last executing test programs: 1m30.34061179s ago: executing program 3 (id=252): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e0000000000000000000000000040000000000000000000000000000000000000000000380002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000020000000000000000000000000000000000000000000000008"], 0xb0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x1}, 0x14}}, 0x0) 1m30.339587938s ago: executing program 3 (id=253): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp, @alu]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000002180)) dup2(r0, 0xffffffffffffffff) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m30.261295641s ago: executing program 3 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}}}, @IFLA_MTU={0x8, 0x4, 0x570}]}, 0x40}}, 0x0) 1m30.260990111s ago: executing program 3 (id=255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010205000000000000000000070080060600074000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x98, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}, {0x9}}, @common=@set={{0x40}, {{0x0, [0x7, 0x4, 0x1, 0x4, 0x3, 0x5], 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='spmi_cmd\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x8, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x10, &(0x7f0000001a80)=""/16, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001b00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b40)=[{0x3, 0x5, 0x5, 0x1}, {0x3, 0x3, 0x0, 0x2}], 0x10, 0x757, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000000640)='dlm_lock_start\x00', r4, 0x0, 0xc0e}, 0x18) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000700)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="81ffffff000000002c0012800b00010067656e65766500001c000280050009000000000005000a0000000000050004000800000008000a00", @ANYRES32], 0x54}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000906011000000000000000000000000508000940000000000800094000007fff080009400300e30208000940000000090900020073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = dup(r6) socket(0x1d, 0x5, 0x1) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x50, 0x1, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x118}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1f}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) write$UHID_INPUT(r7, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1000}}, 0x1006) accept$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) 1m30.131325781s ago: executing program 3 (id=257): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040000) 1m29.951294197s ago: executing program 3 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000005500)={0x1, 0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000005380)=""/255, 0xff}], 0x0}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000410000000000000000060000017c000006000300dc19828591e623f0f37258f6756be9eac2510207f94c46283f5b56837f20d3be0124ab3e385672e1e3d3b50f1313978c05dcaab59778fc16a65ee7ab5c2e94aabc32242dc33c6eaf404ccdd5b74f5042165861fb981bc60f216c079d7d7492396960828c617e712f7c3a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b70b00000000000000002a0000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r9 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x10000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1m29.943665446s ago: executing program 32 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000005500)={0x1, 0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000005380)=""/255, 0xff}], 0x0}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000410000000000000000060000017c000006000300dc19828591e623f0f37258f6756be9eac2510207f94c46283f5b56837f20d3be0124ab3e385672e1e3d3b50f1313978c05dcaab59778fc16a65ee7ab5c2e94aabc32242dc33c6eaf404ccdd5b74f5042165861fb981bc60f216c079d7d7492396960828c617e712f7c3a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b70b00000000000000002a0000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r9 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x10000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.960468684s ago: executing program 1 (id=1491): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="d8c60f350f20870f0d26a2000f01cf0fc7b900800f005a00f4640fc7b4020065640f01f0", 0x24}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.960283574s ago: executing program 1 (id=1492): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x3, 0x290f6fb5, 0x8}) ftruncate(r1, 0x1) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000180)='4\x00', 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0xdddd1000, 0x102000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.140241674s ago: executing program 2 (id=1501): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="d8c60f350f20870f0d26a2000f01cf0fc7b900800f005a00f4640fc7b4020065640f01f0", 0x24}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.140056156s ago: executing program 2 (id=1502): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x0, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x880, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'erspan0\x00', {0x3a}, 0x56c5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8200a00060001000a0402000100444a0af75afa8beb0bae9b7b41134e4f907e75d0cdb98489830cb1048843ffeb4237f4c75b5e3fe9bea102d9ed71e71960950ca04fa4ca843201e922c46e878be50ded893107c3"], 0xf) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) r2 = socket(0x1e, 0x805, 0x0) (rerun: 32) connect$tipc(r2, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004049) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) chroot(&(0x7f0000000000)='./file0\x00') (async, rerun: 32) umount2(&(0x7f0000000240)='./file0\x00', 0x6) (async, rerun: 64) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) (rerun: 64) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x5, 0x6, 0x1c, "d4b2313cf4bee3e44b2bbcd125ece060eb2494b92568425af2f4afa5a317279b42495ce97d35a58db4c207d87d364cfe0639cecf4bf25bbe8e58b920a39a688d", "e12d63539587eae942f97bec9132fbffffb582b189372d6d2865937264867e32cf7aa7556e4f5a57668361ebc954080cc232eb397bf5f600", "6435117e2184a19a8f0257dee75bc80100000000350a00", [0xf47, 0x5bd3]}) 1.068659255s ago: executing program 1 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf56, 0x0, [{0x0, 0xfe}, {}, {}, {0x0, 0x35}, {0x10, 0x80}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0xfd}, {0x0, 0x4}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {0x4, 0x4}]}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={0x0}}, 0x0) syz_emit_ethernet(0xf7, &(0x7f00000004c0)={@local, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "1860", "2be7ee", 0x8847, "0cd81bd8f40f5076d99fa4393577e931c5baeab2f4b0ec1abddd4bef537fb9f2702cb767e93714c405504741629c7e2bfdd96740af26f53b784a38ace632d255a03709181b73df2cef4f6b4b7452df959f0b82d4d0682ea355ea6f88b6c875195bd60bd17800ffc4491f62c389649df087af6fa912bc292f8355ed5e00b0f06ad017120cf02599b654258f5c43f5ab5def3fc94ce7d675b0870f86229d2bb35ea380be84b843ddbe8b3757e172082ec8d85a5c615b9b8b820561a4d517f57955eaf8363d8ccb05f1e0e89b874cd285897d83b66541c3089121bac34ce0b6ee93"}}}}}, 0x0) 1.06843664s ago: executing program 2 (id=1505): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="db", 0x1}], 0x1, 0x2, 0x21d1873d, 0x4) 1.068323385s ago: executing program 4 (id=1506): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000f00)={0xf0f01c, 0x2}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300031200000000000000000000000400090088000000e3d36433c4920893924540ac18fabaf0c70000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000002fd0000000005000500000000000a"], 0x90}, 0x1, 0x7}, 0x0) 1.06754736s ago: executing program 2 (id=1508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xdddd1000, 0x102000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 980.201606ms ago: executing program 4 (id=1509): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "445bff", 0x28, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x800, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4e23, 0x4e24, 0x2, 0x3, 0x0, 0x500}}}}}}}, 0x0) 980.061074ms ago: executing program 1 (id=1510): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000880)={0x1, 0x10, {0x0, 0x0, 0x2004}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 979.949864ms ago: executing program 4 (id=1511): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x3, 0x290f6fb5, 0x8}) ftruncate(r1, 0x1) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000180)='4\x00', 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0xdddd1000, 0x102000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 979.688914ms ago: executing program 1 (id=1512): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="d8c60f350f20870f0d26a2000f01cf0fc7b900800f005a00f4640fc7b4020065640f01f0", 0x24}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) 979.595549ms ago: executing program 1 (id=1513): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10001f, 0xfa, 0x20000, {r0}}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x4018480c, &(0x7f0000000080)={0x2}) 299.944826ms ago: executing program 0 (id=1523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdfd475fdd63ff6def000", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 249.583484ms ago: executing program 0 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x437, 0xfeff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) 249.39447ms ago: executing program 0 (id=1525): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4fd, 0x0, 0x0, "d287203624ca4ac2b49148094c54a74e0b33e71c059706050000ae030800363f", 0x20e730a}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) gettid() r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="3b76df612a4116c8046bf298cef344f649b8de12fd12cb4ee32e20283840f721405fd9db89da1add54abdd98087dff42e2ef26382fcf7cc0e17c52538458b5aac40ea5", &(0x7f00000002c0)="6ec90551944b39ae2426020705168e30dd940745f3bcc31c9e8adca376d140b1ef1360691a01b2dff8188cabbce9e19a235f095d4f898de586f831ac189f8cc6df2d13c5d7e54f49c5b4664df54e03e61e7f1efd8cbf4c57f70afd3dee51950481e98d9b04299535de5612527bbf7a7cffc47c4727fc30271a8816e33963d72680625216b94cc34d1bb23296c5750900bc4083d91b8f3d3727d9c70ff0f862b22d18da7e96c1eefb6d0c03d82b8bb6a82b4806aedc239857bce8b53145e8745630f5f4d0cbc627af1a70942426f168559cb4cfbc7030024d"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r9, 0x31e, &(0x7f0000002140)={@msf={0xef, 0x2}, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) 120.418569ms ago: executing program 0 (id=1526): socket$inet6_sctp(0xa, 0x801, 0x84) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r0 = syz_io_uring_setup(0x352d, &(0x7f0000000140)={0x0, 0x80, 0x100, 0x2, 0x2000332}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 119.999212ms ago: executing program 0 (id=1527): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="db", 0x1}], 0x1, 0x2, 0x21d1873d, 0x4) 119.370161ms ago: executing program 2 (id=1528): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x5, 0x1, 0x1, 0x0, 0x8, 0xa}}, {0x18, 0x2, [0x8000, 0x7fff, 0x3, 0xf2, 0x9, 0xffff, 0xffff, 0xff, 0x6, 0x5]}}, {{0x1c, 0x1, {0x0, 0x8, 0x5, 0xf, 0x1, 0xfffffff9, 0x3, 0x1}}, {0x6, 0x2, [0xfff2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x80, 0x8, 0x40, 0x2, 0x800, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000340)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001ac0)="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", 0x10af}, {}, {&(0x7f00000013c0)="5bad4428d0893915e02fee72e819610abce8d1404ded41c84b507d13c64d91791399ae9d696964fdafde6dbff61d6b92c02925728d1df02748fcf08c1d2febc14d0d30f6b2d61c05290f1a186e0e59a78601e90748e2c94a3672145169161d6508acd20b8f20c0de44549a0bda20e244469533695fda491842f3d78250a58f432c239efb3de412576d0c41b7c66007f03ce499c1078a138075", 0x99}, {&(0x7f0000001500)="8e9c28c916dbcb95cccbd27125f39e5b1fed85261f8b69d9376dfccbcbcf781df367b0eff8b061cb6fbb795d7f4471c7c04fe233929b7bd6836ea19f10667df7a21d7a4743f1edb5fd456002efbf3bdf25743c29c197a769607dd477434009ef2771980b67a0d5547f8e7b8d1a1f12accaa822b5db9a2a6e810b4135a30e16f58ac84d5970c144fae0061d2d82798b8dbb58279fc21270d518dc129c7cc71634b85fe9e4d12134cbf55f3901b13d3369c7d4ba76c7e0146db698f25921476d955cf7ffc994fdd3c2e4973a95161076b842f771a2e5be97a39c90", 0xda}, {&(0x7f0000000180)="17b1e72971b6c35214f9e871902f6ce259ec31ba8ce4b56be44ffc5d7c3b80e90fb01615efc0df04446da80eb2c26edae0b3", 0x32}, {&(0x7f0000001600)="09b91ac0ecf9bef7ec52ab4884466a46c88e01019c6e35890b497db472e1e04f3c3356804f7e791a14c2f9e1b8a9a1c76ff49686e4ea8753005f7925d466d8c4ac3b487d1ce23a6818665409fa902ecc5ec74c071073261ca013", 0x5a}, {&(0x7f0000001680)="eb8c79666635c7b0689540bda360c0a42f4eb8c2e69c9aeb6b7ff5c7623eb5819fd4cdd1d669d626c54b70a87e979b311226d652226486a46c2ffcb335fcfb1d3590568f7da1487214e0053c9c99ccbc3334ff6d15230c08e4", 0x59}, {&(0x7f0000001a00)="d2880fb956afbd01bcb1663e20af256086e694233d05d371843c945b000c008ed046a0d6a704940476ed7786860561b87868d2e60a61a64e31c39cdb02d27a82649003271f246e9647e0ed4cb68bd8fcf8e1ef321d1898c01165eccb7b197ed631a645545f674c8b0e23346afb497ea24d3c5536c38670926957f57b8d628b7181cf3b997e0aa8b8acd82f47eb749bd47692cb006202018ec2171413e9ad0cda3e5af265197db3f27d52b5e047e1", 0xae}, {&(0x7f00000017c0)="e384ca4c533d695e1697921f240f9e3ce8d288657f30ec548118716fd92094d8c9bbad23bc4e1515c8578c230bab72983dd37b5786620013b90bf005ea0473f67606eb45a62862f61d779cf1a25c9257bcab7987dc57b448b04e7a89f0382551e19e05441efc16727df660", 0x6b}, {&(0x7f0000001840)="53e2007121de952d723497ad6973dd1e9c0a975cd48e07ed79d59821437ce63f636ab59c3baede1b1c1611d709919bc5d3a3abfd99831723382b44b3af304dc56e130857a77414893ba6cffc90670c3ae50848582c7dd01d10dd231d1cdc8b78ea84a72986f0506b25fe4ea7f1d9099e0c5a908051ae6dca88bcf046d8569e3609af5645cd7abc0bbaa982040dd1e09a5f8586de38d0604541f47fee2415d1ec6c65205665aa9b9070bfde66150c3939d2971ea07c292cef2482da6603f9c2da7f0efe9d2285e8698a5e93e4", 0xcc}], 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="4000000000000000e5010000044000004c1bca7f16218a187fa2cfc9ea26b88c6135c0145ef8590ebd00be0c8e97bdcde036008000f31861dbc83f9e3d51e39bb9f97fb79b6306000000000000"], 0x40}}], 0x1, 0x0) 119.0552ms ago: executing program 0 (id=1529): r0 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0x88400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) r2 = socket$inet(0xa, 0x801, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) listen(r1, 0x7f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x1b, 0x6, 0x4, 0x2, 0xd1}) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) 58.675341ms ago: executing program 2 (id=1530): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x321080, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10102, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="2616df751c08d9c4f1e3acb2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) recvmsg(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x12000) pread64(r4, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000500000000000a00000059ef41450080ffffffff00000047fb5afce014e2c73bebbf9bc500000000009500000e05080000b3eaf7a7ea1c55f71b807e558100174b7972b19b46504be68927c927342f1c", @ANYRES16=r3], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 58.494377ms ago: executing program 4 (id=1531): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="d8c60f350f20870f0d26a2000f01cf0fc7b900800f005a00f4640fc7b4020065640f01f0", 0x24}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) 58.246358ms ago: executing program 4 (id=1532): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xf5ff, @mcast2, 0x4, 0x80000000}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="64aa5aded34ee7b2e4a80dc0d960fb44e04370f20108a3f26d14b57b274f7bfcde3af30ebf8bf3a5", 0x28}], 0x1}, 0x0) 0s ago: executing program 4 (id=1533): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x1}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = fspick(r3, &(0x7f0000000040)='./bus\x00', 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x23, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x22}, @generic={0x6, 0x9, 0xb, 0x7b8, 0x10000}, @call={0x85, 0x0, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @exit], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r9, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='user_id', &(0x7f0000001100)='rootmode', 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) kernel console output (not intermixed with test programs): in process `syz.0.807'. [ 97.702417][ T8389] xt_l2tp: invalid flags combination: c [ 97.734634][ T8399] netlink: 68 bytes leftover after parsing attributes in process `syz.4.815'. [ 97.735856][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 97.735865][ T39] audit: type=1400 audit(1732090988.972:583): avc: denied { mounton } for pid=8396 comm="syz.2.814" path="/217/file0/file0" dev="ramfs" ino=21429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.744837][ T39] audit: type=1400 audit(1732090988.972:584): avc: denied { watch watch_reads } for pid=8396 comm="syz.2.814" path="/217/file0" dev="ramfs" ino=21428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.756927][ T8402] [U] VÔ3¸ÂFÙ¾"WÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 97.764220][ T39] audit: type=1400 audit(1732090989.002:585): avc: denied { mounton } for pid=8404 comm="syz.4.817" path="/proc/291/cgroup" dev="proc" ino=24656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 97.766900][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.771316][ T39] audit: type=1400 audit(1732090989.002:586): avc: denied { unmount } for pid=8404 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 97.777583][ T39] audit: type=1400 audit(1732090989.012:587): avc: denied { write } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.780779][ T8406] delete_channel: