last executing test programs: 5.692611608s ago: executing program 1 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x24, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000040)="d3104d320bdafdacc4876f83ffdc89d977dace67c24b1639dccfadb014eac8ea89b2a953e9d1a6198b1001c3818b0e668cf89d234b5746b912d972542ecda32bd03cc4fb59ab66cd51c553496928e58496b75ea5624ac317394d82370e88ba74065eeb0c1e6716800f26783b", &(0x7f0000000180)}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.091930179s ago: executing program 3 (id=294): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (fail_nth: 6) 4.621770739s ago: executing program 1 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = open(0x0, 0x0, 0x146) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x8, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffbf, 0x0, "9931f1000025c9c3a91efe14dc853fcbacd591"}) syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) 4.212132699s ago: executing program 3 (id=299): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffb, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x40000003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffeb1}}, 0x4004012) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000c001701000000000a000000"], 0x20}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000002c0)={0xa}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffffffaa, 0x3, 0x68, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = memfd_create(&(0x7f00000022c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|9\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)2\x9c\x8c\xd6\x18~\tW\xaf:\xff\x84\xb7\x96|R\x19\xe9\x80\x89u\xb4\xa1\xe7:P\xcaE\x85\x98\x86\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xf4\x9e5\xb2D\xadFi\xff\x81s\x88B\xd03\x9c\r\xb4tr\xd9E\x8d\x81\xf0\xb8\v\xbcC\xd2{\x12EH@\x95\xad\xc7L\x1c\xfdc\xbb@\x9a\x17\xd0[6\x17\xbfu\xae\xb4\xberf\x03\xb3\xa4\xf7x\xc4E+\xd2\b\x80w\xf1p\xbf\xf9b\x97\n\x18\rT\x9a\x133\xf8\xe2K\xef\xe6V&\x16\x8e\x83\x15L\xe8\\|_\xa6\xfb\xa7\xad\x14\xdew\a\xed\xd6\xec\xe5IV\x92\x03\x1f\x05\xe2\x81\x05&y\xfd\xab\xcd2\xb8(\xf9\xed\xd0j\xe2\xbdYh\xee\xd3\xcfU\xd8;v8\xbfs\x7f\x84\x03\xcc\xe3j(\xbbO\x82\x04\xc0t\xe4\x8ehtmC\r\xa6\b\"\x01\x1a\x03j\xa6\x80%\xcaO\xd7v\x95\xb9V\xe8%\x8e\xc0\xcfQ\xc3 iHw\x1f\xd3@tCn\x1e\xb6\xe4\xfb\xe97\x8b', 0x7) write$binfmt_elf64(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0x3c) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x8, &(0x7f0000000240)={0x0, "50f04611cbc3ad935e4c26774b954d6e78b0dca6e98f2a35b1cad63f1683e3bfdb"}}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000100), 0x63, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001807"], 0x114}], 0x1}, 0x0) 3.536887803s ago: executing program 3 (id=302): r0 = syz_socket_connect_nvme_tcp() syz_open_dev$tty20(0xc, 0x4, 0x0) sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c_hdigest={{0x6, 0x0, 0x18, 0x1c, 0xfffffffb}, 0x3, 0x81, 0x100, 0x2, "00bbaf9d"}, 0x80, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400240, 0x40) close(r0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa00000000001090"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&\x00'}) 2.550447248s ago: executing program 3 (id=304): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0x23, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xa, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x105, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1b97a3c4bee1d41f9d19c1bead884df1dd48f55ec4fbd64baa8162edd615b8e6c00c007e83d7e32325636e5924025c21ed78cca7cdd7f03a70835b5dfe6c65df90aa3c27132c0c2783930157d28bbb59f3135e2efea35d33564935c925c83fb626db03c08a9e248fd19728949dacfdcd371d7e366450170dfeefa372171b2f02c9e4003d44586466b3bd890b1e9fc9b63478545b056b67ba7e58448525f84cf96817447f9461fddd2bd67285915b288ede158a60c9e119df2d0c57da6f2489161074839e100e105ebaa1bffacbbefe01535301902145cb9fa102a9285affa83fd14a5c0e7a7ee9eb576e88b3f673c315fb62683bd7ab11ac39260a21fa57844e"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0xfffffff9}]}}]}, 0x13c}}, 0x0) 2.502313754s ago: executing program 3 (id=305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000e, 0xfffffffe}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r3, 0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f07ebbee8, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x3fffffffffffe46, 0x2, 0x0) r8 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xaa.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfF\n\x04So\xe5Z\xe1\xdf\"\x9ay QR\x9d\xd2Se\xcb\x9e]\x98~\x8aY\r\x0e\xae[\xbcD\x16v\x11C\x06\x94\x8e#?\x12\xac4\xb7\x00\x00\x00\x00\x00\x00\x1c_\x8a\x9d\xa1L\xed??2P\x8b\xdf~a', 0x40, 0x60, 0x0) mq_notify(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_notify(r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x42b81b7, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x130, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@dev, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'vlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 2.426863504s ago: executing program 2 (id=306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000001c0)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x100000000}, @flat=@weak_handle}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000005d00)="bef083"}) 2.363692551s ago: executing program 2 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) 2.363162436s ago: executing program 1 (id=308): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="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", 0x169}, {&(0x7f00000005c0)}], 0x2}, 0x24018054) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000580)=ANY=[@ANYBLOB="680200000005010400000000000000000000000054020100"/40], 0x268}}, 0x0) 2.362932339s ago: executing program 1 (id=309): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0xb00, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000000000001d1e01", 0xc}], 0x1}, 0x0) 2.362675325s ago: executing program 2 (id=310): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031400d3fc120000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) 2.251728875s ago: executing program 1 (id=312): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffb, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x40000003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffeb1}}, 0x4004012) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000c001701000000000a000000"], 0x20}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000002c0)={0xa}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffffffaa, 0x3, 0x68, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = memfd_create(&(0x7f00000022c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|9\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)2\x9c\x8c\xd6\x18~\tW\xaf:\xff\x84\xb7\x96|R\x19\xe9\x80\x89u\xb4\xa1\xe7:P\xcaE\x85\x98\x86\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xf4\x9e5\xb2D\xadFi\xff\x81s\x88B\xd03\x9c\r\xb4tr\xd9E\x8d\x81\xf0\xb8\v\xbcC\xd2{\x12EH@\x95\xad\xc7L\x1c\xfdc\xbb@\x9a\x17\xd0[6\x17\xbfu\xae\xb4\xberf\x03\xb3\xa4\xf7x\xc4E+\xd2\b\x80w\xf1p\xbf\xf9b\x97\n\x18\rT\x9a\x133\xf8\xe2K\xef\xe6V&\x16\x8e\x83\x15L\xe8\\|_\xa6\xfb\xa7\xad\x14\xdew\a\xed\xd6\xec\xe5IV\x92\x03\x1f\x05\xe2\x81\x05&y\xfd\xab\xcd2\xb8(\xf9\xed\xd0j\xe2\xbdYh\xee\xd3\xcfU\xd8;v8\xbfs\x7f\x84\x03\xcc\xe3j(\xbbO\x82\x04\xc0t\xe4\x8ehtmC\r\xa6\b\"\x01\x1a\x03j\xa6\x80%\xcaO\xd7v\x95\xb9V\xe8%\x8e\xc0\xcfQ\xc3 iHw\x1f\xd3@tCn\x1e\xb6\xe4\xfb\xe97\x8b', 0x7) write$binfmt_elf64(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0x3c) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x8, &(0x7f0000000240)={0x0, "50f04611cbc3ad935e4c26774b954d6e78b0dca6e98f2a35b1cad63f1683e3bfdb"}}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000100), 0x63, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001807"], 0x114}], 0x1}, 0x0) 2.251421322s ago: executing program 2 (id=313): syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r0 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc00455d0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000180), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x3, 0x8, 0x70, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7800, 0x6, 0xa5b1}}) 1.441065449s ago: executing program 1 (id=314): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = fsopen(&(0x7f00000000c0)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x0, 0x0) r6 = syz_io_uring_setup(0x1c8b, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x8000000}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r7, 0x0, 0x0) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000100)=0x6) clock_adjtime(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) io_uring_setup(0x2e34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 1.400344808s ago: executing program 2 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x36) getsockname$packet(r4, 0x0, &(0x7f0000000600)) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r6 = syz_io_uring_complete(0x0) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r6, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=@ipv6_newaddrlabel={0x8c, 0x48, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r7, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20048001) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000501, r5, &(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000001000)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x8, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}, {"c4f6ad54bd485a"}}}}}, 