last executing test programs: 32.08395379s ago: executing program 0 (id=687): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r1 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r1, &(0x7f0000000540)='/', 0x1, 0x0) lseek(r1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006c04000008000300", @ANYRES32=r3, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) 32.083715901s ago: executing program 0 (id=688): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) r1 = inotify_init() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x5, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0x1, 0x69, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000015c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001600)=[{0x5, 0x5, 0xd, 0x9}, {0x1, 0x3, 0x6, 0xb}, {0x1, 0x4, 0x0, 0x4}, {0x1, 0x1, 0x2, 0x2}, {0x2, 0x1, 0x1, 0x5}, {0x0, 0x5, 0x9, 0x3}], 0x10, 0x80e, @void, @value}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = geteuid() stat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x6, 0x101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001880)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001900)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000001a00)=0xe8) fstat(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001b80)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000180)="faabd8c284a4ffc26ff7f6a5e0c7b4bfc5cc16733948c0e3f988", 0x1a}, {&(0x7f00000001c0)="ea482a83f6548f8ea15790b91ff5ae4345dea6f419113f661ff2c967fa855015677fc4d0d483813e18ac345711eca5c64ccb37510a16e56cdc9abcc8ad3faa61f8546a3c9aeac33824ef7c957fb0dc19a4a963d243f86f7005abed72623f8bf02fa6639a92ec20bc525e915e82a67f174dccaabe389412f0be0c9e72b994d0", 0x7f}, {&(0x7f0000000240)="0ed1d5318af0091b13af287835d86a82f7b996ca3be862b9893f412ce7aa77ecde91af958c34f8b1932a33293ea21f706073a99b3bec7ab3f92b8b6e23fb444acb0247802ec5e9a95eb983b3543db1445041c4f711b9ca1470a4c0ce545ef9986b76ae390c1dd68575a2cb0fd20ce5", 0x6f}, {&(0x7f00000002c0)="dd6afa0636441eab2bba387ab6569d4361d31ba2229b3175d2cc60b4f397dfde64f99cb5b3de99960beed4a3aec5fa6bf4d31822979994b64997979b8d04407087ebb464aa704d9fdb026166db81f1f98c0471e3f810e357ccdd3e444758d1d4282e19b530a6ce1d73048b02e67667c456057fe412396d70b1f8c18be0bf5a2c42ffc41adf859fa406087c47c951345d856ff3a93f6c3bbd9424e0c550532a48aaee", 0xa2}, {&(0x7f0000000380)="a0201b7177e5db4512bc4702308ce9cd08a29efa75139343c6b8fb19c7e12979fed977d43d4f94218fd1779d69ff171da177ed21c8600049b9e37720bb20e9fa573bbc765c58c2f7f7d3734bfdf5b8a2db216f7495f31925d5114235a3874af323fdec33c95cabecbc11b99fbcfa383798fad67dc8cbc86c2547384edaff48b762fde4368bfe5462248e66f3a11ddbe91ab5fb0efcbacebbd60df0b2e1c1aa44904e3c196be421eba8feeb484a7058636ddf459680e2291b9b47bd10ff3ebaa3db0a6c81ce5d288c71dcc829b7bcbb0dc160ed122248d1e18d6a81d5956c9fd6dca168f6010d290aa58f2eb0c33edcc714ddb091accfc81300a23e746bdbcf44fb34e9fc3f86d819ba90c5336e27030f57369fcc4d918a84a8e5ff4071a09294bb7b05de86654239a6604ae83a8334880b5c5c1d53549c61cb4d0a0bb05abe23bc143082f1576470578bb9a8aaac29050d076435ab34c344efb1693d86e557712c1a639b5c3f6a060466c0d7c2d880fb874d3116726c7b1c4d2fba55daa875ec31c48645a1c3101337288eb97da0e9f2161b80978bc9b099b266525d055be8f059bf75c9635bb466264cbb2abfff982fb9321a4ceb77caeaa84adc554250a69d81180bffcefb9980b9dfa8912ba26055d551dc38e28350c06b5040c1c56d7099a6586bdbe6c6f796dbf85f54eeb804386a93eb008d9d9b2e4b16161a6527e94d15b4b8b3f312ab4a05f92e43e64ed3e0285300c73a83ce30eb8fb9f44c2357a9de74aaa457507700ec6c3b05bf55b3cb022c2cfda011460293d3a349ac5463b927af63659a9b1ded9529d379fe5a9a2a5f79a95562b7a7b89b9f36a787ca86ca252879dc1a8779d50037b39aca6fb36014ca15d8aeef8330beff7f87b9eb517fd5fe216e65078d0aedc4cd2454f2c617641ee54ea5a20cc9f6af484ad9669a402dd292dcf04dc1a86d25b15052bdfdc311c8330bbd7c81897769825fb109f2bb2da665e3a8976486fb61e998507b883f975895d3cb9767bec7f12e82907459c252b987683736e5744ed243e2dfa1568a4ea2666896b482cda4cbab401698fc9487a7ac56e5ae88432d375f618abe8b562d5a4a39961d2e4792c2092d81a0f2afeb94d5cf246310400db3b971b00730190acb86cced2831056b6d42d1715e2b8f6d6b222d0bc91cec91c2846688891c7797d7410f3463af1e90d49d3e55ce9f955e4875e8dc3ad1624860d2a4ce8adade01c5f4c66da40b22bb0077243b5c046fdb1aa99b3ef1282a9109e8b90bed735ddc311c75c302685958f7d07e7f1215822c95a0d7a60a126455af58f2f6036ba74892073d11b391b15ad7633836aa2f29de7464904b278285ef3840443832057a085fbcd84f24b3b1b6b6b6c441c668b9031d9e3797dbaa9fe755aaab2279666fded3511331e7d098dba12f493dc791af49c46bc9c44b1ba81a60f56a40aec8b6c7a1f397ceaf98308d098ca1b1305b0d6e385a18342f9de7263b5435cfe2f5c800c8ccb75374237b904d747fde20a1d77175a76c93e5bf0cfdcbc2308976969522586bb0caa6f86702a8dce98e71d6312b508b3422e0adb417be17838c29afc7e95f10af6caa6bbcf202541fc82634b852ab694c16e5a5f88ef605377aee28069c071849ac84f3bcfe3453940d6ea79a0d3f97b611e1f0fe822b71cfd9193c74fbd5ea028e4ec2ad048b56dfbd7dcd90d0c26e22c48b8992e80d712da8ea0a44f4f34d1380cf5841856ec0fa2f8ab2da792acd21dfdd2fa07684db0bb607deccd7e96c44d9a4a5a04e2f9f8312bdba944270b04160f28f3dbe8cf282063a8aa3787dd0284645d493129cbfa7733269f65c2d859c2f3235949277a2dd1d396ff366040c25b09bee64d855bde4aa29a54881883003ee39e9724dd330542035abf079d8de3e2015b363d8a90cd8c9860a1e3dceae505e53ea259e610967a71ac7048b768921515127407721ec99247fd99b5cbe2f34127ceb786fab730527f8403e83d978577447ea1166d0c87796a57e9571be352313c970857e829bdb1e2ae63e724e4fcb19c0ff80d22069c79d79ae9bbd70bec73c5fb00b0ed630256a975bcf55c588dbc7d0ad44926032ac8aac59e65f9d8f8b04a8f9ea4a6d28cbe7a2e78e0c95a091244836879846025a1dcc890a6177c0124eeb08fa50a62295867d6403264aaec2f4f2a3e91421c5282d36646918dc0d1b50c9cbc3cb53e0f7da78ad72551905d5c1e2e4ec4b493be3a486f27311043ba3015a3bd5b98300e05e1099841cd39c61ebbfd1c4147d1d6d1bb2e4f5b5e5a1a28a3cbecdc3ce134c87913cd2c031667c00f784782e2b03bb980327353ce58fbe50ee384e7bcb57bb7c1a47da63297683a936f87bc6e42a5226c8cfb1b42b460c3c3354e8dd280152ed2c3ba0eddd6f00ca0b30722d5b6b2a4cf55b118ffd8271acc774163feaa4f6f14d4098fbce202a72a81ca20d63f5f84c9e4fae7bbf119fc16dc93c3b9798ac9bb2b3f6ee77e63b0ff865f71f9d02363a8f3df4cda34cb1721446b9b30a15dc735a4185df4c7a4e6010990c86a786df13540e34c5956d734d7e848cf7864f6d12387b595d65ef8deaa90a51328c4d0f818c53269d223be5b3f0835a702754f2eb8252ca5c7d481548a7fb89045906129d19a5dbf5cd14fc547bfc9051060024a8a6555d72850ee7e75ecfd0698376867ff08799ff46ce96af358c17efd00920f408f68e3a490b3f5a3e5311a339b001e42262c962932d64bc92a8454ff6384a87d1b9498a926a6721f0972d91e901cad8f84b786f9c2ece54b530cfd437c2134413f9e688181fd4c2d307eb372b84c875cae89d562a0233a65d208b4d80681cf18cdcd387f41785e7ab7f2f0d030f2e52194825b5239af905807de379bb78206020ceaf421d6f6672719418d91dd2b35522f5fff69d14b7ae111ba7e3b6ccf0776e2464f94e713443fbc216ed2a33da1a6c1edaf7ecf0f436e49454bf5a5835b2691a5fbb3db35f2de9781ca1738172be748cb4421d90970151a24b3026ef8d90021dcb26a38f09eff86511b2162f2d5a0c0f6d3980a15eb0b2229a23497b51ff2c63dcb2041b8f789322d8602bb4ada6e77b079276ed0d9995140c94a3190e127da67f9cfff518238d57bcc36c6353fc6cc66f2e2c34f4a3dfbd5bfca436885b15ca0ba9d6192ec5d82d5ffad7f25a176c4936cc17d66fc3fb2283b78ee701e2bda44cc6cdadac699ed8e66f77d28ee5c13e90ffcd0053b93c945c580e56fc5b8dba35032424650535f3ab3fe5e5c515bb325dadc58f1b2de787d3037e13c30196baf1cd17c8865fcab3290ad9af198fc61c9f240bed32a20c37feae85d6ce8cce620c51dd2800ec9cdbb3f2c19092c4ef5de80308ef267373a22c26b74ff5ccfffa6c01bc6cf1a89a5e28f2b70602e29f37e3619316dd8773845c9701844165d6666cd3290e8c08bb0354277059fddd525200ffedeacf80fcee92ffb51d9f2ff9b1d885db8b35b4951f18669ab6b728b7599b4cb1fb4993201ea9c2c3900cfa52c939f53c131b5372b027de722bb579e3afc951786cc86452ef1d2f03f8e7620efa837fd85630ae160cc5bc6790cb23458607dff3316a3f12e428dda8c25a609f0ac82369352143516925465ad92ef4a6052ad231f2781a3505c7e202f92ad90fa1ba76cc9a52ef35d2bfff8747898dea33111bd04a6ee47f5601a973f6a0a66c9aa4943b91d5de213c4502bdb428e8d5f41730ecd72d806980556f6be2f0b3939ea005726e6297088c7c49f86aa417c2fef00916731b02c44242dfbfa87d7006033031d2c85ad84a8a7286cadb9fae84b05d59c41d45709c10c2af7fa60b66f8b20e3db34d17b8f9188f058127db14bcaef4f616738c8757e04f3f552847b945837f3edcbaeb42f831d0c0f1f1eb190abf02b9969bc4ce750dd3715ac32ae1dcbf62ce6d07e55b862a5048e4b19ecede168dfa6ce5f0c6c323a169d676a249c9c52306d50b55f896cea79441fbbfc6270e38f4575ed80101ac66c97ce33544bfb1af00eb60b8514894ff9ed45c109722456ed14c3c5d4d11b98a4ee68929463136f9dec97cb40dbd66c6797c02dc61e4fc9972948f4a11727d945458ba0fb6a30bf73c5452dd637314bf3a5530f8ace5f04b65958e9c491edb90fb5dbb6b3ad2b3cb07d29dd2e5b6ed4c1b8fd837448da6283c1f046a66104839f75d99686e1191023b81c409e14c50038440126bfbc4e1b5162dd9c08b5b253e465476f4da0e28b0b062071b27e57fd30745570ae6f128e41355b9425ec655c9d1453356c17f76932bc823a380d2ca3444ca57a17c33ddbf50b83c87e149192a056583e09880b79b6985a29a85e5db893c1f8e9e59a36411d4021f9f761640916b254df6118f6003740873b14ab1288bd9f5315c18f48902276db3c40a4165c40396bbbf1e92a6c546287dea745ad775f1deb2ac6fcd3816ec1033bbc6f1e5446e3cd6627b6cad1f03a7b6d39c7b97c3ef2d87afb5bccddd292ecd6c13683bf7c1337f09074ea06618ffe77ed21cdedb1842e649566de3cf9b524081523cb896c012307fa3de313a63cdf4e38ba3554af6ab86823e6229c1ee13ae457361a1c06e6730c5fe9964e728858f70c818d86e37b1f88eb6d9fe32c6237d09df69275f92afc3c710ea215ab6dbaf928ce939dc93ade4e2db71dcd057480d9340909579b4ebd6be9a2e421b729dd0f580f9d91eab2d40979d4774adb1dc1129f166351bde646648e4dc23a3ed8fed6198a7e600835c106600d1921a9a10cd4227578599e59d1f1239d856576f2f530f4b3591ada8b4358a9e341fa0312c1843ad97fb404c6780fb7534f03febf8662b5295997a856afb9d898aa4a277627fb8d448e1613fd262cc6e676ccec889e61eb4a867d9cc1e44172c4dbc72b3545d34908ba62cc1a16c2d7a8c66c29918074d3fb9023113c2ee9264a078a4cef31805550938a9a2b1bb3c254959651640f011b98821dc159f5fdcabefe5c97cb721d88fa4a8d4cbf31d32606aa4060463f663c0ccb643ef6be60754b7125e79bb4516a2d42230392d1653f36c7318511b52efe091931ab9c656d1827be459484c5d5b50a638207322211ba5c6f72410b9f7390f71393c61356e4d390dc136f9a7d14c28ed71b845b7b3d1e67764bee2bdb44e15f18cca643d3e9c461798a710acb73459646097122c95ce0b55d08926d4c79e2889213760da06da9fda46c5410a98dc429227049fd3600c2cea8d19abeb14ca69fdd4ba56712f7bc0f76a943c7c4ef15f196c6b7088de63a9d312039a313fd18f6701970b734ddbfab3a353d3cdd4cd3f24fe706dea256afe11c07c4b85c6b480eccd27d7296071f9f3268394e3ad0379f47fe21095a9662b4b56fec96335f4f46d7fc016b23c73a0443a405845e4499f786376551feb89e686f1762b6d9ed1b9f81f19dcc0af54b51d2d622bff61c55182510281ea8b546be6620cded8bd2673291470d16bb0d8f4a4f8bd488dc3d7a236d1cceb24fd7f375b687711a8395d3561ca05662a998e43c347bb06f051f5deaa6b40b53afcd8cb89320a44e0a1382e33830cc553c332157f03826538feb8045ea5ff9bc622ebb7c27e34542e6b31842893aa61b03a60ddbe042829792d3b22ef97ba5776846853174fdac38f8c9927f1c7151fa6127c98c973442fb374ec688aa74dff8b6fc30febf28e4c3af92663d89f84db6887aff4a3b437decb3d9bfd624e0df939f5ced865c1ef0c7a0162abe1cd4b0055acd5b4e7bd0a", 0x1000}, {&(0x7f0000001380)="c57f9b9a406182dfb7000707d3585f932303a2aa763944b14f295f2bbf6a4373f3daf1a2c1ca98fdd49d0f8243a21c111a4d725e67a1e0c7364451b0dfc300b04cca1bfde063ee9e114299aafd203ff183a35979c038d12c52364ab9e13357bfdb32589203327c7d8dfbb7db98d759e0318672c524060b0c7f54afe27b57a23cf2de6653f62fe66f69f80ca4133b5d710d2a3e9a06350a14", 0x98}], 0x6, &(0x7f0000001ac0)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r0, r0, r2, r0, r3, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0xa0}, 0x20000000) r12 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$KVM_RUN(r12, 0xae80, 0x0) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000001bc0)=0x4, 0x4) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000001c00)=0x100000000) r13 = socket(0x1e, 0xb, 0x4) getsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f0000001c40)={@local, @initdev}, &(0x7f0000001c80)=0xc) getsockopt$IP6T_SO_GET_INFO(r12, 0x29, 0x40, &(0x7f0000001cc0)={'mangle\x00', 0x0, [0xfffffe01, 0x99, 0x7, 0x81, 0x2]}, &(0x7f0000001d40)=0x54) ioctl$KVM_SET_FPU(r12, 0x41a0ae8d, &(0x7f0000001d80)={'\x00', 0x7f, 0x9, 0x9, 0x0, 0x6, 0x1000, 0xeeee0000, '\x00', 0x8}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r14 = syz_open_dev$vcsa(&(0x7f0000001f40), 0xfffffffffffffff2, 0x40800) utimensat(r14, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SOUND_PCM_READ_BITS(r14, 0x80045005, &(0x7f0000002000)) r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSCTTY(r15, 0x540e, 0x57a) socket(0x1, 0x4, 0x5) 32.023004656s ago: executing program 0 (id=690): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) io_setup(0x2, &(0x7f0000000180)=0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00009be000/0x4000)=nil) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) read$snddsp(r2, &(0x7f0000000c80)=""/227, 0xe3) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (rerun: 32) socket$unix(0x1, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000892000/0x4000)=nil}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="f34998f3e20fc75e460f1a6086f2360f211e0f20c035020000000f22c0400f21ee65470f1bc2b9800000c00f3235004000000f30430f92c6", 0x38}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000340)={[{@metacopy_off}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '+*'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@hash}, {@obj_role={'obj_role', 0x3d, ')-@&='}}, {@subj_type}, {@subj_role={'subj_role', 0x3d, 'cpuset.effective_mems\x00'}}]}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x0, 0x10000}) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (rerun: 64) 31.836052071s ago: executing program 0 (id=692): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4048aecb, &(0x7f0000000100)=0x4) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r10 = getuid() mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20010, &(0x7f0000000880)={[{}, {@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, 0xee01}}], [{@subj_type={'subj_type', 0x3d, 'vcan0\x00'}}, {@euid_lt={'euid<', r7}}, {@audit}, {@uid_eq={'uid', 0x3d, r8}}, {@uid_eq={'uid', 0x3d, r9}}, {@uid_eq={'uid', 0x3d, r10}}]}) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @multicast, @void, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "0200284062941f95"}}}}, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c01000010000100"], 0x13c}}, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newtfilter={0x490, 0x11, 0x100, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x8}, {0xe}, {0xffff, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x1, 0xfffffffc, 0xfffffffd, 0x7, 0x1, 0x1ff, 0x1, 0x9b, 0x4c2b37f, 0x7, 0xe, 0x5, 0x9, 0x5, 0xbe, 0xa1, 0x9, 0x3ff, 0x2, 0x3, 0x91, 0x7, 0x4, 0x4, 0x200, 0x9, 0x3, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x4, 0x9, 0x3, 0x4, 0x0, 0x2, 0x0, 0x2, 0x7, 0x947, 0xfffffff8, 0x9, 0x80000001, 0x7f, 0x800, 0x5b, 0x1ff, 0x8, 0x681e, 0xfffff876, 0x70fd6d8, 0x0, 0x0, 0xf0000000, 0x80000000, 0x10, 0xe34, 0x8, 0x4, 0x6, 0x1, 0x2, 0xffffffa9, 0x2, 0x9, 0x8000, 0x3, 0x80, 0x6, 0xc4, 0x3, 0x8, 0xa, 0x8001, 0x3, 0x8, 0x0, 0xfffffff8, 0x3, 0x7ff, 0x8, 0x0, 0xd, 0x447, 0x5, 0x9, 0x7, 0x8, 0x1, 0x5, 0x0, 0x0, 0x1000, 0x4, 0xe, 0xe3, 0x5e86ae0a, 0x2, 0x1, 0x2, 0x7fffffff, 0xf, 0x7, 0x9, 0x3ff, 0x6, 0xb, 0x4, 0x0, 0x3ff, 0x0, 0x1, 0x7, 0x8, 0x2, 0x603, 0x81, 0x40, 0x8000, 0x6, 0x9, 0x6, 0x7, 0x80000001, 0x10001, 0xbbce, 0x8, 0x3, 0x1, 0x4d7, 0x80, 0x3e, 0x200, 0x1, 0xffffa0ca, 0x37, 0x6, 0x8, 0x400, 0x7, 0xffffffff, 0x1000, 0x4984, 0x4, 0x8, 0x9, 0x3, 0x9, 0xe, 0x8000, 0xffffff01, 0x1, 0x19d4, 0x0, 0xffffff46, 0x5, 0x8, 0x80, 0x3, 0x9, 0x8000, 0x0, 0x4aa, 0xf11d, 0x4, 0x3, 0x3, 0x80, 0x33, 0x6, 0x90b, 0x23, 0x6, 0xffffffad, 0x2, 0x6, 0x0, 0x1ff, 0xeb3b, 0x400, 0x4, 0x85, 0x7, 0x80000000, 0xb, 0x80, 0xff, 0x8, 0x1, 0x7, 0x3, 0x1c0, 0x4, 0x2, 0x2, 0x9, 0x7fffffff, 0xffff, 0x144, 0x2, 0x4, 0x4, 0x3, 0x8, 0x6, 0x6, 0x5, 0xe, 0xa8, 0x1, 0x3, 0x2f, 0x6, 0x2, 0xffff90d6, 0x1, 0x2, 0x100, 0xe, 0x10001, 0x0, 0x7, 0xa, 0x4, 0x0, 0x3, 0x2, 0x10, 0x0, 0x8fc, 0x7, 0x2, 0x2, 0x5, 0x5, 0x3, 0x6c, 0xb9, 0xffffff56, 0x2, 0x8, 0x8000, 0x10, 0x4, 0xe2, 0x7, 0x401, 0x7, 0x3, 0x6, 0x8, 0xf51]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xac, 0x8, 0x3, 0x0, 0x6, {0x0, 0x0, 0x7, 0x8, 0xa11, 0x1}, {0x8, 0x0, 0xc, 0xfffe, 0x5c3, 0xe7ed}, 0x5, 0x0, 0x1}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x490}, 0x1, 0xf0ffffffffffff}, 0x4044001) 31.684678441s ago: executing program 0 (id=693): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f0000000180), 0x8894, &(0x7f0000000300)={'trans=virtio,', {[{@fscache}, {@noextend}, {@access_uid={'access', 0x3d, r4}}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r2}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise_type}]}}) chdir(&(0x7f0000000140)='./bus\x00') mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='erofs\x00', 0x10000, 0x0) 31.580490381s ago: executing program 0 (id=694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x5, 0x0, 0x5, 0x1, 0x1, 0x800}) 31.580252945s ago: executing program 32 (id=694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0x5, 0x0, 0x5, 0x1, 0x1, 0x800}) 1.925155677s ago: executing program 1 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1010, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='Fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADLINK(r3, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'ip6gretap0\x00', @random="0200ff7fdfff"}) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x0, 0x6c, 0x0, @private1, @local}}}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)={0x3, 0xf, "fff2b2e53a32fbef750da4caeabb57"}) write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x2d, 'net'}]}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1010, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='Fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) (async) pipe2$9p(&(0x7f0000000080), 0x800) (async) write$P9_RREADLINK(r3, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'ip6gretap0\x00', @random="0200ff7fdfff"}) (async) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x0, 0x6c, 0x0, @private1, @local}}}}, 0x0) (async) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)={0x3, 0xf, "fff2b2e53a32fbef750da4caeabb57"}) (async) write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x2d, 'net'}]}, 0x5) (async) 1.864995429s ago: executing program 1 (id=1139): syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000002340)="0f", 0x1}], 0x1}}], 0x1, 0x44008000) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 1.005863207s ago: executing program 1 (id=1144): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x101001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) 435.906574ms ago: executing program 4 (id=1152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x88c, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x182) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 435.484074ms ago: executing program 4 (id=1153): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xf5) 375.57967ms ago: executing program 4 (id=1154): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 7) 375.35721ms ago: executing program 2 (id=1155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x2}}}, 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x7, 0x0, 0x1, 0x0, 0x81}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 315.631748ms ago: executing program 3 (id=1156): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000fc010002e400000000000014000000000001"], 0x28}}], 0x2, 0x40800) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x891d, &(0x7f0000000100)={'veth1_to_batadv\x00', @ifru_data=0x0}) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x268c5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) (async) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x8, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}]}, 0x38}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000500)={[{@gid={'gid', 0x3d, r8}}]}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 64) mount$cgroup2(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={[{@memory_recursiveprot}, {@memory_hugetlb_accounting}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '*\x1d;\x02\xd1S.'