb6cda49793ebeffff79965a5f6d18ca90a31a7958af034988b9029a8f394cf27679469c67a65328ee115e3befc3a2e8625c0e95c53492c677e4"], 0x28}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}], 0x1) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000200)=0x2000000000000008, 0x6, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.321210407s ago: executing program 1 (id=489): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) setreuid(0xee01, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000180)) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) r4 = fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x5e, &(0x7f00000001c0)={&(0x7f0000002280)={0x34, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r4, 0x1, 0x0) fchdir(r10) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x21, &(0x7f00000002c0)=ANY=[]) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r11) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x113100, 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000100)='./file0\x00') 701.088863ms ago: executing program 1 (id=490): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0xc0) socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f00000005c0)='./file0\x00', r6, &(0x7f0000000680)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 631.197837ms ago: executing program 0 (id=491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a0041b16fd3a07f36a130593fc4ed272958139e84a9d6b2a0caca6936c986aa7bebcd229342feb795824947cbeb52456de4c84d71d283ed5f2d64a38548b6c4a7c63061b96afc52e4db17783323b8c5573a38c308af9832ea0306", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r11 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 320.153416ms ago: executing program 0 (id=492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"3d0300"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x4}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4c42, @loopback}, 0x1c) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000cee0202001a000000", 0x33a) r8 = socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) bind$alg(r8, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0xfffffffffffffe89, &(0x7f0000000480)=[{&(0x7f0000000380)="bd", 0x1}], 0x1}}], 0x1, 0x0) 151.153459ms ago: executing program 0 (id=493): r0 = socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 101.260246ms ago: executing program 0 (id=494): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x10) getpriority(0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/96, 0x60}], 0x1}, 0xc06}], 0x1, 0x10002, 0x0) 0s ago: executing program 0 (id=495): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x87}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) 0s ago: executing program 0 (id=496): timerfd_create(0x0, 0x0) (async) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x9e1, 0x40000000, 0xfffffffe, 0x100000, 0x8, 0xffffffff, 0x5, 0x20000010, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x2, 0xe, 0xfe, 0x1003, 0x7, 0x80000000, 0x5, 0x1, 0xb0c4, 0x7df, 0x808, 0x400007, 0x4]}) read(r0, &(0x7f0000000240)=""/123, 0x7b) (async) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) kernel console output (not intermixed with test programs): adv0: Adding interface: batadv_slave_0 [ 52.285007][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.293036][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.298228][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.300423][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.308859][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.313863][ T5958] team0: Port device team_slave_1 added [ 52.317139][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.321629][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.467572][ T5956] team0: Port device team_slave_0 added [ 52.469824][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.472048][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.480027][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.487673][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.489820][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.497721][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.505442][ T5947] hsr_slave_0: entered promiscuous mode [ 52.509523][ T5947] hsr_slave_1: entered promiscuous mode [ 52.512345][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.515654][ T5947] Cannot create hsr debugfs directory [ 52.519383][ T5956] team0: Port device team_slave_1 added [ 52.592022][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.595044][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.605230][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.643427][ T5958] hsr_slave_0: entered promiscuous mode [ 52.645677][ T5958] hsr_slave_1: entered promiscuous mode [ 52.647620][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.650022][ T5958] Cannot create hsr debugfs directory [ 52.655278][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.657501][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.665818][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.820833][ T5956] hsr_slave_0: entered promiscuous mode [ 52.823943][ T5956] hsr_slave_1: entered promiscuous mode [ 52.826741][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.829699][ T5956] Cannot create hsr debugfs directory [ 53.014386][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.024237][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.045229][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.055971][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.078257][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.083713][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.090785][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.095251][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.150799][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.158041][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.162228][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.176077][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.226505][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.231418][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.237796][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.243071][ T5955] Bluetooth: hci1: command tx timeout [ 53.243075][ T5962] Bluetooth: hci0: command tx timeout [ 53.246725][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.252539][ T5955] Bluetooth: hci3: command tx timeout [ 53.269738][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.304663][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.310216][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.327906][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.330219][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.332981][ T5955] Bluetooth: hci2: command tx timeout [ 53.340908][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.353962][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.356259][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.359430][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.361628][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.368094][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.380150][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.382345][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.403962][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.417363][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.419607][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.427918][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.430097][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.448716][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.467382][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.484790][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.498662][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.506658][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.508926][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.520892][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.523246][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.565190][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.581758][ T5956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.597425][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.625741][ T5947] veth0_vlan: entered promiscuous mode [ 53.638365][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.645167][ T5947] veth1_vlan: entered promiscuous mode [ 53.660494][ T5948] veth0_vlan: entered promiscuous mode [ 53.668667][ T5948] veth1_vlan: entered promiscuous mode [ 53.689960][ T5947] veth0_macvtap: entered promiscuous mode [ 53.697169][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.707935][ T5947] veth1_macvtap: entered promiscuous mode [ 53.729879][ T5948] veth0_macvtap: entered promiscuous mode [ 53.735224][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.743402][ T5958] veth0_vlan: entered promiscuous mode [ 53.749116][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.754423][ T5948] veth1_macvtap: entered promiscuous mode [ 53.767306][ T5958] veth1_vlan: entered promiscuous mode [ 53.772473][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.775828][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.778653][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.782695][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.797255][ T5956] veth0_vlan: entered promiscuous mode [ 53.804090][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.818247][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.826709][ T5956] veth1_vlan: entered promiscuous mode [ 53.834124][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.837633][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.841065][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.846249][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.858261][ T5958] veth0_macvtap: entered promiscuous mode [ 53.863269][ T5958] veth1_macvtap: entered promiscuous mode [ 53.898991][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.899644][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.906104][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.923068][ T5956] veth0_macvtap: entered promiscuous mode [ 53.935228][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.947164][ T5956] veth1_macvtap: entered promiscuous mode [ 53.950545][ T5958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.954655][ T5958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.957908][ T5958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.960629][ T5958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.966509][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.968956][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.990134][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.995012][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.005966][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.029000][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.039746][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.040239][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.040872][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.040905][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.040928][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.040958][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.060698][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.076283][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.079369][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.126734][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.129863][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.133261][ T6035] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 54.141169][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.148070][ T6035] team0: Port device bond0 added [ 54.164761][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.167675][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.205090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.205690][ T6039] netlink: 'syz.2.5': attribute type 2 has an invalid length. [ 54.207500][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.214466][ T6039] netlink: 784 bytes leftover after parsing attributes in process `syz.2.5'. [ 54.219104][ T6039] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5'. [ 54.219934][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 54.245883][ T6042] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 54.310015][ T6051] xt_cluster: node mask cannot exceed total number of nodes [ 54.340483][ T6058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.375937][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.379395][ T6037] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 54.592042][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 54.622414][ T837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.640784][ T6080] overlayfs: missing 'lowerdir' [ 54.644027][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 54.691589][ T6080] hsr_slave_1 (unregistering): left promiscuous mode [ 54.804291][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.807831][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.810914][ T837] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 54.813902][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.818669][ T837] usb 5-1: config 0 descriptor?? [ 55.034797][ T837] usbhid 5-1:0.0: can't add hid device: -71 [ 55.036799][ T837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 55.041584][ T837] usb 5-1: USB disconnect, device number 2 [ 55.322457][ T5959] Bluetooth: hci3: command tx timeout [ 55.322935][ T5952] Bluetooth: hci1: command tx timeout [ 55.324515][ T5962] Bluetooth: hci0: command tx timeout [ 55.402455][ T5962] Bluetooth: hci2: command tx timeout [ 55.446488][ T6093] FAULT_INJECTION: forcing a failure. [ 55.446488][ T6093] name failslab, interval 1, probability 0, space 0, times 1 [ 55.453145][ T6093] CPU: 2 UID: 0 PID: 6093 Comm: syz.2.19 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 55.453161][ T6093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.453167][ T6093] Call Trace: [ 55.453171][ T6093] [ 55.453176][ T6093] dump_stack_lvl+0x16c/0x1f0 [ 55.453221][ T6093] should_fail_ex+0x512/0x640 [ 55.453242][ T6093] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 55.453259][ T6093] should_failslab+0xc2/0x120 [ 55.453276][ T6093] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 55.453289][ T6093] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 55.453305][ T6093] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 55.453319][ T6093] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 55.453337][ T6093] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 55.453356][ T6093] mmu_topup_memory_caches+0x25/0x170 [ 55.453371][ T6093] kvm_mmu_load+0xd9/0x22a0 [ 55.453385][ T6093] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 55.453396][ T6093] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 55.453408][ T6093] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 55.453419][ T6093] ? __pfx_kvm_mmu_load+0x10/0x10 [ 55.453433][ T6093] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 55.453450][ T6093] ? kvm_check_and_inject_events+0x71c/0x1310 [ 55.453466][ T6093] vcpu_run+0x34eb/0x5500 [ 55.453477][ T6093] ? kvm_mmu_post_init_vm+0x269/0x370 [ 55.453494][ T6093] ? __lock_acquire+0xb8a/0x1c90 [ 55.453508][ T6093] ? __pfx_vcpu_run+0x10/0x10 [ 55.453523][ T6093] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 55.453536][ T6093] ? __local_bh_enable_ip+0xa4/0x120 [ 55.453552][ T6093] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 55.453565][ T6093] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 55.453583][ T6093] kvm_vcpu_ioctl+0x5eb/0x1690 [ 55.453598][ T6093] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.453616][ T6093] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 55.453633][ T6093] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.453653][ T6093] ? hook_file_ioctl_common+0x145/0x410 [ 55.453667][ T6093] ? selinux_file_ioctl+0x180/0x270 [ 55.453685][ T6093] ? selinux_file_ioctl+0xb4/0x270 [ 55.453701][ T6093] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.453715][ T6093] __x64_sys_ioctl+0x18e/0x210 [ 55.453729][ T6093] do_syscall_64+0xcd/0x4c0 [ 55.453746][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.453757][ T6093] RIP: 0033:0x7fa549f8e929 [ 55.453766][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.453776][ T6093] RSP: 002b:00007fa54ad24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.453786][ T6093] RAX: ffffffffffffffda RBX: 00007fa54a1b5fa0 RCX: 00007fa549f8e929 [ 55.453793][ T6093] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 55.453799][ T6093] RBP: 00007fa54ad24090 R08: 0000000000000000 R09: 0000000000000000 [ 55.453805][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.453811][ T6093] R13: 0000000000000000 R14: 00007fa54a1b5fa0 R15: 00007ffc76dda8e8 [ 55.453824][ T6093] [ 55.666188][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'. [ 55.670572][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'. [ 55.918225][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 55.918237][ T40] audit: type=1400 audit(1752414317.357:172): avc: denied { mount } for pid=6107 comm="syz.2.24" name="/" dev="autofs" ino=10649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 55.942194][ T40] audit: type=1400 audit(1752414317.377:173): avc: denied { append } for pid=6107 comm="syz.2.24" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.960625][ T40] audit: type=1400 audit(1752414317.397:174): avc: denied { mounton } for pid=6107 comm="syz.2.24" path="/11/file1/file1" dev="autofs" ino=9562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 55.970334][ T40] audit: type=1400 audit(1752414317.407:175): avc: denied { read } for pid=6110 comm="syz.3.25" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 55.977658][ T40] audit: type=1400 audit(1752414317.407:176): avc: denied { open } for pid=6110 comm="syz.3.25" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.049906][ T40] audit: type=1400 audit(1752414317.487:177): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 56.056093][ T40] audit: type=1400 audit(1752414317.487:178): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.272424][ T6033] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.412405][ T6033] usb 8-1: device descriptor read/64, error -71 [ 56.462342][ T1469] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.466570][ T40] audit: type=1400 audit(1752414317.907:179): avc: denied { unlink } for pid=5958 comm="syz-executor" name="file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.489425][ T40] audit: type=1400 audit(1752414317.927:180): avc: denied { allowed } for pid=6116 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.496418][ T40] audit: type=1400 audit(1752414317.937:181): avc: denied { map } for pid=6116 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.533416][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 56.617027][ T6124] FAULT_INJECTION: forcing a failure. [ 56.617027][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 56.621551][ T6124] CPU: 3 UID: 0 PID: 6124 Comm: syz.1.30 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 56.621566][ T6124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.621572][ T6124] Call Trace: [ 56.621576][ T6124] [ 56.621581][ T6124] dump_stack_lvl+0x16c/0x1f0 [ 56.621600][ T6124] should_fail_ex+0x512/0x640 [ 56.621615][ T6124] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 56.621632][ T6124] should_failslab+0xc2/0x120 [ 56.621648][ T6124] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 56.621666][ T6124] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 56.621682][ T6124] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 56.621696][ T6124] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 56.621714][ T6124] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 56.621734][ T6124] mmu_topup_memory_caches+0x25/0x170 [ 56.621749][ T6124] kvm_mmu_load+0xd9/0x22a0 [ 56.621763][ T6124] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 56.621774][ T6124] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 56.621786][ T6124] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 56.621798][ T6124] ? __pfx_kvm_mmu_load+0x10/0x10 [ 56.621810][ T6124] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 56.621827][ T6124] ? kvm_check_and_inject_events+0x71c/0x1310 [ 56.621843][ T6124] vcpu_run+0x34eb/0x5500 [ 56.621855][ T6124] ? kvm_mmu_post_init_vm+0x269/0x370 [ 56.621871][ T6124] ? __lock_acquire+0xb8a/0x1c90 [ 56.621885][ T6124] ? __pfx_vcpu_run+0x10/0x10 [ 56.621900][ T6124] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 56.621913][ T6124] ? __local_bh_enable_ip+0xa4/0x120 [ 56.621929][ T6124] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 56.621943][ T6124] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 56.621960][ T6124] kvm_vcpu_ioctl+0x5eb/0x1690 [ 56.621976][ T6124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.621993][ T6124] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 56.622011][ T6124] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.622032][ T6124] ? hook_file_ioctl_common+0x145/0x410 [ 56.622054][ T6124] ? selinux_file_ioctl+0x180/0x270 [ 56.622074][ T6124] ? selinux_file_ioctl+0xb4/0x270 [ 56.622099][ T6124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.622121][ T6124] __x64_sys_ioctl+0x18e/0x210 [ 56.622143][ T6124] do_syscall_64+0xcd/0x4c0 [ 56.622170][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.622186][ T6124] RIP: 0033:0x7fd94d58e929 [ 56.622201][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.622217][ T6124] RSP: 002b:00007fd94e3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.622233][ T6124] RAX: ffffffffffffffda RBX: 00007fd94d7b5fa0 RCX: 00007fd94d58e929 [ 56.622244][ T6124] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 56.622269][ T6124] RBP: 00007fd94e3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 56.622280][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.622289][ T6124] R13: 0000000000000000 R14: 00007fd94d7b5fa0 R15: 00007fff9b2e4888 [ 56.622313][ T6124] [ 56.622372][ T1469] usb 5-1: Using ep0 maxpacket: 32 [ 56.672493][ T6033] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.683938][ T1469] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.724310][ T1469] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.726853][ T1469] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.729588][ T1469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.732612][ T1469] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.735788][ T1469] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.739583][ T1469] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 56.742511][ T1469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.746662][ T1469] usb 5-1: config 0 descriptor?? [ 56.823189][ T6033] usb 8-1: device descriptor read/64, error -71 [ 56.876052][ T6128] vlan0: entered promiscuous mode [ 56.933432][ T6033] usb usb8-port1: attempt power cycle [ 56.951253][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.955883][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.957572][ T1469] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 56.965415][ T1469] usb 5-1: USB disconnect, device number 3 [ 56.969235][ T1469] usblp0: removed [ 57.262436][ T1469] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.283061][ T6033] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.303426][ T6033] usb 8-1: device descriptor read/8, error -71 [ 57.402657][ T5962] Bluetooth: hci0: command tx timeout [ 57.402695][ T5952] Bluetooth: hci1: command tx timeout [ 57.404837][ T5962] Bluetooth: hci3: command 0x040f tx timeout [ 57.412550][ T1469] usb 5-1: Using ep0 maxpacket: 32 [ 57.416365][ T1469] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.419808][ T1469] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.423464][ T1469] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.427317][ T1469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.431281][ T1469] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.435317][ T1469] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.440704][ T1469] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.444508][ T1469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.449349][ T1469] usb 5-1: config 0 descriptor?? [ 57.482649][ T5955] Bluetooth: hci2: command tx timeout [ 57.544819][ T6033] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.565014][ T6033] usb 8-1: device descriptor read/8, error -71 [ 57.656187][ T1469] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.683918][ T6033] usb usb8-port1: unable to enumerate USB device [ 57.858144][ T6033] usb 5-1: USB disconnect, device number 4 [ 57.864181][ T6033] usblp0: removed [ 58.392116][ T6149] loop3: detected capacity change from 0 to 1 [ 58.396143][ T6149] Dev loop3: unable to read RDB block 1 [ 58.398097][ T6149] loop3: unable to read partition table [ 58.399924][ T6149] loop3: partition table beyond EOD, truncated [ 58.401801][ T6149] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 58.679054][ T6156] tmpfs: Cannot enable quota on remount [ 58.765055][ T6158] gfs2: Unknown parameter 'barrieÅ' [ 58.768191][ T6157] block nbd1: shutting down sockets [ 59.068363][ T6166] input: syz0 as /devices/virtual/input/input5 [ 59.300075][ T6180] tmpfs: Bad value for 'huge' [ 59.482876][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 59.483175][ T5962] Bluetooth: hci1: command tx timeout [ 59.483338][ T5959] Bluetooth: hci0: command tx timeout [ 59.563001][ T5962] Bluetooth: hci2: command tx timeout [ 59.605598][ T6205] FAULT_INJECTION: forcing a failure. [ 59.605598][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 59.609760][ T6205] CPU: 3 UID: 0 PID: 6205 Comm: syz.3.52 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 59.609775][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.609782][ T6205] Call Trace: [ 59.609786][ T6205] [ 59.609790][ T6205] dump_stack_lvl+0x16c/0x1f0 [ 59.609809][ T6205] should_fail_ex+0x512/0x640 [ 59.609824][ T6205] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 59.609841][ T6205] should_failslab+0xc2/0x120 [ 59.609857][ T6205] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 59.609871][ T6205] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 59.609888][ T6205] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 59.609901][ T6205] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 59.609919][ T6205] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 59.609939][ T6205] mmu_topup_memory_caches+0x25/0x170 [ 59.609954][ T6205] kvm_mmu_load+0xd9/0x22a0 [ 59.609968][ T6205] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 59.609979][ T6205] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 59.609991][ T6205] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 59.610003][ T6205] ? __pfx_kvm_mmu_load+0x10/0x10 [ 59.610016][ T6205] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 59.610032][ T6205] ? kvm_check_and_inject_events+0x71c/0x1310 [ 59.610049][ T6205] vcpu_run+0x34eb/0x5500 [ 59.610060][ T6205] ? kvm_mmu_post_init_vm+0x269/0x370 [ 59.610076][ T6205] ? __lock_acquire+0xb8a/0x1c90 [ 59.610090][ T6205] ? __pfx_vcpu_run+0x10/0x10 [ 59.610105][ T6205] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 59.610118][ T6205] ? __local_bh_enable_ip+0xa4/0x120 [ 59.610135][ T6205] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 59.610148][ T6205] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 59.610166][ T6205] kvm_vcpu_ioctl+0x5eb/0x1690 [ 59.610181][ T6205] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.610211][ T6205] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 59.610228][ T6205] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.610249][ T6205] ? hook_file_ioctl_common+0x145/0x410 [ 59.610263][ T6205] ? selinux_file_ioctl+0x180/0x270 [ 59.610277][ T6205] ? selinux_file_ioctl+0xb4/0x270 [ 59.610292][ T6205] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.610307][ T6205] __x64_sys_ioctl+0x18e/0x210 [ 59.610320][ T6205] do_syscall_64+0xcd/0x4c0 [ 59.610337][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.610348][ T6205] RIP: 0033:0x7fae6438e929 [ 59.610357][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.610368][ T6205] RSP: 002b:00007fae651ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.610381][ T6205] RAX: ffffffffffffffda RBX: 00007fae645b5fa0 RCX: 00007fae6438e929 [ 59.610388][ T6205] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 59.610394][ T6205] RBP: 00007fae651ed090 R08: 0000000000000000 R09: 0000000000000000 [ 59.610400][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.610406][ T6205] R13: 0000000000000000 R14: 00007fae645b5fa0 R15: 00007ffc2a9737a8 [ 59.610419][ T6205] [ 59.929797][ T6232] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 60.018512][ T6232] hsr_slave_0 (unregistering): left promiscuous mode [ 60.178519][ T6240] vlan2: entered promiscuous mode [ 60.180092][ T6240] bond0: entered promiscuous mode [ 60.181618][ T6240] bond_slave_0: entered promiscuous mode [ 60.186560][ T6240] bond_slave_1: entered promiscuous mode [ 60.267116][ T6249] Zero length message leads to an empty skb [ 60.286434][ T6240] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 60.415608][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 60.416208][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 60.454034][ T6256] tls_set_device_offload: netdev not found [ 60.532840][ T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.624332][ T6264] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.682332][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 60.712689][ T53] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 60.715536][ T53] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 60.718322][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.722577][ T53] usb 5-1: config 0 descriptor?? [ 60.926482][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 60.926492][ T40] audit: type=1400 audit(1752414322.367:262): avc: denied { mounton } for pid=6239 comm="syz.0.63" path="/proc/49/task" dev="proc" ino=11347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 61.021453][ T40] audit: type=1400 audit(1752414322.457:263): avc: denied { mount } for pid=6274 comm="syz.3.72" name="/" dev="ramfs" ino=10065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.031522][ T40] audit: type=1400 audit(1752414322.467:264): avc: denied { mounton } for pid=6274 comm="syz.3.72" path="/file1" dev="ramfs" ino=9139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 61.077842][ T40] audit: type=1400 audit(1752414322.517:265): avc: denied { mount } for pid=6276 comm="syz.3.73" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 61.217535][ T40] audit: type=1400 audit(1752414322.657:266): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 61.239958][ T40] audit: type=1400 audit(1752414322.677:267): avc: denied { read write } for pid=6279 comm="syz.3.74" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.240629][ T6280] UHID_CREATE from different security context by process 62 (syz.3.74), this is not allowed. [ 61.246789][ T40] audit: type=1400 audit(1752414322.677:268): avc: denied { open } for pid=6279 comm="syz.3.74" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.321881][ T40] audit: type=1400 audit(1752414322.757:269): avc: denied { create } for pid=6285 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.327795][ T40] audit: type=1400 audit(1752414322.757:270): avc: denied { bind } for pid=6285 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.439082][ T6296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.441730][ T6299] syz.3.77 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.448110][ T6296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=6296 comm=syz.1.78 [ 61.501626][ T6302] FAULT_INJECTION: forcing a failure. [ 61.501626][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 61.507647][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.3.79 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 61.507663][ T6302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.507670][ T6302] Call Trace: [ 61.507674][ T6302] [ 61.507678][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 61.507698][ T6302] should_fail_ex+0x512/0x640 [ 61.507714][ T6302] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 61.507732][ T6302] should_failslab+0xc2/0x120 [ 61.507749][ T6302] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 61.507763][ T6302] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 61.507781][ T6302] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 61.507796][ T6302] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 61.507815][ T6302] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 61.507836][ T6302] mmu_topup_memory_caches+0x25/0x170 [ 61.507852][ T6302] kvm_mmu_load+0xd9/0x22a0 [ 61.507866][ T6302] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 61.507878][ T6302] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 61.507891][ T6302] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 61.507903][ T6302] ? __pfx_kvm_mmu_load+0x10/0x10 [ 61.507917][ T6302] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 61.507935][ T6302] ? kvm_check_and_inject_events+0x71c/0x1310 [ 61.507952][ T6302] vcpu_run+0x34eb/0x5500 [ 61.507964][ T6302] ? kvm_mmu_post_init_vm+0x269/0x370 [ 61.507981][ T6302] ? __lock_acquire+0xb8a/0x1c90 [ 61.508002][ T6302] ? __pfx_vcpu_run+0x10/0x10 [ 61.508025][ T6302] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 61.508043][ T6302] ? __local_bh_enable_ip+0xa4/0x120 [ 61.508061][ T6302] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 61.508075][ T6302] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 61.508093][ T6302] kvm_vcpu_ioctl+0x5eb/0x1690 [ 61.508110][ T6302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.508128][ T6302] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 61.508147][ T6302] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.508168][ T6302] ? hook_file_ioctl_common+0x145/0x410 [ 61.508183][ T6302] ? selinux_file_ioctl+0x180/0x270 [ 61.508199][ T6302] ? selinux_file_ioctl+0xb4/0x270 [ 61.508215][ T6302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.508231][ T6302] __x64_sys_ioctl+0x18e/0x210 [ 61.508245][ T6302] do_syscall_64+0xcd/0x4c0 [ 61.508264][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.508275][ T6302] RIP: 0033:0x7fae6438e929 [ 61.508285][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.508295][ T6302] RSP: 002b:00007fae651ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.508306][ T6302] RAX: ffffffffffffffda RBX: 00007fae645b5fa0 RCX: 00007fae6438e929 [ 61.508313][ T6302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 61.508320][ T6302] RBP: 00007fae651ed090 R08: 0000000000000000 R09: 0000000000000000 [ 61.508326][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.508332][ T6302] R13: 0000000000000000 R14: 00007fae645b5fa0 R15: 00007ffc2a9737a8 [ 61.508346][ T6302] [ 61.595490][ T6304] mmap: syz.1.80 (6304) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.604871][ T5962] Bluetooth: hci3: command 0x040f tx timeout [ 61.886823][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 61.894254][ T6319] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.896966][ T6319] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.899591][ T6319] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.902334][ T6319] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.906342][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 61.961904][ T40] audit: type=1400 audit(1752414323.397:271): avc: denied { create } for pid=6325 comm="syz.3.86" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.063966][ T6335] tipc: Started in network mode [ 62.066008][ T6335] tipc: Node identity ac1414aa, cluster identity 4711 [ 62.069764][ T6335] tipc: Enabled bearer , priority 10 [ 62.085872][ T6335] overlay: Bad value for 'workdir' [ 62.242089][ T6343] FAULT_INJECTION: forcing a failure. [ 62.242089][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 62.247307][ T6343] CPU: 3 UID: 0 PID: 6343 Comm: syz.3.91 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 62.247330][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.247341][ T6343] Call Trace: [ 62.247347][ T6343] [ 62.247354][ T6343] dump_stack_lvl+0x16c/0x1f0 [ 62.247383][ T6343] should_fail_ex+0x512/0x640 [ 62.247405][ T6343] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 62.247431][ T6343] should_failslab+0xc2/0x120 [ 62.247456][ T6343] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 62.247476][ T6343] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 62.247500][ T6343] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 62.247522][ T6343] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 62.247556][ T6343] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 62.247588][ T6343] mmu_topup_memory_caches+0x25/0x170 [ 62.247612][ T6343] kvm_mmu_load+0xd9/0x22a0 [ 62.247634][ T6343] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 62.247653][ T6343] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 62.247673][ T6343] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 62.247692][ T6343] ? __pfx_kvm_mmu_load+0x10/0x10 [ 62.247711][ T6343] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 62.247739][ T6343] ? kvm_check_and_inject_events+0x71c/0x1310 [ 62.247765][ T6343] vcpu_run+0x34eb/0x5500 [ 62.247784][ T6343] ? kvm_mmu_post_init_vm+0x269/0x370 [ 62.247810][ T6343] ? __lock_acquire+0xb8a/0x1c90 [ 62.247834][ T6343] ? __pfx_vcpu_run+0x10/0x10 [ 62.247859][ T6343] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 62.247879][ T6343] ? __local_bh_enable_ip+0xa4/0x120 [ 62.247906][ T6343] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 62.247928][ T6343] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 62.247957][ T6343] kvm_vcpu_ioctl+0x5eb/0x1690 [ 62.247982][ T6343] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.248012][ T6343] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 62.248039][ T6343] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.248072][ T6343] ? hook_file_ioctl_common+0x145/0x410 [ 62.248096][ T6343] ? selinux_file_ioctl+0x180/0x270 [ 62.248117][ T6343] ? selinux_file_ioctl+0xb4/0x270 [ 62.248142][ T6343] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.248165][ T6343] __x64_sys_ioctl+0x18e/0x210 [ 62.248188][ T6343] do_syscall_64+0xcd/0x4c0 [ 62.248215][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.248232][ T6343] RIP: 0033:0x7fae6438e929 [ 62.248248][ T6343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.248264][ T6343] RSP: 002b:00007fae651ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.248281][ T6343] RAX: ffffffffffffffda RBX: 00007fae645b5fa0 RCX: 00007fae6438e929 [ 62.248291][ T6343] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 62.248301][ T6343] RBP: 00007fae651ed090 R08: 0000000000000000 R09: 0000000000000000 [ 62.248311][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.248321][ T6343] R13: 0000000000000000 R14: 00007fae645b5fa0 R15: 00007ffc2a9737a8 [ 62.248345][ T6343] [ 62.312474][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.492402][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 62.497012][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 62.499922][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.502775][ T24] usb 6-1: Product: syz [ 62.504151][ T24] usb 6-1: Manufacturer: syz [ 62.505634][ T24] usb 6-1: SerialNumber: syz [ 62.512307][ T24] usb 6-1: config 0 descriptor?? [ 62.569806][ T6349] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 62.573822][ T6349] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 62.578109][ T6349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.716248][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 62.737235][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 62.743278][ T24] usb 6-1: USB disconnect, device number 2 [ 62.832247][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.895443][ T5962] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 63.093402][ T6364] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.168707][ T53] usb 5-1: string descriptor 0 read error: -71 [ 63.172992][ T53] usb 5-1: USB disconnect, device number 5 [ 63.193306][ T5989] tipc: Node number set to 2886997162 [ 63.372535][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 63.498381][ T6381] overlay: filesystem on ./bus not supported as upperdir [ 63.522381][ T53] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.545151][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 63.548116][ T24] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 63.550940][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 63.554860][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 63.558573][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 63.563110][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 63.566930][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.571328][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.574192][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.704776][ T6368] NILFS (nullb0): couldn't find nilfs on the device [ 63.712393][ T53] usb 5-1: unable to get BOS descriptor or descriptor too short [ 63.715554][ T53] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 63.717970][ T53] usb 5-1: can't read configurations, error -71 [ 63.782394][ T5989] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.782545][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 63.787360][ T24] usbtmc 8-1:16.0: can't read capabilities [ 63.932367][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 63.935720][ T5989] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 63.938234][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 63.941533][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 63.944635][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 63.947974][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 63.951102][ T5989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.954993][ T5989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.957716][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.984980][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 63.989906][ T6366] usbtmc 8-1:16.0: Unable to send data, error -71 [ 63.993196][ T838] usb 8-1: USB disconnect, device number 6 [ 64.165390][ T5989] usb 6-1: GET_CAPABILITIES returned 0 [ 64.167430][ T5989] usbtmc 6-1:16.0: can't read capabilities [ 64.367470][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 