no stack [ 97.783056][ T39] audit: type=1400 audit(1732090989.012:588): avc: denied { remove_name } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.783078][ T39] audit: type=1400 audit(1732090989.012:589): avc: denied { add_name } for pid=5349 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.783095][ T39] audit: type=1400 audit(1732090989.022:590): avc: denied { read } for pid=8406 comm="syz.2.818" path="socket:[22652]" dev="sockfs" ino=22652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.819361][ T39] audit: type=1400 audit(1732090989.062:591): avc: denied { watch watch_reads } for pid=8416 comm="syz.4.821" path="/proc/293" dev="proc" ino=22655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.825470][ T39] audit: type=1400 audit(1732090989.062:592): avc: denied { read } for pid=8416 comm="syz.4.821" path="socket:[24670]" dev="sockfs" ino=24670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.052551][ T8432] netlink: 68 bytes leftover after parsing attributes in process `syz.4.827'. [ 98.119606][ T8446] input: syz0 as /devices/virtual/input/input20 [ 98.121541][ T8446] input: failed to attach handler leds to device input20, error: -6 [ 98.142113][ T8446] input: syz0 as /devices/virtual/input/input21 [ 98.165818][ T8452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.836'. [ 98.402792][ T8482] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.846'. [ 98.405235][ T8482] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.846'. [ 98.410569][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.428404][ T8478] kvm: kvm [8477]: vcpu0, guest rIP: 0x19 Unhandled WRMSR(0xc1) = 0xd [ 98.430875][ T8478] kvm: kvm [8477]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 98.459193][ T8485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.847'. [ 98.596583][ T8501] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.600677][ T8501] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 98.698382][ T8519] netlink: 60 bytes leftover after parsing attributes in process `syz.1.857'. [ 98.743831][ T8517] misc userio: No port type given on /dev/userio [ 98.807028][ T8530] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 98.809143][ T8530] netlink: 'syz.1.862': attribute type 4 has an invalid length. [ 98.811149][ T8530] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.862'. [ 98.862451][ T8546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.867'. [ 99.446177][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.867788][ T8576] sit0: entered allmulticast mode [ 99.897263][ T8592] FAULT_INJECTION: forcing a failure. [ 99.897263][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 99.900554][ T8592] CPU: 1 UID: 0 PID: 8592 Comm: syz.0.881 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 99.903207][ T8592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.906004][ T8592] Call Trace: [ 99.906897][ T8592] [ 99.907686][ T8592] dump_stack_lvl+0x16c/0x1f0 [ 99.908942][ T8592] should_fail_ex+0x497/0x5b0 [ 99.910307][ T8592] ? fs_reclaim_acquire+0xae/0x150 [ 99.912077][ T8592] should_failslab+0xc2/0x120 [ 99.913335][ T8592] __kmalloc_cache_noprof+0x6b/0x300 [ 99.913795][ T8594] fuse: Bad value for 'user_id' [ 99.914721][ T8592] ? tc_new_tfilter+0xef8/0x23c0 [ 99.914758][ T8592] tc_new_tfilter+0xef8/0x23c0 [ 99.918003][ T8594] fuse: Bad value for 'user_id' [ 99.919087][ T8592] ? __pfx_tc_new_tfilter+0x10/0x10 [ 99.922531][ T8592] ? __pfx___lock_acquire+0x10/0x10 [ 99.923925][ T8592] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 99.925972][ T8592] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 99.928013][ T8592] ? __pfx_lock_release+0x10/0x10 [ 99.929408][ T8592] ? trace_lock_acquire+0x14a/0x1d0 [ 99.930858][ T8592] ? __pfx_tc_new_tfilter+0x10/0x10 [ 99.932672][ T8592] rtnetlink_rcv_msg+0x95b/0xea0 [ 99.934403][ T8592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.935879][ T8592] netlink_rcv_skb+0x16b/0x440 [ 99.937302][ T8592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.939211][ T8592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.940709][ T8592] ? netlink_deliver_tap+0x1ae/0xd90 [ 99.942402][ T8592] netlink_unicast+0x53c/0x7f0 [ 99.944090][ T8592] ? __pfx_netlink_unicast+0x10/0x10 [ 99.945520][ T8592] netlink_sendmsg+0x8b8/0xd70 [ 99.947189][ T8592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.948905][ T8592] ____sys_sendmsg+0xaaf/0xc90 [ 99.950180][ T8592] ? copy_msghdr_from_user+0x10b/0x160 [ 99.951633][ T8592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.953042][ T8592] ? __lock_acquire+0xcc5/0x3c40 [ 99.954389][ T8592] ? hlock_class+0x4e/0x130 [ 99.955652][ T8592] ? __lock_acquire+0x15a9/0x3c40 [ 99.957077][ T8592] ___sys_sendmsg+0x135/0x1e0 [ 99.958491][ T8592] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.960196][ T8592] ? __pfx___lock_acquire+0x10/0x10 [ 99.961946][ T8592] ? __pfx___might_resched+0x10/0x10 [ 99.963803][ T8592] ? __might_fault+0xe3/0x190 [ 99.965308][ T8592] __sys_sendmmsg+0x201/0x420 [ 99.966975][ T8592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 99.968731][ T8592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.970822][ T8592] ? fput+0x67/0x440 [ 99.972160][ T8592] ? ksys_write+0x1ba/0x250 [ 99.973765][ T8592] ? __pfx_ksys_write+0x10/0x10 [ 99.975406][ T8592] __x64_sys_sendmmsg+0x9c/0x100 [ 99.977009][ T8592] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.978423][ T8592] do_syscall_64+0xcd/0x250 [ 99.979678][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.981279][ T8592] RIP: 0033:0x7f4cbe17e759 [ 99.982486][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.987570][ T8592] RSP: 002b:00007f4cbeef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.989795][ T8592] RAX: ffffffffffffffda RBX: 00007f4cbe335f80 RCX: 00007f4cbe17e759 [ 99.991886][ T8592] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 99.993987][ T8592] RBP: 00007f4cbeef7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.996067][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.998142][ T8592] R13: 0000000000000000 R14: 00007f4cbe335f80 R15: 00007ffd8ee0cc38 [ 100.000245][ T8592] [ 100.050090][ T8600] netlink: 'syz.0.883': attribute type 4 has an invalid length. [ 100.085557][ T8604] xt_hashlimit: size too large, truncated to 1048576 [ 100.094027][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.169869][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.172075][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.175789][ T8616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.179260][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.181437][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.183590][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.185734][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.188226][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.190361][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.192501][ T8616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.636093][ T1446] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 100.796107][ T1446] usb 7-1: Using ep0 maxpacket: 16 [ 100.806390][ T1446] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.809073][ T1446] usb 7-1: config 0 has no interfaces? [ 100.810520][ T1446] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.813180][ T1446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.820942][ T1446] usb 7-1: config 0 descriptor?? [ 101.013477][ T8632] syz.0.893 (8632): drop_caches: 2 [ 101.025141][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.039228][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.108056][ T6018] usb 7-1: USB disconnect, device number 10 [ 101.239008][ T8657] tmpfs: Bad value for 'mpol' [ 101.529352][ T8664] loop8: detected capacity change from 0 to 7 [ 101.532510][ T8664] Dev loop8: unable to read RDB block 7 [ 101.534005][ T8664] loop8: AHDI p1 p3 p4 [ 101.535117][ T8664] loop8: partition table partially beyond EOD, truncated [ 101.538079][ T8664] loop8: p1 start 975770946 is beyond EOD, truncated [ 101.539846][ T8664] loop8: p3 start 6514546 is beyond EOD, truncated [ 101.585997][ T6018] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 101.639687][ T8672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8672 comm=syz.2.905 [ 101.643258][ T8672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8672 comm=syz.2.905 [ 101.674600][ T8674] tap0: tun_chr_ioctl cmd 1074025678 [ 101.676147][ T8674] tap0: group set to 0 [ 101.755225][ T8675] capability: warning: `syz.1.904' uses 32-bit capabilities (legacy support in use) [ 101.757818][ T6018] usb 9-1: Using ep0 maxpacket: 32 [ 101.764716][ T6018] usb 9-1: no configurations [ 101.766109][ T6018] usb 9-1: can't read configurations, error -22 [ 101.895977][ T6018] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 101.974377][ T8694] vlan3: entered promiscuous mode [ 101.975782][ T8694] vlan3: entered allmulticast mode [ 101.994550][ T5961] Bluetooth: hci1: unexpected event for opcode 0xe206 [ 102.003173][ T8683] Process accounting resumed [ 102.035226][ T8698] binder: BINDER_SET_CONTEXT_MGR already set [ 102.038974][ T8698] binder: 8697:8698 ioctl 4018620d 20000200 returned -16 [ 102.047059][ T6018] usb 9-1: Using ep0 maxpacket: 32 [ 102.048898][ T6018] usb 9-1: no configurations [ 102.050629][ T6018] usb 9-1: can't read configurations, error -22 [ 102.052531][ T6018] usb usb9-port1: attempt power cycle [ 102.061649][ T5961] Bluetooth: hci1: Malformed Event: 0x2f [ 102.096283][ T8705] FAULT_INJECTION: forcing a failure. [ 102.096283][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.099981][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.1.914 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 102.102609][ T8705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.105429][ T8705] Call Trace: [ 102.106321][ T8705] [ 102.107110][ T8705] dump_stack_lvl+0x16c/0x1f0 [ 102.108396][ T8705] should_fail_ex+0x497/0x5b0 [ 102.109655][ T8705] _copy_to_user+0x32/0xd0 [ 102.110860][ T8705] msr_read+0x14f/0x250 [ 102.111975][ T8705] ? __pfx_msr_read+0x10/0x10 [ 102.113245][ T8705] ? bpf_lsm_file_permission+0x9/0x10 [ 102.114665][ T8705] ? security_file_permission+0x71/0x210 [ 102.116163][ T8705] ? __pfx_msr_read+0x10/0x10 [ 102.117414][ T8705] vfs_read+0x1df/0xbe0 [ 102.118522][ T8705] ? __fget_files+0x1fc/0x3a0 [ 102.119780][ T8705] ? __pfx_lock_release+0x10/0x10 [ 102.121117][ T8705] ? trace_lock_acquire+0x14a/0x1d0 [ 102.122500][ T8705] ? __pfx_vfs_read+0x10/0x10 [ 102.123757][ T8705] ? lock_acquire+0x2f/0xb0 [ 102.124961][ T8705] ? __fget_files+0x40/0x3a0 [ 102.126224][ T8705] ? __fget_files+0x206/0x3a0 [ 102.127490][ T8705] ksys_read+0x12b/0x250 [ 102.128623][ T8705] ? __pfx_ksys_read+0x10/0x10 [ 102.129898][ T8705] do_syscall_64+0xcd/0x250 [ 102.131120][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.132688][ T8705] RIP: 0033:0x7fc7cf17e759 [ 102.133886][ T8705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.138947][ T8705] RSP: 002b:00007fc7cfeee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.141139][ T8705] RAX: ffffffffffffffda RBX: 00007fc7cf335f80 RCX: 00007fc7cf17e759 [ 102.143218][ T8705] RDX: 0000000000018ff8 RSI: 0000000020032680 RDI: 0000000000000003 [ 102.145301][ T8705] RBP: 00007fc7cfeee090 R08: 0000000000000000 R09: 0000000000000000 [ 102.147388][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.149476][ T8705] R13: 0000000000000000 R14: 00007fc7cf335f80 R15: 00007ffe47f62898 [ 102.151577][ T8705] [ 102.197789][ T8701] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.203612][ T8701] kvm: pic: non byte read [ 102.386074][ T6018] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 102.407452][ T6018] usb 9-1: Using ep0 maxpacket: 32 [ 102.409303][ T6018] usb 9-1: no configurations [ 102.410537][ T6018] usb 9-1: can't read configurations, error -22 [ 102.509541][ T8719] netlink: 'syz.2.917': attribute type 9 has an invalid length. [ 102.536000][ T6018] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 102.539458][ T8721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8721 comm=syz.2.918 [ 102.544583][ T8721] tmpfs: Group quota block hardlimit too large. [ 102.549102][ T8721] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 102.556518][ T6018] usb 9-1: Using ep0 maxpacket: 32 [ 102.558429][ T6018] usb 9-1: no configurations [ 102.559678][ T6018] usb 9-1: can't read configurations, error -22 [ 102.561300][ T6018] usb usb9-port1: unable to enumerate USB device [ 102.569931][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.915995][ T8742] __nla_validate_parse: 15 callbacks suppressed [ 102.917273][ T8742] netlink: 200 bytes leftover after parsing attributes in process `syz.1.926'. [ 103.110904][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 103.110914][ T39] audit: type=1326 audit(1732090994.362:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8750 comm="syz.2.930" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x0 [ 104.258596][ T39] audit: type=1400 audit(1732090995.502:607): avc: denied { setopt } for pid=8775 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.263662][ T39] audit: type=1400 audit(1732090995.502:608): avc: denied { bind } for pid=8775 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.270821][ T39] audit: type=1400 audit(1732090995.512:609): avc: denied { write } for pid=8775 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.324077][ T8778] netlink: 316 bytes leftover after parsing attributes in process `syz.2.936'. [ 104.361763][ T8786] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 104.364084][ T8786] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 104.367225][ T8786] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 104.411199][ T8795] set match dimension is over the limit! [ 104.646387][ T1449] net_ratelimit: 1836 callbacks suppressed [ 104.646418][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.155969][ T8823] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.696777][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.705525][ T39] audit: type=1400 audit(1732090996.942:610): avc: denied { write } for pid=8863 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.769524][ T8873] random: crng reseeded on system resumption [ 105.773638][ T39] audit: type=1400 audit(1732090997.012:611): avc: denied { append } for pid=8872 comm="syz.0.964" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.984789][ T8881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 105.986870][ T8881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.991368][ T8881] vhci_hcd vhci_hcd.0: Device attached [ 105.994919][ T8884] vhci_hcd: connection closed [ 106.007703][ T68] vhci_hcd: stop threads [ 106.010735][ T68] vhci_hcd: release socket [ 106.012042][ T68] vhci_hcd: disconnect device [ 106.374054][ T8889] program syz.4.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.376519][ T8889] ata3.00: invalid multi_count 64 ignored [ 106.476996][ T8897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8897 comm=syz.2.973 [ 106.497068][ T8900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8900 comm=syz.4.974 [ 106.565048][ T8910] FAULT_INJECTION: forcing a failure. [ 106.565048][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 106.569306][ T8910] CPU: 2 UID: 0 PID: 8910 Comm: syz.4.978 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 106.572012][ T8910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.574811][ T8910] Call Trace: [ 106.575700][ T8910] [ 106.576480][ T8910] dump_stack_lvl+0x16c/0x1f0 [ 106.577737][ T8910] should_fail_ex+0x497/0x5b0 [ 106.578991][ T8910] ? fs_reclaim_acquire+0xae/0x150 [ 106.580350][ T8910] should_failslab+0xc2/0x120 [ 106.581598][ T8910] __kmalloc_cache_noprof+0x6b/0x300 [ 106.582999][ T8910] ? rcu_is_watching+0x12/0xc0 [ 106.584268][ T8910] ? call_usermodehelper_setup+0x9a/0x340 [ 106.585774][ T8910] ? __pfx_free_modprobe_argv+0x10/0x10 [ 106.587233][ T8910] call_usermodehelper_setup+0x9a/0x340 [ 106.588694][ T8910] __request_module+0x3d6/0x6c0 [ 106.589980][ T8910] ? nf_tables_abort+0x275f/0x3ab0 [ 106.591377][ T8910] ? __pfx___request_module+0x10/0x10 [ 106.592785][ T8910] ? __mutex_unlock_slowpath+0x164/0x690 [ 106.594299][ T8910] nf_tables_abort+0x275f/0x3ab0 [ 106.595616][ T8910] ? __pfx_nf_tables_abort+0x10/0x10 [ 106.597004][ T8910] ? net_generic+0xea/0x2a0 [ 106.598220][ T8910] ? __pfx_lock_release+0x10/0x10 [ 106.599562][ T8910] ? trace_lock_acquire+0x14a/0x1d0 [ 106.600933][ T8910] ? __nla_parse+0x40/0x60 [ 106.602133][ T8910] nfnetlink_rcv_batch+0xabb/0x24e0 [ 106.603525][ T8910] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 106.605001][ T8910] ? avc_has_perm_noaudit+0x119/0x3a0 [ 106.606429][ T8910] ? avc_has_perm_noaudit+0x143/0x3a0 [ 106.607855][ T8910] ? __nla_parse+0x40/0x60 [ 106.609051][ T8910] nfnetlink_rcv+0x3c3/0x430 [ 106.610283][ T8910] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 106.611644][ T8910] netlink_unicast+0x53c/0x7f0 [ 106.612930][ T8910] ? __pfx_netlink_unicast+0x10/0x10 [ 106.614334][ T8910] netlink_sendmsg+0x8b8/0xd70 [ 106.615617][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.617012][ T8910] ____sys_sendmsg+0xaaf/0xc90 [ 106.618286][ T8910] ? copy_msghdr_from_user+0x10b/0x160 [ 106.619734][ T8910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.621139][ T8910] ___sys_sendmsg+0x135/0x1e0 [ 106.622387][ T8910] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.623750][ T8910] ? __pfx_lock_release+0x10/0x10 [ 106.625072][ T8910] ? trace_lock_acquire+0x14a/0x1d0 [ 106.626458][ T8910] ? __fget_files+0x206/0x3a0 [ 106.628133][ T8910] __sys_sendmsg+0x16e/0x220 [ 106.629381][ T8910] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.630750][ T8910] do_syscall_64+0xcd/0x250 [ 106.631953][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.633543][ T8910] RIP: 0033:0x7efc7417e759 [ 106.634728][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.639730][ T8910] RSP: 002b:00007efc74f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.641906][ T8910] RAX: ffffffffffffffda RBX: 00007efc74335f80 RCX: 00007efc7417e759 [ 106.643969][ T8910] RDX: 0000000020050800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 106.646026][ T8910] RBP: 00007efc74f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.648098][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.650149][ T8910] R13: 0000000000000000 R14: 00007efc74335f80 R15: 00007ffca23d9438 [ 106.652214][ T8910] [ 106.711028][ T8921] program syz.4.981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.726164][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.774365][ T8923] netlink: 296 bytes leftover after parsing attributes in process `syz.2.982'. [ 106.776984][ T8923] unsupported nlmsg_type 40 [ 106.886820][ T8949] IPVS: Unknown mcast interface: vxcan1 [ 106.887630][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.889688][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 106.918848][ T39] audit: type=1400 audit(1732090998.152:612): avc: denied { shutdown } for pid=8947 comm="syz.1.985" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 107.176034][ T5995] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 107.245981][ T35] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 107.347250][ T5995] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.349917][ T5995] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.352254][ T5995] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25449, setting to 8 [ 107.355070][ T5995] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 107.357575][ T5995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.366401][ T8955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.369557][ T5995] hub 9-1:1.0: bad descriptor, ignoring hub [ 107.371203][ T5995] hub 9-1:1.0: probe with driver hub failed with error -5 [ 107.373270][ T5995] cdc_wdm 9-1:1.0: skipping garbage [ 107.374644][ T5995] cdc_wdm 9-1:1.0: skipping garbage [ 107.376865][ T5995] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 107.378660][ T5995] cdc_wdm 9-1:1.0: Unknown control protocol [ 107.406038][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 107.409780][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.412054][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.414327][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.416928][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.419706][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.422257][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.425774][ T35] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.428580][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.432160][ T35] usb 5-1: config 0 descriptor?? [ 107.766423][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.790551][ T39] audit: type=1400 audit(1732090999.032:613): avc: denied { write } for pid=8975 comm="syz.2.994" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.798075][ T39] audit: type=1400 audit(1732090999.042:614): avc: denied { ioctl } for pid=8975 comm="syz.2.994" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.824684][ T39] audit: type=1400 audit(1732090999.062:615): avc: denied { bind } for pid=8975 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.854039][ T8984] bio_check_eod: 26 callbacks suppressed [ 107.854051][ T8984] syz.2.998: attempt to access beyond end of device [ 107.854051][ T8984] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.860169][ T8984] SQUASHFS error: Failed to read block 0x0: -5 [ 107.861823][ T8984] unable to read squashfs_super_block [ 107.915723][ T5961] Bluetooth: hci1: ACL packet for unknown connection handle 1225 [ 107.934399][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 107.937172][ T8990] netlink: 'syz.1.999': attribute type 30 has an invalid length. [ 107.939254][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 108.096475][ T1449] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 108.102269][ T8927] cdc_wdm 9-1:1.0: Error autopm - -16 [ 108.102386][ T5996] usb 9-1: USB disconnect, device number 12 [ 108.107892][ T35] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.116256][ T35] usb 5-1: USB disconnect, device number 14 [ 108.119884][ T35] usblp1: removed [ 108.235958][ T5996] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 108.395964][ T5996] usb 9-1: Using ep0 maxpacket: 8 [ 108.398615][ T5996] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.401262][ T5996] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.403571][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 217, changing to 11 [ 108.406942][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25449, setting to 1024 [ 108.409842][ T5996] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.412194][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.416979][ T5996] hub 9-1:1.0: bad descriptor, ignoring hub [ 108.418657][ T5996] hub 9-1:1.0: probe with driver hub failed with error -5 [ 108.420694][ T5996] cdc_wdm 9-1:1.0: skipping garbage [ 108.422067][ T5996] cdc_wdm 9-1:1.0: skipping garbage [ 108.424425][ T5996] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 108.426313][ T35] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 108.428327][ T5996] cdc_wdm 9-1:1.0: Unknown control protocol [ 108.577266][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 108.581927][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.584111][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.586700][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.589036][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.591793][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.594290][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.598014][ T35] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.600362][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.603814][ T35] usb 5-1: config 0 descriptor?? [ 108.626165][ T8927] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.983'. [ 108.747109][ T6014] usb 9-1: USB disconnect, device number 13 [ 108.806913][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.808455][ T35] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.065701][ T39] audit: type=1400 audit(1732091000.302:616): avc: denied { ioctl } for pid=8962 comm="syz.0.990" path="/dev/usb/lp0" dev="devtmpfs" ino=2968 ioctlcmd=0x5003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 109.083320][ T5996] usb 5-1: USB disconnect, device number 15 [ 109.086290][ T5996] usblp0: removed [ 109.091038][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1009'. [ 109.239561][ T9033] fuse: Bad value for 'fd' [ 109.244288][ T9031] program syz.4.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.281975][ T9022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.354365][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 109.558008][ T9065] ptrace attach of "/syz-executor exec"[9066] was attempted by "/syz-executor exec"[9065] [ 109.590261][ T9083] netlink: 'syz.1.1026': attribute type 39 has an invalid length. [ 109.784649][ T9094] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 109.786854][ T9094] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 109.846161][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.848758][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.852210][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.864369][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.867654][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.871190][ T9064] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1025'. [ 109.895962][ T6014] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 109.926231][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.928822][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.931354][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.576008][ T6018] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 110.708629][ T9113] ptrace attach of "/syz-executor exec"[9114] was attempted by "/syz-executor exec"[9113] [ 110.726777][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.729440][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.733446][ T5327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.736241][ T6018] usb 9-1: Using ep0 maxpacket: 32 [ 110.738993][ T6018] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 110.741303][ T6018] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 110.744203][ T6018] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 120, changing to 10 [ 110.747352][ T6018] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 8251, setting to 1024 [ 110.750245][ T6018] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 110.753709][ T6018] usb 9-1: config 0 interface 0 has no altsetting 0 [ 110.757171][ T6018] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.759531][ T6018] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.761706][ T6018] usb 9-1: Product: syz [ 110.762846][ T6018] usb 9-1: Manufacturer: syz [ 110.764054][ T6018] usb 9-1: SerialNumber: syz [ 110.765045][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 110.766535][ T6018] usb 9-1: config 0 descriptor?? [ 110.771154][ T6018] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.774498][ T6018] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.886220][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.026102][ T35] usb 9-1: USB disconnect, device number 14 [ 111.027717][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 111.033127][ T35] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 111.046014][ T5996] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 111.062522][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1042'. [ 111.101102][ T9150] FAULT_INJECTION: forcing a failure. [ 111.101102][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.104461][ T9150] CPU: 1 UID: 0 PID: 9150 Comm: syz.2.1043 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 111.107196][ T9150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.110077][ T9150] Call Trace: [ 111.110983][ T9150] [ 111.111772][ T9150] dump_stack_lvl+0x16c/0x1f0 [ 111.113053][ T9150] should_fail_ex+0x497/0x5b0 [ 111.114326][ T9150] _copy_to_user+0x32/0xd0 [ 111.115539][ T9150] put_timespec64+0xb6/0x120 [ 111.116770][ T9150] ? __pfx_put_timespec64+0x10/0x10 [ 111.118152][ T9150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.119780][ T9150] nanosleep_copyout+0xe1/0x130 [ 111.121076][ T9150] do_cpu_nanosleep+0x64b/0x6f0 [ 111.122364][ T9150] ? __pfx_do_cpu_nanosleep+0x10/0x10 [ 111.123794][ T9150] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.125175][ T9150] ? task_work_run+0x1e2/0x250 [ 111.126474][ T9150] ? arch_do_signal_or_restart+0x212/0x7e0 [ 111.128014][ T9150] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.129646][ T9150] ? posix_cpu_nsleep_restart+0xc1/0x110 [ 111.131160][ T9150] posix_cpu_nsleep_restart+0xc1/0x110 [ 111.132604][ T9150] ? __pfx_posix_cpu_nsleep_restart+0x10/0x10 [ 111.134221][ T9150] do_syscall_64+0xcd/0x250 [ 111.135446][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.137016][ T9150] RIP: 0033:0x7fe1ab37e759 [ 111.138195][ T9150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.143411][ T9150] RSP: 002b:00007fe1ac1ca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 111.145581][ T9150] RAX: ffffffffffffffda RBX: 00007fe1ab535f80 RCX: 00007fe1ab37e759 [ 111.147659][ T9150] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000002 [ 111.149742][ T9150] RBP: 00007fe1ac1ca090 R08: 0000000000000000 R09: 0000000000000000 [ 111.151829][ T9150] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 [ 111.153900][ T9150] R13: 0000000000000000 R14: 00007fe1ab535f80 R15: 00007ffc1b177028 [ 111.155986][ T9150] [ 111.186483][ T9154] program syz.2.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.206043][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.226025][ T5996] usb 5-1: Using ep0 maxpacket: 32 [ 111.228589][ T5996] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.231550][ T9097] ldusb: No device or device unplugged -19 [ 111.233199][ T5996] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.236604][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.239166][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.241691][ T5996] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.244181][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.247938][ T5996] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.250294][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.253268][ T5996] usb 5-1: config 0 descriptor?? [ 111.313581][ T9161] dlm: plock device version mismatch: kernel (1.2.0), user (2887385089.32737.0) [ 111.315999][ T6014] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 111.461400][ T5996] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.466218][ T5996] usb 5-1: USB disconnect, device number 16 [ 111.469526][ T6014] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.469587][ T5996] usblp0: removed [ 111.472895][ T6014] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.476994][ T6014] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25449, setting to 8 [ 111.480472][ T6014] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.483631][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.494189][ T9126] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.498899][ T6014] hub 6-1:1.0: bad descriptor, ignoring hub [ 111.500434][ T6014] hub 6-1:1.0: probe with driver hub failed with error -5 [ 111.502573][ T6014] cdc_wdm 6-1:1.0: skipping garbage [ 111.503916][ T6014] cdc_wdm 6-1:1.0: skipping garbage [ 111.505793][ T6014] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 111.507722][ T6014] cdc_wdm 6-1:1.0: Unknown control protocol [ 111.737736][ T39] audit: type=1326 audit(1732091002.982:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.743744][ T39] audit: type=1326 audit(1732091002.982:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.750675][ T39] audit: type=1326 audit(1732091002.982:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.757113][ T39] audit: type=1326 audit(1732091002.982:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.777209][ T39] audit: type=1326 audit(1732091002.982:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.783161][ T39] audit: type=1326 audit(1732091002.982:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.789716][ T39] audit: type=1326 audit(1732091002.992:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.795568][ T39] audit: type=1326 audit(1732091002.992:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.803521][ T39] audit: type=1326 audit(1732091002.992:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab37e759 code=0x7ffc0000 [ 111.840930][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 111.895991][ T5996] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 111.929747][ T9178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1054'. [ 112.056139][ T5996] usb 5-1: Using ep0 maxpacket: 32 [ 112.058734][ T5996] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.060908][ T5996] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.063127][ T5996] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.066267][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.068754][ T5996] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.071225][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.074590][ T5996] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.077097][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.080336][ T5996] usb 5-1: config 0 descriptor?? [ 112.175980][ T9189] xt_hashlimit: size too large, truncated to 1048576 [ 112.177945][ T9189] xt_hashlimit: max too large, truncated to 1048576 [ 112.257749][ T9126] cdc_wdm 6-1:1.0: Error autopm - -16 [ 112.257832][ T6014] usb 6-1: USB disconnect, device number 8 [ 112.287443][ T5996] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.334713][ T9196] overlayfs: failed to set uuid (166/file1, err=-1); falling back to uuid=null. [ 112.338060][ T9196] overlayfs: failed to verify upper root origin [ 112.376312][ T9199] tmpfs: Unknown parameter 'trans' [ 112.386098][ T6014] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.460723][ T9201] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2875371340 (5750742680 ns) > initial count (722182120 ns). Using initial count to start timer. [ 112.467635][ T9201] loop1: detected capacity change from 0 to 6 [ 112.471100][ T9201] Dev loop1: unable to read RDB block 6 [ 112.472621][ T9201] loop1: unable to read partition table [ 112.474189][ T9201] loop1: partition table beyond EOD, truncated [ 112.476015][ T9201] loop_reread_partitions: partition scan of loop1 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 112.476015][ T9201] ) failed (rc=-5) [ 112.555948][ T6014] usb 6-1: Using ep0 maxpacket: 8 [ 112.558464][ T6014] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.561266][ T6014] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.563640][ T6014] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 217, changing to 11 [ 112.566920][ T6014] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25449, setting to 1024 [ 112.569834][ T6014] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.572359][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.576459][ T6014] hub 6-1:1.0: bad descriptor, ignoring hub [ 112.578048][ T6014] hub 6-1:1.0: probe with driver hub failed with error -5 [ 112.580080][ T6014] cdc_wdm 6-1:1.0: skipping garbage [ 112.581453][ T6014] cdc_wdm 6-1:1.0: skipping garbage [ 112.585429][ T6014] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 112.587079][ T6014] cdc_wdm 6-1:1.0: Unknown control protocol [ 112.587093][ T9206] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 112.623904][ T9211] ufs: failed to set blocksize [ 112.645489][ T9213] usblp0:failed reading printer status (-32) [ 112.648724][ T6018] usb 5-1: USB disconnect, device number 17 [ 112.651204][ T6018] usblp0: removed [ 112.896440][ T6014] usb 6-1: USB disconnect, device number 9 [ 112.906365][ T1446] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 113.055965][ T1446] usb 9-1: Using ep0 maxpacket: 8 [ 113.058866][ T1446] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 113.061249][ T1446] usb 9-1: can't read configurations, error -61 [ 113.136015][ T6018] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 113.170510][ T9229] rose0: renamed from bond0 [ 113.177611][ T9229] __nla_validate_parse: 4 callbacks suppressed [ 113.177620][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 113.186024][ T1446] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 113.202132][ T9231] random: crng reseeded on system resumption [ 113.336039][ T1446] usb 9-1: Using ep0 maxpacket: 8 [ 113.341159][ T6018] usb 7-1: unable to get BOS descriptor or descriptor too short [ 113.342159][ T1446] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 113.345319][ T1446] usb 9-1: can't read configurations, error -61 [ 113.347354][ T1446] usb usb9-port1: attempt power cycle [ 113.356375][ T6018] usb 7-1: no configurations [ 113.357632][ T6018] usb 7-1: can't read configurations, error -22 [ 113.493385][ T9251] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 113.495448][ T9251] netlink: 9332 bytes leftover after parsing attributes in process `syz.0.1081'. [ 113.498055][ T9251] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 113.500385][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 113.502768][ T9250] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1081'. [ 113.505240][ T9250] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 113.507362][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1081'. [ 113.509856][ T9251] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 113.511949][ T9251] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.1081'. [ 113.514328][ T9251] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 113.516452][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 113.584431][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.586598][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.589539][ T9257] bridge0: entered allmulticast mode [ 113.595744][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1090'. [ 113.686032][ T1446] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 113.706576][ T1446] usb 9-1: Using ep0 maxpacket: 8 [ 113.709456][ T1446] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 113.711535][ T1446] usb 9-1: can't read configurations, error -61 [ 113.836199][ T1446] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 113.857488][ T1446] usb 9-1: Using ep0 maxpacket: 8 [ 113.860296][ T1446] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 113.862311][ T1446] usb 9-1: can't read configurations, error -61 [ 113.864144][ T1446] usb usb9-port1: unable to enumerate USB device [ 113.924336][ T9263] syz.0.1084: attempt to access beyond end of device [ 113.924336][ T9263] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 113.930305][ T9263] XFS (nbd0): SB validate failed with error -5. [ 113.958504][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1084'. [ 113.961320][ T9269] ./bus: Can't lookup blockdev [ 114.195976][ T6018] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 114.346029][ T6018] usb 7-1: Using ep0 maxpacket: 32 [ 114.347610][ T5995] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 114.351109][ T6018] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.353297][ T6018] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.355615][ T6018] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.358062][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.360628][ T6018] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.363146][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.366637][ T6018] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.368980][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.372237][ T6018] usb 7-1: config 0 descriptor?? [ 114.497785][ T5995] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.501059][ T5995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.504199][ T5995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25449, setting to 8 [ 114.508465][ T5995] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.511635][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.516109][ T9274] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.520518][ T5995] hub 5-1:1.0: bad descriptor, ignoring hub [ 114.522584][ T5995] hub 5-1:1.0: probe with driver hub failed with error -5 [ 114.525337][ T5995] cdc_wdm 5-1:1.0: skipping garbage [ 114.527291][ T5995] cdc_wdm 5-1:1.0: skipping garbage [ 114.531854][ T5995] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 114.533947][ T5995] cdc_wdm 5-1:1.0: Unknown control protocol [ 114.581822][ T6018] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.588050][ T6018] usb 7-1: USB disconnect, device number 13 [ 114.591515][ T6018] usblp1: removed [ 115.015991][ T5996] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 115.046188][ T1446] net_ratelimit: 71 callbacks suppressed [ 115.046206][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.122208][ T9298] sctp: [Deprecated]: syz.1.1088 (pid 9298) Use of int in max_burst socket option deprecated. [ 115.122208][ T9298] Use struct sctp_assoc_value instead [ 115.177545][ T5996] usb 7-1: Using ep0 maxpacket: 32 [ 115.180461][ T5996] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.183241][ T5996] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.186462][ T5996] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.189712][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.192952][ T5996] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.196541][ T5996] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.200700][ T5996] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.203710][ T5996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.208235][ T5996] usb 7-1: config 0 descriptor?? [ 115.279079][ T9274] cdc_wdm 5-1:1.0: Error autopm - -16 [ 115.279244][ T6014] usb 5-1: USB disconnect, device number 18 [ 115.414580][ T5996] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.415996][ T6014] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 115.575957][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 115.579003][ T6014] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.581660][ T6014] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.584028][ T6014] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 217, changing to 11 [ 115.587382][ T6014] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25449, setting to 1024 [ 115.590206][ T6014] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 115.592581][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.598552][ T6014] hub 5-1:1.0: bad descriptor, ignoring hub [ 115.600633][ T6014] hub 5-1:1.0: probe with driver hub failed with error -5 [ 115.602730][ T6014] cdc_wdm 5-1:1.0: skipping garbage [ 115.604161][ T6014] cdc_wdm 5-1:1.0: skipping garbage [ 115.606551][ T6014] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 115.608124][ T6014] cdc_wdm 5-1:1.0: Unknown control protocol [ 115.769169][ T9303] usblp0:failed reading printer status (-32) [ 115.772850][ T6014] usb 7-1: USB disconnect, device number 14 [ 115.775469][ T6014] usblp0: removed [ 115.810093][ T9274] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1086'. [ 115.819258][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 115.819268][ T39] audit: type=1400 audit(1732091007.062:644): avc: denied { getopt } for pid=9305 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.926465][ T6018] usb 5-1: USB disconnect, device number 19 [ 115.980259][ T9311] @: renamed from vlan0 (while UP) [ 116.007253][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.032719][ T39] audit: type=1326 audit(1732091007.272:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.1.1095" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf17e759 code=0x0 [ 116.088915][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.309389][ T9317] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 116.312611][ T9317] geneve0: entered promiscuous mode [ 116.453042][ T9327] Mount JFS Failure: -22 [ 116.454340][ T9327] jfs_mount failed w/return code = -22 [ 116.460655][ T39] audit: type=1400 audit(1732091007.702:646): avc: denied { create } for pid=9326 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.468288][ T39] audit: type=1400 audit(1732091007.702:647): avc: denied { bind } for pid=9326 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.490566][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.598284][ T9348] overlay: Unknown parameter 'smackfsroot' [ 116.698485][ T39] audit: type=1400 audit(1732091007.942:648): avc: denied { getopt } for pid=9357 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.931435][ T9376] FAULT_INJECTION: forcing a failure. [ 116.931435][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 116.934896][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.4.1118 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 116.937591][ T9376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.940377][ T9376] Call Trace: [ 116.941261][ T9376] [ 116.942046][ T9376] dump_stack_lvl+0x16c/0x1f0 [ 116.943321][ T9376] should_fail_ex+0x497/0x5b0 [ 116.944568][ T9376] ? fs_reclaim_acquire+0xae/0x150 [ 116.946142][ T9376] should_failslab+0xc2/0x120 [ 116.947387][ T9376] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 116.948794][ T9376] ? __kernfs_new_node+0xd3/0x890 [ 116.950110][ T9376] __kernfs_new_node+0xd3/0x890 [ 116.951445][ T9376] ? __pfx___kernfs_new_node+0x10/0x10 [ 116.952883][ T9376] ? __pfx___lock_acquire+0x10/0x10 [ 116.954312][ T9376] kernfs_new_node+0x186/0x240 [ 116.955618][ T9376] __kernfs_create_file+0x53/0x350 [ 116.957015][ T9376] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 116.958426][ T9376] sysfs_create_file_ns+0x13e/0x1d0 [ 116.959828][ T9376] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 116.961340][ T9376] ? down_read+0xc9/0x330 [ 116.962489][ T9376] ? __pfx___up_read+0x10/0x10 [ 116.963798][ T9376] ? kobject_put+0xab/0x5a0 [ 116.965086][ T9376] device_create_file+0xf2/0x1e0 [ 116.966450][ T9376] device_add+0x2c0/0x1a70 [ 116.967991][ T9376] ? __pfx_dev_set_name+0x10/0x10 [ 116.969439][ T9376] ? __pfx_device_add+0x10/0x10 [ 116.970777][ T9376] ? __init_waitqueue_head+0xca/0x150 [ 116.972220][ T9376] netdev_register_kobject+0x187/0x3f0 [ 116.974165][ T9376] register_netdevice+0x1473/0x1e90 [ 116.976232][ T9376] ? __pfx_register_netdevice+0x10/0x10 [ 116.978089][ T9376] ? validate_linkmsg+0x6d2/0x9a0 [ 116.979913][ T9376] br_dev_newlink+0x27/0x110 [ 116.981220][ T9376] ? __pfx_br_dev_newlink+0x10/0x10 [ 116.982610][ T9376] __rtnl_newlink+0x1197/0x1920 [ 116.983916][ T9376] ? __pfx___rtnl_newlink+0x10/0x10 [ 116.985292][ T9376] rtnl_newlink+0x67/0xa0 [ 116.986460][ T9376] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.987802][ T9376] rtnetlink_rcv_msg+0x3c7/0xea0 [ 116.989108][ T9376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.990539][ T9376] netlink_rcv_skb+0x16b/0x440 [ 116.991735][ T9376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.993163][ T9376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.994546][ T9376] ? netlink_deliver_tap+0x1ae/0xd90 [ 116.995898][ T9376] netlink_unicast+0x53c/0x7f0 [ 116.997151][ T9376] ? __pfx_netlink_unicast+0x10/0x10 [ 116.998523][ T9376] netlink_sendmsg+0x8b8/0xd70 [ 116.999770][ T9376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.001165][ T9376] ____sys_sendmsg+0xaaf/0xc90 [ 117.002434][ T9376] ? copy_msghdr_from_user+0x10b/0x160 [ 117.003864][ T9376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.005266][ T9376] ___sys_sendmsg+0x135/0x1e0 [ 117.006501][ T9376] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.007876][ T9376] ? __pfx_lock_release+0x10/0x10 [ 117.009197][ T9376] ? trace_lock_acquire+0x14a/0x1d0 [ 117.010569][ T9376] ? __fget_files+0x206/0x3a0 [ 117.011821][ T9376] __sys_sendmsg+0x16e/0x220 [ 117.013046][ T9376] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.014401][ T9376] do_syscall_64+0xcd/0x250 [ 117.015603][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.017146][ T9376] RIP: 0033:0x7efc7417e759 [ 117.018317][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.023236][ T9376] RSP: 002b:00007efc74f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.025385][ T9376] RAX: ffffffffffffffda RBX: 00007efc74335f80 RCX: 00007efc7417e759 [ 117.027434][ T9376] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 117.029478][ T9376] RBP: 00007efc74f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 117.031546][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.033603][ T9376] R13: 0000000000000000 R14: 00007efc74335f80 R15: 00007ffca23d9438 [ 117.035654][ T9376] [ 117.102757][ T9383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.103945][ T9387] FAULT_INJECTION: forcing a failure. [ 117.103945][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 117.115970][ T9387] CPU: 0 UID: 0 PID: 9387 Comm: syz.4.1122 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 117.119454][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.123079][ T9387] Call Trace: [ 117.124236][ T9387] [ 117.125247][ T9387] dump_stack_lvl+0x16c/0x1f0 [ 117.126116][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.126873][ T9387] should_fail_ex+0x497/0x5b0 [ 117.126896][ T9387] should_failslab+0xc2/0x120 [ 117.132425][ T9387] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 117.134273][ T9387] ? skb_clone+0x190/0x3f0 [ 117.135822][ T9387] skb_clone+0x190/0x3f0 [ 117.137598][ T9387] netlink_deliver_tap+0xab3/0xd90 [ 117.139379][ T9387] netlink_unicast+0x5e1/0x7f0 [ 117.141032][ T9387] ? __pfx_netlink_unicast+0x10/0x10 [ 117.142858][ T9387] netlink_sendmsg+0x8b8/0xd70 [ 117.144634][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.146505][ T9387] ____sys_sendmsg+0xaaf/0xc90 [ 117.148153][ T9387] ? copy_msghdr_from_user+0x10b/0x160 [ 117.150022][ T9387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.151853][ T9387] ___sys_sendmsg+0x135/0x1e0 [ 117.153489][ T9387] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.155286][ T9387] ? __pfx_lock_release+0x10/0x10 [ 117.157027][ T9387] ? trace_lock_acquire+0x14a/0x1d0 [ 117.158832][ T9387] ? __fget_files+0x206/0x3a0 [ 117.160453][ T9387] __sys_sendmsg+0x16e/0x220 [ 117.162049][ T9387] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.163838][ T9387] do_syscall_64+0xcd/0x250 [ 117.165405][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.167435][ T9387] RIP: 0033:0x7efc7417e759 [ 117.168969][ T9387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.175483][ T9387] RSP: 002b:00007efc74f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.178299][ T9387] RAX: ffffffffffffffda RBX: 00007efc74335f80 RCX: 00007efc7417e759 [ 117.180985][ T9387] RDX: 0000000004000080 RSI: 0000000020001200 RDI: 0000000000000003 [ 117.183673][ T9387] RBP: 00007efc74f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 117.186354][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.189034][ T9387] R13: 0000000000000000 R14: 00007efc74335f80 R15: 00007ffca23d9438 [ 117.191729][ T9387] [ 117.199812][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.224912][ T39] audit: type=1326 audit(1732091008.462:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf17e759 code=0x7ffc0000 [ 117.231028][ T39] audit: type=1326 audit(1732091008.462:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf17e759 code=0x7ffc0000 [ 117.231059][ T9402] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 117.237191][ T39] audit: type=1326 audit(1732091008.472:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc7cf17e759 code=0x7ffc0000 [ 117.242365][ T9402] SELinux: failed to load policy [ 117.245080][ T39] audit: type=1326 audit(1732091008.472:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7cf1b0845 code=0x7ffc0000 [ 117.252622][ T39] audit: type=1326 audit(1732091008.472:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7cf17e759 code=0x7ffc0000 [ 117.486931][ T9354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.489714][ T9354] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 117.523392][ T9417] bridge1: entered promiscuous mode [ 117.524807][ T9417] bridge1: entered allmulticast mode [ 117.598453][ T9428] loop1: detected capacity change from 0 to 6 [ 117.600526][ T9428] loop1: [POWERTEC] [ 117.920337][ T11] bond0: (slave bond_slave_0): interface is now down [ 117.922707][ T11] bond0: (slave bond_slave_1): interface is now down [ 117.924482][ T11] bond0: (slave wlan1): interface is now down [ 117.935581][ T11] bond0: now running without any active interface! [ 118.166807][ T6018] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 118.205993][ T6014] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 118.246232][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.317008][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 118.320015][ T6018] usb 6-1: config 2 interface 0 has no altsetting 0 [ 118.323136][ T6018] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 118.325502][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.328657][ T6018] usb 6-1: Product: syz [ 118.329933][ T6018] usb 6-1: Manufacturer: syz [ 118.331155][ T6018] usb 6-1: SerialNumber: syz [ 118.365978][ T6014] usb 9-1: Using ep0 maxpacket: 32 [ 118.371687][ T6014] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 118.374154][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.376836][ T6014] usb 9-1: Product: syz [ 118.377947][ T6014] usb 9-1: Manufacturer: syz [ 118.379211][ T6014] usb 9-1: SerialNumber: syz [ 118.382759][ T6014] usb 9-1: config 0 descriptor?? [ 118.545304][ T6018] usb 6-1: USB disconnect, device number 10 [ 118.787946][ T9445] netlink: 'syz.4.1142': attribute type 13 has an invalid length. [ 118.792458][ T9445] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 118.796059][ T9445] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.798140][ T9445] gretap1: entered promiscuous mode [ 118.799582][ T9445] gretap1: entered allmulticast mode [ 118.804333][ T6014] airspy 9-1:0.0: usb_control_msg() failed -71 request 0a [ 118.806326][ T6014] airspy 9-1:0.0: Could not detect board [ 118.807865][ T6014] airspy 9-1:0.0: probe with driver airspy failed with error -71 [ 118.810680][ T6014] usb 9-1: USB disconnect, device number 19 [ 118.813041][ T8413] udevd[8413]: setting mode of /dev/bus/usb/009/019 to 020664 failed: No such file or directory [ 118.826115][ T8413] udevd[8413]: setting owner of /dev/bus/usb/009/019 to uid=0, gid=0 failed: No such file or directory [ 119.083080][ T9473] netlink: 'syz.1.1150': attribute type 12 has an invalid length. [ 119.119042][ T9475] __nla_validate_parse: 8 callbacks suppressed [ 119.119054][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1151'. [ 119.249718][ T9479] rtc_cmos 00:05: Alarms can be up to one day in the future [ 119.296182][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.347027][ T9490] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.527683][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.745977][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 119.917183][ T35] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 119.921837][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.924200][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.927268][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.930174][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.932637][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.935007][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.938105][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.941035][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.943510][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.945824][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.948866][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.951792][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.954232][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.956694][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.959632][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.962511][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.964948][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.967353][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.970245][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.973144][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.975569][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.978068][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.981027][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.983925][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.986385][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.988859][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 119.991819][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 119.994789][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.997366][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.999825][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 120.002782][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51078, setting to 1024 [ 120.005703][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 120.008980][ T35] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.011484][ T35] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.013756][ T35] usb 7-1: Product: syz [ 120.014959][ T35] usb 7-1: Manufacturer: syz [ 120.016285][ T35] usb 7-1: SerialNumber: syz [ 120.019777][ T35] usb 7-1: config 0 descriptor?? [ 120.022207][ T9507] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.026699][ T35] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 120.326655][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.336067][ T35] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 120.487506][ T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.489852][ T35] usb 5-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 120.492602][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.495040][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7394, setting to 1024 [ 120.498052][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 120.501867][ T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.504237][ T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.506441][ T35] usb 5-1: Product: syz [ 120.507577][ T35] usb 5-1: Manufacturer: syz [ 120.510325][ T9513] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.513312][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 120.514791][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 120.516294][ T35] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 120.586139][ T1446] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 120.714010][ T6014] usb 5-1: USB disconnect, device number 20 [ 120.745977][ T1446] usb 9-1: Using ep0 maxpacket: 32 [ 120.750195][ T1446] usb 9-1: config 2 has an invalid interface number: 246 but max is 2 [ 120.752447][ T1446] usb 9-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 120.755145][ T1446] usb 9-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 120.758226][ T1446] usb 9-1: config 2 has no interface number 0 [ 120.759935][ T1446] usb 9-1: config 2 interface 246 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 120.763453][ T1446] usb 9-1: config 2 interface 246 has no altsetting 0 [ 120.766935][ T1446] usb 9-1: New USB device found, idVendor=0bda, idProduct=2005, bcdDevice=d7.14 [ 120.769976][ T1446] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.772183][ T1446] usb 9-1: Product: syz [ 120.773376][ T1446] usb 9-1: Manufacturer: syz [ 120.774716][ T1446] usb 9-1: SerialNumber: syz [ 121.063958][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 121.063969][ T39] audit: type=1400 audit(1732096132.307:688): avc: granted { setsecparam } for pid=9532 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 121.184929][ T1446] usb 9-1: USB disconnect, device number 20 [ 121.278771][ T9545] FAULT_INJECTION: forcing a failure. [ 121.278771][ T9545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.282186][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.1.1176 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 121.284828][ T9545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.287607][ T9545] Call Trace: [ 121.288484][ T9545] [ 121.289264][ T9545] dump_stack_lvl+0x16c/0x1f0 [ 121.290485][ T9545] should_fail_ex+0x497/0x5b0 [ 121.291663][ T9545] _copy_from_iter+0x2a1/0x1560 [ 121.292930][ T9545] ? __pfx__copy_from_iter+0x10/0x10 [ 121.294325][ T9545] ? __virt_addr_valid+0x1a4/0x590 [ 121.295673][ T9545] ? __virt_addr_valid+0x5e/0x590 [ 121.297041][ T9545] ? __phys_addr_symbol+0x30/0x80 [ 121.298359][ T9545] ? __check_object_size+0x488/0x710 [ 121.299746][ T9545] netlink_sendmsg+0x813/0xd70 [ 121.301009][ T9545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.302403][ T9545] ____sys_sendmsg+0xaaf/0xc90 [ 121.303668][ T9545] ? copy_msghdr_from_user+0x10b/0x160 [ 121.305090][ T9545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.306513][ T9545] ___sys_sendmsg+0x135/0x1e0 [ 121.307793][ T9545] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.309168][ T9545] ? __pfx_lock_release+0x10/0x10 [ 121.310486][ T9545] ? trace_lock_acquire+0x14a/0x1d0 [ 121.311851][ T9545] ? __fget_files+0x206/0x3a0 [ 121.313084][ T9545] __sys_sendmsg+0x16e/0x220 [ 121.314290][ T9545] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.315626][ T9545] do_syscall_64+0xcd/0x250 [ 121.316819][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.318357][ T9545] RIP: 0033:0x7fc7cf17e759 [ 121.319531][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.324480][ T9545] RSP: 002b:00007fc7cfeee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.326686][ T9545] RAX: ffffffffffffffda RBX: 00007fc7cf335f80 RCX: 00007fc7cf17e759 [ 121.328744][ T9545] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 121.330797][ T9545] RBP: 00007fc7cfeee090 R08: 0000000000000000 R09: 0000000000000000 [ 121.332800][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.334751][ T9545] R13: 0000000000000000 R14: 00007fc7cf335f80 R15: 00007ffe47f62898 [ 121.336774][ T9545] [ 121.366730][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.616173][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.015955][ T35] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 122.175949][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 122.178526][ T35] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 122.180701][ T35] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.183298][ T35] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.187231][ T35] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 122.190771][ T35] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 122.193535][ T35] usb 9-1: Product: syz [ 122.196964][ T35] usb 9-1: Manufacturer: syz [ 122.198214][ T35] usb 9-1: SerialNumber: syz [ 122.200350][ T35] usb 9-1: config 0 descriptor?? [ 122.246776][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.402812][ T1446] usb 7-1: USB disconnect, device number 15 [ 122.406247][ T9550] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 122.408524][ T1446] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 122.409782][ T9550] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1178'. [ 122.411130][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.414304][ T827] usb 9-1: USB disconnect, device number 21 [ 122.576549][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.947363][ T9562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1181'. [ 122.960626][ T39] audit: type=1400 audit(1732096134.207:689): avc: denied { map } for pid=9561 comm="syz.4.1181" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.076498][ T39] audit: type=1400 audit(1732096134.317:690): avc: denied { remove_name } for pid=9564 comm="syz.4.1182" name="file1" dev="9p" ino=37617758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.082361][ T39] audit: type=1400 audit(1732096134.327:691): avc: denied { unlink } for pid=9564 comm="syz.4.1182" name="file1" dev="9p" ino=37617758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.092278][ T39] audit: type=1400 audit(1732096134.337:692): avc: denied { create } for pid=9564 comm="syz.4.1182" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 123.203812][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 123.208200][ T9571] geneve0: entered promiscuous mode [ 123.209969][ T9571] geneve0: entered allmulticast mode [ 123.215042][ T9571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.217824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.415428][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 123.456160][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.614182][ T9599] netlink: 'syz.2.1195': attribute type 3 has an invalid length. [ 123.616673][ T9599] netlink: 'syz.2.1195': attribute type 3 has an invalid length. [ 123.991822][ T9624] FAULT_INJECTION: forcing a failure. [ 123.991822][ T9624] name failslab, interval 1, probability 0, space 0, times 0 [ 123.995252][ T9624] CPU: 0 UID: 0 PID: 9624 Comm: syz.0.1204 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 123.997928][ T9624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.000727][ T9624] Call Trace: [ 124.001657][ T9624] [ 124.002446][ T9624] dump_stack_lvl+0x16c/0x1f0 [ 124.003731][ T9624] should_fail_ex+0x497/0x5b0 [ 124.004987][ T9624] ? fs_reclaim_acquire+0xae/0x150 [ 124.006346][ T9624] should_failslab+0xc2/0x120 [ 124.007594][ T9624] kmem_cache_alloc_node_noprof+0x71/0x310 [ 124.009125][ T9624] ? __alloc_skb+0x2b1/0x380 [ 124.010354][ T9624] __alloc_skb+0x2b1/0x380 [ 124.011767][ T9624] ? __pfx___alloc_skb+0x10/0x10 [ 124.013284][ T9624] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 124.014951][ T9624] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 124.016689][ T9624] netlink_alloc_large_skb+0x69/0x130 [ 124.018100][ T9624] netlink_sendmsg+0x689/0xd70 [ 124.019341][ T9624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.020734][ T9624] ____sys_sendmsg+0xaaf/0xc90 [ 124.022060][ T9624] ? copy_msghdr_from_user+0x10b/0x160 [ 124.023488][ T9624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.024864][ T9624] ? __lock_acquire+0xcc5/0x3c40 [ 124.026160][ T9624] ? hlock_class+0x4e/0x130 [ 124.027359][ T9624] ? __lock_acquire+0x15a9/0x3c40 [ 124.028679][ T9624] ___sys_sendmsg+0x135/0x1e0 [ 124.029917][ T9624] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.031280][ T9624] ? __pfx___lock_acquire+0x10/0x10 [ 124.032655][ T9624] ? __pfx___might_resched+0x10/0x10 [ 124.034053][ T9624] ? __might_fault+0xe3/0x190 [ 124.035294][ T9624] __sys_sendmmsg+0x201/0x420 [ 124.036531][ T9624] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.037890][ T9624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.039472][ T9624] ? fput+0x67/0x440 [ 124.040508][ T9624] ? ksys_write+0x1ba/0x250 [ 124.041797][ T9624] ? __pfx_ksys_write+0x10/0x10 [ 124.043090][ T9624] __x64_sys_sendmmsg+0x9c/0x100 [ 124.044385][ T9624] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.045747][ T9624] do_syscall_64+0xcd/0x250 [ 124.047025][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.048577][ T9624] RIP: 0033:0x7f4cbe17e759 [ 124.049750][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.054730][ T9624] RSP: 002b:00007f4cbeef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.056887][ T9624] RAX: ffffffffffffffda RBX: 00007f4cbe335f80 RCX: 00007f4cbe17e759 [ 124.058950][ T9624] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 124.061003][ T9624] RBP: 00007f4cbeef7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.063070][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.065124][ T9624] R13: 0000000000000000 R14: 00007f4cbe335f80 R15: 00007ffd8ee0cc38 [ 124.067191][ T9624] [ 124.149413][ T39] audit: type=1400 audit(1732096135.397:693): avc: denied { mount } for pid=9628 comm="syz.4.1206" name="/" dev="hugetlbfs" ino=28593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 124.159329][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.172467][ T39] audit: type=1400 audit(1732096135.417:694): avc: denied { unmount } for pid=6764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 124.173569][ T9635] netlink: 'syz.0.1209': attribute type 3 has an invalid length. [ 124.180540][ T9635] netlink: 'syz.0.1209': attribute type 3 has an invalid length. [ 124.253927][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1213'. [ 124.256968][ T9643] all: renamed from sit0 [ 124.260130][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 124.262513][ T9643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1213'. [ 124.266813][ T9643] gtp0: entered promiscuous mode [ 124.268150][ T9643] gtp0: entered allmulticast mode [ 124.273184][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 124.326666][ T9648] qrtr: Invalid version 0 [ 124.329767][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 124.350755][ T9648] bridge3: entered promiscuous mode [ 124.352183][ T9648] bridge3: entered allmulticast mode [ 124.358174][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.438911][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 124.488499][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1221'. [ 124.541889][ T39] audit: type=1326 audit(1732096135.787:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7417e759 code=0x7ffc0000 [ 124.544501][ T9669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1223'. [ 124.548337][ T39] audit: type=1326 audit(1732096135.787:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7417e759 code=0x7ffc0000 [ 124.557564][ T39] audit: type=1326 audit(1732096135.787:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc7417e759 code=0x7ffc0000 [ 124.586092][ T9673] netlink: 'syz.4.1225': attribute type 25 has an invalid length. [ 124.588460][ T9673] netlink: 'syz.4.1225': attribute type 8 has an invalid length. [ 124.595521][ T9673] vlan2: entered promiscuous mode [ 124.727834][ T9686] sctp: [Deprecated]: syz.4.1229 (pid 9686) Use of int in max_burst socket option. [ 124.727834][ T9686] Use struct sctp_assoc_value instead [ 124.918139][ T1446] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 125.076083][ T1446] usb 7-1: Using ep0 maxpacket: 8 [ 125.079819][ T1446] usb 7-1: config 0 has no interfaces? [ 125.081572][ T1446] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.084658][ T1446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.091766][ T1446] usb 7-1: config 0 descriptor?? [ 125.259494][ T827] IPVS: starting estimator thread 0... [ 125.300227][ T827] usb 7-1: USB disconnect, device number 16 [ 125.328010][ T9726] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 