}}, {@obj_user={'obj_user', 0x3d, 'favordynmods'}}]}) (rerun: 64) 315.383483ms ago: executing program 3 (id=1157): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0xc9, 0x1}}}, 0x7) (async, rerun: 64) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000540)=0xfffffffffffffffe, 0x8, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000340)={0xc7, 0x0, 0x1}) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) (async) read$msr(r4, &(0x7f0000000000)=""/199, 0xc7) 235.579452ms ago: executing program 4 (id=1158): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e20, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x40000000, @mcast2, 0x2}, 0x1c) setuid(0xee00) ioprio_set$pid(0x3, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 235.273345ms ago: executing program 4 (id=1159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000005c0)={{}, "9743c4da55799ffaeb4ac34f7cf1d992ea187e8a540ff49d1bfe0f61258cd7ce0f3b1e9209b101d9cad582609d232a8f295ecbb2c822494c2616cb6e64f85c9a96fa28c82463a8b1fc69b9948e235de68b2219426fc4ff98509956ae8412645373276c105c617c8a2fb7fea5248fa01a39ba329d2a0e8a087dac37aa54cb13e4ea70611d66d5acc9d2289f87fa1e38410287c2716b17a1b6af0c9837b86d823d58acbd2becebd8acdbff39aa5a04ac18813c4fed8d2a571d7096053530a7029e2339c1b88cdf0cab2f56d013b0703d34dfe27a967ebdf9f37ff141a4f3c91e18e686f6dce927d0b151f87b1564b102a2e1cec8979850999c9ced771a4d9b21133e5d072f497aba2ac449aefa323bb15a0ea3fd2962b5035da4e01a27841f3ddcb4254304cce527687f4ff84138b46eadf60ca8fb9bfbc5403bbd6ef2b9c10d35c6dac2f574df7694ed3ab5d6b562fcb3e0f532bb70383c12de29455634ca4776f28f3c7c71f54c7656dedbacb113bfbe8d0f82f36b5a8e14776446fe7efd0531b67359e547cb005acee0ba0a4593dcd1a5a9c30c25ef759dafdd6c4b98885e3b12a65e3aaa50a329591e28dd5e8af126b043603a6b2b20da08e5459d7ee11d42beafae3c628602f99f3cd371229c77a69a8e02abb8934e4c4bff0d1b3571c22e88b0fd1b74332508d8d3fd532e3b5285031acf749c295026074ac574056297665c8ac98d3d4b2d37a30da8d1cd8aa886456f3e3ac97d396b807eed89056995a08f682db24c830e18bf001caab865fd46dda7aa0d26b9cb88b036aa0e80cde9fb5efa6b9f1e16aa71b642ae509ae5b788489acb327129388a94daf00b7497e793f6a5cf88340f32285ca178c1480d5c328e711a908c66926775663f003888e1cef9aba18ca56d3458e9fac5e321a98d2f8f8125220790182670994e1e02a22d73cccd72e870cda172076872fb6ff66ee95d2be9cefea9e8f3c3b0ccacf0c3de644d1d54bc9ce7b65091078a692d1efb56fcf04dd94aed8e80a5d7e6283c35816216fbac6880645c2174ea8607396eb3c4b64b21683215ead414700bb6c0b179ab31c046bb5f74d52b2541f41f79b27b19a3ac7857b895689ecea842d978cf28ccc00628cb19d52868c150919df9429d748209ffab7045778e0a00a51074d77de3cdd4849434f76a1c812c4c0ebf826fcbca279204f0b7b3465f2d5cfbebbbf8f6e650ca15ac2c54fcd442d5234725f1f637f3ce323d376dd70877c9fce086e91157d275e676b3ce12b66ea778b5a735d8daa2a73c876aad6f1657ec7ea52fde540952779a017e250561266f0481ff550e68ff88e221ace0809b4cbea6c5b76c60799aa75ac34b203fd29e5d7dbfaf816b73cf10bf162bfb2eb5d80509673250b2c955d594a44b475c605fe12cbb1907260bda08d158f6020bfee0351f8f97a9c56a1486ccb8d53f43f23c4e6941b1d729ee91fbb1e7804fdd116bdf720096f439c951e8daddbb8e07daa2196476ef75c25bc2b1e15f68217367ce6bc70fbc712625802573df954e4f610754d44cc75c81fd9d4820bd841e726647a0527057e9cc5593b4cf4f1eef565408fe298593423d66258a9392e598d47bc1cbda8ddcc6805e64a61bb54c4f2cd825228262ddccc7b902df9ca0423c7f49617c27459ea294d24642c55331db63b1c4a887645cb727efd584e9c33909b9e05232e39b68934cb43887bdf254d43d22140e06b322e9fbd1942a34c055b295a5119f9605a17e7b17155bb52d4b84e5287abb26b2f562e034ef78dd25bd71b8f6af7ee3cee98dd3f47ec3789ffa690a7370dba515fe8107f054e28475a1c902f3bee93e2c1f162447424e98989ed1e1e49bd40c91fcedf02a172a33c86c3b33dec1ca569af7518cbe072b3245bb89965eeed6a436c381277146e95789c96962bf6cbe1586c5728d424358a89493b044b45b671904ec708c79cdeb6c64b7bcbdfe96e177f9ae6002448ef1a368bb4e59240d5fc51d2a51488a5e1016612cda5a2d7d359759e0c09a9b3d9614940b5ebeab956f3caab56a6cbb644b327d07783a910ebf93435c539e77b9ea31161836ddfbb67679098c5eca40836ac4f45f2bddb4ec10ee8d9d3441cd477aa1e78f6869044d8a543d3b79591dbe52e21fdbba9a3d15f96155914a6b32ac8a795c4ac3d3de65b3ffe324f7f5d27d60e4257f7b05563217a15c815ffba198aea6d095e09ba1513ca8eeae8a8af4570265c394cd86b9eaa43c3fe2afb64600abcf7e10c99b93bfed856fa21e5d66c7d8842948c78877930d663ce088ec3bf713a22cc80c5c9f0ed6ffc65def601f3ef54028e471c1af93ce68b0f92639de62a8c827f2be976018fb57666e70bbc4f670500b892fb5288fd46f818e5076c9afd2efabaf7b3c628152825eb561be37e35d5399b27ec5054ce8e0939382c00070349b506c5dcc4390384427859ab9c4024c7d17aeecb19fc6900356cf0dbd2ee69e1f11448c0302d76e73cb5964ed43ade41ae3240fb1ca8174cff3e0d04ca06084a614fb3e6c5ee59c5dbd0db93940b7964eb36503a32611494f677670ac2e593a5239fabc9d196439cbc4457d308fcccd6ffc822b85ad40e7424a6c29a1a04f0d30b0477af50174105731a1c2e3a6beded18cf0c9bf4a11a3bb6efc7612db2940777e92523bf853392264bee779401e7c8843f6ca001b884c031edd8236a36dd68edffac5555d84a05f649dea50510895713462269d592a6e964fb8fb2fc2f029b60b95208da3fe340a3202b5c2bdb2065bb815113ba92096d848d043a4028f8bf2e64af632206c65edcc0320fb8debdd98520d2a5c63250731f28787df48b5a6b538650810beff8cae2ea718971c3efdff4beb9eb981386ec7538cf4ff2ad9c2782642e2ba4739bd1f855d4d8cb1eb9202ad8c36d07a1d78dfba11ac30f22be9ac66e942ff5a9d8a53dbc640b12f981e2fb265d770892a53c668f9864b78096db4fe64eb30d23795247dc4c54760f2322d0b6ae1b70bfad566e87c0df58f30383a1b4fc4a825fd1086df66f248903c0e65f7f998a96d10f495a4c3b98812eec44c1e23926c5157303ab1a968768ea6d39a22ac807e3f01c0df4213543050fcd81481fdfeb95d46afde386d1661f79b7452fed21d9720b16570ebbbeef1b9d0543323c572b0497f205d36383162e2f7d0b4d6580ba5c5eed416e6f23dfe5d36b4058b11a58a755e7d6ea063424cd5b805b13e671b30a0936e0d3c7f1ee147ee2ea8afc727013bd4bbcd7cb54b2be3882d5b2ba407e7072f1950b2071d4dfce586e26e0a587960b362a06454ca70333fa9005b529be2c6eba0e022e9846f98ceb730743e69da48f89d1f20cde7caf85d2451d90d15b5b1470789054e1066a7e59946284ad6409ca7579374a1b54ead257eeb9f1ff3ebb96f4d78fd501220a2cb8f485fb397b10ea7dbb9db21f44855df5dc1ce4aa93fad399a7ba7da4b08c69bd683e29da282f35059f28104f7faef2fce65044abd48cb01021edaae80f28b3713f3e5510d16ea5ad3ca2ed2342e0f3659972aeec68d3896823f3bb96ed5d0b885afae9bad6829654e39b3d0438e07f3a8e967b1affeb5e3f5cc269c93053cfe6e11475ff4bf2fd49ea110f241db934d49e6bec003d021d2ad039dbf594dbb6e7a14a521d628546d1ce554d203ab39d97ed9f09967bc9e67e55527ec331225d9f4e166646259e15299cf883b80a0ae95ce031b12f8ea13b6bff1ab14cc11a3bad54a93bbc85cef6e678ce752dac15139e746d35e1a515d158711a520d2a87996d2e4d5e21e4d8843c2283f3e0142b8c1fb41ad372421dc616e44b2616c6d52c3945c25ba7a7c77435d183f6d21acfbf9c8e2eec454ad7cc9b6426e8efa862b2869e9b5c9f2e246dc88e184ccf7102e9a9d0aed7dfa7b26dfef778de85b461dd48277bbbc5a18e569d134e9a32ffd7ba353a85c2f19ed6aea45904d0701948bdf072ae7656b0c4464c12d393dfe8aa0b1506de464f615709545895cffe3fbace8816cac30714d50422fe33bcf223b458b23506cb1c79c16288303d891d160e2eede09eb9524dc1b1bd686b96a3809cb2b8b3349829503ed505fd54ea61cc78edc3e7dcb431433bfce833ca6f740b09ad11601ef9ba3cf8c08be1a9405a0d6a7d81c56512bd77b04c0b5ec666f9105e823972e3770c4e4382924e512c3ad9a1070f16f8016116c197a818e11992c65ca77146d6a3b6f2cc47fcc626650d3c991943ff02cc504f155d45c2be324dda8acaa140909a9b4ac519354853297ed9adcbee2fdbe852f09230298ca998231b0267b9651c264fc07517fe5780e34abf69852273545feb10c3ec4dcc6954402f1c359450c74a4ae360d46839cdcb92f89c2b3a436bef27ae06f445f745c912ef3320580ac5b72beaae3d3816a9caaa4f2f4cb3bd2ec1a1af002656236d41b20d8548ad746ba9a93d9bf10e7fc224c6f7407393cd2923e41c5d88bf270c89082b015d8c3fd3ece1435066cd121fcff44fb1e14e5bb22c6c3f73ca9ee13ec97b1d9b025b20cf0b8e875e3ea15dcd89a82b7dfdc04fe9299caa636d2f8ad2092635c2fdf740d8278012423d96b2da3deabcf20a0c2a82832985f9a2b0cb4b54012250279db124f47166206dde6024bb6cc573e7e8fe9eb28f73cef14bc94c334d9a55cd7ff9035e2a60b6b91474b2c05ef8474bad7bb0c3ce1744aaf9724e530e1a7ef613416f99aab2ed5f5064b5590ca2d192c43fad56787f41295280868d4ca5e2460bd91b4b96da1bf5fbced5db7d74bc8b47d3b68b58aa314b4076a0ecca7209647739701060884db47f6af3dd5afacb75bb4beac26a7d83e813e213a20d70f2658a620368954b25a1e154e6fab8b2e9997446f2eb01b6478354f0df11e3b8a874265526de962da20bfacc6a4bdf893c78f2e9da214940391b970ce4610a34de26a104e80279db8f696a846543d5af2386e5d3f5196acc0f3a7161124e38e46a136a1b244cb0224675945a0b95516b9fd1fd02c3e27c21b22bbc94d71dcbcb47ad6acc65ab00d306514f9ce5771ceea164e477fa6464fc086ec1f59e5586bbafb892741f77b68a5f31712fd74b9fa733b2e5260dbfd8b01033220ea6f333876d82e354ca48914d888671b5b9f566fa71c075d7b16e3c290a35829556f8e68fec75e063fa065bddb23f92d169fb9c24072be7cb995b3134649b70e8cf33fc77205fd6829635b5db51fc21d1bda6aaa9ac2ca8e6512b069c4f6b99371e09d9fbd3419439fe1ec5aff37faa0ecb895112f55c214526c87da644082f580e2c5964c1e9fd6e93835ee541378b6921bb685ab861f3ca38dc2ec7544e90670d7d6ee70cafc6b9b0e65ccb22dc5c9121169dfad5a86f2c47807c33fce566c32376a2ec7dfaf2cc0e5269da6053798a2e7f3939b917fd43e60255644025ec11a61bbcdfec98a5cc9f8a86b739af119c33891288b5bbe31507490da03d0ffcbc73d86defdec1741a1a8f16091dee9356ca03b8a77f5671821759bc603ec44fcde8f78fccb7f1c98925ebdef2d21eaa4565b5f13dcb89f1a127c81d9078aba1e13478060b1a2a7d4755441e2e93c4f02641cbe6de09f48f83d91ea4f704b48ca86efa5c9cefa805c421e80522923b2a7f029b8e96772b154ac556c906fb43e65aeb860b6a776c95a1658740cb5ac3632335691714da8d35e8210df0d2dd65199f0b3f2c5ab032d3f722ce17447935937751c620587080f6b9a4b2ac944e87dd2ba304cf366efc0d95faedae2e3"}) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000007"], 0x38}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10780, 0x127) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000020000009500b6747f65c600"], 0x0, 0xab, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) 174.943223ms ago: executing program 3 (id=1160): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000001) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000001) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x100000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x44ac) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8001) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x100000000, 0x200000) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2e) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffff) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7dd4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x100000001) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3061) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0xff, 0xc40, 0x400, 0x9, 0x5}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffffffff) 174.647402ms ago: executing program 3 (id=1161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f3841790065d9a1000065f30f090f00170f0666b80000c0fe0f23d00f21f86635200000060f23f866b8010000000f01c12e660f6549b60f01d10f08", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 115.997193ms ago: executing program 2 (id=1162): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x207) 115.816124ms ago: executing program 2 (id=1163): add_key(0x0, 0x0, &(0x7f0000000100)='P', 0x1, 0xfffffffffffffffc) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) 109.96229ms ago: executing program 2 (id=1164): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000200)={0x2, 0x4, 0x7fffffff, 0x9, 'syz0\x00', 0x1}) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00'}, 0x18) write$cgroup_int(r1, &(0x7f0000000240)=0x1, 0x12) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x300, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}}, 0x40) 63.448696ms ago: executing program 1 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x170, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0xfffffffffffffe49, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x40}, {0x58, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_TYPE={0xfffffffffffffef5, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x198}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x10000, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$inet6(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029d3a4dec3000007c71d02010000000000003c28f73300000000090000000000"], 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 63.153473ms ago: executing program 2 (id=1166): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 8) 62.956638ms ago: executing program 2 (id=1167): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value=r0}, 0x20) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x34, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)=r0}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000005c0)=0x7) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 62.77827ms ago: executing program 1 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="04007a55c1c5c94400", @ANYRES16=r1, @ANYBLOB="0100000000000000000083c591c708000300", @ANYRES32=r2], 0x44}}, 0x20008080) 5.689481ms ago: executing program 1 (id=1169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) 5.461531ms ago: executing program 3 (id=1170): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) fchmod(r0, 0x22) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8e5) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) r1 = syz_open_dev$evdev(0x0, 0x5, 0x30000) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48805}, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 4.998191ms ago: executing program 4 (id=1171): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x10, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f00000022c0)="500bab80521202f698d6962fa870c1625b0ad869572313d36452a85eb4cd5c22132df7a79942bcf518ff5b3eb91a3c95540400e9f3b909e348506c44e058f02a816b3dce27d1278646797a8b0537d5ae98ecd5ee2d6ab6e81f24d86c9d79c807461cd19e3250140dc9a2047aa54b055f3db383f3029c8d99d4801b3b52a6fa1bdb7a0ddd7c5029f224aaccc8f8f6e820dfe84bf16484c0196b3b475f641a74f7d101a94735132bcb44fc813a970556d45b1089ca4a572b10c7b63d83e01b951f1eb62dcec15286103c6726ae5aaf439d9d2aac59e8c131696ae8ebe75c8d7749e5e3cf204092a3350f87670da57fb40b9baed7", 0xf3, 0x8800, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000080)={&(0x7f00000000c0), 0x2, 0x1c6994e2a83a9376, 0xb}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x4000) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000000040)=""/15) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c918cd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1ff, 0x2000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000044c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x1, {0x2002, 0x3, 0x800000000000000, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x6, 0x8, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000023c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC, @ANYBLOB="896cefb4faee010000000000000000000f0000000c00078008000200f70000007126419049c4d8415b2baa14fd33921c31813bf44f5b79a9ae36d56e446878666bd245624bea7597bcd821c482ee35c01bd530c9bf631904fbaf8b8d3338ac173be31d7d60ac7836a8836f933395162d4469ea70d33fc4a4836eb8bc588bf449fd5d4550e27a8ae1e090b62847ef7c5c0bb7bb32db9683e0cd3b432b81576998d224694ffd627a7c24ae3f3ef56ab24a04ab7326acaa570c0a50fd7495a3bb4f975f6747681e9fbabee74bb1b136414a29b73f37c0598ceb270114e8a80cdc1203e76999543ba8e8013e2b97e027c425d3d340b424059d"], 0x20}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x20040041}, 0x8000) dup3(r3, r7, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r9 = dup(r8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000041c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000000280)={{r10, 0xc, 0x1ff, 0x10000, 0x3, 0x8000000000000001, 0x4, 0x2, 0xfffffbff, 0x10000, 0x0, 0x2, 0x2, 0x5, 0x400}}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x103000, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000012c0)="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", 0x1000) 0s ago: executing program 3 (id=1172): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff3}, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff5, 0xfff2}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x289) kernel console output (not intermixed with test programs): cm6533_jd 0003:0D8C:0022.0004: item fetching failed at offset 4/5 [ 61.742481][ T9] cm6533_jd 0003:0D8C:0022.0004: parse failed [ 61.744794][ T9] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22 [ 61.942265][ T9] usb 8-1: USB disconnect, device number 4 [ 61.970235][ T7484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.454'. [ 62.006513][ T7487] tipc: Started in network mode [ 62.008467][ T7487] tipc: Node identity e0000001, cluster identity 4711 [ 62.011266][ T7487] tipc: Enabling of bearer rejected, failed to enable media [ 62.015527][ T7487] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7487 comm=syz.1.455 [ 62.195198][ T7489] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.456'. [ 62.198034][ T7489] openvswitch: netlink: ct_state flags 00100000 unsupported [ 62.238433][ T39] audit: type=1400 audit(2000000019.229:672): avc: denied { ioctl } for pid=7498 comm="syz.2.459" path="socket:[17720]" dev="sockfs" ino=17720 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.383923][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.494135][ T5952] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 62.515306][ T1334] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.520405][ T39] audit: type=1400 audit(2000000019.509:673): avc: denied { mounton } for pid=7508 comm="syz.3.464" path="/123/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 62.523981][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.544015][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 62.546476][ T30] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 62.548625][ T30] usb 6-1: config 179 has no interface number 0 [ 62.550243][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 62.553043][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 62.556012][ T39] audit: type=1400 audit(2000000019.549:674): avc: denied { create } for pid=7512 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.556160][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.560950][ T39] audit: type=1400 audit(2000000019.549:675): avc: denied { write } for pid=7512 comm="syz.3.465" path="socket:[18745]" dev="sockfs" ino=18745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.564241][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 62.564256][ T30] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 62.564275][ T30] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 62.564286][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.566619][ T7496] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.663854][ T1334] usb 7-1: Using ep0 maxpacket: 8 [ 62.666696][ T1334] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 62.668931][ T1334] usb 7-1: config 179 has no interface number 0 [ 62.670610][ T1334] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 