64.371168][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 64.374886][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 64.379521][ T6383] usbtmc 6-1:16.0: Unable to send data, error -71 [ 64.383812][ T24] usb 6-1: USB disconnect, device number 3 [ 64.626262][ T6391] tipc: Failed to remove unknown binding: 66,1,1/2886997162:4202319359/4202319361 [ 64.631163][ T6391] tipc: Failed to remove unknown binding: 66,1,1/2886997162:4202319359/4202319361 [ 64.634579][ T6391] tipc: Failed to remove unknown binding: 66,1,1/2886997162:4202319359/4202319361 [ 64.669591][ T6393] hfsplus: unable to find HFS+ superblock [ 64.812516][ T6397] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 64.818169][ T6397] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 64.929093][ T6407] ptrace attach of "/syz-executor exec"[5958] was attempted by "/syz-executor exec"[6407] [ 64.971020][ T6416] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 64.974359][ T6416] netlink: 152 bytes leftover after parsing attributes in process `syz.1.113'. [ 64.979692][ T6416] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 64.987225][ T6416] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 64.990389][ T6416] netlink: 500 bytes leftover after parsing attributes in process `syz.1.113'. [ 64.995633][ T6418] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 64.998087][ T6418] netlink: 152 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.001256][ T6418] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 65.056613][ T6423] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 65.211372][ T6437] 9p: Unknown access argument 18446744073709551615: -34 [ 65.353289][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.531912][ T6457] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.545818][ T6456] capability: warning: `syz.1.123' uses deprecated v2 capabilities in a way that may be insecure [ 65.607166][ T6458] input: syz0 as /devices/virtual/input/input6 [ 65.882025][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 65.886087][ T6475] MPI: mpi too large (16392 bits) [ 65.887844][ T6475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6475 comm=syz.3.124 [ 65.891640][ T6475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6475 comm=syz.3.124 [ 65.936567][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 65.936580][ T40] audit: type=1400 audit(1752414327.377:330): avc: denied { connect } for pid=6478 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.952500][ T40] audit: type=1400 audit(1752414327.377:331): avc: denied { write } for pid=6478 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.988626][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.126'. [ 65.991352][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 65.995644][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.126'. [ 65.998408][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.126'. [ 66.313571][ T6508] FAULT_INJECTION: forcing a failure. [ 66.313571][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 66.317775][ T6508] CPU: 3 UID: 0 PID: 6508 Comm: syz.0.130 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 66.317791][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.317797][ T6508] Call Trace: [ 66.317803][ T6508] [ 66.317807][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 66.317828][ T6508] should_fail_ex+0x512/0x640 [ 66.317842][ T6508] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 66.317860][ T6508] should_failslab+0xc2/0x120 [ 66.317876][ T6508] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 66.317890][ T6508] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 66.317906][ T6508] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 66.317921][ T6508] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 66.317939][ T6508] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 66.317959][ T6508] mmu_topup_memory_caches+0x25/0x170 [ 66.317974][ T6508] kvm_mmu_load+0xd9/0x22a0 [ 66.317987][ T6508] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 66.317998][ T6508] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 66.318010][ T6508] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 66.318022][ T6508] ? __pfx_kvm_mmu_load+0x10/0x10 [ 66.318034][ T6508] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 66.318051][ T6508] ? kvm_check_and_inject_events+0x71c/0x1310 [ 66.318067][ T6508] vcpu_run+0x34eb/0x5500 [ 66.318081][ T6508] ? __lock_acquire+0xb8a/0x1c90 [ 66.318096][ T6508] ? __pfx_vcpu_run+0x10/0x10 [ 66.318111][ T6508] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 66.318124][ T6508] ? __local_bh_enable_ip+0xa4/0x120 [ 66.318140][ T6508] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 66.318154][ T6508] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 66.318171][ T6508] kvm_vcpu_ioctl+0x5eb/0x1690 [ 66.318186][ T6508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.318204][ T6508] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 66.318221][ T6508] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.318241][ T6508] ? hook_file_ioctl_common+0x145/0x410 [ 66.318255][ T6508] ? selinux_file_ioctl+0x180/0x270 [ 66.318275][ T6508] ? selinux_file_ioctl+0xb4/0x270 [ 66.318290][ T6508] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.318304][ T6508] __x64_sys_ioctl+0x18e/0x210 [ 66.318318][ T6508] do_syscall_64+0xcd/0x4c0 [ 66.318335][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.318346][ T6508] RIP: 0033:0x7ff13438e929 [ 66.318355][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.318365][ T6508] RSP: 002b:00007ff1351be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.318375][ T6508] RAX: ffffffffffffffda RBX: 00007ff1345b5fa0 RCX: 00007ff13438e929 [ 66.318382][ T6508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 66.318388][ T6508] RBP: 00007ff1351be090 R08: 0000000000000000 R09: 0000000000000000 [ 66.318394][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.318400][ T6508] R13: 0000000000000000 R14: 00007ff1345b5fa0 R15: 00007ffe94321918 [ 66.318413][ T6508] [ 66.682541][ T6485] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.783509][ T40] audit: type=1400 audit(1752414328.227:332): avc: denied { ioctl } for pid=6523 comm="syz.3.136" path="socket:[11150]" dev="sockfs" ino=11150 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.813496][ T6485] usb 6-1: device descriptor read/64, error -71 [ 66.872604][ T839] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 66.883049][ T6534] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.042715][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 67.049607][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.051989][ T839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 67.052350][ T6485] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.055998][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 67.061997][ T839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.065884][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.069326][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.072870][ T839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 67.076911][ T839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 67.079736][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.082044][ T839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 67.085584][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 67.089070][ T839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.092939][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.096585][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.100200][ T839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 67.102114][ T6542] FAULT_INJECTION: forcing a failure. [ 67.102114][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 67.104429][ T839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 67.105175][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 67.109907][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.3.140 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 67.109930][ T6542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.109939][ T6542] Call Trace: [ 67.109945][ T6542] [ 67.109951][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 67.109981][ T6542] should_fail_ex+0x512/0x640 [ 67.110004][ T6542] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 67.110027][ T6542] should_failslab+0xc2/0x120 [ 67.110054][ T6542] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 67.110075][ T6542] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 67.110100][ T6542] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 67.110118][ T6542] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.110164][ T6542] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.110197][ T6542] mmu_topup_memory_caches+0x25/0x170 [ 67.110220][ T6542] kvm_mmu_load+0xd9/0x22a0 [ 67.110240][ T6542] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 67.110260][ T6542] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 67.110278][ T6542] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 67.110296][ T6542] ? __pfx_kvm_mmu_load+0x10/0x10 [ 67.110317][ T6542] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 67.110344][ T6542] ? kvm_check_and_inject_events+0x71c/0x1310 [ 67.110372][ T6542] vcpu_run+0x34eb/0x5500 [ 67.110388][ T6542] ? kvm_mmu_post_init_vm+0x269/0x370 [ 67.110415][ T6542] ? __lock_acquire+0xb8a/0x1c90 [ 67.110434][ T6542] ? __pfx_vcpu_run+0x10/0x10 [ 67.110454][ T6542] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 67.110471][ T6542] ? __local_bh_enable_ip+0xa4/0x120 [ 67.110498][ T6542] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 67.110518][ T6542] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 67.110550][ T6542] kvm_vcpu_ioctl+0x5eb/0x1690 [ 67.110576][ T6542] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.110604][ T6542] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 67.110628][ T6542] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.110660][ T6542] ? hook_file_ioctl_common+0x145/0x410 [ 67.110682][ T6542] ? selinux_file_ioctl+0x180/0x270 [ 67.110704][ T6542] ? selinux_file_ioctl+0xb4/0x270 [ 67.110729][ T6542] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.110753][ T6542] __x64_sys_ioctl+0x18e/0x210 [ 67.110775][ T6542] do_syscall_64+0xcd/0x4c0 [ 67.110799][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.110816][ T6542] RIP: 0033:0x7fae6438e929 [ 67.110829][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.110846][ T6542] RSP: 002b:00007fae651ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.110864][ T6542] RAX: ffffffffffffffda RBX: 00007fae645b5fa0 RCX: 00007fae6438e929 [ 67.110877][ T6542] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 67.110886][ T6542] RBP: 00007fae651ed090 R08: 0000000000000000 R09: 0000000000000000 [ 67.110897][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.110907][ T6542] R13: 0000000000000000 R14: 00007fae645b5fa0 R15: 00007ffc2a9737a8 [ 67.110928][ T6542] [ 67.182480][ T6485] usb 6-1: device descriptor read/64, error -71 [ 67.184121][ T839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 67.227968][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 67.231701][ T839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.235435][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.238989][ T839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.245984][ T839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 67.251279][ T839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 67.256587][ T839] usb 5-1: string descriptor 0 read error: -22 [ 67.258648][ T839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 67.261834][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.272800][ T839] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 67.292724][ T6485] usb usb6-port1: attempt power cycle [ 67.348288][ T40] audit: type=1400 audit(1752414328.787:333): avc: denied { read } for pid=6546 comm="syz.3.141" path="socket:[11229]" dev="sockfs" ino=11229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.527518][ T40] audit: type=1400 audit(1752414328.967:334): avc: denied { create } for pid=6515 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.534796][ T40] audit: type=1400 audit(1752414328.977:335): avc: denied { write } for pid=6515 comm="syz.0.132" path="socket:[13530]" dev="sockfs" ino=13530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.642437][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.642461][ T5989] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.647217][ T6485] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.650302][ T5989] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 67.672787][ T6485] usb 6-1: device descriptor read/8, error -71 [ 67.923081][ T6485] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 67.943101][ T6485] usb 6-1: device descriptor read/8, error -71 [ 68.052617][ T6485] usb usb6-port1: unable to enumerate USB device [ 69.492648][ T40] audit: type=1400 audit(1752414330.937:336): avc: denied { getopt } for pid=6550 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.499361][ T40] audit: type=1400 audit(1752414330.937:337): avc: denied { ioctl } for pid=6550 comm="syz.1.142" path="socket:[12591]" dev="sockfs" ino=12591 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.610363][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 69.684560][ T40] audit: type=1400 audit(1752414331.127:338): avc: denied { write } for pid=6556 comm="syz.1.145" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.694330][ T40] audit: type=1400 audit(1752414331.127:339): avc: denied { ioctl } for pid=6556 comm="syz.1.145" path="socket:[11234]" dev="sockfs" ino=11234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.715859][ T6561] xt_hashlimit: size too large, truncated to 1048576 [ 69.722493][ T5962] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.724716][ T5989] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 69.726661][ T5989] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 71.088165][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.090363][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564265][ T6545] usb 5-1: USB disconnect, device number 8 [ 71.596739][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 