125.330908][ T9726] macvlan0: entered promiscuous mode [ 125.332364][ T9726] macvlan0: entered allmulticast mode [ 125.336937][ T9726] veth1_vlan: entered allmulticast mode [ 125.339753][ T9726] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 125.346029][ T9723] IPVS: using max 41 ests per chain, 98400 per kthread [ 125.367034][ T1131] bond0: (slave macvlan0): interface is now down [ 125.368850][ T1131] bond0: now running without any active interface! [ 125.537702][ T1446] net_ratelimit: 2 callbacks suppressed [ 125.537713][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.616164][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.765038][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1250'. [ 125.847721][ T9757] netlink: 'syz.4.1254': attribute type 10 has an invalid length. [ 125.851884][ T9757] macvlan0: entered promiscuous mode [ 125.853299][ T9757] macvlan0: entered allmulticast mode [ 125.857030][ T9757] veth1_vlan: entered allmulticast mode [ 125.859783][ T9757] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 125.932861][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1258'. [ 125.938739][ T9768] vlan2: entered promiscuous mode [ 125.940100][ T9768] team0: entered promiscuous mode [ 125.941425][ T9768] team_slave_0: entered promiscuous mode [ 125.943061][ T9768] team_slave_1: entered promiscuous mode [ 125.944702][ T9768] vlan2: entered allmulticast mode [ 125.949710][ T9768] team0: entered allmulticast mode [ 125.951499][ T9768] team_slave_0: entered allmulticast mode [ 125.953486][ T9768] team_slave_1: entered allmulticast mode [ 126.091505][ T9789] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 126.095995][ T9789] macvlan0: entered promiscuous mode [ 126.097445][ T9789] macvlan0: entered allmulticast mode [ 126.177289][ T9794] befs: Unknown parameter 'q)$å' [ 126.225355][ T9799] openvswitch: netlink: nsh attr 11881 is out of range max 3 [ 126.355950][ T35] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 126.506033][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 126.508738][ T35] usb 6-1: config 0 has no interfaces? [ 126.511615][ T35] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 126.513966][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.516431][ T35] usb 6-1: Product: syz [ 126.517537][ T35] usb 6-1: Manufacturer: syz [ 126.518761][ T35] usb 6-1: SerialNumber: syz [ 126.521871][ T35] usb 6-1: config 0 descriptor?? [ 126.568396][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.728566][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.731925][ T1449] usb 6-1: USB disconnect, device number 11 [ 126.733677][ T9820] netlink: 'syz.2.1277': attribute type 10 has an invalid length. [ 126.757251][ T9824] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 126.757576][ T9822] evm: overlay not supported [ 127.309016][ T9866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11809 sclass=netlink_route_socket pid=9866 comm=syz.4.1293 [ 127.372084][ T9870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.374768][ T9870] overlayfs: failed to set xattr on upper [ 127.376984][ T9870] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.379258][ T9870] overlayfs: ...falling back to index=off. [ 127.381157][ T9870] overlayfs: ...falling back to uuid=null. [ 127.420049][ T9872] FAULT_INJECTION: forcing a failure. [ 127.420049][ T9872] name failslab, interval 1, probability 0, space 0, times 0 [ 127.423393][ T9872] CPU: 2 UID: 0 PID: 9872 Comm: syz.4.1296 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 127.426118][ T9872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.428895][ T9872] Call Trace: [ 127.429777][ T9872] [ 127.430562][ T9872] dump_stack_lvl+0x16c/0x1f0 [ 127.431806][ T9872] should_fail_ex+0x497/0x5b0 [ 127.433053][ T9872] ? fs_reclaim_acquire+0xae/0x150 [ 127.434392][ T9872] should_failslab+0xc2/0x120 [ 127.435625][ T9872] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 127.437027][ T9872] ? __kernfs_new_node+0xd3/0x890 [ 127.438336][ T9872] __kernfs_new_node+0xd3/0x890 [ 127.439612][ T9872] ? __pfx___kernfs_new_node+0x10/0x10 [ 127.441023][ T9872] ? __pfx_lock_release+0x10/0x10 [ 127.442331][ T9872] ? kernfs_add_one+0x39d/0x520 [ 127.443618][ T9872] ? up_write+0x1b2/0x520 [ 127.444750][ T9872] kernfs_new_node+0x186/0x240 [ 127.446026][ T9872] __kernfs_create_file+0x53/0x350 [ 127.447370][ T9872] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 127.448770][ T9872] internal_create_group+0x565/0xe50 [ 127.450149][ T9872] ? __pfx_internal_create_group+0x10/0x10 [ 127.451673][ T9872] ? kernfs_create_link+0x1bd/0x240 [ 127.453041][ T9872] internal_create_groups+0x9d/0x150 [ 127.454421][ T9872] device_add+0x6d3/0x1a70 [ 127.455599][ T9872] ? __pfx_device_add+0x10/0x10 [ 127.456903][ T9872] ? __init_waitqueue_head+0xca/0x150 [ 127.458313][ T9872] netdev_register_kobject+0x187/0x3f0 [ 127.459749][ T9872] register_netdevice+0x1473/0x1e90 [ 127.461109][ T9872] ? __pfx_register_netdevice+0x10/0x10 [ 127.462548][ T9872] ip6_tnl_create2+0x81/0x170 [ 127.463784][ T9872] ip6_tnl_newlink+0x1bf/0x380 [ 127.465037][ T9872] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 127.466477][ T9872] ? rtnl_create_link+0xa51/0xfa0 [ 127.467802][ T9872] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 127.469184][ T9872] __rtnl_newlink+0x1197/0x1920 [ 127.470457][ T9872] ? __pfx___rtnl_newlink+0x10/0x10 [ 127.471841][ T9872] rtnl_newlink+0x67/0xa0 [ 127.472981][ T9872] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.474295][ T9872] rtnetlink_rcv_msg+0x3c7/0xea0 [ 127.475606][ T9872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.477059][ T9872] netlink_rcv_skb+0x16b/0x440 [ 127.478320][ T9872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.479750][ T9872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.481139][ T9872] ? netlink_deliver_tap+0x1ae/0xd90 [ 127.482521][ T9872] netlink_unicast+0x53c/0x7f0 [ 127.483771][ T9872] ? __pfx_netlink_unicast+0x10/0x10 [ 127.485162][ T9872] netlink_sendmsg+0x8b8/0xd70 [ 127.486461][ T9872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.487866][ T9872] ____sys_sendmsg+0xaaf/0xc90 [ 127.489123][ T9872] ? copy_msghdr_from_user+0x10b/0x160 [ 127.490543][ T9872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.491926][ T9872] ___sys_sendmsg+0x135/0x1e0 [ 127.493175][ T9872] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.494548][ T9872] ? __pfx_lock_release+0x10/0x10 [ 127.495865][ T9872] ? trace_lock_acquire+0x14a/0x1d0 [ 127.497237][ T9872] ? __fget_files+0x206/0x3a0 [ 127.498478][ T9872] __sys_sendmsg+0x16e/0x220 [ 127.499711][ T9872] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.501065][ T9872] do_syscall_64+0xcd/0x250 [ 127.502267][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.503826][ T9872] RIP: 0033:0x7efc7417e759 [ 127.505000][ T9872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.509995][ T9872] RSP: 002b:00007efc74f4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.512382][ T9872] RAX: ffffffffffffffda RBX: 00007efc74335f80 RCX: 00007efc7417e759 [ 127.514345][ T9872] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 127.516578][ T9872] RBP: 00007efc74f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 127.518710][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.520772][ T9872] R13: 0000000000000000 R14: 00007efc74335f80 R15: 00007ffca23d9438 [ 127.522852][ T9872] [ 127.576014][ T35] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 127.606719][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.683066][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 127.683077][ T39] audit: type=1400 audit(1732096138.927:725): avc: denied { connect } for pid=9882 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.737209][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.745393][ T35] usb 6-1: config 0 has no interfaces? [ 127.747722][ T35] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 127.750160][ T35] usb 6-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 127.752610][ T35] usb 6-1: Manufacturer: syz [ 127.755075][ T35] usb 6-1: config 0 descriptor?? [ 127.817300][ T39] audit: type=1400 audit(1732096139.067:726): avc: denied { map } for pid=9892 comm="syz.4.1305" path="socket:[30997]" dev="sockfs" ino=30997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.817596][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.823273][ T39] audit: type=1400 audit(1732096139.067:727): avc: denied { read } for pid=9892 comm="syz.4.1305" path="socket:[30997]" dev="sockfs" ino=30997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.825482][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.116853][ T5996] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 128.246074][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 128.277702][ T5996] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.279999][ T5996] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.282706][ T5996] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.285120][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.288087][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 128.292274][ T5996] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.294754][ T5996] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.296990][ T5996] usb 9-1: Product: syz [ 128.298097][ T5996] usb 9-1: Manufacturer: syz [ 128.301682][ T5996] cdc_wdm 9-1:1.0: skipping garbage [ 128.303129][ T5996] cdc_wdm 9-1:1.0: skipping garbage [ 128.304944][ T5996] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 128.307014][ T5996] cdc_wdm 9-1:1.0: Unknown control protocol [ 128.359188][ T9918] netlink: 'syz.0.1315': attribute type 11 has an invalid length. [ 128.389884][ T9918] SELinux: policydb version 0 does not match my version range 15-33 [ 128.392049][ T9918] SELinux: failed to load policy [ 128.406073][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 128.408656][ T35] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 128.410942][ T35] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 128.413022][ T35] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 128.415522][ T35] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 128.418853][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 128.421934][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 128.424847][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.428296][ T35] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 128.430578][ T35] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 128.432656][ T35] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 128.435035][ T35] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 128.438198][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 128.441080][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 128.444023][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.447565][ T35] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 128.449839][ T35] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 128.451821][ T35] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 128.454294][ T35] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 128.457479][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 128.460362][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 128.463181][ T35] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.472225][ T35] usb 7-1: string descriptor 0 read error: -22 [ 128.473904][ T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.476321][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.482084][ T35] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 128.508001][ T1449] usb 9-1: USB disconnect, device number 22 [ 128.656498][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.684151][ T6018] usb 7-1: USB disconnect, device number 17 [ 129.035422][ T9930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.040289][ T39] audit: type=1400 audit(1732096140.287:728): avc: denied { connect } for pid=9929 comm="syz.4.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.506057][ T39] audit: type=1326 audit(1732096140.747:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.0.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe17e759 code=0x7ffc0000 [ 129.512290][ T39] audit: type=1326 audit(1732096140.757:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.0.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe17e759 code=0x7ffc0000 [ 129.518531][ T39] audit: type=1326 audit(1732096140.757:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.0.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cbe17e759 code=0x7ffc0000 [ 129.519220][ T9956] netlink: 'syz.0.1324': attribute type 12 has an invalid length. [ 129.524389][ T39] audit: type=1326 audit(1732096140.757:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.0.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe17e759 code=0x7ffc0000 [ 129.530467][ T9956] xt_limit: Overflow, try lower: 1207959552/384 [ 129.532724][ T39] audit: type=1326 audit(1732096140.757:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.0.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbe17e759 code=0x7ffc0000 [ 129.540186][ T39] audit: type=1326 audit(1732096140.757:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.0.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4cbe17e759 code=0x7ffc0000 [ 129.562526][ T9959] program syz.0.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.804190][ T9968] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 129.807513][ T9968] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 129.941318][ T9982] __nla_validate_parse: 4 callbacks suppressed [ 129.941328][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 129.945255][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1335'. [ 130.146937][ T9993] batadv_slave_1: entered promiscuous mode [ 130.148852][ T9991] batadv_slave_1: left promiscuous mode [ 130.225050][T10000] gre1: entered promiscuous mode [ 130.236014][ T827] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 130.296876][ T35] usb 6-1: USB disconnect, device number 12 [ 130.309482][ T1449] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 130.395993][ T827] usb 9-1: Using ep0 maxpacket: 8 [ 130.399138][ T827] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 130.401308][ T827] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.403875][ T827] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.406690][ T827] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.409370][ T827] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.412817][ T827] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.415231][ T827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.467314][ T1449] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.472422][ T1449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 130.476576][ T1449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 130.479705][ T1449] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.483308][ T1449] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.486004][ T1449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.491972][ T1449] usb 5-1: config 0 descriptor?? [ 130.495390][ T9990] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 130.621644][ T827] usb 9-1: usb_control_msg returned -32 [ 130.623304][ T827] usbtmc 9-1:16.0: can't read capabilities [ 130.736352][ T72] net_ratelimit: 7 callbacks suppressed [ 130.736369][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.900915][ T1449] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 130.903791][ T1449] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 130.910990][ T1449] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 131.102954][ T827] usb 5-1: USB disconnect, device number 21 [ 131.327567][T10030] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 131.737794][ T6014] usb 9-1: USB disconnect, device number 23 [ 131.766208][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.846698][ T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.152944][T10056] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1359'. [ 132.156804][T10056] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1359'. [ 132.214274][T10066] syz.0.1358: attempt to access beyond end of device [ 132.214274][T10066] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 132.218606][T10066] syz.0.1358: attempt to access beyond end of device [ 132.218606][T10066] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 132.221981][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.224508][T10066] syz.0.1358: attempt to access beyond end of device [ 132.224508][T10066] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 132.227974][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.230741][T10066] syz.0.1358: attempt to access beyond end of device [ 132.230741][T10066] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 132.234136][T10066] syz.0.1358: attempt to access beyond end of device [ 132.234136][T10066] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 132.238037][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.240758][T10066] syz.0.1358: attempt to access beyond end of device [ 132.240758][T10066] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 132.244171][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.246148][T10057] nbd0: detected capacity change from 0 to 131072 [ 132.249770][T10066] block nbd0: Send control failed (result -89) [ 132.252888][T10066] block nbd0: Request send failed, requeueing [ 132.254673][ T1301] block nbd0: Dead connection, failed to find a fallback [ 132.255934][ T5961] block nbd0: Receive control failed (result -32) [ 132.256631][ T8966] blk_print_req_error: 397 