62.673390][ T1334] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 62.676333][ T1334] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.679159][ T1334] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 62.682086][ T1334] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 62.685633][ T1334] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 62.687922][ T1334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.691458][ T7503] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 62.899836][ T1334] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input14 [ 62.992583][ T1334] usb 6-1: USB disconnect, device number 4 [ 62.992666][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 62.998325][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 63.272387][ T57] usb 7-1: USB disconnect, device number 4 [ 63.272519][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 63.276129][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 63.283072][ T57] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 63.337161][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.337175][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.403751][ T7542] xt_hashlimit: size too large, truncated to 1048576 [ 63.411842][ T39] audit: type=1400 audit(2000000020.399:676): avc: denied { getopt } for pid=7539 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.437310][ T7540] "syz.2.472" (7540) uses obsolete ecb(arc4) skcipher [ 63.515989][ T7549] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 63.517439][ T1334] IPVS: starting estimator thread 0... [ 63.518523][ T7549] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 63.529154][ T7549] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.531885][ T7549] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 63.536365][ T7549] bond1: (slave vxcan3): making interface the new active one [ 63.538815][ T7549] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 63.541540][ T7552] IPVS: set_ctl: invalid protocol: 11612 172.20.20.45:20000 [ 63.612707][ T7558] kvm: pic: non byte write [ 63.614247][ T7550] IPVS: using max 36 ests per chain, 86400 per kthread [ 63.619558][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.475'. [ 63.622031][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.475'. [ 63.626887][ T30] IPVS: starting estimator thread 0... [ 63.631900][ T39] audit: type=1400 audit(2000000020.619:677): avc: denied { write } for pid=7557 comm="syz.3.476" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.672972][ T7556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7556 comm=syz.1.475 [ 63.713945][ T7561] IPVS: using max 36 ests per chain, 86400 per kthread [ 63.836017][ T7569] netlink: 'syz.3.480': attribute type 7 has an invalid length. [ 63.839372][ T7569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.009345][ T7592] tmpfs: Unknown parameter 'usrquotaô' [ 64.073129][ T39] audit: type=1400 audit(2000000021.059:678): avc: denied { ioctl } for pid=7598 comm="syz.3.491" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.080016][ T39] audit: type=1400 audit(2000000021.069:679): avc: denied { accept } for pid=7601 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.180053][ T7607] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 64.199907][ T39] audit: type=1400 audit(2000000021.189:680): avc: denied { execute } for pid=7609 comm="syz.2.494" path="/newroot/dev/audio1" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 64.254663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.256850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.267553][ T7616] netlink: 'syz.2.496': attribute type 11 has an invalid length. [ 64.375046][ T7629] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 64.423902][ T5952] usb 5-1: device descriptor read/64, error -71 [ 64.604218][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.664128][ T5952] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 64.666926][ T5952] usb 5-1: device reset changed ep0 maxpacket size! [ 64.669240][ T5319] usb 5-1: USB disconnect, device number 7 [ 64.803922][ T5319] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.953949][ T5319] usb 5-1: Using ep0 maxpacket: 8 [ 64.956718][ T5319] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.958787][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.961735][ T5319] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.964835][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.967680][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.971452][ T5319] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.973450][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.976527][ T5319] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.979588][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.982525][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.986338][ T5319] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.988289][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.991179][ T5319] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.994307][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.997224][ T5319] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.002355][ T5319] usb 5-1: string descriptor 0 read error: -22 [ 65.004122][ T5319] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.006572][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.012120][ T5319] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.247055][ T5319] usb 5-1: USB disconnect, device number 8 [ 65.404058][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.413962][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.483983][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.493926][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.675970][ T30] usb 8-1: config 56 has an invalid interface number: 213 but max is 0 [ 65.678145][ T30] usb 8-1: config 56 has an invalid descriptor of length 1, skipping remainder of the config [ 65.680827][ T30] usb 8-1: config 56 has no interface number 0 [ 65.682642][ T30] usb 8-1: config 56 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 65.686170][ T30] usb 8-1: config 56 interface 213 has no altsetting 0 [ 65.690715][ T30] usb 8-1: New USB device found, idVendor=045e, idProduct=04d8, bcdDevice=c6.0e [ 65.698864][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.700970][ T30] usb 8-1: Product: Ð [ 65.702086][ T30] usb 8-1: Manufacturer: ã°¨ä¶æ¨œè¡¸ì –壠꼔硭햅㞻凖爌ç°ã‰™ä© ì‰£á¡‹ë¥ˆêˆ—䮭헀ʟ჋ä›á¨„畛䅱꫿럺㲴⦜⥿♙蔾è´í¥ç‹¾ã”癖䣦놕᎑ꇵ㵔ꅓ岞 [ 65.706945][ T30] usb 8-1: SerialNumber: syz [ 65.709196][ T7662] __nla_validate_parse: 7 callbacks suppressed [ 65.709204][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.511'. [ 65.778736][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 65.781148][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 65.829569][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 66.003866][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.119931][ T7657] syz.3.509: attempt to access beyond end of device [ 66.119931][ T7657] sr0: rw=2048, sector=0, nr_sectors = 4 limit=0 [ 66.126663][ T7657] hfsplus: unable to find HFS+ superblock [ 66.133470][ T30] usb 8-1: USB disconnect, device number 5 [ 66.138557][ T5954] udevd[5954]: setting owner of /dev/bus/usb/008/005 to uid=0, gid=0 failed: No such file or directory [ 66.163883][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 66.166516][ T35] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 66.169425][ T35] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 144, changing to 11 [ 66.172261][ T35] usb 7-1: config 1 interface 0 has no altsetting 0 [ 66.175644][ T35] usb 7-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 66.178010][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.180926][ T35] usb 7-1: Product: Ђ [ 66.182122][ T35] usb 7-1: Manufacturer: Ð [ 66.183356][ T35] usb 7-1: SerialNumber: ä€ [ 66.438874][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 66.616016][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 66.616027][ T39] audit: type=1400 audit(2000000023.609:690): avc: denied { setopt } for pid=7695 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.684157][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.844820][ T39] audit: type=1400 audit(2000000023.839:691): avc: denied { getopt } for pid=7716 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 66.895340][ T39] audit: type=1400 audit(2000000023.889:692): avc: denied { lock } for pid=7725 comm="syz.1.525" path="/140/file0/blkio.bfq.avg_queue_size" dev="9p" ino=37100984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.901713][ T39] audit: type=1400 audit(2000000023.889:693): avc: denied { ioctl } for pid=7725 comm="syz.1.525" path="/140/file0/blkio.bfq.avg_queue_size" dev="9p" ino=37100984 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.963864][ T39] audit: type=1400 audit(2000000023.949:694): avc: denied { write } for pid=7729 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.992340][ T39] audit: type=1400 audit(2000000023.979:695): avc: denied { setopt } for pid=7734 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.006784][ T39] audit: type=1400 audit(2000000023.999:696): avc: denied { ioctl } for pid=7734 comm="syz.3.529" path="socket:[17969]" dev="sockfs" ino=17969 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.013153][ T39] audit: type=1400 audit(2000000023.999:697): avc: denied { write } for pid=7734 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.059484][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 67.065066][ T39] audit: type=1400 audit(2000000024.049:698): avc: denied { mount } for pid=7742 comm="syz.1.532" name="/" dev="hugetlbfs" ino=20833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.094747][ T5956] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 67.353962][ T7753] nbd3: detected capacity change from 0 to 22 [ 67.356778][ T7752] block nbd3: shutting down sockets [ 67.357355][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.360991][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.363707][ T1158] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.366255][ T1158] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.369173][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.371557][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.374193][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.376534][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.378706][ T7752] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.381636][ T7752] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.384193][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.386531][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.389195][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.391480][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.393535][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.396185][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.398212][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.400465][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.402423][ T5916] ldm_validate_partition_table(): Disk read failed. [ 67.404731][ T5916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 67.407064][ T5916] Buffer I/O error on dev nbd3, logical block 0, async page read [ 67.409209][ T5916] Dev nbd3: unable to read RDB block 0 [ 67.411262][ T5916] nbd3: unable to read partition table [ 67.412808][ T5916] nbd3: partition table beyond EOD, truncated [ 67.421426][ T5916] ldm_validate_partition_table(): Disk read failed. [ 67.423398][ T5916] Dev nbd3: unable to read RDB block 0 [ 67.425307][ T5916] nbd3: unable to read partition table [ 67.426828][ T5916] nbd3: partition table beyond EOD, truncated [ 67.564321][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.564877][ T7764] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 67.593492][ T7766] siw: device registration error -23 [ 67.777243][ T7775] netdevsim netdevsim3: Direct firmware load for .Þ failed with error -2 [ 67.779615][ T7775] netdevsim netdevsim3: Falling back to sysfs fallback for: .Þ [ 68.155553][ T39] audit: type=1400 audit(2000000025.149:699): avc: denied { read write } for pid=7791 comm="syz.1.545" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 68.639151][ T7811] pimreg: entered allmulticast mode [ 68.640813][ T7811] pimreg: left allmulticast mode [ 68.708659][ T7816] IPVS: Unknown mcast interface: vcan0 [ 68.740574][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 68.748879][ T35] usbhid 7-1:1.0: can't add hid device: -71 [ 68.751553][ T35] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 68.763771][ T35] usb 7-1: USB disconnect, device number 5 [ 68.791196][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.794433][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.842432][ T7830] block device autoloading is deprecated and will be removed. [ 68.848968][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.857065][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.879692][ T7832] syz.1.558: attempt to access beyond end of device [ 68.879692][ T7832] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 68.885203][ T7832] MINIX-fs: unable to read superblock [ 68.907538][ T7818] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.910129][ T7818] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.912370][ T7818] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.915245][ T7818] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.043175][ T7849] overlayfs: missing 'lowerdir' [ 69.435129][ T7872] openvswitch: netlink: Actions may not be safe on all matching packets [ 69.573853][ T6920] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 69.579011][ T7878] openvswitch: netlink: Actions may not be safe on all matching packets [ 69.581912][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'. [ 69.610228][ T5956] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 69.644254][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.744154][ T6920] usb 8-1: Using ep0 maxpacket: 8 [ 69.747630][ T6920] usb 8-1: config 233 has too many interfaces: 155, using maximum allowed: 32 [ 69.750646][ T6920] usb 8-1: config 233 has an invalid descriptor of length 0, skipping remainder of the config [ 69.753523][ T6920] usb 8-1: config 233 has 0 interfaces, different from the descriptor's value: 155 [ 69.758749][ T6920] usb 8-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 69.761149][ T6920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.763237][ T6920] usb 8-1: Product: syz [ 69.764941][ T6920] usb 8-1: Manufacturer: syz [ 69.766292][ T6920] usb 8-1: SerialNumber: syz [ 70.027620][ T7675] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 70.037031][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 70.059913][ T5319] usb 8-1: USB disconnect, device number 6 [ 70.086396][ T7897] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.179698][ T7910] overlayfs: metacopy with no lower data found - abort lookup (/file0) [ 70.718283][ T7957] netlink: 2 bytes leftover after parsing attributes in process `syz.3.595'. [ 70.902572][ T7975] netlink: 'syz.2.602': attribute type 21 has an invalid length. [ 70.905338][ T7975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.602'. [ 71.016439][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.190203][ T7986] netlink: 6 bytes leftover after parsing attributes in process `syz.0.605'. [ 71.192565][ T7986] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.605'. [ 71.196571][ T7989] netlink: 6 bytes leftover after parsing attributes in process `syz.0.605'. [ 71.199613][ T7989] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.605'. [ 71.363908][ T6920] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.533852][ T6920] usb 6-1: Using ep0 maxpacket: 32 [ 71.545760][ T5958] Bluetooth: hci4: sending frame failed (-49) [ 71.548148][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 71.595922][ T6920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 71.598597][ T6920] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 71.600647][ T6920] usb 6-1: can't read configurations, error -71 [ 71.710072][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 71.710082][ T39] audit: type=1400 audit(2000000028.704:724): avc: denied { mounton } for pid=7996 comm="syz.3.609" path="/171/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.719532][ T39] audit: type=1400 audit(2000000028.704:725): avc: denied { remount } for pid=7996 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.755925][ T8000] 9pnet_fd: Insufficient options for proto=fd [ 71.788885][ T39] audit: type=1400 audit(2000000028.784:726): avc: denied { read } for pid=8001 comm="syz.2.611" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 71.796030][ T39] audit: type=1400 audit(2000000028.794:727): avc: denied { ioctl } for pid=8001 comm="syz.2.611" path="socket:[20394]" dev="sockfs" ino=20394 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.917574][ T5956] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 71.963626][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 72.016688][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'. [ 72.038541][ T39] audit: type=1400 audit(2000000029.034:728): avc: denied { connect } for pid=8036 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.092704][ T39] audit: type=1400 audit(2000000029.084:729): avc: denied { shutdown } for pid=8036 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.130823][ T39] audit: type=1400 audit(2000000029.124:730): avc: denied { mounton } for pid=8048 comm="syz.0.625" path="/proc/368/cgroup" dev="nsfs" ino=4026533020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.165870][ T8055] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 72.202839][ T39] audit: type=1400 audit(2000000029.194:731): avc: denied { read } for pid=8056 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.234321][ T8063] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 72.236525][ T8063] overlayfs: missing 'lowerdir' [ 72.239647][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 72.860710][ T39] audit: type=1400 audit(2000000029.854:732): avc: denied { create } for pid=8065 comm="syz.3.