71.596750][ T40] audit: type=1400 audit(1752414333.037:343): avc: denied { read append } for pid=6582 comm="syz.0.154" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.607196][ T40] audit: type=1400 audit(1752414333.037:344): avc: denied { open } for pid=6582 comm="syz.0.154" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.666562][ T6585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294574080 (8589148160 ns) > initial count (99858 ns). Using initial count to start timer. [ 71.682382][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.802459][ T5989] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 71.802480][ T5962] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.804412][ T5989] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 71.842581][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 71.846338][ T53] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 71.848874][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 71.852172][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.855985][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 71.859482][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 71.862823][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.866799][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.869495][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.992490][ T6545] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 72.076276][ T53] usb 6-1: GET_CAPABILITIES returned 0 [ 72.078033][ T53] usbtmc 6-1:16.0: can't read capabilities [ 72.142715][ T6545] usb 5-1: Using ep0 maxpacket: 8 [ 72.145624][ T6545] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 72.148832][ T6545] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.152911][ T6545] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.156074][ T6545] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.159488][ T6545] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.163494][ T6545] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.166378][ T6545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.279952][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.282834][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.285834][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.288748][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.291492][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.294334][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.297671][ T6579] usbtmc 6-1:16.0: Unable to send data, error -71 [ 72.301594][ T53] usb 6-1: USB disconnect, device number 8 [ 72.381316][ T6585] fuse: Unknown parameter '' [ 72.388201][ T6545] usb 5-1: usb_control_msg returned -32 [ 72.390149][ T6545] usbtmc 5-1:16.0: can't read capabilities [ 72.741202][ T6586] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 72.748736][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.752115][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.930721][ T40] audit: type=1400 audit(1752414334.367:345): avc: denied { name_bind } for pid=6590 comm="syz.1.157" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.945569][ T6033] usb 5-1: USB disconnect, device number 9 [ 73.550062][ T6595] overlayfs: cannot append lower layer [ 73.552697][ T6595] tmpfs: Bad value for 'mpol' [ 73.556650][ T40] audit: type=1400 audit(1752414334.997:346): avc: denied { read } for pid=6594 comm="syz.0.158" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.564662][ T40] audit: type=1400 audit(1752414334.997:347): avc: denied { open } for pid=6594 comm="syz.0.158" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.617612][ T40] audit: type=1400 audit(1752414335.057:348): avc: denied { append } for pid=6594 comm="syz.0.158" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.882372][ T5962] Bluetooth: hci3: command 0x040f tx timeout [ 73.884616][ T5989] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 73.887218][ T5989] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 73.896298][ T6600] netlink: zone id is out of range [ 73.898089][ T6600] netlink: zone id is out of range [ 73.900126][ T6600] netlink: zone id is out of range [ 73.901861][ T6600] netlink: zone id is out of range [ 73.903824][ T6600] netlink: zone id is out of range [ 73.905552][ T6600] netlink: zone id is out of range [ 73.907442][ T6600] netlink: zone id is out of range [ 73.909194][ T6600] netlink: zone id is out of range [ 73.910829][ T6600] netlink: zone id is out of range [ 73.912793][ T6600] netlink: zone id is out of range [ 74.009115][ T5959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.018080][ T5959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.022473][ T5959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.026796][ T5959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.031201][ T5959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.041217][ T5955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.044897][ T5955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.048298][ T5955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.052813][ T5955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.063277][ T5955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.159570][ T40] audit: type=1400 audit(1752414335.597:349): avc: denied { setopt } for pid=6604 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.196635][ T6605] netlink: 76 bytes leftover after parsing attributes in process `syz.0.160'. [ 74.231958][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.246108][ T6581] chnl_net:caif_netlink_parms(): no params data found [ 74.269925][ T40] audit: type=1400 audit(1752414335.707:350): avc: denied { setattr } for pid=6604 comm="syz.0.160" name="/" dev="9p" ino=38273063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.322012][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.347735][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.350181][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.352696][ T6581] bridge_slave_0: entered allmulticast mode [ 74.355491][ T6581] bridge_slave_0: entered promiscuous mode [ 74.358776][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.361304][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.364525][ T6581] bridge_slave_1: entered allmulticast mode [ 74.369389][ T6581] bridge_slave_1: entered promiscuous mode [ 74.419390][ T5959] Bluetooth: hci1: sending frame failed (-49) [ 74.421924][ T5955] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 74.431432][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.442593][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.469147][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.501597][ T6581] team0: Port device team_slave_0 added [ 74.506815][ T6581] team0: Port device team_slave_1 added [ 74.527870][ T40] audit: type=1400 audit(1752414335.967:351): avc: denied { accept } for pid=6619 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.583050][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.585211][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.593543][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.606382][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.634278][ T6625] netlink: 172 bytes leftover after parsing attributes in process `syz.0.165'. [ 74.637593][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.640304][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.649271][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.663864][ T40] audit: type=1400 audit(1752414336.107:352): avc: denied { read } for pid=6633 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.699312][ T6581] hsr_slave_0: entered promiscuous mode [ 74.704159][ T6581] hsr_slave_1: entered promiscuous mode [ 74.706302][ T6581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.708657][ T6581] Cannot create hsr debugfs directory [ 74.731538][ T6636] loop6: detected capacity change from 0 to 63 [ 74.743094][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.748606][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.751773][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.756126][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.758864][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.869842][ T12] bridge_slave_1: left allmulticast mode [ 74.871934][ T12] bridge_slave_1: left promiscuous mode [ 74.875955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.882528][ T12] bridge_slave_0: left allmulticast mode [ 74.884519][ T12] bridge_slave_0: left promiscuous mode [ 74.886351][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.117134][ T12] team0: Port device bond0 removed [ 75.120817][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.125888][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.130102][ T12] bond0 (unregistering): Released all slaves [ 75.428515][ T12] hsr_slave_0: left promiscuous mode [ 75.431506][ T12] hsr_slave_1: left promiscuous mode [ 75.434316][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.437364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.441409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.444631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.467881][ T12] veth1_macvtap: left promiscuous mode [ 75.469834][ T12] veth0_macvtap: left promiscuous mode [ 75.471617][ T12] veth1_vlan: left promiscuous mode [ 75.473659][ T12] veth0_vlan: left promiscuous mode [ 75.790450][ T6657] hfs: unable to load iocharset "io#harset" [ 76.042558][ T5962] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.106803][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.124837][ T5962] Bluetooth: hci5: command tx timeout [ 76.163653][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 76.167194][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 76.180381][ T12] team0 (unregistering): Port device team_slave_0 removed [ 76.225343][ T6675] Cannot find add_set index 0 as target [ 76.716461][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 76.716477][ T40] audit: type=1400 audit(1752414338.157:360): avc: denied { sqpoll } for pid=6676 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.727370][ T6581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.731595][ T6581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.738670][ T6581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.748894][ T6581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.819498][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.839933][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.845540][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.847753][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.856747][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.859086][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.871723][ T6695] netlink: 'syz.3.179': attribute type 5 has an invalid length. [ 76.887538][ T6695] program syz.3.179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.024709][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.240792][ T6581] veth0_vlan: entered promiscuous mode [ 77.249196][ T6581] veth1_vlan: entered promiscuous mode [ 77.270110][ T6581] veth0_macvtap: entered promiscuous mode [ 77.275255][ T6581] veth1_macvtap: entered promiscuous mode [ 77.298309][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.307437][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.312138][ T6581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.315134][ T6581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317936][ T6581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.320693][ T6581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.382887][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.385751][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.406594][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.412413][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.427927][ T40] audit: type=1400 audit(1752414338.868:361): avc: denied { mounton } for pid=6581 comm="syz-executor" path="/syzkaller.QEzsDT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.497416][ T40] audit: type=1400 audit(1752414338.938:362): avc: denied { bind } for pid=6744 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.505646][ T40] audit: type=1400 audit(1752414338.948:363): avc: denied { read } for pid=6744 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.508681][ T6745] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.153'. [ 77.511739][ T40] audit: type=1400 audit(1752414338.948:364): avc: denied { ioctl } for pid=6744 comm="syz.4.153" path="socket:[13246]" dev="sockfs" ino=13246 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.612482][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 77.760351][ T6762] XFS (nbd0): no-recovery mounts must be read-only. [ 77.761863][ T40] audit: type=1400 audit(1752414339.198:365): avc: denied { append } for pid=6760 comm="syz.4.188" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.762516][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 77.763937][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.772439][ T40] audit: type=1400 audit(1752414339.198:366): avc: denied { create } for pid=6760 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.774220][ T6763] program syz.4.