callbacks suppressed [ 132.256638][ T1301] block nbd0: shutting down sockets [ 132.256641][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.256656][ T8966] buffer_io_error: 296 callbacks suppressed [ 132.256661][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.256737][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.256750][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.256795][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.256807][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.256849][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.256862][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.256904][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.256916][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.256965][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.256978][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.257024][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.257037][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.257079][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.257096][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.257118][ T8966] ldm_validate_partition_table(): Disk read failed. [ 132.257146][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.257159][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.257200][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.257213][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.257305][ T8966] Dev nbd0: unable to read RDB block 0 [ 132.257479][ T8966] nbd0: unable to read partition table [ 132.258627][ T8966] ldm_validate_partition_table(): Disk read failed. [ 132.266129][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.277006][ T8966] Dev nbd0: unable to read RDB block 0 [ 132.277466][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16383, location=16383 [ 132.279764][ T8966] nbd0: unable to read partition table [ 132.284106][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16127, location=16127 [ 132.327598][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16382, location=16382 [ 132.330260][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16126, location=16126 [ 132.332828][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16381, location=16381 [ 132.336124][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16125, location=16125 [ 132.339076][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16233, location=16233 [ 132.341853][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=15977, location=15977 [ 132.344445][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16231, location=16231 [ 132.347194][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=15975, location=15975 [ 132.349632][T10066] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.351960][T10066] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 132.466614][ T35] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 132.487818][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.489639][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.626018][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 132.628737][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.633335][ T35] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 132.635823][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.637986][ T35] usb 6-1: Product: syz [ 132.639079][ T35] usb 6-1: Manufacturer: syz [ 132.640294][ T35] usb 6-1: SerialNumber: syz [ 132.642710][ T35] usb 6-1: config 0 descriptor?? [ 132.647275][ T35] hub 6-1:0.0: bad descriptor, ignoring hub [ 132.649530][ T35] hub 6-1:0.0: probe with driver hub failed with error -5 [ 132.655690][ T35] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input23 [ 132.682828][T10085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10085 comm=syz.4.1370 [ 132.702928][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 132.727786][T10085] netlink: 'syz.4.1370': attribute type 10 has an invalid length. [ 132.730464][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.732376][T10085] bridge0: port 2(bridge_slave_1) entered listening state [ 132.735653][T10085] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 132.807648][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.816341][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.827106][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 132.935134][ T39] kauditd_printk_skb: 42 callbacks suppressed [ 132.935150][ T39] audit: type=1400 audit(1732096144.177:777): avc: denied { execute } for pid=10091 comm="syz.4.1373" path="/dev/audio1" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 133.016400][ T35] usb 6-1: USB disconnect, device number 13 [ 133.107333][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.226011][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.254069][T10117] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1380'. [ 133.426016][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.846299][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.411450][T10167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.414595][T10167] batadv_slave_0: entered promiscuous mode [ 134.596764][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 134.602831][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.222500][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1413'. [ 135.268726][ T39] audit: type=1400 audit(1732096146.517:778): avc: denied { bind } for pid=10219 comm="syz.2.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.278583][T10220] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 135.846666][ T5995] net_ratelimit: 260 callbacks suppressed [ 135.846677][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.926216][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.074133][T10256] 9pnet: Unknown protocol version 9 [ 136.172995][ T39] audit: type=1400 audit(1732096147.417:779): avc: denied { mount } for pid=10263 comm="syz.0.1429" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 136.766546][T10280] overlayfs: failed to resolve './file1': -2 [ 136.903919][ T39] audit: type=1400 audit(1732096148.147:780): avc: denied { ioctl } for pid=10282 comm="syz.2.1435" path="socket:[34695]" dev="sockfs" ino=34695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 136.936002][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 136.976581][ T1449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.076446][ T35] usb 6-1: device descriptor read/64, error -71 [ 137.096009][T10270] syz.0.1431 (10270) used greatest stack depth: 19552 bytes left [ 137.108552][T10292] 9pnet: Unknown protocol version 9 [ 137.336478][ T35] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 137.362218][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 137.364589][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1440'. [ 137.367127][T10303] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 137.475987][ T35] usb 6-1: device descriptor read/64, error -71 [ 137.478440][ T39] audit: type=1400 audit(1732096148.727:781): avc: denied { execute } for pid=10310 comm="syz.0.1443" path="/dev/hidraw2" dev="devtmpfs" ino=3016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 137.596166][ T35] usb usb6-port1: attempt power cycle [ 137.757485][T10319] program syz.2.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.804608][T10323] 9pnet: Unknown protocol version 9 [ 137.966850][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 137.996411][ T35] usb 6-1: device descriptor read/8, error -71 [ 138.006237][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.106936][T10336] zonefs (nullb0) ERROR: Not a zoned block device [ 138.112021][ T39] audit: type=1400 audit(1732096149.357:782): avc: denied { lock } for pid=10335 comm="syz.2.1452" path="socket:[33662]" dev="sockfs" ino=33662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.119029][T10336] SELinux: truncated policydb string identifier [ 138.120814][T10336] SELinux: failed to load policy [ 138.265963][ T35] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 138.296402][ T35] usb 6-1: device descriptor read/8, error -71 [ 138.416068][ T35] usb usb6-port1: unable to enumerate USB device [ 138.889439][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.005467][T10361] 9pnet: Unknown protocol version 9p200 [ 139.046115][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.084735][T10367] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1459'. [ 139.192166][T10373] zonefs (nullb0) ERROR: Not a zoned block device [ 139.208249][T10373] SELinux: truncated policydb string identifier [ 139.209958][T10373] SELinux: failed to load policy [ 139.246783][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.250802][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.253367][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.255599][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.294052][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1465'. [ 139.390551][T10388] 9pnet: Unknown protocol version 9p200 [ 139.539474][T10396] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1470'. [ 139.557186][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1470'. [ 139.716147][T10401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10401 comm=syz.4.1473 [ 139.719718][T10401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10401 comm=syz.4.1473 [ 139.726648][T10402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10402 comm=syz.4.1473 [ 139.726717][T10404] zonefs (nullb0) ERROR: Not a zoned block device [ 139.729973][T10402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10402 comm=syz.4.1473 [ 139.738211][T10404] SELinux: truncated policydb string identifier [ 139.739929][T10404] SELinux: failed to load policy [ 139.816712][T10412] 9pnet: Unknown protocol version 9p200 [ 139.932986][T10416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=10416 comm=syz.1.1477 [ 139.939495][T10416] program syz.1.1477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.093475][T10421] FAULT_INJECTION: forcing a failure. [ 140.093475][T10421] name failslab, interval 1, probability 0, space 0, times 0 [ 140.098237][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.1.1479 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 140.101060][T10421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.103934][T10421] Call Trace: [ 140.104834][T10421] [ 140.105643][T10421] dump_stack_lvl+0x16c/0x1f0 [ 140.106961][T10421] should_fail_ex+0x497/0x5b0 [ 140.108230][T10421] ? fs_reclaim_acquire+0xae/0x150 [ 140.109606][T10421] should_failslab+0xc2/0x120 [ 140.110918][T10421] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 140.112661][T10421] ? rcu_is_watching+0x12/0xc0 [ 140.113961][T10421] ? uinput_write+0x2ff/0x12b0 [ 140.115263][T10421] kstrndup+0xc6/0x160 [ 140.116368][T10421] ? __pfx_uinput_write+0x10/0x10 [ 140.117728][T10421] uinput_write+0x2ff/0x12b0 [ 140.119017][T10421] ? __pfx_uinput_write+0x10/0x10 [ 140.120368][T10421] ? bpf_lsm_file_permission+0x9/0x10 [ 140.121939][T10421] ? security_file_permission+0x71/0x210 [ 140.123409][T10421] ? __pfx_uinput_write+0x10/0x10 [ 140.124737][T10421] vfs_write+0x24c/0x1150 [ 140.125872][T10421] ? __fget_files+0x1fc/0x3a0 [ 140.127119][T10421] ? __pfx_lock_release+0x10/0x10 [ 140.128434][T10421] ? trace_lock_acquire+0x14a/0x1d0 [ 140.129789][T10421] ? __pfx_vfs_write+0x10/0x10 [ 140.131086][T10421] ? lock_acquire+0x2f/0xb0 [ 140.132274][T10421] ? __fget_files+0x40/0x3a0 [ 140.133495][T10421] ? __fget_files+0x206/0x3a0 [ 140.134738][T10421] ksys_write+0x207/0x250 [ 140.135870][T10421] ? __pfx_ksys_write+0x10/0x10 [ 140.137151][T10421] do_syscall_64+0xcd/0x250 [ 140.138352][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.139923][T10421] RIP: 0033:0x7fc7cf17e759 [ 140.141127][T10421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.146071][T10421] RSP: 002b:00007fc7cfeee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.148221][T10421] RAX: ffffffffffffffda RBX: 00007fc7cf335f80 RCX: 00007fc7cf17e759 [ 140.150271][T10421] RDX: 000000000000045c RSI: 0000000020000800 RDI: 0000000000000003 [ 140.152326][T10421] RBP: 00007fc7cfeee090 R08: 0000000000000000 R09: 0000000000000000 [ 140.154396][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.156432][T10421] R13: 0000000000000000 R14: 00007fc7cf335f80 R15: 00007ffe47f62898 [ 140.158492][T10421] [ 140.159384][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.214206][ T39] audit: type=1400 audit(1732096151.457:783): avc: denied { create } for pid=10426 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.259642][T10433] zonefs (nullb0) ERROR: Not a zoned block device [ 140.267452][T10433] SELinux: truncated policydb string identifier [ 140.269282][T10433] SELinux: failed to load policy [ 140.297348][T10437] 9pnet: Unknown protocol version 9p2000. [ 140.341294][ T82] veth1_vlan (unregistering): left allmulticast mode [ 140.343091][ T82] veth1_vlan (unregistering): left promiscuous mode [ 140.355005][ T82] bond0: (slave macvlan0): Releasing backup interface [ 140.567953][ T39] audit: type=1400 audit(1732096151.817:784): avc: denied { write } for pid=10458 comm="syz.4.1493" name="file0" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.574469][ T39] audit: type=1400 audit(1732096151.817:785): avc: denied { setattr } for pid=10458 comm="syz.4.1493" name="file0" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.601363][ T39] audit: type=1400 audit(1732096151.847:786): avc: denied { read } for pid=10461 comm="syz.4.1494" name="file0" dev="tmpfs" ino=1608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.629721][T10464] 9pnet: Unknown protocol version 9p2000. [ 140.674212][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'. [ 141.127452][ T1446] net_ratelimit: 21 callbacks suppressed [ 141.127465][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.350628][T10481] xt_nat: multiple ranges no longer supported [ 141.382398][T10493] 9pnet: Unknown protocol version 9p2000. [ 141.420759][ T39] audit: type=1400 audit(1732096152.667:787): avc: denied { setattr } for pid=10495 comm="syz.0.1507" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.443914][ T39] audit: type=1400 audit(1732096152.687:788): avc: denied { bind } for pid=10495 comm="syz.0.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.460150][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.623090][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 141.767545][ T1446] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 141.832283][T10521] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1515'. [ 141.926291][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.939242][ T1446] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.942359][ T1446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 141.945386][ T1446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.948360][ T1446] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.951715][ T1446] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.954079][ T1446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.957657][ T1446] usb 6-1: config 0 descriptor?? [ 141.959444][T10514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.143061][T10542] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1523'. [ 142.178557][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.199300][T10546] IPv6: sit2: Disabled Multicast RS [ 142.364515][ T1446] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 142.368803][ T1446] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 142.387028][ T1446] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 142.390183][ T39] audit: type=1400 audit(1732096153.637:789): avc: denied { read } for pid=10558 comm="syz.2.1530" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.457270][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 142.529194][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 142.531795][T10569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 142.576590][ T5961] block nbd0: Receive control failed (result -107) [ 142.617571][ T6014] usb 6-1: USB disconnect, device number 18 [ 142.627634][T10569] [ 142.628380][T10569] ====================================================== [ 142.630374][T10569] WARNING: possible circular locking dependency detected [ 142.632349][T10569] 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 Not tainted [ 142.634902][T10569] ------------------------------------------------------ [ 142.637789][T10569] syz.0.1529/10569 is trying to acquire lock: [ 142.639478][T10569] ffff8881070a37e0 (&q->limits_lock){+.+.