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 72.866546][ T39] audit: type=1326 audit(2000000029.864:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.3.630" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bbf7e719 code=0x0 [ 73.011263][ T8074] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 73.013623][ T8074] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 73.017351][ T8074] vhci_hcd vhci_hcd.0: Device attached [ 73.020582][ T8075] vhci_hcd: unknown pdu 2 [ 73.021971][ T7667] vhci_hcd: stop threads [ 73.023085][ T7667] vhci_hcd: release socket [ 73.024313][ T7667] vhci_hcd: disconnect device [ 73.189289][ T8086] tracefs: Unknown parameter 'Ô|TÞd£C [ 73.189289][ T8086] d'á³ycªt/õÚl$#‹‡š_³b:¾ûŸ'gLëè¹óÆeSh†6ég“cRÁG|•£YžêË [ 73.189289][ T8086] à.j [ 73.189289][ T8086] ó†ûÈ@' [ 73.235038][ T8088] xt_limit: Overflow, try lower: 1207959552/384 [ 73.239057][ T8088] ntfs3(nullb0): Primary boot signature is not NTFS. [ 73.241216][ T8088] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 73.453133][ T8091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14435 sclass=netlink_route_socket pid=8091 comm=syz.1.637 [ 73.600619][ T8098] Bluetooth: (null): Too short H5 packet [ 73.645421][ T5956] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 73.647713][ T5956] Bluetooth: hci0: Injecting HCI hardware error event [ 73.650323][ T5956] Bluetooth: hci0: hardware error 0x00 [ 73.655295][ T8115] xt_hashlimit: max too large, truncated to 1048576 [ 73.658784][ T8115] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 73.712216][ T8126] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 73.726587][ T8130] xt_connbytes: Forcing CT accounting to be enabled [ 73.728587][ T8130] Cannot find del_set index 1 as target [ 73.766077][ T8133] nbd: must specify a device to reconfigure [ 73.877781][ T8145] kvm: pic: non byte write [ 73.881168][ T8145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 73.939560][ T8152] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 73.941606][ T8152] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.657'. [ 73.971916][ T8155] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 73.981921][ T8155] syz_tun: entered promiscuous mode [ 73.989248][ T8155] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 73.991682][ T8156] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 74.000807][ T8156] team0: Device bond0 is already an upper device of the team interface [ 74.005729][ T8155] tipc: Started in network mode [ 74.007370][ T8155] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 74.012174][ T8155] tipc: Enabled bearer , priority 0 [ 74.038279][ T8159] ubi0: attaching mtd0 [ 74.041212][ T8159] ubi0: scanning is finished [ 74.042794][ T8159] ubi0: empty MTD device detected [ 74.123984][ T8159] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.126488][ T8159] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.128931][ T8159] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.131289][ T8159] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 74.133897][ T8159] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.136131][ T8159] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.138856][ T8159] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 103116301 [ 74.142206][ T8159] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.145735][ T8161] ubi0: background thread "ubi_bgt0d" started, PID 8161 [ 74.274440][ T8170] veth0: entered promiscuous mode [ 74.277435][ T8164] veth0: left promiscuous mode [ 74.428318][ T8181] binder: Bad value for 'max' [ 74.568720][ T8198] openvswitch: netlink: Actions may not be safe on all matching packets [ 74.654004][ T6920] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 74.834989][ T6920] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.837234][ T6920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.839811][ T6920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.842104][ T6920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.846334][ T6920] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.848682][ T6920] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.850781][ T6920] usb 6-1: Product: syz [ 74.851870][ T6920] usb 6-1: Manufacturer: syz [ 74.854926][ T6920] cdc_wdm 6-1:1.0: skipping garbage [ 74.856273][ T6920] cdc_wdm 6-1:1.0: skipping garbage [ 74.858247][ T6920] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 74.859794][ T6920] cdc_wdm 6-1:1.0: Unknown control protocol [ 75.004020][ T35] tipc: Node number set to 12429994 [ 75.107706][ T5952] usb 6-1: USB disconnect, device number 7 [ 75.107730][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 75.111512][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 75.113094][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 75.723929][ T5956] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 76.126248][ T25] cfg80211: failed to load regulatory.db [ 76.446148][ T828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 77.228518][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 77.228528][ T39] audit: type=1400 audit(2000000034.224:743): avc: denied { sys_chroot } for pid=8221 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.238219][ T39] audit: type=1400 audit(2000000034.224:744): avc: denied { setgid } for pid=8221 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.245535][ T39] audit: type=1400 audit(2000000034.224:745): avc: denied { setrlimit } for pid=8221 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 88.301865][ T39] audit: type=1400 audit(2000000045.294:746): avc: denied { module_request } for pid=8247 comm="syz.2.676" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 88.326314][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 88.332755][ T39] audit: type=1326 audit(2000000045.324:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.3.678" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bbf7e719 code=0x0 [ 88.424402][ T8274] dvmrp5: entered allmulticast mode [ 88.440901][ T39] audit: type=1400 audit(2000000045.434:748): avc: denied { associate } for pid=8261 comm="syz.3.678" name="blkio.bfq.io_serviced" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.464402][ T8275] netfs: Couldn't get user pages (rc=-14) [ 88.504259][ T39] audit: type=1400 audit(2000000045.504:749): avc: denied { setopt } for pid=8278 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.534329][ T39] audit: type=1400 audit(2000000045.534:750): avc: denied { accept } for pid=8282 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.537343][ T8282] rtc_cmos 00:05: Alarms can be up to one day in the future [ 88.539302][ T39] audit: type=1400 audit(2000000045.534:751): avc: denied { mounton } for pid=8284 comm="syz.0.684" path="/150/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 88.614741][ T8289] syz.2.686 (8289) used greatest stack depth: 18912 bytes left [ 88.683012][ T39] audit: type=1400 audit(2000000045.674:752): avc: denied { create } for pid=8305 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.688327][ T39] audit: type=1400 audit(2000000045.684:753): avc: denied { write } for pid=8305 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.855042][ T8309] netlink: 76 bytes leftover after parsing attributes in process `syz.0.692'. [ 88.982080][ T6403] bond0: (slave syz_tun): Releasing backup interface [ 89.031219][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 89.034052][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 89.036548][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 89.039049][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 89.040925][ T30] rtc rtc0: __rtc_set_alarm: err=-22 [ 89.097002][ T39] audit: type=1400 audit(2000000046.094:754): avc: denied { execute } for pid=8313 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 89.103061][ T39] audit: type=1400 audit(2000000046.094:755): avc: denied { execute_no_trans } for pid=8313 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 89.131692][ T7679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.186177][ T7679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.197822][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.200622][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.203740][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.206956][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.210288][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.212493][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.257463][ T7679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.270929][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.698'. [ 89.273247][ T8327] netlink: 'syz.1.698': attribute type 7 has an invalid length. [ 89.275873][ T8327] netlink: 'syz.1.698': attribute type 8 has an invalid length. [ 89.277868][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 89.359629][ T7679] bond0: (slave netdevsim0): Releasing backup interface [ 89.363107][ T7679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.367383][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 89.411092][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.413758][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.415830][ T8316] bridge_slave_0: entered allmulticast mode [ 89.417840][ T8316] bridge_slave_0: entered promiscuous mode [ 89.421790][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.423649][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.426498][ T8316] bridge_slave_1: entered allmulticast mode [ 89.428606][ T8316] bridge_slave_1: entered promiscuous mode [ 89.448780][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.453204][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.480333][ T8316] team0: Port device team_slave_0 added [ 89.489046][ T8316] team0: Port device team_slave_1 added [ 89.507062][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.509149][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.516111][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.527086][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.530488][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.538314][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.566833][ T8216] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 89.688794][ T7679] dvmrp5 (unregistering): left allmulticast mode [ 89.713866][ T8216] usb 8-1: Using ep0 maxpacket: 8 [ 89.717372][ T8216] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 89.720092][ T8216] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.723483][ T8216] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.726061][ T8216] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.729986][ T8216] usbtmc 8-1:16.0: bulk endpoints not found [ 89.864549][ T7679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.869144][ T7679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.872985][ T7679] bond0 (unregistering): (slave team0): Releasing backup interface [ 89.877447][ T7679] tipc: Resetting bearer [ 89.881563][ T7679] tipc: Resetting bearer [ 89.883074][ T7679] bond0 (unregistering): Released all slaves [ 89.889117][ T8316] hsr_slave_0: entered promiscuous mode [ 89.891467][ T8316] hsr_slave_1: entered promiscuous mode [ 89.893315][ T8316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.895418][ T8316] Cannot create hsr debugfs directory [ 89.984632][ T7679] tipc: Disabling bearer [ 89.990063][ T7679] tipc: Left network mode [ 89.994975][ T8360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.996616][ T8360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.998114][ T8360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.999740][ T8360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.009738][ T8360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.011463][ T8360] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.015187][ T7679] IPVS: stopping backup sync thread 6513 ... [ 90.021811][ T8360] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.030942][ T8316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.069913][ T8316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.075081][ T8316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.078937][ T8316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.090522][ T5956] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 90.156551][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.165257][ T8316] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.170154][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.172055][ T7678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.178884][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.180796][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.257865][ T7679] hsr_slave_0: left promiscuous mode [ 90.260122][ T7679] hsr_slave_1: left promiscuous mode [ 90.300195][ T7679] veth1_macvtap: left promiscuous mode [ 90.301929][ T7679] veth0_macvtap: left promiscuous mode [ 90.303388][ T7679] veth1_vlan: left promiscuous mode [ 90.304934][ T7679] veth0_vlan: left promiscuous mode [ 90.338554][ T7679] infiniband syz1: set down [ 90.435203][ T8416] kvm: MWAIT instruction emulated as NOP! [ 90.610476][ T5956] Bluetooth: hci2: unexpected event for opcode 0x204e [ 90.915635][ T7679] team0 (unregistering): Port device team_slave_1 removed [ 90.988202][ T7679] team0 (unregistering): Port device team_slave_0 removed [ 90.991443][ T7678] smc: removing ib device syz1 [ 91.345987][ T7679] vxcan1 (unregistering): left allmulticast mode [ 91.494792][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.657469][ T8316] veth0_vlan: entered promiscuous mode [ 91.666822][ T8316] veth1_vlan: entered promiscuous mode [ 91.690637][ T8316] veth0_macvtap: entered promiscuous mode [ 91.693757][ T8316] veth1_macvtap: entered promiscuous mode [ 91.708793][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.712227][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.716735][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.724511][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.727435][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.730240][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.732879][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.736945][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.742348][ T7679] IPVS: stop unused estimator thread 0... [ 91.745995][ T8316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.748282][ T8316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.750518][ T8316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752736][ T8316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755238][ T6005] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 91.791065][ T7667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.793654][ T7667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.808916][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.811799][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.886992][ T8460] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.718'. [ 91.906303][ T6005] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1024 [ 91.909778][ T6005] usb 6-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.913256][ T6005] usb 6-1: config 1 interface 0 has no altsetting 0 [ 91.919336][ T6005] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.921673][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.925225][ T6005] usb 6-1: Product: ﳿ [ 91.926457][ T6005] usb 6-1: SerialNumber: syz [ 91.929063][ T8431] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.999602][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.718'. [ 92.002010][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 92.014225][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8481 comm=syz.4.718 [ 92.018991][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8481 comm=syz.4.718 [ 92.022347][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8481 comm=syz.4.718 [ 92.025908][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8481 comm=syz.4.718 [ 92.044686][ T5956] Bluetooth: hci0: command 0x041b tx timeout [ 92.047201][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.049261][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.213552][ T5944] Bluetooth: hci3: unexpected event for opcode 0x203d [ 92.297203][ T8216] usb 8-1: USB disconnect, device number 7 [ 92.331152][ T8512] overlayfs: failed to set uuid (186/file1, err=-1); falling back to uuid=null. [ 92.333526][ T8512] overlayfs: failed to verify upper root origin [ 92.547631][ T8536] vxfs: WRONG superblock magic 00000000 at 1 [ 92.550280][ T8536] vxfs: WRONG superblock magic 00000000 at 8 [ 92.551995][ T8536] vxfs: can't find superblock. [ 92.857395][ T8544] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.734'. [ 92.859952][ T8544] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 93.730208][ T8574] netlink: 80 bytes leftover after parsing attributes in process `syz.4.742'. [ 93.733709][ T8574] netem: incorrect ge model size [ 93.735713][ T8574] netem: change failed [ 93.859060][ T8583] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.745'. [ 93.861597][ T8583] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 93.924333][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 93.924345][ T39] audit: type=1400 audit(2000000050.924:778): avc: denied { write } for pid=8591 comm="syz.3.748" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.071414][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 94.080310][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 94.087755][ T8600] macsec0: entered promiscuous mode [ 94.134158][ T5944] Bluetooth: hci0: command 0x041b tx timeout [ 94.155173][ T39] audit: type=1400 audit(2000000051.154:779): avc: denied { shutdown } for pid=8603 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.160477][ T39] audit: type=1400 audit(2000000051.154:780): avc: denied { write } for pid=8603 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.186543][ T39] audit: type=1400 audit(2000000051.184:781): avc: denied { view } for pid=8605 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.254439][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.758'. [ 94.286469][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.758'. [ 94.500062][ T6005] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 94.511363][ T6005] usb 6-1: USB disconnect, device number 8 [ 94.632158][ T39] audit: type=1400 audit(2000000051.624:782): avc: denied { nlmsg_read } for pid=8635 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.643495][ T8636] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.766'. [ 94.646142][ T8636] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 94.657692][ T8641] netlink: 332 bytes leftover after parsing attributes in process `syz.3.768'. [ 94.706257][ T39] audit: type=1400 audit(2000000051.704:783): avc: denied { connect } for pid=8647 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.717793][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 94.720778][ T8643] netlink: 'syz.4.769': attribute type 7 has an invalid length. [ 94.723504][ T8643] netlink: 'syz.4.769': attribute type 8 has an invalid length. [ 94.726692][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 94.731680][ T8643] syz_tun: entered promiscuous mode [ 94.734779][ T8643] batadv_slave_1: entered promiscuous mode [ 94.737307][ T8643] gretap0: entered promiscuous mode [ 94.739679][ T8643] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 94.742203][ T8643] Cannot create hsr debugfs directory [ 94.768211][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 94.772825][ T8652] IPVS: Error connecting to the multicast addr [ 94.776824][ T8652] i2c i2c-1: Invalid block write size 34 [ 94.802181][ T39] audit: type=1400 audit(2000000051.794:784): avc: denied { sqpoll } for pid=8653 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.813968][ T6005] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 94.967214][ T8670] netlink: 'syz.4.778': attribute type 32 has an invalid length. [ 94.973872][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 94.985028][ T6005] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 94.987072][ T6005] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.989626][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.992156][ T6005] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.995044][ T6005] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.998553][ T6005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.998567][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.005915][ T39] audit: type=1400 audit(2000000052.004:785): avc: denied { watch } for pid=8671 comm="syz.4.779" path="/30/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 95.200974][ T6005] usb 6-1: usb_control_msg returned -32 [ 95.202413][ T6005] usbtmc 6-1:16.0: can't read capabilities [ 95.307665][ T8687] tmpfs: Unknown parameter 'usrquotaWbloc ' [ 95.557990][ T8695] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 95.562429][ T6005] usb 6-1: USB disconnect, device number 9 [ 95.956888][ T8699] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 96.177358][ T39] audit: type=1400 audit(2000000053.164:786): avc: denied { write } for pid=8717 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.206686][ T5944] Bluetooth: hci0: command 0x041b tx timeout [ 96.286555][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 96.293923][ T5944] Bluetooth: hci3: Injecting HCI hardware error event [ 96.297199][ T5958] Bluetooth: hci3: hardware error 0x00 [ 96.614165][ T828] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 96.774106][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.777885][ T828] usb 6-1: config 0 has no interfaces? [ 96.779374][ T828] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.782283][ T828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.786167][ T828] usb 6-1: config 0 descriptor?? [ 96.936238][ T9] usb 8-1: config 0 has no interfaces? [ 96.940446][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 96.942884][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.945866][ T9] usb 8-1: Product: syz [ 96.947020][ T9] usb 8-1: Manufacturer: syz [ 96.948320][ T9] usb 8-1: SerialNumber: syz [ 96.950764][ T9] usb 8-1: config 0 descriptor?? [ 96.990978][ T828] usb 6-1: string descriptor 0 read error: -71 [ 97.002796][ T828] usb 6-1: USB disconnect, device number 10 [ 97.109464][ T39] audit: type=1400 audit(2000000054.104:787): avc: denied { map } for pid=8739 comm="syz.2.800" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.164895][ T6005] usb 8-1: USB disconnect, device number 8 [ 97.394149][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 97.412918][ T8760] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 97.424178][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.545223][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 97.548095][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.550513][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.553290][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.557682][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.560651][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.563426][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.566307][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.568620][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.571393][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.574440][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.576775][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.579628][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.582093][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.584943][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.587731][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.592547][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.595322][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.598113][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.601168][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.603397][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.606590][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.609003][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.611277][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.614462][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 97.617575][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.619922][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 97.622046][ T9] usb 7-1: Product: syz [ 97.623138][ T9] usb 7-1: Manufacturer: syz [ 97.624748][ T9] usb 7-1: SerialNumber: syz [ 97.627343][ T9] usb 7-1: config 0 descriptor?? [ 97.631219][ T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 97.687676][ T8763] kvm: kvm [8762]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3032 [ 97.841406][ T8782] fuse: Unknown parameter ')%š+ l fèOp\ÁÔ;º®Îã°Ý#ÕhÉpübqË1¶xT' [ 97.841803][ T35] usb 7-1: USB disconnect, device number 6 [ 97.852798][ T35] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 97.929128][ T8785] netlink: 'syz.1.813': attribute type 8 has an invalid length. [ 97.931419][ T8787] netlink: 'syz.1.813': attribute type 8 has an invalid length. [ 98.284306][ T5944] Bluetooth: hci0: command 0x041b tx timeout [ 98.363928][ T5958] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 99.208081][ T8859] kAFS: unable to lookup cell '/,c¾ûL' [ 99.343375][ T8867] bond1: entered promiscuous mode [ 99.345175][ T8867] bond1: entered allmulticast mode [ 99.347092][ T8867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.453139][ T8867] bond1 (unregistering): Released all slaves [ 99.585479][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 99.585489][ T39] audit: type=1400 audit(2000000056.584:801): avc: denied { execute } for pid=8882 comm="syz.2.838" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 99.607621][ T8885] __nla_validate_parse: 6 callbacks suppressed [ 99.607630][ T8885] netlink: 92 bytes leftover after parsing attributes in process `syz.4.839'. [ 99.706623][ T8892] overlayfs: failed to resolve './file1': -2 [ 100.076150][ T8918] netlink: 'syz.4.849': attribute type 6 has an invalid length. [ 100.078207][ T8918] netlink: 'syz.4.849': attribute type 7 has an invalid length. [ 100.080214][ T8918] netlink: 'syz.4.849': attribute type 8 has an invalid length. [ 100.334183][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 100.383840][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 100.498454][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.501413][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.504809][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.507213][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.512213][ T8918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.518631][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.731651][ T8918] ip6_tunnel: non-ECT from 0000:0000:0020:0000:0000:ffff:7f00:0001 with DS=0x1 [ 100.735246][ T6005] usb 9-1: USB disconnect, device number 2 [ 101.183876][ T39] audit: type=1400 audit(2000000058.174:802): avc: denied { getopt } for pid=8932 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.822426][ T39] audit: type=1400 audit(2000000058.804:803): avc: denied { search } for pid=8950 comm="syz.4.856" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.828154][ T39] audit: type=1400 audit(2000000058.804:804): avc: denied { read } for pid=8950 comm="syz.4.856" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.833607][ T39] audit: type=1400 audit(2000000058.804:805): avc: denied { open } for pid=8950 comm="syz.4.856" path="/68/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.861892][ T39] audit: type=1400 audit(2000000058.854:806): avc: denied { search } for pid=8955 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.874296][ T39] audit: type=1400 audit(2000000058.864:807): avc: denied { read } for pid=8956 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.880142][ T39] audit: type=1400 audit(2000000058.864:808): avc: denied { open } for pid=8956 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.889369][ T39] audit: type=1400 audit(2000000058.864:809): avc: denied { getattr } for pid=8956 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.896765][ T39] audit: type=1400 audit(2000000058.884:810): avc: denied { write } for pid=8955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.998389][ T8968] ubi: mtd0 is already attached to ubi0 [ 102.151799][ T8983] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 102.158931][ T8983] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 102.165426][ T8983] overlayfs: missing 'lowerdir' [ 102.445481][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 102.488063][ T9009] syz.3.868: attempt to access beyond end of device [ 102.488063][ T9009] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 102.493442][ T9009] vxfs: unable to read disk superblock at 1 [ 102.496215][ T9009] syz.3.868: attempt to access beyond end of device [ 102.496215][ T9009] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 102.500742][ T9009] vxfs: unable to read disk superblock at 8 [ 102.502796][ T9009] vxfs: can't find superblock. [ 102.655381][ T9013] befs: (nullb0): cannot parse mount options [ 102.893385][ T9032] netlink: 76 bytes leftover after parsing attributes in process `syz.2.873'. [ 102.951591][ T9035] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 102.964976][ T9041] can0: slcan on ptm0. [ 102.969056][ T9041] Cannot find del_set index 2 as target [ 103.027337][ T9041] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.031692][ T9049] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 103.113569][ T9062] devpts: called with bogus options [ 103.124442][ T9049] can0 (unregistered): slcan off ptm0. [ 103.245510][ T9079] binder: 9078:9079 unknown command 2128716201 [ 103.247130][ T9079] binder: 9078:9079 ioctl c0306201 20000480 returned -22 [ 103.249664][ T9079] netlink: 'syz.4.883': attribute type 10 has an invalid length. [ 103.259706][ T9079] team0: Port device netdevsim0 added [ 103.262876][ T9079] netlink: 'syz.4.883': attribute type 10 has an invalid length. [ 103.275982][ T9079] team0: Port device netdevsim0 removed [ 103.278761][ T9079] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.447480][ T9107] netlink: 'syz.2.890': attribute type 5 has an invalid length. [ 103.569075][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 103.574591][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 103.855363][ T9135] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.885817][ T9144] dvmrp8: entered allmulticast mode [ 103.887394][ T9144] dvmrp8: left allmulticast mode [ 103.965755][ T9138] nbd3: detected capacity change from 0 to 12 [ 103.969628][ T8377] block nbd3: Send control failed (result -89) [ 103.972013][ T8377] block nbd3: Request send failed, requeueing [ 103.988295][ T5958] block nbd3: Receive control failed (result -32) [ 103.990142][ T1300] block nbd3: Dead connection, failed to find a fallback [ 103.992111][ T1300] block nbd3: shutting down sockets [ 103.994715][ T1300] blk_print_req_error: 26 callbacks suppressed [ 103.994723][ T1300] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.999827][ T1300] buffer_io_error: 26 callbacks suppressed [ 103.999836][ T1300] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.008212][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.011201][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.017197][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.020200][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.022834][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.026548][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.029985][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.032955][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.035949][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.038922][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.041631][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.044686][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.047330][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.050282][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.053128][ T8377] ldm_validate_partition_table(): Disk read failed. [ 104.055703][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.058687][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.061303][ T8377] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.064347][ T8377] Buffer I/O error on dev nbd3, logical block 0, async page read [ 104.066916][ T8377] Dev nbd3: unable to read RDB block 0 [ 104.068848][ T8377] nbd3: unable to read partition table [ 104.070771][ T8377] nbd3: partition table beyond EOD, truncated [ 104.077144][ T9138] ldm_validate_partition_table(): Disk read failed. [ 104.080350][ T9138] Dev nbd3: unable to read RDB block 0 [ 104.082332][ T9138] nbd3: unable to read partition table [ 104.084436][ T9138] nbd3: partition table beyond EOD, truncated [ 104.087615][ T8377] ldm_validate_partition_table(): Disk read failed. [ 104.089590][ T8377] Dev nbd3: unable to read RDB block 0 [ 104.094715][ T8377] nbd3: unable to read partition table [ 104.096286][ T8377] nbd3: partition table beyond EOD, truncated [ 104.121959][ T9171] tracefs: Bad value for 'mode' [ 104.157066][ T9177] openvswitch: netlink: Missing valid actions attribute. [ 104.163861][ T9177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.196540][ T9181] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 104.207177][ T9181] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 104.209884][ T9181] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 104.213182][ T9181] bond1: (slave xfrm1): making interface the new active one [ 104.216827][ T9181] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 104.389925][ T9188] ufs: You didn't specify the type of your ufs filesystem [ 104.389925][ T9188] [ 104.389925][ T9188] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 104.389925][ T9188] [ 104.389925][ T9188] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 104.400149][ T9188] ufs: ufstype=old is supported read-only [ 104.402271][ T9188] syz.2.907: attempt to access beyond end of device [ 104.402271][ T9188] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.407157][ T9189] ufs: You didn't specify the type of your ufs filesystem [ 104.407157][ T9189] [ 104.407157][ T9189] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 104.407157][ T9189] [ 104.407157][ T9189] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 104.415482][ T9189] ufs: ufstype=old is supported read-only [ 104.417177][ T9189] syz.2.907: attempt to access beyond end of device [ 104.417177][ T9189] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.626648][ T39] kauditd_printk_skb: 233 callbacks suppressed [ 104.626659][ T39] audit: type=1400 audit(2000000061.624:1044): avc: denied { unlink } for pid=9194 comm="syz.2.909" name="#1e" dev="tmpfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.636989][ T9195] overlayfs: conflicting lowerdir path [ 104.665462][ T39] audit: type=1400 audit(2000000061.664:1045): avc: denied { mount } for pid=9196 comm="syz.2.910" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.676485][ T39] audit: type=1400 audit(2000000061.674:1046): avc: denied { mount } for pid=9196 comm="syz.2.910" name="/" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.702817][ T39] audit: type=1400 audit(2000000061.694:1047): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.708210][ T39] audit: type=1400 audit(2000000061.704:1048): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.774241][ T39] audit: type=1400 audit(2000000061.764:1049): avc: denied { ioctl } for pid=9198 comm="syz.2.911" path="socket:[30791]" dev="sockfs" ino=30791 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.858669][ T39] audit: type=1400 audit(2000000061.854:1050): avc: denied { read } for pid=9203 comm="syz.3.913" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.871977][ T39] audit: type=1400 audit(2000000061.854:1051): avc: denied { open } for pid=9203 comm="syz.3.913" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.892750][ T39] audit: type=1400 audit(2000000061.854:1052): avc: denied { ioctl } for pid=9203 comm="syz.3.913" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.943349][ T9210] program syz.2.