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.778217][ T40] audit: type=1400 audit(1752414339.198:367): avc: denied { write } for pid=6760 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.784704][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.784731][ T53] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 77.803089][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.813002][ T6763] netlink: 'syz.4.188': attribute type 27 has an invalid length. [ 77.818017][ T53] usb 6-1: config 0 descriptor?? [ 77.839111][ T40] audit: type=1400 audit(1752414339.278:368): avc: denied { create } for pid=6766 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.853689][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.853752][ T40] audit: type=1400 audit(1752414339.298:369): avc: denied { write } for pid=6766 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.857075][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.864364][ T6770] netlink: 96 bytes leftover after parsing attributes in process `syz.4.188'. [ 77.933631][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.947316][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.997612][ T6763] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.000426][ T6763] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.004059][ T6763] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.006853][ T6763] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.068011][ T6780] tmpfs: Bad value for 'mpol' [ 78.202351][ T5962] Bluetooth: hci5: command tx timeout [ 78.240681][ T53] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 78.361488][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.376664][ T6814] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 78.377651][ T53] usb 6-1: USB disconnect, device number 9 [ 78.702850][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 79.181888][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 79.185548][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 79.297982][ T6875] use of bytesused == 0 is deprecated and will be removed in the future, [ 79.301857][ T6875] use the actual size instead. [ 79.567063][ C2] ata1: illegal qc_active transition (00000000->00020000) [ 79.601898][ T6886] netlink: 52 bytes leftover after parsing attributes in process `syz.3.217'. [ 79.606130][ T6886] net_ratelimit: 395 callbacks suppressed [ 79.606144][ T6886] openvswitch: netlink: Missing key (keys=40, expected=100) [ 79.609850][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 79.703325][ T6901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6901 comm=syz.1.219 [ 79.829931][ T6901] netlink: 'syz.1.219': attribute type 5 has an invalid length. [ 79.896107][ T1113] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 79.901121][ T1113] ata1.00: configured for UDMA/100 [ 80.292390][ T5962] Bluetooth: hci5: command tx timeout [ 80.535608][ T6945] loop9: detected capacity change from 0 to 8 [ 80.540487][ T6945] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 80.542730][ T6945] loop9: partition table partially beyond EOD, truncated [ 80.545617][ T6945] loop9: p1 size 81768186 extends beyond EOD, truncated [ 80.568127][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 80.637588][ T6950] program syz.1.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.948501][ T6970] loop6: detected capacity change from 0 to 524287999 [ 81.261102][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 81.299521][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 81.303839][ T6983] netlink: 48 bytes leftover after parsing attributes in process `syz.3.246'. [ 81.334942][ T10] cfg80211: failed to load regulatory.db [ 81.421515][ T7001] xt_hashlimit: invalid rate [ 81.480248][ T7004] binder: BINDER_SET_CONTEXT_MGR already set [ 81.482815][ T7004] binder: 7003:7004 ioctl 4018620d 200000000040 returned -16 [ 81.518122][ T7010] syz_tun: entered allmulticast mode [ 81.524578][ T7008] syz_tun: left allmulticast mode [ 81.579717][ T7013] netlink: 328 bytes leftover after parsing attributes in process `syz.3.258'. [ 81.581349][ T7017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.586724][ T7017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.589689][ T7017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.593656][ T7017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.596900][ T7017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.599568][ T7017] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.608120][ T7013] Bluetooth: MGMT ver 1.23 [ 81.650457][ T7021] input: syz1 as /devices/virtual/input/input8 [ 81.717659][ T7025] bond0: option mode: unable to set because the bond device has slaves [ 81.735542][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 81.735554][ T40] audit: type=1400 audit(1752414343.178:403): avc: denied { ioctl } for pid=7026 comm="syz.3.265" path="socket:[18586]" dev="sockfs" ino=18586 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.770972][ T7033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.857204][ T7038] netlink: 'syz.3.268': attribute type 10 has an invalid length. [ 81.859825][ T7038] hsr_slave_0: entered allmulticast mode [ 81.863280][ T7038] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 82.092317][ T40] audit: type=1400 audit(1752414343.528:404): avc: denied { setattr } for pid=7058 comm="syz.4.271" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.099297][ T40] audit: type=1400 audit(1752414343.528:405): avc: denied { connect } for pid=7058 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.117593][ T40] audit: type=1400 audit(1752414343.538:406): avc: denied { ioctl } for pid=7058 comm="syz.4.271" path="socket:[16775]" dev="sockfs" ino=16775 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.270175][ T7070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7070 comm=syz.0.274 [ 82.304951][ T7072] binder: 7071:7072 ioctl c018620c 2000000000c0 returned -22 [ 82.311019][ T40] audit: type=1400 audit(1752414343.748:407): avc: denied { call } for pid=7071 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.318121][ T40] audit: type=1400 audit(1752414343.758:408): avc: denied { getopt } for pid=7071 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.372710][ T5962] Bluetooth: hci5: command tx timeout [ 82.381966][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 82.422847][ T7079] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.428780][ T7079] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.277'. [ 82.492912][ T40] audit: type=1400 audit(1752414343.928:409): avc: denied { bind } for pid=7083 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.499129][ T40] audit: type=1400 audit(1752414343.938:410): avc: denied { listen } for pid=7083 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.505639][ T40] audit: type=1400 audit(1752414343.938:411): avc: denied { accept } for pid=7083 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.525557][ T40] audit: type=1400 audit(1752414343.968:412): avc: denied { bind } for pid=7091 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.535806][ T7093] netlink: 68 bytes leftover after parsing attributes in process `syz.3.283'. [ 82.538580][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 82.568528][ T5962] Bluetooth: hci5: Malformed LE Event: 0x1b [ 82.810064][ T7114] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 82.962884][ T7128] comedi comedi1: dt2817: I/O port conflict (0x3,5) [ 83.031359][ T7131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.042427][ T838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 83.202395][ T838] usb 9-1: Using ep0 maxpacket: 8 [ 83.205711][ T838] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.209512][ T838] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.212511][ T838] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.216371][ T838] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.221473][ T838] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.225029][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.430672][ T838] usb 9-1: GET_CAPABILITIES returned 0 [ 83.432585][ T838] usbtmc 9-1:16.0: can't read capabilities [ 83.655743][ T24] usb 9-1: USB disconnect, device number 3 [ 84.083262][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.095690][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.098883][ T7145] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 84.105190][ T7145] bond1: (slave vcan1): Error -95 calling set_mac_address [ 84.247046][ T838] libceph: connect (1)[c::]:6789 error -101 [ 84.249214][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 84.504312][ T838] libceph: connect (1)[c::]:6789 error -101 [ 84.506299][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 84.635608][ T7175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.801041][ T7187] syz.3.307: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.806240][ T7187] CPU: 2 UID: 0 PID: 7187 Comm: syz.3.307 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 84.806256][ T7187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.806263][ T7187] Call Trace: [ 84.806268][ T7187] [ 84.806272][ T7187] dump_stack_lvl+0x16c/0x1f0 [ 84.806311][ T7187] warn_alloc+0x248/0x3a0 [ 84.806328][ T7187] ? __pfx_warn_alloc+0x10/0x10 [ 84.806341][ T7187] ? __pfx_stack_trace_save+0x10/0x10 [ 84.806357][ T7187] ? stack_depot_save_flags+0x28/0xa40 [ 84.806381][ T7187] ? kasan_save_stack+0x42/0x60 [ 84.806394][ T7187] ? kasan_save_stack+0x33/0x60 [ 84.806407][ T7187] ? kasan_save_track+0x14/0x30 [ 84.806420][ T7187] ? xskq_create+0x52/0x1d0 [ 84.806433][ T7187] ? xsk_setsockopt+0x640/0x840 [ 84.806444][ T7187] ? do_sock_setsockopt+0x221/0x470 [ 84.806463][ T7187] ? xskq_create+0xfb/0x1d0 [ 84.806477][ T7187] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 84.806494][ T7187] ? xskq_create+0xfb/0x1d0 [ 84.806510][ T7187] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.806527][ T7187] ? xskq_create+0xfb/0x1d0 [ 84.806540][ T7187] vmalloc_user_noprof+0x9e/0xe0 [ 84.806551][ T7187] ? xskq_create+0xfb/0x1d0 [ 84.806564][ T7187] xskq_create+0xfb/0x1d0 [ 84.806578][ T7187] xsk_setsockopt+0x640/0x840 [ 84.806591][ T7187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.806603][ T7187] ? __lock_acquire+0x622/0x1c90 [ 84.806616][ T7187] ? selinux_socket_setsockopt+0x6a/0x80 [ 84.806631][ T7187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.806643][ T7187] do_sock_setsockopt+0x221/0x470 [ 84.806660][ T7187] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 84.806685][ T7187] __sys_setsockopt+0x1a0/0x230 [ 84.806702][ T7187] __x64_sys_setsockopt+0xbd/0x160 [ 84.806715][ T7187] ? syscall_trace_enter+0x89/0x260 [ 84.806728][ T7187] do_syscall_64+0xcd/0x4c0 [ 84.806745][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.806756][ T7187] RIP: 0033:0x7fae6438e929 [ 84.806765][ T7187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.806776][ T7187] RSP: 002b:00007fae651ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.806786][ T7187] RAX: ffffffffffffffda RBX: 00007fae645b5fa0 RCX: 00007fae6438e929 [ 84.806793][ T7187] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 84.806799][ T7187] RBP: 00007fae64410b39 R08: 0000000000000004 R09: 0000000000000000 [ 84.806805][ T7187] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.806811][ T7187] R13: 0000000000000000 R14: 00007fae645b5fa0 R15: 00007ffc2a9737a8 [ 84.806824][ T7187] [ 84.806828][ T7187] Mem-Info: [ 84.890260][ T7187] active_anon:12936 inactive_anon:0 isolated_anon:0 [ 84.890260][ T7187] active_file:2487 inactive_file:49879 isolated_file:0 [ 84.890260][ T7187] unevictable:1770 dirty:48 writeback:0 [ 84.890260][ T7187] slab_reclaimable:11707 slab_unreclaimable:71573 [ 84.890260][ T7187] mapped:26736 shmem:2406 pagetables:1511 [ 84.890260][ T7187] sec_pagetables:300 bounce:0 [ 84.890260][ T7187] kernel_misc_reclaimable:0 [ 84.890260][ T7187] free:445996 free_pcp:21379 free_cma:0 [ 84.904356][ T7187] Node 0 active_anon:51736kB inactive_anon:0kB active_file:9948kB inactive_file:199320kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:106944kB dirty:188kB writeback:0kB shmem:6088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:13200kB pagetables:5616kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 84.914801][ T7187] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.924734][ T7187] Node 0 DMA free:14960kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:88kB free_cma:0kB [ 84.934060][ T7187] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 84.935944][ T7187] Node 0 DMA32 free:170932kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51600kB inactive_anon:0kB active_file:9948kB inactive_file:199320kB unevictable:3544kB writepending:188kB present:2080628kB managed:1264184kB mlocked:8kB bounce:0kB free_pcp:60464kB local_pcp:8440kB free_cma:0kB [ 84.945883][ T7187] lowmem_reserve[]: 0 0 0 0 0 [ 84.947467][ T7187] Node 1 Normal free:1598092kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:24920kB local_pcp:36kB free_cma:0kB [ 84.957667][ T7187] lowmem_reserve[]: 0 0 0 0 0 [ 84.959217][ T7187] Node 0 DMA: 8*4kB (UM) 8*8kB (UM) 9*16kB (UM) 10*32kB (UM) 9*64kB (U) 6*128kB (U) 7*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 0*4096kB = 14960kB [ 84.964319][ T7187] Node 0 DMA32: 295*4kB (UME) 591*8kB (UME) 447*16kB (UME) 537*32kB (UME) 384*64kB (UME) 72*128kB (UME) 29*256kB (UME) 30*512kB (UME) 20*1024kB (UM) 11*2048kB (UME) 10*4096kB (UM) = 170788kB [ 84.970179][ T7187] Node 1 Normal: 26*4kB (UME) 40*8kB (UME) 29*16kB (UME) 89*32kB (UME) 30*64kB (UME) 19*128kB (UME) 11*256kB (UM) 8*512kB (UME) 4*1024kB (U) 5*2048kB (UME) 383*4096kB (M) = 1598104kB [ 84.976035][ T7187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.979007][ T7187] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.981942][ T7187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.985247][ T7187] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.988095][ T7187] 54768 total pagecache pages [ 84.989575][ T7187] 0 pages in swap cache [ 84.990903][ T7187] Free swap = 124996kB [ 84.992324][ T7187] Total swap = 124996kB [ 84.993671][ T7187] 1048443 pages RAM [ 84.994873][ T7187] 0 pages HighMem/MovableOnly [ 84.996341][ T7187] 283068 pages reserved [ 84.997617][ T7187] 0 pages cma reserved [ 85.022653][ T838] libceph: connect (1)[c::]:6789 error -101 [ 85.025050][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 85.059086][ T7206] netlink: 'syz.1.310': attribute type 2 has an invalid length. [ 85.066646][ T7157] ceph: No mds server is up or the cluster is laggy [ 85.393579][ T7254] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 85.422950][ T7256] syz.1.324 uses obsolete (PF_INET,SOCK_PACKET) [ 85.535933][ T7268] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 85.538745][ T7268] __nla_validate_parse: 3 callbacks suppressed [ 85.538753][ T7268] netlink: 228 bytes leftover after parsing attributes in process `syz.4.329'. [ 85.962529][ T838] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 86.112326][ T838] usb 9-1: Using ep0 maxpacket: 16 [ 86.115205][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.118575][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.121653][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.125865][ T838] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.128686][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.132893][ T838] usb 9-1: config 0 descriptor?? [ 86.254614][ T7277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7277 comm=syz.3.332 [ 86.543919][ T838] HID 045e:07da: Invalid code 65791 type 1 [ 86.550570][ T838] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0003/input/input9 [ 86.559215][ T838] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 86.659607][ T7309] netlink: 5 bytes leftover after parsing attributes in process `syz.3.340'. [ 86.662598][ T7309] 0ªî{X¹¦: renamed from macvtap0 (while UP) [ 86.666775][ T7309] 0ªî{X¹¦: entered allmulticast mode [ 86.668594][ T7309] veth0_macvtap: entered allmulticast mode [ 86.670743][ T7309] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.744012][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 86.744023][ T40] audit: type=1400 audit(86.628:452): avc: denied { setopt } for pid=7312 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.258824][ T7324] ntfs3(sr0): Primary boot signature is not NTFS. [ 87.261529][ T7324] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 87.387252][ T7341] loop2: detected capacity change from 0 to 7 [ 87.391662][ T7341] Dev loop2: unable to read RDB block 7 [ 87.393996][ T7341] loop2: AHDI p1 p2 p3 [ 87.395346][ T7341] loop2: partition table partially beyond EOD, truncated [ 87.398115][ T7341] loop2: p1 start 1601398130 is beyond EOD, truncated [ 87.400266][ T7341] loop2: p2 start 1702059890 is beyond EOD, truncated [ 87.484395][ T40] audit: type=1400 audit(87.368:453): avc: denied { map } for pid=7345 comm="syz.1.351" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.499024][ T40] audit: type=1400 audit(87.378:454): avc: denied { ioctl } for pid=7345 comm="syz.1.351" path="socket:[19091]" dev="sockfs" ino=19091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.638216][ T40] audit: type=1400 audit(87.518:455): avc: denied { lock } for pid=7356 comm="syz.1.354" path="socket:[16102]" dev="sockfs" ino=16102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.686625][ T40] audit: type=1400 audit(87.568:456): avc: denied { create } for pid=7358 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 87.693686][ T40] audit: type=1400 audit(87.568:457): avc: denied { write } for pid=7358 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 87.855855][ T40] audit: type=1400 audit(87.738:458): avc: denied { bind } for pid=7373 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.861871][ T40] audit: type=1400 audit(87.738:459): avc: denied { listen } for pid=7373 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.474768][ T6033] usb 9-1: USB disconnect, device number 4 [ 88.674700][ T40] audit: type=1400 audit(88.558:460): avc: denied { mount } for pid=7403 comm="syz.3.369" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.001062][ T40] audit: type=1400 audit(88.878:461): avc: denied { read append } for pid=7409 comm="syz.1.371" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 89.159653][ T7418] tmpfs: Unknown parameter 'dont_hash' [ 89.760723][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 90.189765][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 90.192562][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 90.195577][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 90.198795][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 90.237418][ T7512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.246252][ T7512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=7512 comm=syz.3.388 [ 90.341002][ T7520] input: syz1 as /devices/virtual/input/input10 [ 90.365023][ T7522] netlink: 88 bytes leftover after parsing attributes in process `syz.1.392'. [ 90.367939][ T7522] netlink: 88 bytes leftover after parsing attributes in process `syz.1.392'. [ 90.370785][ T7522] netlink: 88 bytes leftover after parsing attributes in process `syz.1.392'. [ 90.588906][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.592616][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.596057][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.599472][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.605806][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.729205][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 90.810938][ T7545] netlink: 'syz.3.399': attribute type 2 has an invalid length. [ 90.813455][ T7545] __nla_validate_parse: 62 callbacks suppressed [ 90.813462][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 90.871242][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.880371][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.884524][ T7532] bridge_slave_0: entered allmulticast mode [ 90.889379][ T7532] bridge_slave_0: entered promiscuous mode [ 90.894554][ T97] bridge_slave_1: left allmulticast mode [ 90.896624][ T97] bridge_slave_1: left promiscuous mode [ 90.898949][ T97] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.902400][ T6033] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 90.906189][ T97] bridge_slave_0: left allmulticast mode [ 90.907965][ T97] bridge_slave_0: left promiscuous mode [ 90.910410][ T97] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.053619][ T6033] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.056812][ T6033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.059570][ T6033] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.065946][ T6033] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.068830][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.075790][ T6033] hub 6-1:1.0: bad descriptor, ignoring hub [ 91.077689][ T6033] hub 6-1:1.0: probe with driver hub failed with error -5 [ 91.086220][ T6033] cdc_wdm 6-1:1.0: skipping garbage [ 91.087906][ T6033] cdc_wdm 6-1:1.0: skipping garbage [ 91.089547][ T6033] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 91.125362][ T97] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.128807][ T97] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.131778][ T97] bond0 (unregistering): Released all slaves [ 91.137448][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.139835][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.142115][ T7532] bridge_slave_1: entered allmulticast mode [ 91.146571][ T7532] bridge_slave_1: entered promiscuous mode [ 91.205123][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.213261][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.255737][ T7532] team0: Port device team_slave_0 added [ 91.259187][ T7532] team0: Port device team_slave_1 added [ 91.306098][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.308294][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.318360][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.322626][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.324989][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.336564][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.395048][ T6002] usb 6-1: USB disconnect, device number 10 [ 91.397566][ T7580] nfs: Unknown parameter 'òdma' [ 91.400209][ T7581] netlink: 'syz.3.408': attribute type 4 has an invalid length. [ 91.441503][ T7532] hsr_slave_0: entered promiscuous mode [ 91.443761][ T7532] hsr_slave_1: entered promiscuous mode [ 91.452919][ T97] hsr_slave_0: left promiscuous mode [ 91.456226][ T97] hsr_slave_1: left promiscuous mode [ 91.458833][ T97] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.462664][ T97] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.539395][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 91.712404][ T6002] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 91.878563][ T6002] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.883533][ T6002] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.887209][ T6002] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.891636][ T6002] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.895502][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.907663][ T6002] hub 6-1:1.0: bad descriptor, ignoring hub [ 91.910491][ T6002] hub 6-1:1.0: probe with driver hub failed with error -5 [ 91.914926][ T6002] cdc_wdm 6-1:1.0: skipping garbage [ 91.917162][ T6002] cdc_wdm 6-1:1.0: skipping garbage [ 91.919400][ T6002] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 91.953241][ T97] team0 (unregistering): Port device team_slave_1 removed [ 92.012699][ T97] team0 (unregistering): Port device team_slave_0 removed [ 92.064224][ T7604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7604 comm=syz.3.414 [ 92.106581][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 92.106591][ T40] audit: type=1400 audit(91.988:473): avc: denied { getopt } for pid=7537 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.196051][ T40] audit: type=1400 audit(92.078:474): avc: denied { write } for pid=7601 comm="syz.3.414" path="socket:[19402]" dev="sockfs" ino=19402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.461837][ T7607] netlink: 830 bytes leftover after parsing attributes in process `syz.1.398'. [ 92.583561][ T6380] usb 6-1: USB disconnect, device number 11 [ 92.692441][ T5955] Bluetooth: hci1: command tx timeout [ 92.908534][ T7628] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.416'. [ 92.929984][ T7629] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.416'. [ 93.004759][ T7532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.010744][ T7532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.019555][ T7532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.027677][ T7532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.066033][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.074776][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.091364][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.093713][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.099764][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.102004][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.201654][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.294581][ T7672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7672 comm=syz.3.421 [ 93.353907][ T7532] veth0_vlan: entered promiscuous mode [ 93.358905][ T7532] veth1_vlan: entered promiscuous mode [ 93.374247][ T7532] veth0_macvtap: entered promiscuous mode [ 93.378102][ T7532] veth1_macvtap: entered promiscuous mode [ 93.390073][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.396184][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.402192][ T7532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.413080][ T7532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415780][ T7532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.422596][ T7532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.465662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.468045][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.485947][ T7693] fuse: Unknown parameter '0x0000000000000004' [ 93.489509][ T40] audit: type=1400 audit(93.368:475): avc: denied { lock } for pid=7692 comm="syz.3.426" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.489608][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.499626][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.514067][ T40] audit: type=1400 audit(93.398:476): avc: denied { mounton } for pid=7532 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 93.515650][ T7695] netlink: 164 bytes leftover after parsing attributes in process `syz.3.427'. [ 93.527561][ T7695] netlink: 164 bytes leftover after parsing attributes in process `syz.3.427'. [ 93.530333][ T7695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'. [ 93.705615][ T7699] capability: warning: `syz.3.429' uses 32-bit capabilities (legacy support in use) [ 93.798722][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 93.805880][ T40] audit: type=1400 audit(93.688:477): avc: denied { create } for pid=7700 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.811885][ T40] audit: type=1400 audit(93.688:478): avc: denied { write } for pid=7700 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.817887][ T40] audit: type=1400 audit(93.688:479): avc: denied { nlmsg_write } for pid=7700 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.844249][ T40] audit: type=1400 audit(93.728:480): avc: denied { append } for pid=7705 comm="syz.3.431" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.850982][ T40] audit: type=1400 audit(93.728:481): avc: denied { ioctl } for pid=7705 comm="syz.3.431" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.873797][ T7708] netlink: 880 bytes leftover after parsing attributes in process `syz.3.432'. [ 94.839543][ T7720] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000004' [ 95.102621][ T7729] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 95.104912][ T7729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 95.108795][ T7729] vhci_hcd vhci_hcd.0: Device attached [ 95.115617][ T7732] vhci_hcd: connection closed [ 95.117744][ T93] vhci_hcd: stop threads [ 95.121062][ T93] vhci_hcd: release socket [ 95.123948][ T93] vhci_hcd: disconnect device [ 95.141227][ T40] audit: type=1400 audit(95.018:482): avc: denied { create } for pid=7736 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.249420][ T7748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.281388][ T7755] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.285310][ T7755] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.288074][ T7755] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.290974][ T7755] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.294991][ T7755] geneve2: entered promiscuous mode [ 95.296649][ T7755] geneve2: entered allmulticast mode [ 95.387924][ T7774] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 95.389895][ T7771] IPv6: sit1: Disabled Multicast RS [ 95.503084][ T7782] Bluetooth: MGMT ver 1.23 [ 95.536223][ T7785] wireguard0: entered promiscuous mode [ 95.538110][ T7785] wireguard0: entered allmulticast mode [ 95.586112][ T93] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.747145][ T5962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.750973][ T5962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.760097][ T5962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.764612][ T5962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.767654][ T5962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.866973][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 95.961769][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.964287][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.966676][ T7801] bridge_slave_0: entered allmulticast mode [ 95.969417][ T7801] bridge_slave_0: entered promiscuous mode [ 95.974613][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.977712][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.980784][ T7801] bridge_slave_1: entered allmulticast mode [ 95.984678][ T7801] bridge_slave_1: entered promiscuous mode [ 96.029722][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.035255][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.113323][ T7801] team0: Port device team_slave_0 added [ 96.118857][ T7801] team0: Port device team_slave_1 added [ 96.173737][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.176556][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.187722][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.193557][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.196372][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.208264][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.252452][ T7801] hsr_slave_0: entered promiscuous mode [ 96.254572][ T7801] hsr_slave_1: entered promiscuous mode [ 96.256581][ T7801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.258974][ T7801] Cannot create hsr debugfs directory [ 96.263537][ T7829] block nbd0: shutting down sockets [ 96.316871][ T7839] block device autoloading is deprecated and will be removed. [ 96.882005][ T7856] syz_tun: entered allmulticast mode [ 96.896654][ T7855] syz_tun: left allmulticast mode [ 97.075620][ T7864] syzkaller0: entered promiscuous mode [ 97.077401][ T7864] syzkaller0: entered allmulticast mode [ 97.813386][ T5962] Bluetooth: hci1: command tx timeout [ 98.017071][ T7887] overlayfs: failed to resolve 'verity=require': -2 [ 98.058178][ T839] IPVS: starting estimator thread 0... [ 98.152454][ T7890] IPVS: using max 25 ests per chain, 60000 per kthread [ 98.277237][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 98.277252][ T40] audit: type=1400 audit(98.158:499): avc: denied { create } for pid=7900 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 98.290427][ T40] audit: type=1400 audit(98.168:500): avc: denied { sys_admin } for pid=7900 comm="syz.1.489" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 98.364735][ T93] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.444843][ T93] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.513952][ T93] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.634444][ T93] bridge_slave_1: left allmulticast mode [ 98.636211][ T93] bridge_slave_1: left promiscuous mode [ 98.638005][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.642927][ T93] bridge_slave_0: left allmulticast mode [ 98.644767][ T93] bridge_slave_0: left promiscuous mode [ 98.646587][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.946018][ T7908] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 98.948982][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.955379][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.958948][ T93] bond0 (unregistering): Released all slaves [ 98.986641][ T7908] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.026158][ T7908] veth3: entered promiscuous mode [ 99.050278][ T7915] vlan2: entered allmulticast mode [ 99.051967][ T7915] bond3: entered allmulticast mode [ 99.109087][ T7913] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 99.111447][ T7913] afs: Unknown parameter '00000000000000000000' [ 99.267409][ T7924] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 99.269879][ T7924] __nla_validate_parse: 1 callbacks suppressed [ 99.269886][ T7924] netlink: 46 bytes leftover after parsing attributes in process `syz.0.492'. [ 99.348538][ T93] hsr_slave_0: left promiscuous mode [ 99.355903][ T93] hsr_slave_1: left promiscuous mode [ 99.357930][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.360202][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.363723][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.365981][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.397470][ T93] veth1_macvtap: left promiscuous mode [ 99.399623][ T93] veth0_macvtap: left promiscuous mode [ 99.401790][ T93] veth1_vlan: left promiscuous mode [ 99.404579][ T93] veth0_vlan: left promiscuous mode [ 99.632740][ T40] audit: type=1400 audit(99.518:501): avc: denied { append } for pid=7938 comm="syz.0.496" name="comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.639906][ T7939] ------------[ cut here ]------------ [ 99.643070][ T7939] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:180:9 [ 99.645795][ T7939] shift exponent 1073741824 is too large for 32-bit type 'int' [ 99.649713][ T7939] CPU: 3 UID: 0 PID: 7939 Comm: syz.0.496 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 99.649730][ T7939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.649737][ T7939] Call Trace: [ 99.649741][ T7939] [ 99.649745][ T7939] dump_stack_lvl+0x16c/0x1f0 [ 99.649787][ T7939] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 99.649819][ T7939] aio_iiro_16_attach.cold+0x19/0x1e [ 99.649849][ T7939] comedi_device_attach+0x3b3/0x900 [ 99.649870][ T7939] do_devconfig_ioctl+0x1a7/0x580 [ 99.649890][ T7939] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 99.649918][ T7939] ? find_held_lock+0x2b/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.650278][ T7939] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 99.650295][ T7939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.650310][ T7939] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 99.650323][ T7939] ? do_vfs_ioctl+0x523/0x1a60 [ 99.650338][ T7939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.650354][ T7939] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 99.650372][ T7939] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 99.650390][ T7939] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.650412][ T7939] ? hook_file_ioctl_common+0x145/0x410 [ 99.650427][ T7939] ? selinux_file_ioctl+0x180/0x270 [ 99.650442][ T7939] ? selinux_file_ioctl+0xb4/0x270 [ 99.650459][ T7939] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 99.650473][ T7939] __x64_sys_ioctl+0x18e/0x210 [ 99.650487][ T7939] do_syscall_64+0xcd/0x4c0 [ 99.650505][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.650517][ T7939] RIP: 0033:0x7ff13438e929 [ 99.650528][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.650539][ T7939] RSP: 002b:00007ff1351be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.650551][ T7939] RAX: ffffffffffffffda RBX: 00007ff1345b5fa0 RCX: 00007ff13438e929 [ 99.650558][ T7939] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000005 [ 99.650565][ T7939] RBP: 00007ff134410b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.650572][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.650578][ T7939] R13: 0000000000000000 R14: 00007ff1345b5fa0 R15: 00007ffe94321918 [ 99.650592][ T7939] [ 99.650596][ T7939] ---[ end trace ]--- [ 99.725543][ T7939] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 99.727802][ T7939] CPU: 3 UID: 0 PID: 7939 Comm: syz.0.496 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 99.731504][ T7939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.734822][ T7939] Call Trace: [ 99.735987][ T7939] [ 99.736931][ T7939] dump_stack_lvl+0x3d/0x1f0 [ 99.738365][ T7939] panic+0x71c/0x800 [ 99.739808][ T7939] ? __pfx_panic+0x10/0x10 [ 99.741330][ T7939] ? __pfx__printk+0x10/0x10 [ 99.742787][ T7939] ? check_panic_on_warn+0x1f/0xb0 [ 99.744388][ T7939] check_panic_on_warn+0xab/0xb0 [ 99.745960][ T7939] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 99.747991][ T7939] aio_iiro_16_attach.cold+0x19/0x1e [ 99.749660][ T7939] comedi_device_attach+0x3b3/0x900 [ 99.751398][ T7939] do_devconfig_ioctl+0x1a7/0x580 [ 99.752968][ T7939] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 99.754640][ T7939] ? find_held_lock+0x2b/0x80 [ 99.756071][ T7939] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 99.757768][ T7939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.759548][ T7939] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 99.761231][ T7939] ? do_vfs_ioctl+0x523/0x1a60 [ 99.762691][ T7939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.764214][ T7939] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 99.766169][ T7939] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 99.768148][ T7939] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.770218][ T7939] ? hook_file_ioctl_common+0x145/0x410 [ 99.771888][ T7939] ? selinux_file_ioctl+0x180/0x270 [ 99.773480][ T7939] ? selinux_file_ioctl+0xb4/0x270 [ 99.775032][ T7939] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 99.776830][ T7939] __x64_sys_ioctl+0x18e/0x210 [ 99.778275][ T7939] do_syscall_64+0xcd/0x4c0 [ 99.779685][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.781489][ T7939] RIP: 0033:0x7ff13438e929 [ 99.782804][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.788656][ T7939] RSP: 002b:00007ff1351be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.791220][ T7939] RAX: ffffffffffffffda RBX: 00007ff1345b5fa0 RCX: 00007ff13438e929 [ 99.793627][ T7939] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000005 [ 99.796080][ T7939] RBP: 00007ff134410b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.798587][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.801074][ T7939] R13: 0000000000000000 R14: 00007ff1345b5fa0 R15: 00007ffe94321918 [ 99.803518][ T7939] [ 99.805104][ T7939] Kernel Offset: disabled [ 99.806506][ T7939] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:46:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000004 RCX=0000000000020000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88801d7e4880 RSP=ffffc9000161f150 R8 =0000000000000000 R9 =0000000000000000 R10=00000000000000a0 R11=0000000000000001 R12=ffff88801d7e5370 R13=ffff88801d7e5410 R14=0000000000000000 R15=ffffffff8e5c4dc0 RIP=ffffffff81986693 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff13519cf98 CR3=000000001d32a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9b2e49b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd94d611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd94d611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd94d611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd94d611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd94d611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd94d611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000164 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff914d29b0 RDX=1ffff92000636ea4 RSI=0000000000000001 RDI=ffffffff90c43620 RBP=ffffc900031b7530 RSP=ffffc900031b7478 R8 =ffffffff914d29b4 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012296 R12=ffffc900031b7538 R13=ffffc900031b74e8 R14=0000000000000005 R15=0000000000000000 RIP=ffffffff816adcd0 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd06fea5880 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff1351bdf98 CR3=000000003bb79000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000c2c8fe02 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00005581d7de9d20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd06f7f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d2d746e6576652d 302e303a313a302d 00313a363232632f 647261632d000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888024b38000 RBX=ffffffff8e5c4dc0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81a6c5d3 RDI=fffffbfff1cb89b8 RBP=0000000000000002 RSP=ffffc90003b07708 R8 =0000000000000000 R9 =0000000000000000 R10=00007fae6438e000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81988b40 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556c6e500 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c353280 CR3=00000000511c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2a972a40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae64411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae64411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae64411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae64411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae64411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fae64411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000010 RCX=ffffffff81b03628 RDX=ffff88805841c880 RSI=0000000000000079 RDI=0000000000000006 RBP=ffffffff8d1b331f RSP=ffffc900042a6e48 R8 =0000000000000006 R9 =0000000000000079 R10=000000000000008d R11=0000000000000001 R12=0000000000000079 R13=000000000000008d R14=dffffc0000000000 R15=ffffc900042a6f20 RIP=ffffffff8b8b4360 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff1351be6c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000440 CR3=000000003d097000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001f7 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 42530c0800030408 000610001e100006 0070be220000054b 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e508500302800200 4e0303fc02004c03 2002004a03000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ffffffffff ffffffe508300304 02002e0303f80200 2c030002002a035e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200280310048400 2403a6106406081e 030c40a08082001c 030040808082001c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03049bba04840018 0300000000000001 ffffffffffffffff f3080c03c60a187c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000c08060a01 05b2001000088010 00040c05ae000400 00080004800401c7 ZMM25=56704cea56704cea 56704cea56704cea 56704cea56704cea 56704cea56704cea 56704cea56704cea 56704cea56704cea 56704cea56704cea 56704cea56704cea ZMM26=0f90cad50f90cad5 0f90cad50f90cad5 0f90cad50f90cad5 0f90cad50f90cad5 0f90cad50f90cad5 0f90cad50f90cad5 0f90cad50f90cad5 0f90cad50f90cad5 ZMM27=3c5bab973c5bab97 3c5bab973c5bab97 3c5bab973c5bab97 3c5bab973c5bab97 3c5bab973c5bab97 3c5bab973c5bab97 3c5bab973c5bab97 3c5bab973c5bab97 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2c0300002c030000 2c0300002c030000 2c0300002c030000 2c0300002c030000 2c0300002c030000 2c0300002c030000 2c0300002c030000 2c0300002c030000