}-{4:4}, at: __nbd_set_size+0x2c0/0x730 [ 142.642026][T10569] [ 142.642026][T10569] but task is already holding lock: [ 142.644090][T10569] ffff8881070a3190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 142.646980][T10569] [ 142.646980][T10569] which lock already depends on the new lock. [ 142.646980][T10569] [ 142.649928][T10569] [ 142.649928][T10569] the existing dependency chain (in reverse order) is: [ 142.652453][T10569] [ 142.652453][T10569] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 142.654915][T10569] blk_mq_submit_bio+0x1fc4/0x24c0 [ 142.656511][T10569] __submit_bio+0x384/0x540 [ 142.657945][T10569] submit_bio_noacct_nocheck+0x6fb/0xd70 [ 142.659711][T10569] submit_bio_noacct+0x93a/0x1e10 [ 142.661164][T10569] mpage_readahead+0x41d/0x590 [ 142.662661][T10569] read_pages+0x1a8/0xdc0 [ 142.664008][T10569] page_cache_ra_unbounded+0x3c0/0x6c0 [ 142.665662][T10569] force_page_cache_ra+0x24b/0x340 [ 142.667318][T10569] page_cache_sync_ra+0x110/0x9c0 [ 142.669247][T10569] filemap_get_pages+0xd7c/0x1be0 [ 142.671218][T10569] filemap_read+0x3ca/0xd70 [ 142.673038][T10569] blkdev_read_iter+0x187/0x480 [ 142.674549][T10569] vfs_read+0x87f/0xbe0 [ 142.675845][T10569] ksys_read+0x12b/0x250 [ 142.677184][T10569] do_syscall_64+0xcd/0x250 [ 142.678586][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.680366][T10569] [ 142.680366][T10569] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 142.682637][T10569] down_read+0x9a/0x330 [ 142.683950][T10569] filemap_fault+0x62e/0x2820 [ 142.685362][T10569] __do_fault+0x10a/0x490 [ 142.686667][T10569] do_pte_missing+0xec5/0x3e70 [ 142.688102][T10569] __handle_mm_fault+0x100a/0x2a10 [ 142.689656][T10569] handle_mm_fault+0x3fa/0xaa0 [ 142.691116][T10569] __get_user_pages+0x8d9/0x3b50 [ 142.692625][T10569] populate_vma_page_range+0x27f/0x3a0 [ 142.694244][T10569] __mm_populate+0x1d6/0x380 [ 142.695647][T10569] do_mlock+0x40a/0x7d0 [ 142.696930][T10569] __x64_sys_mlock+0x59/0x80 [ 142.698328][T10569] do_syscall_64+0xcd/0x250 [ 142.699718][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.701494][T10569] [ 142.701494][T10569] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 142.703513][T10569] __might_fault+0x11b/0x190 [ 142.704842][T10569] _copy_from_user+0x29/0xd0 [ 142.706265][T10569] __blk_trace_setup+0xa8/0x180 [ 142.707743][T10569] blk_trace_ioctl+0x163/0x290 [ 142.709201][T10569] blkdev_ioctl+0x109/0x6d0 [ 142.710570][T10569] __x64_sys_ioctl+0x190/0x200 [ 142.712010][T10569] do_syscall_64+0xcd/0x250 [ 142.713354][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.715084][T10569] [ 142.715084][T10569] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 142.717189][T10569] __mutex_lock+0x19b/0xa60 [ 142.718580][T10569] blk_mq_init_sched+0x42b/0x640 [ 142.720065][T10569] elevator_init_mq+0x2cd/0x420 [ 142.721571][T10569] add_disk_fwnode+0x113/0x1300 [ 142.723050][T10569] sd_probe+0xa86/0x1000 [ 142.724371][T10569] really_probe+0x23e/0xa90 [ 142.725730][T10569] __driver_probe_device+0x1de/0x440 [ 142.727275][T10569] driver_probe_device+0x4c/0x1b0 [ 142.728724][T10569] __device_attach_driver+0x1df/0x310 [ 142.730340][T10569] bus_for_each_drv+0x157/0x1e0 [ 142.731852][T10569] __device_attach_async_helper+0x1d3/0x290 [ 142.733560][T10569] async_run_entry_fn+0x9c/0x530 [ 142.735050][T10569] process_one_work+0x9c5/0x1ba0 [ 142.736536][T10569] worker_thread+0x6c8/0xf00 [ 142.737949][T10569] kthread+0x2c1/0x3a0 [ 142.739242][T10569] ret_from_fork+0x45/0x80 [ 142.740593][T10569] ret_from_fork_asm+0x1a/0x30 [ 142.742054][T10569] [ 142.742054][T10569] -> #1 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 142.744496][T10569] blk_queue_enter+0x50f/0x640 [ 142.745968][T10569] blk_mq_alloc_request+0x59b/0x950 [ 142.747558][T10569] scsi_execute_cmd+0x1eb/0xf40 [ 142.749071][T10569] read_capacity_16+0x213/0xe10 [ 142.750566][T10569] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 142.752618][T10569] sd_probe+0x904/0x1000 [ 142.754143][T10569] really_probe+0x23e/0xa90 [ 142.755708][T10569] __driver_probe_device+0x1de/0x440 [ 142.757648][T10569] driver_probe_device+0x4c/0x1b0 [ 142.759520][T10569] __device_attach_driver+0x1df/0x310 [ 142.761197][T10569] bus_for_each_drv+0x157/0x1e0 [ 142.762700][T10569] __device_attach_async_helper+0x1d3/0x290 [ 142.764465][T10569] async_run_entry_fn+0x9c/0x530 [ 142.765949][T10569] process_one_work+0x9c5/0x1ba0 [ 142.767428][T10569] worker_thread+0x6c8/0xf00 [ 142.768839][T10569] kthread+0x2c1/0x3a0 [ 142.770140][T10569] ret_from_fork+0x45/0x80 [ 142.771514][T10569] ret_from_fork_asm+0x1a/0x30 [ 142.772968][T10569] [ 142.772968][T10569] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 142.775602][T10569] __lock_acquire+0x249e/0x3c40 [ 142.777518][T10569] lock_acquire.part.0+0x11b/0x380 [ 142.779065][T10569] __mutex_lock+0x19b/0xa60 [ 142.780501][T10569] __nbd_set_size+0x2c0/0x730 [ 142.781991][T10569] nbd_start_device+0x8fd/0xd70 [ 142.783492][T10569] nbd_genl_connect+0x1204/0x1c00 [ 142.785047][T10569] genl_family_rcv_msg_doit+0x202/0x2f0 [ 142.786730][T10569] genl_rcv_msg+0x565/0x800 [ 142.788132][T10569] netlink_rcv_skb+0x16b/0x440 [ 142.789584][T10569] genl_rcv+0x28/0x40 [ 142.790835][T10569] netlink_unicast+0x53c/0x7f0 [ 142.792288][T10569] netlink_sendmsg+0x8b8/0xd70 [ 142.793795][T10569] ____sys_sendmsg+0xaaf/0xc90 [ 142.795496][T10569] ___sys_sendmsg+0x135/0x1e0 [ 142.796935][T10569] __sys_sendmsg+0x16e/0x220 [ 142.798372][T10569] do_syscall_64+0xcd/0x250 [ 142.799759][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.801508][T10569] [ 142.801508][T10569] other info that might help us debug this: [ 142.801508][T10569] [ 142.804382][T10569] Chain exists of: [ 142.804382][T10569] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 142.804382][T10569] [ 142.808522][T10569] Possible unsafe locking scenario: [ 142.808522][T10569] [ 142.810617][T10569] CPU0 CPU1 [ 142.812144][T10569] ---- ---- [ 142.813677][T10569] lock(&q->q_usage_counter(io)#49); [ 142.815224][T10569] lock(mapping.invalidate_lock#2); [ 142.817421][T10569] lock(&q->q_usage_counter(io)#49); [ 142.819626][T10569] lock(&q->limits_lock); [ 142.820878][T10569] [ 142.820878][T10569] *** DEADLOCK *** [ 142.820878][T10569] [ 142.823153][T10569] 5 locks held by syz.0.1529/10569: [ 142.824613][T10569] #0: ffffffff8ff8afd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 142.826922][T10569] #1: ffffffff8ff8b088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 142.829447][T10569] #2: ffff88802574b998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xa1b/0x1c00 [ 142.832273][T10569] #3: ffff8881070a3190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 142.835264][T10569] #4: ffff8881070a31c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 142.838313][T10569] [ 142.838313][T10569] stack backtrace: [ 142.839975][T10569] CPU: 2 UID: 0 PID: 10569 Comm: syz.0.1529 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 142.842892][T10569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.845921][T10569] Call Trace: [ 142.846889][T10569] [ 142.847726][T10569] dump_stack_lvl+0x116/0x1f0 [ 142.849081][T10569] print_circular_bug+0x419/0x5d0 [ 142.850514][T10569] check_noncircular+0x31a/0x400 [ 142.851914][T10569] ? __pfx_check_noncircular+0x10/0x10 [ 142.853475][T10569] ? lockdep_lock+0xc6/0x200 [ 142.854814][T10569] ? __pfx_lockdep_lock+0x10/0x10 [ 142.856268][T10569] ? __pfx_mark_lock+0x10/0x10 [ 142.857621][T10569] __lock_acquire+0x249e/0x3c40 [ 142.859023][T10569] ? __pfx___lock_acquire+0x10/0x10 [ 142.860479][T10569] ? __lock_acquire+0x15a9/0x3c40 [ 142.861939][T10569] lock_acquire.part.0+0x11b/0x380 [ 142.863444][T10569] ? __nbd_set_size+0x2c0/0x730 [ 142.865318][T10569] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 142.867174][T10569] ? rcu_is_watching+0x12/0xc0 [ 142.868538][T10569] ? trace_lock_acquire+0x14a/0x1d0 [ 142.870042][T10569] ? __nbd_set_size+0x2c0/0x730 [ 142.871579][T10569] ? lock_acquire+0x2f/0xb0 [ 142.872907][T10569] ? __nbd_set_size+0x2c0/0x730 [ 142.874304][T10569] __mutex_lock+0x19b/0xa60 [ 142.875657][T10569] ? __nbd_set_size+0x2c0/0x730 [ 142.877074][T10569] ? __nbd_set_size+0x2c0/0x730 [ 142.878467][T10569] ? __lock_acquire+0x15a9/0x3c40 [ 142.879942][T10569] ? __pfx___mutex_lock+0x10/0x10 [ 142.881401][T10569] ? __pfx___lock_acquire+0x10/0x10 [ 142.882900][T10569] ? __nbd_set_size+0x2c0/0x730 [ 142.884299][T10569] __nbd_set_size+0x2c0/0x730 [ 142.885818][T10569] ? lock_acquire.part.0+0x11b/0x380 [ 142.887522][T10569] ? find_held_lock+0x2d/0x110 [ 142.888887][T10569] ? blk_mq_freeze_queue_wait+0x186/0x190 [ 142.890903][T10569] ? __pfx_lock_release+0x10/0x10 [ 142.892364][T10569] ? __pfx___nbd_set_size+0x10/0x10 [ 142.894082][T10569] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.895966][T10569] ? nbd_start_device+0x8ef/0xd70 [ 142.897473][T10569] nbd_start_device+0x8fd/0xd70 [ 142.898904][T10569] nbd_genl_connect+0x1204/0x1c00 [ 142.900339][T10569] ? __pfx_nbd_genl_connect+0x10/0x10 [ 142.901874][T10569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 142.903985][T10569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 142.906067][T10569] genl_family_rcv_msg_doit+0x202/0x2f0 [ 142.907659][T10569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.909399][T10569] ? __radix_tree_lookup+0x21f/0x2c0 [ 142.910913][T10569] genl_rcv_msg+0x565/0x800 [ 142.912239][T10569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.913674][T10569] ? __pfx_nbd_genl_connect+0x10/0x10 [ 142.915203][T10569] ? __pfx___lock_acquire+0x10/0x10 [ 142.916681][T10569] netlink_rcv_skb+0x16b/0x440 [ 142.918057][T10569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.919455][T10569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.920969][T10569] ? down_read+0xc9/0x330 [ 142.922220][T10569] ? __pfx_down_read+0x10/0x10 [ 142.923584][T10569] ? netlink_deliver_tap+0x1ae/0xd90 [ 142.925085][T10569] genl_rcv+0x28/0x40 [ 142.926221][T10569] netlink_unicast+0x53c/0x7f0 [ 142.927612][T10569] ? __pfx_netlink_unicast+0x10/0x10 [ 142.929114][T10569] netlink_sendmsg+0x8b8/0xd70 [ 142.930488][T10569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.932005][T10569] ____sys_sendmsg+0xaaf/0xc90 [ 142.933395][T10569] ? copy_msghdr_from_user+0x10b/0x160 [ 142.934958][T10569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.936479][T10569] ___sys_sendmsg+0x135/0x1e0 [ 142.937819][T10569] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.939311][T10569] ? __pfx_lock_release+0x10/0x10 [ 142.940742][T10569] ? trace_lock_acquire+0x14a/0x1d0 [ 142.942231][T10569] ? __fget_files+0x206/0x3a0 [ 142.943613][T10569] __sys_sendmsg+0x16e/0x220 [ 142.944938][T10569] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.946395][T10569] ? __x64_sys_futex+0x1e1/0x4c0 [ 142.947818][T10569] do_syscall_64+0xcd/0x250 [ 142.949124][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.950819][T10569] RIP: 0033:0x7f4cbe17e759 [ 142.952099][T10569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.957544][T10569] RSP: 002b:00007f4cbeef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.959900][T10569] RAX: ffffffffffffffda RBX: 00007f4cbe335f80 RCX: 00007f4cbe17e759 [ 142.962135][T10569] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000b [ 142.964378][T10569] RBP: 00007f4cbe1f175e R08: 0000000000000000 R09: 0000000000000000 [ 142.966653][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.968886][T10569] R13: 0000000000000000 R14: 00007f4cbe335f80 R15: 00007ffd8ee0cc38 [ 142.971130][T10569] [ 142.972484][T10569] nbd0: detected capacity change from 0 to 256 [ 142.975071][ T8966] block nbd0: Dead connection, failed to find a fallback [ 142.979864][ T8966] block nbd0: shutting down sockets [ 142.981473][ T8966] blk_print_req_error: 37 callbacks suppressed [ 142.981494][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.986124][ T8966] buffer_io_error: 23 callbacks suppressed [ 142.986131][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.990049][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.992671][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.994991][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.998168][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.000444][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.003104][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.005594][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.008510][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.010797][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.014197][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.017913][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.020492][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.022799][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.025393][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.036079][ T8966] ldm_validate_partition_table(): Disk read failed. [ 143.038017][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.040593][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.042873][ T8966] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.045438][ T8966] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.048003][ T8966] Dev nbd0: unable to read RDB block 0 [ 143.049792][ T8966] nbd0: unable to read partition table [ 143.052859][ T8966] ldm_validate_partition_table(): Disk read failed. [ 143.055036][ T8966] Dev nbd0: unable to read RDB block 0 [ 143.057299][ T8966] nbd0: unable to read partition table [ 143.206283][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.256806][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.966135][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.296327][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.336351][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.366677][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.846225][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 148.006158][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.406704][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.446122][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.487297][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.046230][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.048406][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.527421][ T1446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.566427][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog VM DIAGNOSIS: 08:23:54 Registers: info registers vcpu 0 CPU#0 RAX=000000000013f0e4 RBX=0000000000000000 RCX=ffffffff8b2663e9 RDX=ffffed100d4c7026 RSI=ffffffff8bd1db00 RDI=ffffffff81649e79 RBP=fffffbfff1bd2f10 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97880 R14=ffffffff905ff290 R15=0000000000000000 RIP=ffffffff8b2677cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a600000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004d762000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e801bf7551ceaa7 f7eab3000008050e 0000950000000000 c59bbfeb3bc7e214 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c2f3427c92789e6 4b50469bb172794b 170081557e800004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008050e00009500 00000000c59bbfeb 3bc7e214e0fc5afb 47000000ffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c0a5885a27935db facb58a3f6fefdca 35104ce1360011db fcdac8559c8abefa ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a40aab3c1c83704 8ac3bdd7480a4e0d 083c0a5885a27935 dbfacb58a3f6fefd ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca35104ce1360011 dbfcdac8559c8abe fa2c706cacafa1ac d7998400dfef01a8 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f410954e39d7f545 ee232896d83f0763 33cbff610ab8cc34 fec5d99200000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003804b326018 f81690b51a34ee93 8ad1b055ed14f4cf 7d90d9eb74b1e61f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000730000d8 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90021377970 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b260a40 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007efc74f4b6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a700000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000730000d8 CR3=000000005da32000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ab3f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850d5855 RDI=ffffffff9ab02400 RBP=ffffffff9ab023c0 RSP=ffffc900217ce7d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff850d57f0 R15=0000000000000000 RIP=ffffffff850d587f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4cbeef76c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37546b CR3=000000005dbc4000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ff860600 Opmask01=0000000000000fff Opmask02=000000003f3fefff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3dff2140 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff000000ffffff00 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00000000ff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3dfea558 00006364755f796d 6d756400454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3dfea558 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000042c100c39858 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6364755f796d6d 75642f6364752f31 2e6364755f796d6d 75642f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e9420ecf50 000055e9421038c0 0000000000000021 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f898b8fdd4c 00007f898b8fdd47 00000000000000d1 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e9420f22e0 000055e9420ef5b0 000055e94210c320 000055e942103390 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a0a007d6c79 2638263b263a6626 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558942101b30 0000000000000041 000055e94211ce00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556942101b30 0000000000000020 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90021c17320 RCX=ffffffff82005da4 RDX=ffff8880232e4880 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90021c171e8 R8 =0000000000000006 R9 =7fffffffffffffff R10=0000000000e42000 R11=0000000000000000 R12=ffffc90021c17488 R13=0000000000000000 R14=ffff888035a235c0 R15=ffff888024f8a380 RIP=ffffffff818da598 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efc74f2a6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000fffff500 CR3=000000005d9fa000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca23d97d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc741f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc741f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc741f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc741f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc741f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc741f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000c8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000