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.001686][ T39] audit: type=1400 audit(2000000061.994:1053): avc: denied { listen } for pid=9212 comm="syz.2.916" laddr=::ffff:172.20.20.170 lport=39003 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.009397][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 105.037218][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'. [ 105.042877][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'. [ 105.058028][ T9215] gretap0: entered promiscuous mode [ 105.062389][ T9215] gretap0: left promiscuous mode [ 105.244365][ T9232] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 106.265849][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 106.852233][ T9260] IPv6: sit1: Disabled Multicast RS [ 106.853989][ T9260] sit1: entered allmulticast mode [ 106.872483][ T9275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.933'. [ 106.893482][ T9279] tipc: Can't bind to reserved service type 0 [ 106.949861][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 107.050809][ T9290] netlink: 160 bytes leftover after parsing attributes in process `syz.1.936'. [ 107.115746][ T9292] block device autoloading is deprecated and will be removed. [ 107.133852][ T1480] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 107.263941][ T1480] usb 8-1: device descriptor read/64, error -71 [ 107.513861][ T1480] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 107.643886][ T1480] usb 8-1: device descriptor read/64, error -71 [ 107.754270][ T1480] usb usb8-port1: attempt power cycle [ 107.868099][ T9298] sctp: [Deprecated]: syz.4.940 (pid 9298) Use of int in max_burst socket option. [ 107.868099][ T9298] Use struct sctp_assoc_value instead [ 107.905614][ T9301] nbd: device at index 4 is going down [ 107.914175][ T9306] Bluetooth: MGMT ver 1.23 [ 107.946624][ T9312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9312 comm=syz.1.944 [ 107.977356][ T9313] CIFS: iocharset name too long [ 108.103869][ T1480] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 108.125666][ T1480] usb 8-1: device descriptor read/8, error -71 [ 108.363935][ T1480] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 108.384750][ T1480] usb 8-1: device descriptor read/8, error -71 [ 108.504501][ T1480] usb usb8-port1: unable to enumerate USB device [ 108.581472][ T9328] loop9: detected capacity change from 0 to 7 [ 108.585366][ T9328] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.586782][ T9328] loop9: partition table partially beyond EOD, truncated [ 108.588859][ T9328] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 108.600582][ T8377] udevd[8377]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 108.634287][ T828] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 108.764515][ T828] usb 8-1: device descriptor read/64, error -71 [ 108.897449][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.952'. [ 109.004458][ T828] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 109.088461][ T9349] netlink: 'syz.4.957': attribute type 21 has an invalid length. [ 109.090499][ T9349] netlink: 168 bytes leftover after parsing attributes in process `syz.4.957'. [ 109.098206][ T9349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'. [ 109.134379][ T828] usb 8-1: device descriptor read/64, error -71 [ 109.244716][ T828] usb usb8-port1: attempt power cycle [ 109.325933][ T9373] xt_hashlimit: size too large, truncated to 1048576 [ 109.329775][ T9373] syz.1.964: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.335888][ T9373] CPU: 3 UID: 0 PID: 9373 Comm: syz.1.964 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 109.339331][ T9373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.342937][ T9373] Call Trace: [ 109.344062][ T9373] [ 109.345138][ T9373] dump_stack_lvl+0x16c/0x1f0 [ 109.346887][ T9373] warn_alloc+0x24d/0x3a0 [ 109.348372][ T9373] ? __pfx_warn_alloc+0x10/0x10 [ 109.350046][ T9373] ? __get_vm_area_node+0x190/0x2d0 [ 109.351795][ T9373] ? __get_vm_area_node+0x1bc/0x2d0 [ 109.353509][ T9373] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 109.355412][ T9373] ? __pfx___lock_acquire+0x10/0x10 [ 109.357156][ T9373] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 109.359155][ T9373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.361270][ T9373] ? __pfx_lock_release+0x10/0x10 [ 109.362967][ T9373] ? trace_lock_acquire+0x14a/0x1d0 [ 109.364746][ T9373] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 109.366753][ T9373] vmalloc_noprof+0x6b/0x90 [ 109.368304][ T9373] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 109.370310][ T9373] hashlimit_mt_check_common+0x8b0/0x1450 [ 109.372231][ T9373] hashlimit_mt_check+0x71/0x90 [ 109.373883][ T9373] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 109.375745][ T9373] xt_check_match+0x284/0xa50 [ 109.377344][ T9373] ? mem_cgroup_css_alloc+0x832/0x1cf0 [ 109.379189][ T9373] ? __pfx_xt_check_match+0x10/0x10 [ 109.380943][ T9373] ? xt_find_target+0x1ee/0x290 [ 109.382604][ T9373] ? xt_find_match+0x1f2/0x290 [ 109.384238][ T9373] find_check_entry.constprop.0+0x34d/0xa20 [ 109.386229][ T9373] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 109.388390][ T9373] ? kvfree+0x47/0x50 [ 109.389764][ T9373] translate_table+0xd06/0x17b0 [ 109.391421][ T9373] ? __pfx_translate_table+0x10/0x10 [ 109.393194][ T9373] ? __might_fault+0xe3/0x190 [ 109.394793][ T9373] do_ip6t_set_ctl+0x605/0xc40 [ 109.396413][ T9373] ? rcu_is_watching+0x12/0xc0 [ 109.398056][ T9373] ? trace_contention_end+0xea/0x140 [ 109.399826][ T9373] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 109.401614][ T9373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.403622][ T9373] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 109.405631][ T9373] nf_setsockopt+0x8a/0xf0 [ 109.407136][ T9373] ipv6_setsockopt+0x135/0x170 [ 109.408764][ T9373] rawv6_setsockopt+0xd7/0x680 [ 109.410390][ T9373] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 109.412199][ T9373] ? selinux_socket_setsockopt+0x6a/0x80 [ 109.414099][ T9373] ? sock_common_setsockopt+0x2e/0xf0 [ 109.415906][ T9373] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.417898][ T9373] do_sock_setsockopt+0x222/0x480 [ 109.419606][ T9373] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.421501][ T9373] ? fdget+0x176/0x210 [ 109.422905][ T9373] __sys_setsockopt+0x1a4/0x270 [ 109.424567][ T9373] ? __pfx___sys_setsockopt+0x10/0x10 [ 109.426395][ T9373] ? rcu_is_watching+0x12/0xc0 [ 109.428024][ T9373] __x64_sys_setsockopt+0xbd/0x160 [ 109.429700][ T9373] ? do_syscall_64+0x91/0x250 [ 109.431250][ T9373] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.432999][ T9373] do_syscall_64+0xcd/0x250 [ 109.434541][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.436518][ T9373] RIP: 0033:0x7f3ae7f7e719 [ 109.438032][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.444426][ T9373] RSP: 002b:00007f3ae8cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.447215][ T9373] RAX: ffffffffffffffda RBX: 00007f3ae8135f80 RCX: 00007f3ae7f7e719 [ 109.449867][ T9373] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 109.452512][ T9373] RBP: 00007f3ae7ff139e R08: 0000000000000588 R09: 0000000000000000 [ 109.455165][ T9373] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 109.457810][ T9373] R13: 0000000000000000 R14: 00007f3ae8135f80 R15: 00007fffa3a49348 [ 109.460454][ T9373] [ 109.461869][ T9373] Mem-Info: [ 109.462750][ T9373] active_anon:8003 inactive_anon:0 isolated_anon:0 [ 109.462750][ T9373] active_file:15633 inactive_file:38359 isolated_file:0 [ 109.462750][ T9373] unevictable:1768 dirty:90 writeback:0 [ 109.462750][ T9373] slab_reclaimable:11573 slab_unreclaimable:75139 [ 109.462750][ T9373] mapped:17612 shmem:4536 pagetables:946 [ 109.462750][ T9373] sec_pagetables:312 bounce:0 [ 109.462750][ T9373] kernel_misc_reclaimable:0 [ 109.462750][ T9373] free:473251 free_pcp:768 free_cma:0 [ 109.476025][ T9373] Node 0 active_anon:31888kB inactive_anon:0kB active_file:62532kB inactive_file:153364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:70448kB dirty:356kB writeback:0kB shmem:14484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13008kB pagetables:3784kB sec_pagetables:1248kB all_unreclaimable? no [ 109.484343][ T9373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 109.492118][ T9373] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.499034][ T9373] lowmem_reserve[]: 0 1214 0 0 0 [ 109.500347][ T9373] Node 0 DMA32 free:288780kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:31728kB inactive_anon:0kB active_file:62532kB inactive_file:153368kB unevictable:3536kB writepending:324kB present:2080628kB managed:1272196kB mlocked:0kB bounce:0kB free_pcp:4112kB local_pcp:552kB free_cma:0kB [ 109.507920][ T9373] lowmem_reserve[]: 0 0 0 0 0 [ 109.509165][ T9373] Node 1 Normal free:1587972kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:148kB local_pcp:8kB free_cma:0kB [ 109.516395][ T9373] lowmem_reserve[]: 0 0 0 0 0 [ 109.517641][ T9373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.520896][ T9373] Node 0 DMA32: 451*4kB (UME) 172*8kB (UE) 504*16kB (UME) 195*32kB (UME) 153*64kB (UME) 75*128kB (UME) 48*256kB (UM) 44*512kB (UM) 16*1024kB (UM) 8*2048kB (ME) 45*4096kB (UM) = 288780kB [ 109.525700][ T9373] Node 1 Normal: 13*4kB (UM) 10*8kB (UME) 42*16kB (UME) 155*32kB (UME) 70*64kB (UME) 24*128kB (UME) 7*256kB (UE) 6*512kB (UME) 3*1024kB (UE) 3*2048kB (UM) 381*4096kB (UM) = 1587972kB [ 109.530384][ T9373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.532810][ T9373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.535290][ T9373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.537887][ T9373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.540256][ T9373] 58483 total pagecache pages [ 109.541569][ T9373] 0 pages in swap cache [ 109.542669][ T9373] Free swap = 124608kB [ 109.543768][ T9373] Total swap = 124996kB [ 109.545230][ T9373] 1048443 pages RAM [ 109.546257][ T9373] 0 pages HighMem/MovableOnly [ 109.547490][ T9373] 281073 pages reserved [ 109.548798][ T9373] 0 pages cma reserved [ 109.580269][ T9383] 9pnet_virtio: no channels available for device syz [ 109.582176][ T9383] 9pnet_virtio: no channels available for device syz [ 109.584123][ T9383] 9pnet_virtio: no channels available for device syz [ 109.586203][ T9383] 9pnet_virtio: no channels available for device syz [ 109.588211][ T9383] 9pnet_virtio: no channels available for device syz [ 109.590845][ T9383] 9pnet_virtio: no channels available for device syz [ 109.592710][ T9383] 9pnet_virtio: no channels available for device syz [ 109.594760][ T828] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 109.597704][ T9383] 9pnet_virtio: no channels available for device syz [ 109.599755][ T9383] 9pnet_virtio: no channels available for device syz [ 109.601615][ T9383] 9pnet_virtio: no channels available for device syz [ 109.603467][ T9383] 9pnet_virtio: no channels available for device syz [ 109.605554][ T9383] 9pnet_virtio: no channels available for device syz [ 109.607563][ T9383] 9pnet_virtio: no channels available for device syz [ 109.610053][ T9383] 9pnet_virtio: no channels available for device syz [ 109.612628][ T9383] 9pnet_virtio: no channels available for device syz [ 109.616117][ T9383] 9pnet_virtio: no channels available for device syz [ 109.618248][ T9383] 9pnet_virtio: no channels available for device syz [ 109.620120][ T9383] 9pnet_virtio: no channels available for device syz [ 109.621984][ T9383] 9pnet_virtio: no channels available for device syz [ 109.623879][ T9383] 9pnet_virtio: no channels available for device syz [ 109.624554][ T828] usb 8-1: device descriptor read/8, error -71 [ 109.626134][ T9383] 9pnet_virtio: no channels available for device syz [ 109.811551][ T9398] usb 1-1: USB disconnect, device number 2 [ 109.864132][ T828] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 109.884576][ T828] usb 8-1: device descriptor read/8, error -71 [ 109.922268][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.932473][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.936180][ T39] kauditd_printk_skb: 111 callbacks suppressed [ 109.936191][ T39] audit: type=1400 audit(2000000066.934:1165): avc: denied { write } for pid=9404 comm="syz.3.972" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.948475][ T39] audit: type=1400 audit(2000000066.944:1166): avc: denied { append } for pid=9404 comm="syz.3.972" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.957087][ T9407] loop6: detected capacity change from 0 to 524287999 [ 109.960883][ C1] blk_print_req_error: 40 callbacks suppressed [ 109.960893][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.965055][ C1] buffer_io_error: 40 callbacks suppressed [ 109.965088][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.970304][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.972779][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.976086][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.978562][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.980792][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.983258][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.985697][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.988116][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.990403][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.992764][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.994300][ T828] usb usb8-port1: unable to enumerate USB device [ 109.997442][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.000181][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.002291][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.004696][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.006911][ T9407] ldm_validate_partition_table(): Disk read failed. [ 110.012010][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.014458][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.017017][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.019562][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.023285][ T9407] Dev loop6: unable to read RDB block 0 [ 110.026310][ T9407] loop6: unable to read partition table [ 110.027873][ T9407] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 110.084637][ T39] audit: type=1400 audit(2000000067.084:1167): avc: denied { name_bind } for pid=9420 comm="syz.2.973" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 110.247798][ T39] audit: type=1400 audit(2000000067.244:1168): avc: denied { execute } for pid=9420 comm="syz.2.973" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 110.364672][ T828] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 110.514146][ T828] usb 8-1: Using ep0 maxpacket: 32 [ 110.516652][ T828] usb 8-1: config 4 has no interfaces? [ 110.519530][ T828] usb 8-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=5f.3b [ 110.521835][ T828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.524397][ T828] usb 8-1: Product: syz [ 110.525504][ T828] usb 8-1: Manufacturer: syz [ 110.526684][ T828] usb 8-1: SerialNumber: syz [ 110.662626][ T39] audit: type=1400 audit(2000000067.654:1169): avc: denied { getopt } for pid=9453 comm="syz.4.976" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.713239][ T39] audit: type=1400 audit(2000000067.704:1170): avc: denied { ioctl } for pid=9459 comm="syz.4.978" path="socket:[31880]" dev="sockfs" ino=31880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.719889][ T39] audit: type=1400 audit(2000000067.704:1171): avc: denied { setopt } for pid=9459 comm="syz.4.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.742024][ T828] usb 8-1: USB disconnect, device number 17 [ 110.747547][ T39] audit: type=1400 audit(2000000067.744:1172): avc: denied { remount } for pid=9461 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.761184][ T9462] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000008' [ 110.795508][ T9466] nbd: couldn't find a device at index 4 [ 110.797203][ T9467] nbd: couldn't find a device at index 4 [ 110.800337][ T9469] netlink: 'syz.1.981': attribute type 6 has an invalid length. [ 110.805931][ T39] audit: type=1400 audit(2000000067.804:1173): avc: denied { create } for pid=9468 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.840086][ T39] audit: type=1400 audit(2000000067.834:1174): avc: denied { watch } for pid=9471 comm="syz.1.982" path="/239/file0" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.858792][ T9476] Process accounting resumed [ 110.875398][ T9484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9484 comm=syz.1.985 [ 111.027762][ T9481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.984'. [ 111.064652][ T9501] xt_hashlimit: size too large, truncated to 1048576 [ 111.272127][ T9513] netlink: 'syz.2.994': attribute type 11 has an invalid length. [ 111.274767][ T9513] netlink: 'syz.2.994': attribute type 11 has an invalid length. [ 111.546367][ T9536] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1000'. [ 111.559087][ T9539] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 111.572547][ T9539] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 111.608126][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 112.016199][ T9584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9584 comm=syz.1.1011 [ 112.037710][ T9587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.963917][ T35] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 113.080364][ T9647] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1030'. [ 113.093888][ T35] usb 9-1: device descriptor read/64, error -71 [ 113.300831][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 113.323960][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.353857][ T35] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 113.355878][ T8216] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 113.368588][ T9673] Mount JFS Failure: -22 [ 113.369761][ T9673] jfs_mount failed w/return code = -22 [ 113.423676][ T5958] block nbd1: Receive control failed (result -32) [ 113.445601][ T9673] block nbd1: shutting down sockets [ 113.511950][ T35] usb 9-1: device descriptor read/64, error -71 [ 113.534917][ T8216] usb 7-1: Using ep0 maxpacket: 32 [ 113.537498][ T8216] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.539678][ T8216] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.540376][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 113.541912][ T8216] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.544614][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 113.546588][ T8216] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.551393][ T8216] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.554050][ T8216] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.556557][ T8216] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.559074][ T8216] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.562452][ T8216] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.565040][ T8216] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.569091][ T8216] usb 7-1: config 0 descriptor?? [ 113.623982][ T35] usb usb9-port1: attempt power cycle [ 113.775347][ T8216] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.779321][ T8216] usb 7-1: USB disconnect, device number 7 [ 113.781790][ T8216] usblp0: removed [ 113.973921][ T35] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 114.004233][ T35] usb 9-1: device descriptor read/8, error -71 [ 114.214147][ T828] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 114.263960][ T35] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 114.294379][ T35] usb 9-1: device descriptor read/8, error -71 [ 114.363893][ T828] usb 7-1: Using ep0 maxpacket: 32 [ 114.367146][ T828] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.369331][ T828] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.379455][ T828] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.381806][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.384819][ T828] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.387291][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.389851][ T828] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.392337][ T828] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.396012][ T828] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.398344][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.401274][ T828] usb 7-1: config 0 descriptor?? [ 114.404614][ T35] usb usb9-port1: unable to enumerate USB device [ 114.621513][ T9649] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.624171][ T9649] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 114.725245][ T9706] netlink: 'syz.3.1047': attribute type 8 has an invalid length. [ 114.727290][ T9706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.749743][ T9708] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 114.751773][ T9708] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 114.753835][ T9708] netlink: 126012 bytes leftover after parsing attributes in process `syz.1.1048'. [ 114.799292][ T9711] kvm: Disabled LAPIC found during irq injection [ 115.214338][ T6667] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 115.246896][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 115.246906][ T39] audit: type=1326 audit(2000000072.244:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9721 comm="syz.3.1052" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bbf7e719 code=0x0 [ 115.311761][ T39] audit: type=1400 audit(2000000072.304:1221): avc: denied { watch watch_reads } for pid=9721 comm="syz.3.1052" path="/253" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.344142][ T6667] usb 6-1: device descriptor read/64, error -71 [ 115.584193][ T6667] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 