0x4d) sendmsg$nl_generic(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}}, 0x0) 1.199980889s ago: executing program 2 (id=317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = open(0x0, 0x0, 0x146) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x8, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffbf, 0x0, "9931f1000025c9c3a91efe14dc853fcbacd591"}) syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) 933.924046ms ago: executing program 0 (id=320): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) write$char_usb(r0, &(0x7f0000000040)="0e0556ab3d0b57ad904937d6f84c7e0d", 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0947ba206a527d53f"], 0x14) 822.399227ms ago: executing program 0 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xf}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), 0x0}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (fail_nth: 10) 491.594497ms ago: executing program 0 (id=322): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f00000011c0)="94bdaf1609d06d5253a7bfc6bc8894ca5712654d8e1ab3222c", 0x19}], 0x2, &(0x7f0000001380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1, &(0x7f0000001800)=[@assoc={0x18}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[], 0x0) 355.573841ms ago: executing program 3 (id=323): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x37ffffc, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000fb00"}) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000004c0)=0x1) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r12, &(0x7f0000000180)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1, 0x2500, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000150000001c002b8005000200000000000800010002000000080004000000000008000300", @ANYRES32=r10], 0x40}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r14, 0x398037b3d3988ec5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002cbd7000fbdbdf250c00000008000300", @ANYRES32=r7, @ANYBLOB="f9303b5577d26529b2a4ac080014000009000000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000100020000000c000600020000000200000008000b000000000008000300", @ANYRES32=r15, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) lsm_get_self_attr(0x68, 0xffffffffffffffff, &(0x7f00000000c0), 0x1) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="088029bd7000ff0c0006000000000000000000050013008000000000000600000000ffffffee0005001300000800030000000000000000", @ANYRES32=r15, @ANYBLOB="0c00060003000000000000000c00060002000000000000000c0006000200000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000040) ppoll(&(0x7f0000004180)=[{}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 260.340844ms ago: executing program 0 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) 121.926277ms ago: executing program 0 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) 0s ago: executing program 0 (id=326): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffb, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x40000003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffeb1}}, 0x4004012) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000c001701000000000a000000"], 0x20}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000002c0)={0xa}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffffffaa, 0x3, 0x68, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = memfd_create(&(0x7f00000022c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|9\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)2\x9c\x8c\xd6\x18~\tW\xaf:\xff\x84\xb7\x96|R\x19\xe9\x80\x89u\xb4\xa1\xe7:P\xcaE\x85\x98\x86\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xf4\x9e5\xb2D\xadFi\xff\x81s\x88B\xd03\x9c\r\xb4tr\xd9E\x8d\x81\xf0\xb8\v\xbcC\xd2{\x12EH@\x95\xad\xc7L\x1c\xfdc\xbb@\x9a\x17\xd0[6\x17\xbfu\xae\xb4\xberf\x03\xb3\xa4\xf7x\xc4E+\xd2\b\x80w\xf1p\xbf\xf9b\x97\n\x18\rT\x9a\x133\xf8\xe2K\xef\xe6V&\x16\x8e\x83\x15L\xe8\\|_\xa6\xfb\xa7\xad\x14\xdew\a\xed\xd6\xec\xe5IV\x92\x03\x1f\x05\xe2\x81\x05&y\xfd\xab\xcd2\xb8(\xf9\xed\xd0j\xe2\xbdYh\xee\xd3\xcfU\xd8;v8\xbfs\x7f\x84\x03\xcc\xe3j(\xbbO\x82\x04\xc0t\xe4\x8ehtmC\r\xa6\b\"\x01\x1a\x03j\xa6\x80%\xcaO\xd7v\x95\xb9V\xe8%\x8e\xc0\xcfQ\xc3 iHw\x1f\xd3@tCn\x1e\xb6\xe4\xfb\xe97\x8b', 0x7) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x8, &(0x7f0000000240)={0x0, "50f04611cbc3ad935e4c26774b954d6e78b0dca6e98f2a35b1cad63f1683e3bfdb"}}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000100), 0x63, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001807"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 65.760227][ T5352] bridge_slave_1: entered promiscuous mode [ 65.812080][ T5351] team0: Port device team_slave_0 added [ 65.869576][ T5349] team0: Port device team_slave_0 added [ 65.877318][ T5349] team0: Port device team_slave_1 added [ 65.906379][ T5351] team0: Port device team_slave_1 added [ 65.912355][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.938967][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.942200][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.945235][ T5350] bridge_slave_0: entered allmulticast mode [ 65.949211][ T5350] bridge_slave_0: entered promiscuous mode [ 65.980172][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.002179][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.005220][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.007720][ T5350] bridge_slave_1: entered allmulticast mode [ 66.011404][ T5350] bridge_slave_1: entered promiscuous mode [ 66.068119][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.071115][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.081912][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.104789][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.107402][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.117280][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.123567][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.126435][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.137001][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.175853][ T5352] team0: Port device team_slave_0 added [ 66.179194][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.182341][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.192528][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.228958][ T5352] team0: Port device team_slave_1 added [ 66.265805][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.273016][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.322299][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.325094][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.335459][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.445217][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.448132][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.493295][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.502902][ T5350] team0: Port device team_slave_0 added [ 66.509315][ T5349] hsr_slave_0: entered promiscuous mode [ 66.512682][ T5349] hsr_slave_1: entered promiscuous mode [ 66.546601][ T5350] team0: Port device team_slave_1 added [ 66.576672][ T5351] hsr_slave_0: entered promiscuous mode [ 66.580785][ T5351] hsr_slave_1: entered promiscuous mode [ 66.583464][ T5351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.586843][ T5351] Cannot create hsr debugfs directory [ 66.688477][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.691183][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.700191][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.710922][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.713870][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.723369][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.751606][ T5352] hsr_slave_0: entered promiscuous mode [ 66.755304][ T5352] hsr_slave_1: entered promiscuous mode [ 66.759010][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.762382][ T5352] Cannot create hsr debugfs directory [ 66.784416][ T5361] Bluetooth: hci1: command tx timeout [ 66.864938][ T5361] Bluetooth: hci3: command tx timeout [ 66.872342][ T5361] Bluetooth: hci2: command tx timeout [ 66.872362][ T5368] Bluetooth: hci0: command tx timeout [ 67.043232][ T5350] hsr_slave_0: entered promiscuous mode [ 67.046454][ T5350] hsr_slave_1: entered promiscuous mode [ 67.048980][ T5350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.051671][ T5350] Cannot create hsr debugfs directory [ 67.288184][ T5351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.295107][ T5351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.333295][ T5351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.346110][ T5351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.387124][ T5349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.396898][ T5349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.403466][ T5349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.410545][ T5349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.462114][ T5352] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.467736][ T5352] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.473974][ T5352] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.479067][ T5352] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.557714][ T5350] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.575634][ T5350] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.591105][ T5350] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.596429][ T5350] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.658092][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.678895][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.732392][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.743740][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.756945][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.760212][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.771209][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.787675][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.790611][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.794765][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.797244][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.824578][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.827405][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.842424][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.856964][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.861018][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.863602][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.880831][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.883785][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.934882][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.949083][ T5349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.959865][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.962648][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.988085][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.991910][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.098970][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.141926][ T5349] veth0_vlan: entered promiscuous mode [ 68.157512][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.170156][ T5349] veth1_vlan: entered promiscuous mode [ 68.206243][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.221374][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.240239][ T5351] veth0_vlan: entered promiscuous mode [ 68.247708][ T5351] veth1_vlan: entered promiscuous mode [ 68.252127][ T5349] veth0_macvtap: entered promiscuous mode [ 68.258510][ T5349] veth1_macvtap: entered promiscuous mode [ 68.292694][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.307207][ T5351] veth0_macvtap: entered promiscuous mode [ 68.322858][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.339033][ T5349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.342846][ T5349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.345782][ T5349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.348876][ T5349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.355617][ T5351] veth1_macvtap: entered promiscuous mode [ 68.359742][ T5352] veth0_vlan: entered promiscuous mode [ 68.370948][ T5352] veth1_vlan: entered promiscuous mode [ 68.388064][ T5350] veth0_vlan: entered promiscuous mode [ 68.401135][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.406425][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.411482][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.421730][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.425527][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.430739][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.435852][ T5350] veth1_vlan: entered promiscuous mode [ 68.444812][ T5351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.448289][ T5351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.452218][ T5351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.456029][ T5351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.523614][ T5352] veth0_macvtap: entered promiscuous mode [ 68.546195][ T5352] veth1_macvtap: entered promiscuous mode [ 68.558430][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.562607][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.569332][ T5350] veth0_macvtap: entered promiscuous mode [ 68.590711][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.592279][ T5350] veth1_macvtap: entered promiscuous mode [ 68.593971][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.628997][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.634471][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.638707][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.644373][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.650344][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.660367][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.667978][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.674690][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.678177][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.681478][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.685943][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.689612][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.694355][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.700292][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.705344][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.709585][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.713396][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.717651][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.722393][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.749762][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.754529][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.758833][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.763577][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.767854][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.772489][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.778559][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.783718][ T5352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.787184][ T5352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.790253][ T5352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.793681][ T5352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.811895][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.812262][ T5350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814928][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.818762][ T5350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.826448][ T5350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.830801][ T5350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.832405][ T5417] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.863248][ T5368] Bluetooth: hci1: command tx timeout [ 68.924501][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.928000][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.942147][ T5368] Bluetooth: hci3: command tx timeout [ 68.952492][ T5368] Bluetooth: hci2: command tx timeout [ 68.952741][ T5361] Bluetooth: hci0: command tx timeout [ 68.981335][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.987357][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.000344][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.007825][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.049086][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.053879][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.180111][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 69.180125][ T39] audit: type=1400 audit(1725094097.953:139): avc: denied { write } for pid=5423 comm="syz.3.4" path="socket:[8676]" dev="sockfs" ino=8676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.180539][ T5426] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.197409][ T39] audit: type=1400 audit(1725094097.953:140): avc: denied { nlmsg_read } for pid=5423 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.277146][ T39] audit: type=1400 audit(1725094097.983:141): avc: denied { setopt } for pid=5425 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.295117][ T39] audit: type=1400 audit(1725094098.043:142): avc: denied { read write } for pid=5425 comm="syz.0.1" name="video0" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.328530][ T39] audit: type=1400 audit(1725094098.043:143): avc: denied { open } for pid=5425 comm="syz.0.1" path="/dev/video0" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.398563][ T39] audit: type=1400 audit(1725094098.063:144): avc: denied { ioctl } for pid=5425 comm="syz.0.1" path="/dev/video0" dev="devtmpfs" ino=876 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.441199][ T39] audit: type=1400 audit(1725094098.073:145): avc: denied { read } for pid=5423 comm="syz.3.4" name="cec3" dev="devtmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.489557][ T39] audit: type=1400 audit(1725094098.073:146): avc: denied { open } for pid=5423 comm="syz.3.4" path="/dev/cec3" dev="devtmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.500864][ T39] audit: type=1400 audit(1725094098.083:147): avc: denied { read } for pid=5425 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.510521][ T39] audit: type=1400 audit(1725094098.083:148): avc: denied { open } for pid=5425 comm="syz.0.