115.714412][ T6667] usb 6-1: device descriptor read/64, error -71 [ 115.755400][ T9730] syz.3.1053 (9730): drop_caches: 2 [ 115.797298][ T39] audit: type=1400 audit(2000000072.794:1222): avc: denied { append } for pid=9736 comm="syz.4.1056" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.824294][ T6667] usb usb6-port1: attempt power cycle [ 115.857630][ T9737] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1056'. [ 115.915660][ T39] audit: type=1400 audit(2000000072.914:1223): avc: denied { append } for pid=9736 comm="syz.4.1056" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.020673][ T9749] netlink: 'syz.3.1061': attribute type 9 has an invalid length. [ 116.022797][ T9749] netlink: 134640 bytes leftover after parsing attributes in process `syz.3.1061'. [ 116.057940][ T39] audit: type=1400 audit(2000000073.054:1224): avc: denied { connect } for pid=9755 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.094067][ T39] audit: type=1400 audit(2000000073.094:1225): avc: denied { create } for pid=9758 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.099424][ T39] audit: type=1400 audit(2000000073.094:1226): avc: denied { listen } for pid=9758 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.109948][ T39] audit: type=1400 audit(2000000073.104:1227): avc: denied { relabelfrom } for pid=9759 comm="syz.4.1065" name="UNIX" dev="sockfs" ino=34057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 116.111396][ T9760] SELinux: Context system_u:object_r:etc_t:s0 is not valid (left unmapped). [ 116.119257][ T828] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.123502][ T828] usb 7-1: USB disconnect, device number 8 [ 116.123974][ T39] audit: type=1400 audit(2000000073.114:1228): avc: denied { relabelto } for pid=9759 comm="syz.4.1065" name="UNIX" dev="sockfs" ino=34057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:etc_t:s0" [ 116.132518][ T828] usblp0: removed [ 116.142475][ T39] audit: type=1400 audit(2000000073.134:1229): avc: denied { bind } for pid=9763 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.145086][ T9760] vlan2: entered allmulticast mode [ 116.148970][ T9760] bond0: entered allmulticast mode [ 116.150301][ T9760] bond_slave_0: entered allmulticast mode [ 116.151729][ T9760] bond_slave_1: entered allmulticast mode [ 116.153146][ T9760] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 116.158164][ T9760] bond0: left allmulticast mode [ 116.159487][ T9760] bond_slave_0: left allmulticast mode [ 116.160880][ T9760] bond_slave_1: left allmulticast mode [ 116.162330][ T9760] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 116.164675][ T6667] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 116.186290][ T6667] usb 6-1: device descriptor read/8, error -71 [ 116.223317][ T9778] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1070'. [ 116.283716][ T9790] syz.3.1073: attempt to access beyond end of device [ 116.283716][ T9790] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 116.287992][ T9790] syz.3.1073: attempt to access beyond end of device [ 116.287992][ T9790] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 116.291368][ T9790] syz.3.1073: attempt to access beyond end of device [ 116.291368][ T9790] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 116.296654][ T9790] syz.3.1073: attempt to access beyond end of device [ 116.296654][ T9790] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 116.300180][ T9790] syz.3.1073: attempt to access beyond end of device [ 116.300180][ T9790] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 116.303606][ T9790] syz.3.1073: attempt to access beyond end of device [ 116.303606][ T9790] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 116.307039][ T9790] VFS: unable to find oldfs superblock on device nbd3 [ 116.307558][ T9794] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 116.333571][ T9797] batman_adv: batadv0: Adding interface: dummy0 [ 116.339397][ T9797] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.346625][ T9797] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 116.370802][ T9804] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1077'. [ 116.424493][ T6667] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 116.454111][ T6667] usb 6-1: device descriptor read/8, error -71 [ 116.469668][ T9812] kvm: pic: non byte read [ 116.471622][ T9812] kvm: pic: level sensitive irq not supported [ 116.471850][ T9812] kvm: pic: non byte read [ 116.475465][ T9812] kvm: pic: level sensitive irq not supported [ 116.475663][ T9812] kvm: pic: non byte read [ 116.480597][ T9815] netlink: 'syz.2.1082': attribute type 3 has an invalid length. [ 116.482617][ T9815] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1082'. [ 116.564276][ T6667] usb usb6-port1: unable to enumerate USB device [ 116.602665][ T9843] pimreg3: entered allmulticast mode [ 116.729580][ T9858] FAULT_INJECTION: forcing a failure. [ 116.729580][ T9858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.732893][ T9858] CPU: 1 UID: 0 PID: 9858 Comm: syz.2.1093 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 116.735598][ T9858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.738301][ T9858] Call Trace: [ 116.739157][ T9858] [ 116.739922][ T9858] dump_stack_lvl+0x16c/0x1f0 [ 116.741149][ T9858] should_fail_ex+0x497/0x5b0 [ 116.742357][ T9858] _copy_from_user+0x2e/0xd0 [ 116.743547][ T9858] copy_msghdr_from_user+0x99/0x160 [ 116.744886][ T9858] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 116.746373][ T9858] ? __pfx___lock_acquire+0x10/0x10 [ 116.747699][ T9858] ___sys_sendmsg+0xff/0x1e0 [ 116.748896][ T9858] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.750230][ T9858] ? lock_acquire+0x2f/0xb0 [ 116.751393][ T9858] ? __fget_files+0x40/0x3f0 [ 116.752583][ T9858] ? fdget+0x176/0x210 [ 116.753636][ T9858] __sys_sendmmsg+0x1a1/0x450 [ 116.754836][ T9858] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.756143][ T9858] ? vfs_write+0x306/0x1150 [ 116.757317][ T9858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.758867][ T9858] ? fput+0x30/0x390 [ 116.759874][ T9858] ? ksys_write+0x1ad/0x260 [ 116.761045][ T9858] ? __pfx_ksys_write+0x10/0x10 [ 116.762302][ T9858] __x64_sys_sendmmsg+0x9c/0x100 [ 116.763562][ T9858] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.764905][ T9858] do_syscall_64+0xcd/0x250 [ 116.766056][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.767567][ T9858] RIP: 0033:0x7f346f97e719 [ 116.768716][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.773552][ T9858] RSP: 002b:00007f34707b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.775676][ T9858] RAX: ffffffffffffffda RBX: 00007f346fb35f80 RCX: 00007f346f97e719 [ 116.777697][ T9858] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 116.779697][ T9858] RBP: 00007f34707b6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.781718][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.783733][ T9858] R13: 0000000000000000 R14: 00007f346fb35f80 R15: 00007ffe161e77a8 [ 116.785772][ T9858] [ 116.786644][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.914319][ T9867] i2c i2c-1: Invalid block write size 34 [ 117.484837][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 117.801164][ T9885] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 117.804607][ T9889] FAULT_INJECTION: forcing a failure. [ 117.804607][ T9889] name failslab, interval 1, probability 0, space 0, times 0 [ 117.807897][ T9889] CPU: 3 UID: 0 PID: 9889 Comm: syz.2.1102 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 117.808668][ T9885] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 117.810622][ T9889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.810634][ T9889] Call Trace: [ 117.810638][ T9889] [ 117.810642][ T9889] dump_stack_lvl+0x16c/0x1f0 [ 117.810656][ T9889] should_fail_ex+0x497/0x5b0 [ 117.819425][ T9889] ? fs_reclaim_acquire+0xae/0x150 [ 117.820751][ T9889] should_failslab+0xc2/0x120 [ 117.821991][ T9889] kmem_cache_alloc_node_noprof+0x71/0x310 [ 117.823499][ T9889] ? __alloc_skb+0x2b1/0x380 [ 117.824706][ T9889] __alloc_skb+0x2b1/0x380 [ 117.825881][ T9889] ? __pfx___alloc_skb+0x10/0x10 [ 117.827182][ T9889] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 117.828747][ T9889] netlink_alloc_large_skb+0x69/0x130 [ 117.830161][ T9889] netlink_sendmsg+0x689/0xd70 [ 117.831411][ T9889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.832782][ T9889] ____sys_sendmsg+0xaaf/0xc90 [ 117.834017][ T9889] ? copy_msghdr_from_user+0x10b/0x160 [ 117.835649][ T9889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.837003][ T9889] ? __pfx___lock_acquire+0x10/0x10 [ 117.838535][ T9889] ___sys_sendmsg+0x135/0x1e0 [ 117.839961][ T9889] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.841347][ T9889] ? lock_acquire+0x2f/0xb0 [ 117.842550][ T9889] ? __fget_files+0x40/0x3f0 [ 117.843768][ T9889] ? fdget+0x176/0x210 [ 117.844844][ T9889] __sys_sendmmsg+0x1a1/0x450 [ 117.846174][ T9889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.847529][ T9889] ? vfs_write+0x306/0x1150 [ 117.848738][ T9889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.850311][ T9889] ? fput+0x30/0x390 [ 117.851344][ T9889] ? ksys_write+0x1ad/0x260 [ 117.852535][ T9889] ? __pfx_ksys_write+0x10/0x10 [ 117.853779][ T9889] __x64_sys_sendmmsg+0x9c/0x100 [ 117.855054][ T9889] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.856370][ T9889] do_syscall_64+0xcd/0x250 [ 117.857575][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.859120][ T9889] RIP: 0033:0x7f346f97e719 [ 117.860288][ T9889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.865319][ T9889] RSP: 002b:00007f34707b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.867477][ T9889] RAX: ffffffffffffffda RBX: 00007f346fb35f80 RCX: 00007f346f97e719 [ 117.869526][ T9889] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 117.871599][ T9889] RBP: 00007f34707b6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.873644][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.875682][ T9889] R13: 0000000000000000 R14: 00007f346fb35f80 R15: 00007ffe161e77a8 [ 117.877726][ T9889] [ 117.927907][ T9902] overlayfs: missing 'lowerdir' [ 118.254893][ T9935] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 118.333068][ T9952] FAULT_INJECTION: forcing a failure. [ 118.333068][ T9952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.337510][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.3.1126 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 118.340118][ T9952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.342729][ T9952] Call Trace: [ 118.343566][ T9952] [ 118.344302][ T9952] dump_stack_lvl+0x16c/0x1f0 [ 118.345473][ T9952] should_fail_ex+0x497/0x5b0 [ 118.346604][ T9952] _copy_from_iter+0x2a1/0x1560 [ 118.347783][ T9952] ? __pfx__copy_from_iter+0x10/0x10 [ 118.349067][ T9952] ? __virt_addr_valid+0x1a4/0x590 [ 118.350338][ T9952] ? __virt_addr_valid+0x5e/0x590 [ 118.351564][ T9952] ? __phys_addr_symbol+0x30/0x80 [ 118.352801][ T9952] ? __check_object_size+0x488/0x710 [ 118.354111][ T9952] netlink_sendmsg+0x813/0xd70 [ 118.355310][ T9952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.356629][ T9952] ____sys_sendmsg+0xaaf/0xc90 [ 118.357814][ T9952] ? copy_msghdr_from_user+0x10b/0x160 [ 118.359161][ T9952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.360507][ T9952] ? __pfx___lock_acquire+0x10/0x10 [ 118.361797][ T9952] ___sys_sendmsg+0x135/0x1e0 [ 118.363002][ T9952] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.364306][ T9952] ? lock_acquire+0x2f/0xb0 [ 118.365448][ T9952] ? __fget_files+0x40/0x3f0 [ 118.366602][ T9952] ? fdget+0x176/0x210 [ 118.367633][ T9952] __sys_sendmmsg+0x1a1/0x450 [ 118.368870][ T9952] ? __pfx___sys_sendmmsg+0x10/0x10 [ 118.370239][ T9952] ? vfs_write+0x306/0x1150 [ 118.371441][ T9952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.372953][ T9952] ? fput+0x30/0x390 [ 118.373945][ T9952] ? ksys_write+0x1ad/0x260 [ 118.375113][ T9952] ? __pfx_ksys_write+0x10/0x10 [ 118.376345][ T9952] __x64_sys_sendmmsg+0x9c/0x100 [ 118.377595][ T9952] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.378904][ T9952] do_syscall_64+0xcd/0x250 [ 118.380048][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.381567][ T9952] RIP: 0033:0x7f49bbf7e719 [ 118.382684][ T9952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.387458][ T9952] RSP: 002b:00007f49ba3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.389518][ T9952] RAX: ffffffffffffffda RBX: 00007f49bc135f80 RCX: 00007f49bbf7e719 [ 118.391474][ T9952] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 118.393464][ T9952] RBP: 00007f49ba3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.395417][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.397360][ T9952] R13: 0000000000000000 R14: 00007f49bc135f80 R15: 00007ffc65016b78 [ 118.399341][ T9952] [ 118.605256][ T9971] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 118.669987][ T9981] FAULT_INJECTION: forcing a failure. [ 118.669987][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 118.673156][ T9981] CPU: 3 UID: 0 PID: 9981 Comm: syz.2.1135 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 118.675761][ T9981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.678463][ T9981] Call Trace: [ 118.679312][ T9981] [ 118.680053][ T9981] dump_stack_lvl+0x16c/0x1f0 [ 118.681143][ T5319] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 118.681240][ T9981] should_fail_ex+0x497/0x5b0 [ 118.684812][ T9981] should_failslab+0xc2/0x120 [ 118.686311][ T9981] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 118.687642][ T9981] ? skb_clone+0x190/0x3f0 [ 118.688788][ T9981] skb_clone+0x190/0x3f0 [ 118.689873][ T9981] netlink_deliver_tap+0xab3/0xd90 [ 118.691162][ T9981] netlink_unicast+0x5e1/0x7f0 [ 118.692386][ T9981] ? __pfx_netlink_unicast+0x10/0x10 [ 118.693684][ T9981] netlink_sendmsg+0x8b8/0xd70 [ 118.694878][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.696209][ T9981] ____sys_sendmsg+0xaaf/0xc90 [ 118.697412][ T9981] ? copy_msghdr_from_user+0x10b/0x160 [ 118.697629][ T9982] evm: overlay not supported [ 118.698776][ T9981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.698796][ T9981] ? __pfx___lock_acquire+0x10/0x10 [ 118.703280][ T9981] ___sys_sendmsg+0x135/0x1e0 [ 118.705070][ T9981] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.706373][ T9981] ? lock_acquire+0x2f/0xb0 [ 118.707486][ T9981] ? __fget_files+0x40/0x3f0 [ 118.708664][ T9981] ? fdget+0x176/0x210 [ 118.709767][ T9981] __sys_sendmmsg+0x1a1/0x450 [ 118.711038][ T9981] ? __pfx___sys_sendmmsg+0x10/0x10 [ 118.712572][ T9981] ? vfs_write+0x306/0x1150 [ 118.713694][ T9981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.715142][ T9981] ? fput+0x30/0x390 [ 118.716097][ T9981] ? ksys_write+0x1ad/0x260 [ 118.717225][ T9981] ? __pfx_ksys_write+0x10/0x10 [ 118.718443][ T9981] __x64_sys_sendmmsg+0x9c/0x100 [ 118.719642][ T9981] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.720897][ T9981] do_syscall_64+0xcd/0x250 [ 118.722339][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.724296][ T9981] RIP: 0033:0x7f346f97e719 [ 118.725383][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.730053][ T9981] RSP: 002b:00007f34707b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.732259][ T9981] RAX: ffffffffffffffda RBX: 00007f346fb35f80 RCX: 00007f346f97e719 [ 118.734154][ T9981] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 118.736076][ T9981] RBP: 00007f34707b6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.738002][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.739940][ T9981] R13: 0000000000000000 R14: 00007f346fb35f80 R15: 00007ffe161e77a8 [ 118.742108][ T9981] [ 118.763272][ T9986] fuse: Unknown parameter 'Fd' [ 118.766785][ T9988] xt_hashlimit: size too large, truncated to 1048576 [ 118.767406][ T9989] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 118.775862][ T9986] fuse: Unknown parameter 'Fd' [ 118.853916][ T5319] usb 8-1: Using ep0 maxpacket: 8 [ 118.863850][ T5319] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 118.865880][ T5319] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.868226][ T5319] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.870565][ T5319] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.872866][ T5319] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.878174][ T5319] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.880593][ T5319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.085692][ T5319] usb 8-1: usb_control_msg returned -32 [ 119.087236][ T5319] usbtmc 8-1:16.0: can't read capabilities [ 119.317242][T10003] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 119.441848][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.444165][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.448493][T10009] usbtmc 8-1:16.0: control status returned 0 [ 119.649173][ T829] usb 8-1: USB disconnect, device number 18 [ 119.686654][T10014] FAULT_INJECTION: forcing a failure. [ 119.686654][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 119.689821][T10014] CPU: 2 UID: 0 PID: 10014 Comm: syz.4.1145 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 119.692465][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.695136][T10014] Call Trace: [ 119.695991][T10014] [ 119.696751][T10014] dump_stack_lvl+0x16c/0x1f0 [ 119.697951][T10014] should_fail_ex+0x497/0x5b0 [ 119.699145][T10014] ? fs_reclaim_acquire+0xae/0x150 [ 119.700452][T10014] should_failslab+0xc2/0x120 [ 119.701648][T10014] __kmalloc_node_noprof+0xd1/0x430 [ 119.702991][T10014] ? qdisc_alloc+0xbb/0xc50 [ 119.704174][T10014] qdisc_alloc+0xbb/0xc50 [ 119.705291][T10014] ? _raw_read_unlock+0x28/0x50 [ 119.706544][T10014] qdisc_create+0xcf/0x1100 [ 119.707698][T10014] ? __pfx_qdisc_create+0x10/0x10 [ 119.709015][T10014] ? nla_strcmp+0xff/0x130 [ 119.710182][T10014] tc_modify_qdisc+0x4d8/0x1c40 [ 119.711399][T10014] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 119.712725][T10014] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 119.714080][T10014] rtnetlink_rcv_msg+0x3c7/0xea0 [ 119.715321][T10014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.716697][T10014] netlink_rcv_skb+0x16b/0x440 [ 119.717906][T10014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.719250][T10014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.720584][T10014] ? netlink_deliver_tap+0x1ae/0xd90 [ 119.721925][T10014] netlink_unicast+0x53c/0x7f0 [ 119.723146][T10014] ? __pfx_netlink_unicast+0x10/0x10 [ 119.724468][T10014] netlink_sendmsg+0x8b8/0xd70 [ 119.725686][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.727030][T10014] ____sys_sendmsg+0xaaf/0xc90 [ 119.728262][T10014] ? copy_msghdr_from_user+0x10b/0x160 [ 119.729644][T10014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.730976][T10014] ? __pfx___lock_acquire+0x10/0x10 [ 119.732284][T10014] ___sys_sendmsg+0x135/0x1e0 [ 119.733478][T10014] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.734792][T10014] ? lock_acquire+0x2f/0xb0 [ 119.735944][T10014] ? __fget_files+0x40/0x3f0 [ 119.737114][T10014] ? fdget+0x176/0x210 [ 119.738195][T10014] __sys_sendmmsg+0x1a1/0x450 [ 119.739373][T10014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.740679][T10014] ? vfs_write+0x306/0x1150 [ 119.741842][T10014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.743393][T10014] ? fput+0x30/0x390 [ 119.744409][T10014] ? ksys_write+0x1ad/0x260 [ 119.745601][T10014] ? __pfx_ksys_write+0x10/0x10 [ 119.746854][T10014] __x64_sys_sendmmsg+0x9c/0x100 [ 119.748140][T10014] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.749491][T10014] do_syscall_64+0xcd/0x250 [ 119.750680][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.752193][T10014] RIP: 0033:0x7f52eed7e719 [ 119.753362][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.758264][T10014] RSP: 002b:00007f52efb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.760386][T10014] RAX: ffffffffffffffda RBX: 00007f52eef35f80 RCX: 00007f52eed7e719 [ 119.762424][T10014] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 119.764457][T10014] RBP: 00007f52efb95090 R08: 0000000000000000 R09: 0000000000000000 [ 119.766491][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.768511][T10014] R13: 0000000000000000 R14: 00007f52eef35f80 R15: 00007ffc39918138 [ 119.770533][T10014] [ 119.794340][ T5958] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 119.805744][T10018] overlay: filesystem on ./bus not supported as upperdir [ 119.838991][T10020] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.867267][T10020] vlan0: entered promiscuous mode [ 119.880753][T10020] overlay: filesystem on ./bus not supported as upperdir [ 120.274502][ T39] kauditd_printk_skb: 53 callbacks suppressed [ 120.274513][ T39] audit: type=1400 audit(2000000077.274:1283): avc: denied { setattr } for pid=10037 comm="syz.2.1151" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.289011][T10044] FAULT_INJECTION: forcing a failure. [ 120.289011][T10044] name failslab, interval 1, probability 0, space 0, times 0 [ 120.293018][T10044] CPU: 2 UID: 0 PID: 10044 Comm: syz.4.1154 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 120.296354][T10044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.299520][T10044] Call Trace: [ 120.300566][T10044] [ 120.301394][T10044] dump_stack_lvl+0x16c/0x1f0 [ 120.302813][T10044] should_fail_ex+0x497/0x5b0 [ 120.304242][T10044] ? fs_reclaim_acquire+0xae/0x150 [ 120.305904][T10044] should_failslab+0xc2/0x120 [ 120.307299][T10044] __kmalloc_cache_noprof+0x6b/0x300 [ 120.308938][T10044] ? tcf_block_get_ext+0x939/0x17f0 [ 120.310268][T10044] tcf_block_get_ext+0x939/0x17f0 [ 120.311617][T10044] ? qdisc_create+0xcf/0x1100 [ 120.313049][T10044] ? tc_modify_qdisc+0x4d8/0x1c40 [ 120.314324][T10044] ? netlink_sendmsg+0x8b8/0xd70 [ 120.315804][T10044] ? ____sys_sendmsg+0xaaf/0xc90 [ 120.317070][T10044] tcf_block_get+0xa9/0x100 [ 120.318240][T10044] ? __pfx_tcf_block_get+0x10/0x10 [ 120.319659][T10044] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 120.321340][T10044] drr_init_qdisc+0x2e/0x100 [ 120.322784][T10044] ? __pfx_drr_init_qdisc+0x10/0x10 [ 120.324196][T10044] qdisc_create+0x4f1/0x1100 [ 120.325403][T10044] ? __pfx_qdisc_create+0x10/0x10 [ 120.326762][T10044] ? nla_strcmp+0xff/0x130 [ 120.327952][T10044] tc_modify_qdisc+0x4d8/0x1c40 [ 120.329189][T10044] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 120.330745][T10044] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 120.332062][T10044] rtnetlink_rcv_msg+0x3c7/0xea0 [ 120.333501][T10044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.335159][T10044] netlink_rcv_skb+0x16b/0x440 [ 120.336497][T10044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.338178][T10044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.339587][T10044] ? netlink_deliver_tap+0x1ae/0xd90 [ 120.340918][T10044] netlink_unicast+0x53c/0x7f0 [ 120.342127][T10044] ? __pfx_netlink_unicast+0x10/0x10 [ 120.343446][T10044] netlink_sendmsg+0x8b8/0xd70 [ 120.344642][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.346014][T10044] ____sys_sendmsg+0xaaf/0xc90 [ 120.347219][T10044] ? copy_msghdr_from_user+0x10b/0x160 [ 120.348701][T10044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.350092][T10044] ? __pfx___lock_acquire+0x10/0x10 [ 120.351430][T10044] ___sys_sendmsg+0x135/0x1e0 [ 120.352665][T10044] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.354043][T10044] ? lock_acquire+0x2f/0xb0 [ 120.355220][T10044] ? __fget_files+0x40/0x3f0 [ 120.356420][T10044] ? fdget+0x176/0x210 [ 120.357505][T10044] __sys_sendmmsg+0x1a1/0x450 [ 120.358738][T10044] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.360082][T10044] ? vfs_write+0x306/0x1150 [ 120.361279][T10044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.363072][T10044] ? fput+0x30/0x390 [ 120.364301][T10044] ? ksys_write+0x1ad/0x260 [ 120.365672][T10044] ? __pfx_ksys_write+0x10/0x10 [ 120.366963][T10044] __x64_sys_sendmmsg+0x9c/0x100 [ 120.368282][T10044] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.369661][T10044] do_syscall_64+0xcd/0x250 [ 120.370869][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.372473][T10044] RIP: 0033:0x7f52eed7e719 [ 120.373638][T10044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.379070][T10044] RSP: 002b:00007f52efb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.381140][T10044] RAX: ffffffffffffffda RBX: 00007f52eef35f80 RCX: 00007f52eed7e719 [ 120.383355][T10044] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 120.385546][T10044] RBP: 00007f52efb95090 R08: 0000000000000000 R09: 0000000000000000 [ 120.388134][T10044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.390526][T10044] R13: 0000000000000000 R14: 00007f52eef35f80 R15: 00007ffc39918138 [ 120.392647][T10044] [ 120.557342][ T39] audit: type=1400 audit(2000000077.554:1284): avc: denied { create } for pid=10076 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.562153][ T39] audit: type=1400 audit(2000000077.554:1285): avc: denied { getopt } for pid=10076 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.580752][T10080] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 120.596632][T10082] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1165'. [ 120.624314][T10086] sp0: Synchronizing with TNC [ 120.673629][ T39] audit: type=1400 audit(2000000077.664:1286): avc: denied { setattr } for pid=10092 comm="syz.3.1170" name="NETLINK" dev="sockfs" ino=36024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.690618][ T39] audit: type=1400 audit(2000000077.684:1287): avc: denied { bind } for pid=10094 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.691448][T10095] ------------[ cut here ]------------ [ 120.697333][T10095] WARNING: CPU: 3 PID: 10095 at mm/page_alloc.c:4709 __alloc_pages_noprof+0xeff/0x25a0 [ 120.699836][T10095] Modules linked in: [ 120.701189][T10095] CPU: 3 UID: 0 PID: 10095 Comm: syz.4.1171 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 120.705870][T10095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.709216][T10095] RIP: 0010:__alloc_pages_noprof+0xeff/0x25a0 [ 120.710822][T10095] Code: 24 2c 00 00 00 00 89 cd 0f 84 94 f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 9e ca fe ff e9 72 f9 ff ff c6 05 28 a2 65 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 ff 96 0c 00 8b 14 24 e9 [ 120.716874][T10095] RSP: 0018:ffffc9000cf278a8 EFLAGS: 00010246 [ 120.718847][T10095] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.721105][T10095] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 120.723393][T10095] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 120.725802][T10095] R10: 00000000a83a9376 R11: 0000000000000000 R12: 0000000000000016 [ 120.728110][T10095] R13: 0000000000040cc0 R14: 1ffff920019e4f29 R15: ffffffff852ac377 [ 120.730265][T10095] FS: 00007f52efb956c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 120.732798][T10095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.734720][T10095] CR2: 000000110c3fd85d CR3: 0000000055e7c000 CR4: 0000000000352ef0 [ 120.736945][T10095] Call Trace: [ 120.738049][T10095] [ 120.738966][T10095] ? __warn+0xea/0x3d0 [ 120.740246][T10095] ? __alloc_pages_noprof+0xeff/0x25a0 [ 120.741952][T10095] ? report_bug+0x3c0/0x580 [ 120.743119][T10095] ? handle_bug+0x54/0xa0 [ 120.744335][T10095] ? exc_invalid_op+0x17/0x50 [ 120.745562][T10095] ? asm_exc_invalid_op+0x1a/0x20 [ 120.746841][T10095] ? drm_syncobj_array_find+0x37/0x3b0 [ 120.748251][T10095] ? __alloc_pages_noprof+0xeff/0x25a0 [ 120.749942][T10095] ? __lock_acquire+0xbdd/0x3ce0 [ 120.750504][T10098] sp0: Synchronizing with TNC [ 120.751190][T10095] ? hlock_class+0x4e/0x130 [ 120.753582][T10095] ? mark_lock+0xb5/0xc60 [ 120.754732][T10095] ? __pfx_mark_lock+0x10/0x10 [ 120.755965][T10095] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.757417][T10095] ? hlock_class+0x4e/0x130 [ 120.758581][T10095] ? mark_lock+0xb5/0xc60 [ 120.759701][T10095] ? __pfx_mark_lock+0x10/0x10 [ 120.760980][T10095] ? find_held_lock+0x2d/0x110 [ 120.762194][T10095] ? hlock_class+0x4e/0x130 [ 120.763366][T10095] ? __lock_acquire+0x163e/0x3ce0 [ 120.764934][T10095] ? drm_syncobj_array_find+0x37/0x3b0 [ 120.766518][T10095] ___kmalloc_large_node+0x84/0x1b0 [ 120.768127][T10095] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.769608][T10095] __kmalloc_noprof.cold+0xc/0x61 [ 120.770920][T10095] drm_syncobj_array_find+0x37/0x3b0 [ 120.772267][T10095] ? find_held_lock+0x2d/0x110 [ 120.773510][T10095] drm_syncobj_wait_ioctl+0x23a/0x390 [ 120.775171][T10095] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 120.776994][T10095] ? drm_dev_enter+0x49/0x160 [ 120.778508][T10095] drm_ioctl_kernel+0x1e6/0x3d0 [ 120.780122][T10095] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 120.781859][T10095] ? __might_fault+0xe3/0x190 [ 120.783075][T10095] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 120.784803][T10095] ? __might_fault+0xe3/0x190 [ 120.786376][T10095] drm_ioctl+0x5d6/0xc00 [ 120.787594][T10095] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 120.789451][T10095] ? __pfx_drm_ioctl+0x10/0x10 [ 120.790892][T10095] ? trace_lock_acquire+0x14a/0x1d0 [ 120.792373][T10095] ? selinux_file_ioctl+0x180/0x270 [ 120.793936][T10095] ? selinux_file_ioctl+0xb4/0x270 [ 120.795278][T10095] ? __pfx_drm_ioctl+0x10/0x10 [ 120.796675][T10095] __x64_sys_ioctl+0x18f/0x220 [ 120.798100][T10095] do_syscall_64+0xcd/0x250 [ 120.799570][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.801499][T10095] RIP: 0033:0x7f52eed7e719 [ 120.802678][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.807945][T10095] RSP: 002b:00007f52efb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.810140][T10095] RAX: ffffffffffffffda RBX: 00007f52eef35f80 RCX: 00007f52eed7e719 [ 120.812294][T10095] RDX: 0000000020000080 RSI: 00000000c02864c3 RDI: 0000000000000007 [ 120.814367][T10095] RBP: 00007f52eedf139e R08: 0000000000000000 R09: 0000000000000000 [ 120.816352][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.818353][T10095] R13: 0000000000000000 R14: 00007f52eef35f80 R15: 00007ffc39918138 [ 120.820731][T10095] [ 120.821757][T10095] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.824034][T10095] CPU: 3 UID: 0 PID: 10095 Comm: syz.4.1171 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 120.826683][T10095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.829351][T10095] Call Trace: [ 120.830216][T10095] [ 120.830962][T10095] dump_stack_lvl+0x3d/0x1f0 [ 120.832143][T10095] panic+0x71d/0x800 [ 120.833295][T10095] ? __pfx_panic+0x10/0x10 [ 120.834461][T10095] ? show_trace_log_lvl+0x29d/0x3d0 [ 120.835775][T10095] ? __alloc_pages_noprof+0xeff/0x25a0 [ 120.837590][T10095] check_panic_on_warn+0xab/0xb0 [ 120.839208][T10095] __warn+0xf6/0x3d0 [ 120.840346][T10095] ? __alloc_pages_noprof+0xeff/0x25a0 [ 120.841749][T10095] report_bug+0x3c0/0x580 [ 120.842897][T10095] handle_bug+0x54/0xa0 [ 120.844012][T10095] exc_invalid_op+0x17/0x50 [ 120.845191][T10095] asm_exc_invalid_op+0x1a/0x20 [ 120.846433][T10095] RIP: 0010:__alloc_pages_noprof+0xeff/0x25a0 [ 120.848043][T10095] Code: 24 2c 00 00 00 00 89 cd 0f 84 94 f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 9e ca fe ff e9 72 f9 ff ff c6 05 28 a2 65 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 ff 96 0c 00 8b 14 24 e9 [ 120.852839][T10095] RSP: 0018:ffffc9000cf278a8 EFLAGS: 00010246 [ 120.854383][T10095] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.856411][T10095] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 120.858710][T10095] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 120.860981][T10095] R10: 00000000a83a9376 R11: 0000000000000000 R12: 0000000000000016 [ 120.863329][T10095] R13: 0000000000040cc0 R14: 1ffff920019e4f29 R15: ffffffff852ac377 [ 120.865644][T10095] ? drm_syncobj_array_find+0x37/0x3b0 [ 120.867216][T10095] ? __lock_acquire+0xbdd/0x3ce0 [ 120.868707][T10095] ? hlock_class+0x4e/0x130 [ 120.870134][T10095] ? mark_lock+0xb5/0xc60 [ 120.871577][T10095] ? __pfx_mark_lock+0x10/0x10 [ 120.872938][T10095] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.874563][T10095] ? hlock_class+0x4e/0x130 [ 120.875897][T10095] ? mark_lock+0xb5/0xc60 [ 120.877337][T10095] ? __pfx_mark_lock+0x10/0x10 [ 120.878968][T10095] ? find_held_lock+0x2d/0x110 [ 120.880578][T10095] ? hlock_class+0x4e/0x130 [ 120.882103][T10095] ? __lock_acquire+0x163e/0x3ce0 [ 120.883584][T10095] ? drm_syncobj_array_find+0x37/0x3b0 [ 120.885033][T10095] ___kmalloc_large_node+0x84/0x1b0 [ 120.886367][T10095] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.887799][T10095] __kmalloc_noprof.cold+0xc/0x61 [ 120.889097][T10095] drm_syncobj_array_find+0x37/0x3b0 [ 120.890437][T10095] ? find_held_lock+0x2d/0x110 [ 120.891655][T10095] drm_syncobj_wait_ioctl+0x23a/0x390 [ 120.893005][T10095] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 120.894494][T10095] ? drm_dev_enter+0x49/0x160 [ 120.895680][T10095] drm_ioctl_kernel+0x1e6/0x3d0 [ 120.896919][T10095] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 120.898593][T10095] ? __might_fault+0xe3/0x190 [ 120.899913][T10095] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 120.901279][T10095] ? __might_fault+0xe3/0x190 [ 120.902672][T10095] drm_ioctl+0x5d6/0xc00 [ 120.903935][T10095] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 120.905481][T10095] ? __pfx_drm_ioctl+0x10/0x10 [ 120.906811][T10095] ? trace_lock_acquire+0x14a/0x1d0 [ 120.908146][T10095] ? selinux_file_ioctl+0x180/0x270 [ 120.909485][T10095] ? selinux_file_ioctl+0xb4/0x270 [ 120.910818][T10095] ? __pfx_drm_ioctl+0x10/0x10 [ 120.912087][T10095] __x64_sys_ioctl+0x18f/0x220 [ 120.913358][T10095] do_syscall_64+0xcd/0x250 [ 120.914648][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.916633][T10095] RIP: 0033:0x7f52eed7e719 [ 120.918053][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.923567][T10095] RSP: 002b:00007f52efb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.926056][T10095] RAX: ffffffffffffffda RBX: 00007f52eef35f80 RCX: 00007f52eed7e719 [ 120.928058][T10095] RDX: 0000000020000080 RSI: 00000000c02864c3 RDI: 0000000000000007 [ 120.930073][T10095] RBP: 00007f52eedf139e R08: 0000000000000000 R09: 0000000000000000 [ 120.932044][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.934024][T10095] R13: 0000000000000000 R14: 00007f52eef35f80 R15: 00007ffc39918138 [ 120.936009][T10095] [ 120.937421][T10095] Kernel Offset: disabled [ 120.938513][T10095] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:25:35 Registers: info registers vcpu 0 CPU#0 RAX=00000000001add81 RBX=0000000000000000 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5848 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f52efb94f98 CR3=000000002a0fe000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe161e7b40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802a552440 RCX=ffffffff8152483e RDX=ffff88802a552440 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000040100 RSP=ffffc9000cb6fdb0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff88802a552440 R15=dffffc0000000000 RIP=ffffffff818d7b50 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555e046500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555e059588 CR3=000000002a500000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49ba3f69a0 00007f49ba3f69a0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bbff223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bbff2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bbff2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bbff2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bbff22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bbff23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bc10c488 00007f49bc10c480 00007f49bc10c478 00007f49bc10c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bcc6d100 00007f49bc10c440 00007f49bc10c458 00007f49bc10c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49bc10c498 00007f49bc10c490 00007f49bc10c488 00007f49bc10c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802a3c2f98 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88806a83ddd8 RDI=ffff88802a3c2f98 RBP=ffff88806a83ddd8 RSP=ffffc90025dcfb58 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000052 R12=ffff88802a3c2440 R13=ffff88802a3c2f20 R14=00000000ffffffff R15=0000000000000003 RIP=ffffffff8b236610 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555e046808 CR3=0000000034d5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346f9f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346fb0c488 00007f346fb0c480 00007f346fb0c478 00007f346fb0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f347066d100 00007f346fb0c440 00007f346fb00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f346fb0c498 00007f346fb0c490 00007f346fb0c488 00007f346fb0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e04962f7af58a9af d5763f8a665143f6 1bd8aa54c1e15dc4 55b632bb2cb9e583 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a00f9520000af32 d2bfbffc4ba4a136 5515458edfffe049 62f7af58a9afd576 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f8a665143f61bd8 aa54c1e15dc455b6 32bb2cb9e583ef70 21f29a5e8d681996 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d39b9b82387bde3a b3087a2d20a599d4 6932cb6152bf998a 49f03a71b069e639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ed075607f971ca9 42f8910000000268 fd0fa944fcbc19a9 424df623816863d4 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8a45 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc9000cf27208 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006c R14=ffffffff850b89e0 R15=0000000000000000 RIP=ffffffff850b8a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f52efb956c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3fd85d CR3=0000000055e7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52eedf223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52eedf2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52eedf2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52eedf2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52eedf22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52eedf23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000