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.781939][ T831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.004173][ T831] usb 5-1: config 0 has no interfaces? [ 70.011580][ T831] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 70.019760][ T831] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 70.029814][ T831] usb 5-1: Manufacturer: syz [ 70.041640][ T831] usb 5-1: config 0 descriptor?? [ 70.177346][ T5441] 9p: Unknown Cache mode or invalid value fscach [ 70.234182][ T5445] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 70.330452][ T5447] 9pnet_fd: Insufficient options for proto=fd [ 70.522747][ T1082] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.527655][ T1082] sr 2:0:0:0: [sr0] tag#12 Sense Key : Illegal Request [current] [ 70.532686][ T1082] sr 2:0:0:0: [sr0] tag#12 Add. Sense: Invalid command operation code [ 70.535546][ T1082] sr 2:0:0:0: [sr0] tag#12 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 70.542001][ T1082] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 70.546057][ T1082] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 70.549926][ T1082] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 70.611973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.615383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.623074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 70.651441][ T5453] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 70.705804][ T5453] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 70.773884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.098094][ T5361] Bluetooth: hci1: command tx timeout [ 71.099073][ T5368] Bluetooth: hci0: command tx timeout [ 71.100014][ T5364] Bluetooth: hci2: command tx timeout [ 71.100074][ T5364] Bluetooth: hci3: command tx timeout [ 71.143694][ T5460] netlink: 'syz.1.11': attribute type 21 has an invalid length. [ 71.155701][ T5460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11'. [ 71.388392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.706314][ T5453] syz.3.10 (5453) used greatest stack depth: 20960 bytes left [ 71.724417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.725776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.791337][ T5462] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 71.800254][ T5458] syz.1.11 (5458): drop_caches: 2 [ 71.868424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.870810][ T5465] 9pnet_fd: Insufficient options for proto=fd [ 71.879407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 72.002474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.180683][ T5469] process 'syz.2.13' launched '/dev/fd/8' with NULL argv: empty string added [ 72.454660][ T5394] usb 5-1: USB disconnect, device number 2 [ 72.575927][ T5481] 9p: Unknown Cache mode or invalid value fscach [ 72.606619][ T5469] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13'. [ 72.613023][ T5469] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 72.624924][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 72.771377][ T5485] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 72.835553][ T5489] 9pnet_fd: Insufficient options for proto=fd [ 72.860857][ T5490] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x7 [ 72.898305][ T5490] 9pnet_fd: Insufficient options for proto=fd [ 73.069951][ T5503] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 73.102064][ T5368] Bluetooth: hci3: command tx timeout [ 73.104529][ T5368] Bluetooth: hci2: command tx timeout [ 73.108223][ T5361] Bluetooth: hci1: command tx timeout [ 73.185191][ T5361] Bluetooth: hci0: command tx timeout [ 73.201518][ T5507] ======================================================= [ 73.201518][ T5507] WARNING: The mand mount option has been deprecated and [ 73.201518][ T5507] and is ignored by this kernel. Remove the mand [ 73.201518][ T5507] option from the mount to silence this warning. [ 73.201518][ T5507] ======================================================= [ 73.672824][ T5394] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.682813][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.851925][ T5394] usb 7-1: Using ep0 maxpacket: 8 [ 73.856937][ T5394] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.860698][ T5394] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.862055][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 73.864869][ T5394] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 73.870720][ T5394] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 73.871230][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.875497][ T5394] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 73.875518][ T5394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.879832][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.890856][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 73.892715][ T5394] hub 7-1:1.0: bad descriptor, ignoring hub [ 73.895996][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 73.897781][ T5394] hub 7-1:1.0: probe with driver hub failed with error -5 [ 73.898174][ T5394] cdc_wdm 7-1:1.0: skipping garbage [ 73.905335][ T58] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 73.905948][ T5394] cdc_wdm 7-1:1.0: skipping garbage [ 73.914281][ T5394] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 73.916760][ T5394] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.918443][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.934699][ T58] hub 5-1:1.0: bad descriptor, ignoring hub [ 73.937957][ T58] hub 5-1:1.0: probe with driver hub failed with error -5 [ 73.945438][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 73.947504][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 73.956796][ T58] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 73.959486][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 74.241615][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 74.241630][ T39] audit: type=1400 audit(1725094103.013:197): avc: denied { unmount } for pid=5352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.244501][ T35] usb 7-1: USB disconnect, device number 2 [ 74.320955][ T5518] binder: 5517:5518 ioctl c0306201 20005dc0 returned -11 [ 74.352443][ T10] usb 5-1: USB disconnect, device number 3 [ 74.762223][ T39] audit: type=1400 audit(1725094103.533:198): avc: denied { unmount } for pid=5349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.822810][ T39] audit: type=1400 audit(1725094103.563:199): avc: denied { create } for pid=5508 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.896719][ T5525] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 75.023187][ T5526] 9pnet_fd: Insufficient options for proto=fd [ 75.093953][ T5531] binder: 5530:5531 ioctl 4018620d 0 returned -22 [ 75.157614][ T5533] binder: 5532:5533 ioctl 4018620d 0 returned -22 [ 75.261439][ T5537] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 75.307497][ T5537] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 75.451944][ T39] audit: type=1400 audit(1725094104.223:200): avc: denied { setopt } for pid=5535 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.472620][ T39] audit: type=1400 audit(1725094104.253:201): avc: denied { write } for pid=5535 comm="syz.1.31" path="socket:[8851]" dev="sockfs" ino=8851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.427870][ T39] audit: type=1400 audit(1725094105.203:202): avc: denied { create } for pid=5549 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.428936][ T5556] FAULT_INJECTION: forcing a failure. [ 76.428936][ T5556] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.443501][ T39] audit: type=1400 audit(1725094105.213:203): avc: denied { connect } for pid=5549 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.447543][ T5556] CPU: 0 UID: 0 PID: 5556 Comm: syz.0.38 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 76.458906][ T5556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.463367][ T5556] Call Trace: [ 76.464190][ T39] audit: type=1400 audit(1725094105.243:204): avc: denied { read } for pid=5549 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.464817][ T5556] [ 76.464827][ T5556] dump_stack_lvl+0x16c/0x1f0 [ 76.475881][ T5556] should_fail_ex+0x497/0x5b0 [ 76.477955][ T5556] _copy_to_user+0x30/0xc0 [ 76.479829][ T5556] simple_read_from_buffer+0xd0/0x160 [ 76.481848][ T5556] proc_fail_nth_read+0x19e/0x280 [ 76.483858][ T5556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.485897][ T5556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.488187][ T5556] vfs_read+0x1d4/0xbd0 [ 76.489964][ T5556] ? __fdget_pos+0xeb/0x180 [ 76.491761][ T5556] ? __pfx_vfs_read+0x10/0x10 [ 76.493911][ T5556] ? __pfx___mutex_lock+0x10/0x10 [ 76.495845][ T5556] ? __fget_files+0x256/0x400 [ 76.497715][ T5556] ksys_read+0x12f/0x260 [ 76.499447][ T5556] ? __pfx_ksys_read+0x10/0x10 [ 76.501385][ T5556] do_syscall_64+0xcd/0x250 [ 76.503218][ T5556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.505589][ T5556] RIP: 0033:0x7f39ad7788fc [ 76.507525][ T5556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 76.515633][ T5556] RSP: 002b:00007f39ae480030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.519115][ T5556] RAX: ffffffffffffffda RBX: 00007f39ad915f80 RCX: 00007f39ad7788fc [ 76.522540][ T5556] RDX: 000000000000000f RSI: 00007f39ae4800a0 RDI: 0000000000000004 [ 76.526034][ T5556] RBP: 00007f39ae480090 R08: 0000000000000000 R09: 0000000000000000 [ 76.529417][ T5556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.532775][ T5556] R13: 0000000000000000 R14: 00007f39ad915f80 R15: 00007ffc7fe3d778 [ 76.535966][ T5556] [ 76.719628][ T5565] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 76.778528][ T5568] 9pnet_fd: Insufficient options for proto=fd [ 76.781156][ T39] audit: type=1400 audit(1725094105.553:205): avc: denied { execute } for pid=5566 comm="syz.1.42" name="file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.782835][ T39] audit: type=1400 audit(1725094105.553:206): avc: denied { execute_no_trans } for pid=5566 comm="syz.1.42" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.848793][ T5567] netlink: 'syz.1.42': attribute type 4 has an invalid length. [ 76.867601][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 77.025399][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.028427][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.067616][ T5585] 9p: Unknown Cache mode or invalid value fscach [ 77.209525][ T5589] mmap: syz.3.46 (5589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.477444][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.634570][ T5602] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 77.713255][ T5603] 9pnet_fd: Insufficient options for proto=fd [ 77.877722][ T5614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.899520][ T5616] binder: 5615:5616 ioctl c0306201 0 returned -14 [ 77.903606][ T5616] binder: 5615:5616 ioctl c0306201 20005dc0 returned -11 [ 78.504858][ T5634] 9pnet_virtio: no channels available for device syz [ 78.871961][ T831] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.085854][ T831] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 79.089470][ T831] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.101080][ T831] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 79.106014][ T831] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 79.122637][ T831] usb 6-1: Manufacturer: syz [ 79.150049][ T831] usb 6-1: config 0 descriptor?? [ 79.161267][ T831] igorplugusb 6-1:0.0: incorrect number of endpoints [ 79.221916][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.299508][ T5647] binder: 5646:5647 ioctl c0306201 0 returned -14 [ 79.309563][ T5647] binder: 5646:5647 ioctl c0306201 20005dc0 returned -11 [ 79.401111][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 79.401132][ T39] audit: type=1400 audit(1725094108.173:223): avc: denied { bind } for pid=5650 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.597383][ T39] audit: type=1400 audit(1725094108.323:224): avc: denied { create } for pid=5652 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.617278][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 79.620872][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.627524][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.643409][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 79.646940][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 79.650360][ T10] usb 5-1: Manufacturer: syz [ 79.744619][ T39] audit: type=1400 audit(1725094108.523:225): avc: denied { accept } for pid=5650 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.751283][ T39] audit: type=1400 audit(1725094108.523:226): avc: denied { write } for pid=5650 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.772905][ T10] usb 5-1: config 0 descriptor?? [ 79.869076][ T10] igorplugusb 5-1:0.0: incorrect number of endpoints [ 80.890781][ T25] usb 5-1: USB disconnect, device number 4 [ 81.099056][ T39] audit: type=1400 audit(1725094109.873:227): avc: denied { ioctl } for pid=5671 comm="syz.3.72" path="socket:[7752]" dev="sockfs" ino=7752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.111275][ T39] audit: type=1400 audit(1725094109.883:228): avc: denied { mount } for pid=5671 comm="syz.3.72" name="/" dev="ramfs" ino=7755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.113428][ T5672] bridge_slave_0: default FDB implementation only supports local addresses [ 81.131241][ T5672] loop0: detected capacity change from 0 to 7 [ 81.139191][ T5672] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 81.144371][ T5672] loop0: partition table partially beyond EOD, truncated [ 81.148684][ T5672] loop0: p1 size 538856936 extends beyond EOD, truncated [ 81.171272][ T5356] udevd[5356]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.187233][ T39] audit: type=1400 audit(1725094109.963:229): avc: denied { unmount } for pid=5352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.228263][ T5674] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 81.289238][ T5675] 9pnet_fd: Insufficient options for proto=fd [ 81.294180][ T39] audit: type=1400 audit(1725094110.073:230): avc: denied { create } for pid=5676 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.302834][ T39] audit: type=1400 audit(1725094110.073:231): avc: denied { write } for pid=5676 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.405723][ T5684] binder: 5683:5684 ioctl c0306201 0 returned -14 [ 81.413134][ T5684] binder: 5683:5684 ioctl c0306201 20005dc0 returned -11 [ 81.462455][ T39] audit: type=1400 audit(1725094110.233:232): avc: denied { create } for pid=5685 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.593476][ T5359] usb 6-1: USB disconnect, device number 2 [ 82.117134][ T5716] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 82.175202][ T5719] 9pnet_fd: Insufficient options for proto=fd [ 82.564232][ T5725] binder: 5724:5725 ioctl c0306201 20005dc0 returned -11 [ 82.711361][ T5731] 9p: Unknown Cache mode or invalid value fscach [ 83.294477][ T5736] 9p: Unknown Cache mode or invalid value fscach [ 84.187507][ T5751] binder: 5749:5751 ioctl c0306201 20005dc0 returned -11 [ 84.440966][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 84.440981][ T39] audit: type=1400 audit(1725094113.213:257): avc: denied { read } for pid=5755 comm="syz.1.98" laddr=::ffff:0.0.0.0 lport=20000 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.919280][ T5777] 9pnet_virtio: no channels available for device syz [ 85.543653][ T5788] binder: 5786:5788 ioctl c0306201 20005dc0 returned -11 [ 85.613359][ T5795] Zero length message leads to an empty skb [ 86.394112][ T5813] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x7 [ 86.485330][ T5814] 9pnet_fd: Insufficient options for proto=fd [ 86.588525][ T39] audit: type=1400 audit(1725094115.363:258): avc: denied { read } for pid=5818 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.641966][ T39] audit: type=1400 audit(1725094115.413:259): avc: denied { read } for pid=5818 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 86.650481][ T39] audit: type=1400 audit(1725094115.423:260): avc: denied { bind } for pid=5818 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.658623][ T39] audit: type=1400 audit(1725094115.423:261): avc: denied { write } for pid=5818 comm="syz.1.113" path="socket:[9128]" dev="sockfs" ino=9128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.700246][ T5823] 9p: Unknown Cache mode or invalid value fscach [ 87.304892][ T59] cfg80211: failed to load regulatory.db [ 87.374033][ T39] audit: type=1400 audit(1725094116.143:262): avc: denied { mount } for pid=5825 comm="syz.2.115" name="/" dev="autofs" ino=10601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 87.396330][ T39] audit: type=1400 audit(1725094116.173:263): avc: denied { setopt } for pid=5825 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.586295][ T5833] binder: 5832:5833 ioctl c0306201 20005dc0 returned -11 [ 87.595219][ T5835] FAULT_INJECTION: forcing a failure. [ 87.595219][ T5835] name failslab, interval 1, probability 0, space 0, times 1 [ 87.600477][ T5835] CPU: 3 UID: 0 PID: 5835 Comm: syz.1.119 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 87.604720][ T5835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.608870][ T5835] Call Trace: [ 87.610566][ T5835] [ 87.611836][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 87.613879][ T5835] should_fail_ex+0x497/0x5b0 [ 87.615926][ T5835] ? fs_reclaim_acquire+0xae/0x160 [ 87.618070][ T5835] should_failslab+0xc2/0x120 [ 87.620035][ T5835] __kmalloc_node_noprof+0xd1/0x430 [ 87.622227][ T5835] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 87.624490][ T5835] __kvmalloc_node_noprof+0x9d/0x1a0 [ 87.626508][ T5835] alloc_netdev_mqs+0xcc0/0x13d0 [ 87.628330][ T5835] rtnl_create_link+0xc10/0xfa0 [ 87.630398][ T5835] __rtnl_newlink+0x10ae/0x1920 [ 87.632476][ T5835] ? __pfx___rtnl_newlink+0x10/0x10 [ 87.634705][ T5835] rtnl_newlink+0x67/0xa0 [ 87.636557][ T5835] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.638654][ T5835] rtnetlink_rcv_msg+0x3c7/0xea0 [ 87.640761][ T5835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.642959][ T5835] netlink_rcv_skb+0x16b/0x440 [ 87.644734][ T5835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.646834][ T5835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.648911][ T5835] ? netlink_deliver_tap+0x1ae/0xd90 [ 87.651159][ T5835] netlink_unicast+0x53c/0x7f0 [ 87.653219][ T5835] ? __pfx_netlink_unicast+0x10/0x10 [ 87.655232][ T5835] netlink_sendmsg+0x8b8/0xd70 [ 87.657055][ T5835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.659167][ T5835] ? __import_iovec+0x1fd/0x6e0 [ 87.661251][ T5835] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.663606][ T5835] ____sys_sendmsg+0xab5/0xc90 [ 87.665489][ T5835] ? copy_msghdr_from_user+0x10b/0x160 [ 87.667364][ T5835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.669192][ T5835] ? find_held_lock+0x2d/0x110 [ 87.671268][ T5835] ? __pfx___lock_acquire+0x10/0x10 [ 87.673453][ T5835] ___sys_sendmsg+0x135/0x1e0 [ 87.675139][ T5835] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.676914][ T5835] ? ksys_write+0x21c/0x260 [ 87.678442][ T5835] ? __fget_light+0x173/0x210 [ 87.680050][ T5835] __sys_sendmsg+0x117/0x1f0 [ 87.681604][ T5835] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.683206][ T5835] do_syscall_64+0xcd/0x250 [ 87.684866][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.686938][ T5835] RIP: 0033:0x7f37a1b79eb9 [ 87.688576][ T5835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.696303][ T5835] RSP: 002b:00007f37a28cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.699859][ T5835] RAX: ffffffffffffffda RBX: 00007f37a1d15f80 RCX: 00007f37a1b79eb9 [ 87.703200][ T5835] RDX: 0000000004000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 87.706522][ T5835] RBP: 00007f37a28cb090 R08: 0000000000000000 R09: 0000000000000000 [ 87.709891][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.713250][ T5835] R13: 0000000000000000 R14: 00007f37a1d15f80 R15: 00007ffe56e16638 [ 87.716025][ T5835] [ 87.936874][ T39] audit: type=1400 audit(1725094116.713:264): avc: denied { create } for pid=5839 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.968660][ T39] audit: type=1400 audit(1725094116.743:265): avc: denied { connect } for pid=5839 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.976932][ T39] audit: type=1400 audit(1725094116.743:266): avc: denied { getopt } for pid=5839 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.624613][ T5855] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 88.674513][ T5856] 9p: Unknown Cache mode or invalid value fscach [ 89.107345][ T5868] overlayfs: failed to resolve './file0': -2 [ 89.320949][ T5875] FAULT_INJECTION: forcing a failure. [ 89.320949][ T5875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.328300][ T5875] CPU: 2 UID: 0 PID: 5875 Comm: syz.1.132 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 89.333036][ T5875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.338027][ T5875] Call Trace: [ 89.339556][ T5875] [ 89.340848][ T5875] dump_stack_lvl+0x16c/0x1f0 [ 89.342759][ T5875] should_fail_ex+0x497/0x5b0 [ 89.344262][ T5875] _copy_to_user+0x30/0xc0 [ 89.345967][ T5875] simple_read_from_buffer+0xd0/0x160 [ 89.348273][ T5875] proc_fail_nth_read+0x19e/0x280 [ 89.350281][ T5875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.352384][ T5875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.354679][ T5875] vfs_read+0x1d4/0xbd0 [ 89.356144][ T5875] ? __fdget_pos+0xeb/0x180 [ 89.357663][ T5875] ? __pfx_vfs_read+0x10/0x10 [ 89.359255][ T5875] ? __pfx___mutex_lock+0x10/0x10 [ 89.361465][ T5875] ? __fget_files+0x256/0x400 [ 89.363394][ T5875] ksys_read+0x12f/0x260 [ 89.365163][ T5875] ? __pfx_ksys_read+0x10/0x10 [ 89.367123][ T5875] do_syscall_64+0xcd/0x250 [ 89.369161][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.371588][ T5875] RIP: 0033:0x7f37a1b788fc [ 89.373350][ T5875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 89.381775][ T5875] RSP: 002b:00007f37a28cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.385042][ T5875] RAX: ffffffffffffffda RBX: 00007f37a1d15f80 RCX: 00007f37a1b788fc [ 89.388016][ T5875] RDX: 000000000000000f RSI: 00007f37a28cb0a0 RDI: 0000000000000005 [ 89.391038][ T5875] RBP: 00007f37a28cb090 R08: 0000000000000000 R09: 0000000000000000 [ 89.394624][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.398021][ T5875] R13: 0000000000000000 R14: 00007f37a1d15f80 R15: 00007ffe56e16638 [ 89.401417][ T5875] [ 89.403888][ C2] vkms_vblank_simulate: vblank timer overrun [ 89.445667][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 89.445682][ T39] audit: type=1400 audit(1725094118.223:268): avc: denied { write } for pid=5879 comm="syz.1.133" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.468521][ T39] audit: type=1400 audit(1725094118.243:269): avc: denied { create } for pid=5874 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.493400][ T39] audit: type=1400 audit(1725094118.253:270): avc: denied { write } for pid=5874 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.621247][ T39] audit: type=1400 audit(1725094118.393:271): avc: denied { view } for pid=5884 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.838831][ T39] audit: type=1400 audit(1725094118.613:272): avc: denied { ioctl } for pid=5891 comm="syz.0.136" path="/dev/vhost-net" dev="devtmpfs" ino=1117 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.036303][ T5903] 9p: Unknown Cache mode or invalid value fscach [ 90.099166][ T39] audit: type=1400 audit(1725094118.873:273): avc: denied { ioctl } for pid=5905 comm="syz.3.140" path="socket:[9505]" dev="sockfs" ino=9505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.336727][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.482560][ T5912] FAULT_INJECTION: forcing a failure. [ 90.482560][ T5912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.487746][ T5912] CPU: 2 UID: 0 PID: 5912 Comm: syz.1.141 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 90.491952][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.496318][ T5912] Call Trace: [ 90.497495][ T5912] [ 90.498761][ T5912] dump_stack_lvl+0x16c/0x1f0 [ 90.500900][ T5912] should_fail_ex+0x497/0x5b0 [ 90.502953][ T5912] _copy_to_user+0x30/0xc0 [ 90.504163][ T39] audit: type=1400 audit(1725094119.283:274): avc: denied { read } for pid=5913 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.504910][ T5912] simple_read_from_buffer+0xd0/0x160 [ 90.515734][ T5912] proc_fail_nth_read+0x19e/0x280 [ 90.517975][ T5912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.520346][ T5912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.522573][ T5912] vfs_read+0x1d4/0xbd0 [ 90.524442][ T5912] ? __pfx___mutex_lock+0x10/0x10 [ 90.526612][ T5912] ? __fdget_pos+0xeb/0x180 [ 90.528747][ T5912] ? __pfx_vfs_read+0x10/0x10 [ 90.530853][ T5912] ? __pfx___mutex_lock+0x10/0x10 [ 90.533092][ T5912] ? __fget_files+0x256/0x400 [ 90.535263][ T5912] ksys_read+0x12f/0x260 [ 90.537126][ T5912] ? __pfx_ksys_read+0x10/0x10 [ 90.539244][ T5912] do_syscall_64+0xcd/0x250 [ 90.541759][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.543583][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 90.550616][ T5912] RIP: 0033:0x7f37a1b788fc [ 90.550638][ T5912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 90.550657][ T5912] RSP: 002b:00007f37a28cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.550677][ T5912] RAX: ffffffffffffffda RBX: 00007f37a1d15f80 RCX: 00007f37a1b788fc [ 90.562314][ T57] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.563359][ T5912] RDX: 000000000000000f RSI: 00007f37a28cb0a0 RDI: 0000000000000004 [ 90.563376][ T5912] RBP: 00007f37a28cb090 R08: 0000000000000000 R09: 0000000000000000 [ 90.563388][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.563399][ T5912] R13: 0000000000000000 R14: 00007f37a1d15f80 R15: 00007ffe56e16638 [ 90.563427][ T5912] [ 90.567082][ T57] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.570662][ C2] vkms_vblank_simulate: vblank timer overrun [ 90.580221][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 90.604199][ T39] audit: type=1400 audit(1725094119.373:275): avc: denied { ioctl } for pid=5913 comm="syz.3.142" path="socket:[8020]" dev="sockfs" ino=8020 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.614739][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 90.619588][ T57] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 90.624945][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.635740][ T57] hub 5-1:1.0: bad descriptor, ignoring hub [ 90.638128][ T57] hub 5-1:1.0: probe with driver hub failed with error -5 [ 90.654847][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 90.656561][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 90.670666][ T57] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 90.676462][ T57] cdc_wdm 5-1:1.0: Unknown control protocol [ 90.702778][ T39] audit: type=1400 audit(1725094119.483:276): avc: denied { write } for pid=5918 comm="syz.3.144" path="socket:[8025]" dev="sockfs" ino=8025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.777556][ T5924] FAULT_INJECTION: forcing a failure. [ 90.777556][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 90.783077][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.3.145 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 90.787563][ T5924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.791871][ T5924] Call Trace: [ 90.793101][ T5924] [ 90.794167][ T5924] dump_stack_lvl+0x16c/0x1f0 [ 90.796109][ T5924] should_fail_ex+0x497/0x5b0 [ 90.798022][ T5924] ? fs_reclaim_acquire+0xae/0x160 [ 90.800107][ T5924] should_failslab+0xc2/0x120 [ 90.802530][ T5924] __kmalloc_cache_noprof+0x6b/0x300 [ 90.804299][ T5924] ? alloc_pipe_info+0x10e/0x590 [ 90.806385][ T5924] alloc_pipe_info+0x10e/0x590 [ 90.808404][ T5924] ? __pfx___lock_acquire+0x10/0x10 [ 90.810631][ T5924] splice_direct_to_actor+0x79c/0xa40 [ 90.812904][ T5924] ? __pfx_direct_splice_actor+0x10/0x10 [ 90.815269][ T5924] ? inode_has_perm+0x16f/0x1d0 [ 90.817325][ T5924] ? file_has_perm+0x286/0x360 [ 90.819334][ T5924] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 90.821732][ T5924] ? __pfx_file_has_perm+0x10/0x10 [ 90.823894][ T5924] do_splice_direct+0x17e/0x250 [ 90.825967][ T5924] ? __pfx_do_splice_direct+0x10/0x10 [ 90.827957][ T5924] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 90.830183][ T5924] ? bpf_lsm_file_permission+0x9/0x10 [ 90.832176][ T5924] ? security_file_permission+0x98/0xc0 [ 90.834236][ T5924] do_sendfile+0xb1e/0xe50 [ 90.834787][ T39] audit: type=1400 audit(1725094119.613:277): avc: denied { write } for pid=5916 comm="syz.1.143" name="ip6_mr_cache" dev="proc" ino=4026533211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.835892][ T5924] ? __pfx_do_sendfile+0x10/0x10 [ 90.840538][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 90.849999][ T5924] __x64_sys_sendfile64+0x1da/0x220 [ 90.851941][ T5924] ? ksys_write+0x1ab/0x260 [ 90.853648][ T5924] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 90.855866][ T5924] do_syscall_64+0xcd/0x250 [ 90.857795][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.860237][ T5924] RIP: 0033:0x7fc5b3379eb9 [ 90.862096][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.869983][ T5924] RSP: 002b:00007fc5b2dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 90.873366][ T5924] RAX: ffffffffffffffda RBX: 00007fc5b3515f80 RCX: 00007fc5b3379eb9 [ 90.876272][ T5924] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 90.879167][ T5924] RBP: 00007fc5b2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 90.882288][ T5924] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 90.885565][ T5924] R13: 0000000000000000 R14: 00007fc5b3515f80 R15: 00007ffe86873c78 [ 90.888598][ T5924] [ 90.954240][ T8] usb 5-1: USB disconnect, device number 5 [ 91.747328][ T5940] netlink: 256 bytes leftover after parsing attributes in process `syz.2.149'. [ 92.259630][ T5955] FAULT_INJECTION: forcing a failure. [ 92.259630][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 92.266432][ T5955] CPU: 2 UID: 0 PID: 5955 Comm: syz.1.153 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 92.271019][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.275580][ T5955] Call Trace: [ 92.277085][ T5955] [ 92.278371][ T5955] dump_stack_lvl+0x16c/0x1f0 [ 92.280439][ T5955] should_fail_ex+0x497/0x5b0 [ 92.282465][ T5955] ? fs_reclaim_acquire+0xae/0x160 [ 92.284577][ T5955] should_failslab+0xc2/0x120 [ 92.286447][ T5955] __kmalloc_noprof+0xcb/0x400 [ 92.288427][ T5955] ? __pfx_lock_acquire+0x10/0x10 [ 92.290621][ T5955] tomoyo_realpath_from_path+0xb9/0x720 [ 92.293487][ T5955] ? tomoyo_profile+0x47/0x60 [ 92.296278][ T5955] tomoyo_path_number_perm+0x245/0x590 [ 92.298746][ T5955] ? tomoyo_path_number_perm+0x232/0x590 [ 92.301215][ T5955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 92.303804][ T5955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.306344][ T5955] ? __fget_files+0x256/0x400 [ 92.308324][ T5955] security_file_ioctl+0x75/0xc0 [ 92.310557][ T5955] __x64_sys_ioctl+0xbb/0x220 [ 92.312610][ T5955] do_syscall_64+0xcd/0x250 [ 92.314540][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.316937][ T5955] RIP: 0033:0x7f37a1b79eb9 [ 92.318817][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.326411][ T5955] RSP: 002b:00007f37a28cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.329159][ T5955] RAX: ffffffffffffffda RBX: 00007f37a1d15f80 RCX: 00007f37a1b79eb9 [ 92.333427][ T5955] RDX: 0000000000000000 RSI: 000000000000b703 RDI: 0000000000000003 [ 92.337234][ T5955] RBP: 00007f37a28cb090 R08: 0000000000000000 R09: 0000000000000000 [ 92.340253][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.343383][ T5955] R13: 0000000000000000 R14: 00007f37a1d15f80 R15: 00007ffe56e16638 [ 92.347048][ T5955] [ 92.348508][ C2] vkms_vblank_simulate: vblank timer overrun [ 92.351663][ T5955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.391067][ T5959] FAULT_INJECTION: forcing a failure. [ 92.391067][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 92.397362][ T5959] CPU: 3 UID: 0 PID: 5959 Comm: syz.1.156 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 92.402025][ T5959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.406284][ T5959] Call Trace: [ 92.407627][ T5959] [ 92.408966][ T5959] dump_stack_lvl+0x16c/0x1f0 [ 92.411090][ T5959] should_fail_ex+0x497/0x5b0 [ 92.413186][ T5959] ? fs_reclaim_acquire+0xae/0x160 [ 92.415459][ T5959] should_failslab+0xc2/0x120 [ 92.417563][ T5959] __kmalloc_noprof+0xcb/0x400 [ 92.419692][ T5959] ? __pfx_lock_acquire+0x10/0x10 [ 92.421972][ T5959] tomoyo_realpath_from_path+0xb9/0x720 [ 92.424536][ T5959] ? tomoyo_profile+0x47/0x60 [ 92.426640][ T5959] tomoyo_path_number_perm+0x245/0x590 [ 92.429066][ T5959] ? tomoyo_path_number_perm+0x232/0x590 [ 92.431572][ T5959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 92.434298][ T5959] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.436970][ T5959] ? __fget_files+0x256/0x400 [ 92.439084][ T5959] security_file_ioctl+0x75/0xc0 [ 92.441182][ T5959] __x64_sys_ioctl+0xbb/0x220 [ 92.443034][ T5959] do_syscall_64+0xcd/0x250 [ 92.444842][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.447284][ T5959] RIP: 0033:0x7f37a1b79eb9 [ 92.449289][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.457743][ T5959] RSP: 002b:00007f37a28cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.462156][ T5959] RAX: ffffffffffffffda RBX: 00007f37a1d15f80 RCX: 00007f37a1b79eb9 [ 92.465650][ T5959] RDX: 0000000020000000 RSI: 0000000080dc5521 RDI: 0000000000000003 [ 92.469000][ T5959] RBP: 00007f37a28cb090 R08: 0000000000000000 R09: 0000000000000000 [ 92.472382][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.475258][ T5959] R13: 0000000000000000 R14: 00007f37a1d15f80 R15: 00007ffe56e16638 [ 92.478531][ T5959] [ 92.481079][ T5960] 9p: Unknown Cache mode or invalid value fscach [ 92.481457][ T5959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.544767][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 92.837929][ T10] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 92.845786][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.858454][ T10] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 92.872499][ T10] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 92.875991][ T10] usb 8-1: Manufacturer: syz [ 92.886645][ T10] usb 8-1: config 0 descriptor?? [ 92.901735][ T10] igorplugusb 8-1:0.0: incorrect number of endpoints [ 93.325681][ T2797] usb 8-1: USB disconnect, device number 2 [ 93.349823][ T5968] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x7 [ 93.412075][ T5969] 9pnet_fd: Insufficient options for proto=fd [ 94.183545][ T5975] netlink: 256 bytes leftover after parsing attributes in process `syz.1.160'. [ 94.369538][ T5994] FAULT_INJECTION: forcing a failure. [ 94.369538][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.375584][ T5994] CPU: 2 UID: 0 PID: 5994 Comm: syz.1.166 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 94.379682][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.383682][ T5994] Call Trace: [ 94.385072][ T5994] [ 94.386310][ T5994] dump_stack_lvl+0x16c/0x1f0 [ 94.388326][ T5994] should_fail_ex+0x497/0x5b0 [ 94.390407][ T5994] _copy_to_user+0x30/0xc0 [ 94.392326][ T5994] simple_read_from_buffer+0xd0/0x160 [ 94.394596][ T5994] proc_fail_nth_read+0x19e/0x280 [ 94.396772][ T5994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.399130][ T5994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.401476][ T5994] vfs_read+0x1d4/0xbd0 [ 94.403235][ T5994] ? __fdget_pos+0xeb/0x180 [ 94.405187][ T5994] ? __pfx_vfs_read+0x10/0x10 [ 94.407213][ T5994] ? __pfx___mutex_lock+0x10/0x10 [ 94.409112][ T5994] ? __fget_files+0x256/0x400 [ 94.410521][ T5994] ksys_read+0x12f/0x260 [ 94.411796][ T5994] ? __pfx_ksys_read+0x10/0x10 [ 94.414218][ T5994] do_syscall_64+0xcd/0x250 [ 94.416091][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.418454][ T5994] RIP: 0033:0x7f37a1b788fc [ 94.420232][ T5994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 94.428257][ T5994] RSP: 002b:00007f37a28cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.431899][ T5994] RAX: ffffffffffffffda RBX: 00007f37a1d15f80 RCX: 00007f37a1b788fc [ 94.435323][ T5994] RDX: 000000000000000f RSI: 00007f37a28cb0a0 RDI: 0000000000000005 [ 94.438711][ T5994] RBP: 00007f37a28cb090 R08: 0000000000000000 R09: 0000000000000000 [ 94.442018][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.445411][ T5994] R13: 0000000000000000 R14: 00007f37a1d15f80 R15: 00007ffe56e16638 [ 94.448900][ T5994] [ 94.625437][ T6006] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 94.630058][ T6007] 9pnet_virtio: no channels available for device syz [ 95.362433][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.365586][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.381183][ T6014] binder: 6012:6014 ioctl c018620c 20000140 returned -22 [ 95.430154][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 95.430169][ T39] audit: type=1400 audit(1725094124.203:283): avc: denied { read write } for pid=6019 comm="syz.1.176" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.463386][ T39] audit: type=1400 audit(1725094124.203:284): avc: denied { open } for pid=6019 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.474196][ T39] audit: type=1400 audit(1725094124.203:285): avc: denied { ioctl } for pid=6019 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.475758][ T5904] cdc_wdm 5-1:1.0: Error autopm - -16 [ 95.487606][ T39] audit: type=1400 audit(1725094124.233:286): avc: denied { map } for pid=6021 comm="syz.3.175" path="socket:[9573]" dev="sockfs" ino=9573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.496101][ T39] audit: type=1400 audit(1725094124.233:287): avc: denied { read accept } for pid=6021 comm="syz.3.175" path="socket:[9573]" dev="sockfs" ino=9573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.584444][ T39] audit: type=1400 audit(1725094124.353:288): avc: denied { ioctl } for pid=6025 comm="syz.1.178" path="socket:[12300]" dev="sockfs" ino=12300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.586702][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 95.607775][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 95.640034][ T39] audit: type=1400 audit(1725094124.413:289): avc: denied { read write } for pid=6025 comm="syz.1.178" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.653222][ T39] audit: type=1400 audit(1725094124.413:290): avc: denied { open } for pid=6025 comm="syz.1.178" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.963924][ T39] audit: type=1400 audit(1725094124.743:291): avc: denied { getopt } for pid=6021 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.974745][ T6043] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 96.012290][ T39] audit: type=1400 audit(1725094124.783:292): avc: denied { shutdown } for pid=6037 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.040262][ T6045] 9pnet_fd: Insufficient options for proto=fd [ 96.713166][ T6050] binder: 6049:6050 ioctl c0306201 0 returned -14 [ 96.809417][ T6052] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 96.852249][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 97.792487][ T6067] FAULT_INJECTION: forcing a failure. [ 97.792487][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 97.798230][ T6067] CPU: 3 UID: 0 PID: 6067 Comm: syz.3.186 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 97.806996][ T6067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.811673][ T6067] Call Trace: [ 97.813248][ T6067] [ 97.814558][ T6067] dump_stack_lvl+0x16c/0x1f0 [ 97.816649][ T6067] should_fail_ex+0x497/0x5b0 [ 97.818713][ T6067] ? fs_reclaim_acquire+0xae/0x160 [ 97.821007][ T6067] should_failslab+0xc2/0x120 [ 97.823094][ T6067] __kmalloc_noprof+0xcb/0x400 [ 97.825217][ T6067] ? __pfx_lock_acquire+0x10/0x10 [ 97.827450][ T6067] tomoyo_realpath_from_path+0xb9/0x720 [ 97.829866][ T6067] ? tomoyo_profile+0x47/0x60 [ 97.831852][ T6067] tomoyo_path_number_perm+0x245/0x590 [ 97.834199][ T6067] ? tomoyo_path_number_perm+0x232/0x590 [ 97.836432][ T6067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.838924][ T6067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.841591][ T6067] ? __fget_files+0x256/0x400 [ 97.843643][ T6067] security_file_ioctl+0x75/0xc0 [ 97.845782][ T6067] __x64_sys_ioctl+0xbb/0x220 [ 97.847748][ T6067] do_syscall_64+0xcd/0x250 [ 97.849683][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.851821][ T6067] RIP: 0033:0x7fc5b3379eb9 [ 97.853579][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.861640][ T6067] RSP: 002b:00007fc5b2dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.864657][ T6067] RAX: ffffffffffffffda RBX: 00007fc5b3515f80 RCX: 00007fc5b3379eb9 [ 97.867292][ T6067] RDX: 0000000020000180 RSI: 000000004068aea3 RDI: 0000000000000004 [ 97.870202][ T6067] RBP: 00007fc5b2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 97.873341][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.876769][ T6067] R13: 0000000000000000 R14: 00007fc5b3515f80 R15: 00007ffe86873c78 [ 97.879845][ T6067] [ 97.903472][ T6067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.451902][ T58] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 98.607024][ T6082] binder: 6081:6082 ioctl c0306201 0 returned -14 [ 98.643952][ T58] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.652546][ T58] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.664029][ T58] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 98.667398][ T58] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 98.671911][ T58] usb 8-1: Manufacturer: syz [ 98.676881][ T58] usb 8-1: config 0 descriptor?? [ 98.688338][ T6084] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x7 [ 98.688957][ T58] igorplugusb 8-1:0.0: incorrect number of endpoints [ 98.732794][ T5413] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.756213][ T6085] 9pnet_fd: Insufficient options for proto=fd [ 98.931988][ T5413] usb 6-1: Using ep0 maxpacket: 8 [ 98.943634][ T5413] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.948280][ T5413] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.953251][ T5413] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 98.958630][ T5413] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 98.964153][ T5413] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.968257][ T5413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.980163][ T5413] hub 6-1:1.0: bad descriptor, ignoring hub [ 98.984796][ T5413] hub 6-1:1.0: probe with driver hub failed with error -5 [ 98.992511][ T5413] cdc_wdm 6-1:1.0: skipping garbage [ 98.996029][ T5413] cdc_wdm 6-1:1.0: skipping garbage [ 99.007440][ T5413] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 99.022024][ T5413] cdc_wdm 6-1:1.0: Unknown control protocol [ 99.335056][ T58] usb 6-1: USB disconnect, device number 3 [ 99.339063][ T6079] cdc_wdm 6-1:1.0: Error autopm - -16 [ 99.504207][ T6090] netlink: 256 bytes leftover after parsing attributes in process `syz.0.192'. [ 100.154281][ T6033] usb 8-1: USB disconnect, device number 3 [ 100.291929][ T2797] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.476161][ T2797] usb 5-1: Using ep0 maxpacket: 8 [ 100.484123][ T2797] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.488709][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.495671][ T2797] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.503986][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.510506][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.519223][ T2797] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.522782][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.527700][ T2797] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.532707][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.537499][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.543281][ T2797] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.546482][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.550674][ T2797] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.555225][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.558851][ T2797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.569471][ T2797] usb 5-1: string descriptor 0 read error: -22 [ 100.572339][ T2797] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.575817][ T2797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.591475][ T2797] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.699344][ T6122] binder: 6121:6122 ioctl c0306201 0 returned -14 [ 100.813142][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 100.813152][ T39] audit: type=1400 audit(1725094129.583:302): avc: denied { bind } for pid=6125 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.846427][ T39] audit: type=1400 audit(1725094129.613:303): avc: denied { create } for pid=6127 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.859067][ T39] audit: type=1400 audit(1725094129.633:304): avc: denied { getopt } for pid=6127 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.964155][ T39] audit: type=1400 audit(1725094129.743:305): avc: denied { mounton } for pid=6134 comm="syz.1.204" path="mnt:[4026532893]" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.060820][ T39] audit: type=1400 audit(1725094129.833:306): avc: denied { unmount } for pid=5349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.281894][ T6033] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 101.476607][ T6033] usb 7-1: Using ep0 maxpacket: 16 [ 101.481212][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 101.491342][ T6033] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 101.496547][ T6033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.500088][ T6033] usb 7-1: Product: syz [ 101.503335][ T6033] usb 7-1: Manufacturer: syz [ 101.505487][ T6033] usb 7-1: SerialNumber: syz [ 101.510512][ T6033] usb 7-1: config 0 descriptor?? [ 101.515110][ T6033] hub 7-1:0.0: bad descriptor, ignoring hub [ 101.517786][ T6033] hub 7-1:0.0: probe with driver hub failed with error -5 [ 101.525669][ T6033] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.779429][ T6131] Invalid ELF header magic: != ELF [ 101.781902][ T39] audit: type=1400 audit(1725094130.553:307): avc: denied { module_load } for pid=6125 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 101.811990][ T5395] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 101.853587][ T5368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.860569][ T5368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.865358][ T5368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.873382][ T5368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.877949][ T5368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.882250][ T5368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.900729][ T39] audit: type=1400 audit(1725094130.673:308): avc: denied { mounton } for pid=6150 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.006375][ T5395] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 102.009839][ T5395] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.016190][ T5395] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 102.019855][ T5395] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 102.023569][ T5395] usb 8-1: Manufacturer: syz [ 102.028951][ T5395] usb 8-1: config 0 descriptor?? [ 102.030685][ T39] audit: type=1400 audit(1725094130.803:309): avc: denied { rename } for pid=4818 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.062933][ T39] audit: type=1400 audit(1725094130.803:310): avc: denied { unlink } for pid=4818 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.075843][ T39] audit: type=1400 audit(1725094130.803:311): avc: denied { create } for pid=4818 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.102039][ T5395] rc_core: IR keymap rc-hauppauge not found [ 102.103407][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 102.104395][ T5395] Registered IR keymap rc-empty [ 102.117589][ T5395] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 102.123814][ T5395] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input5 [ 102.298311][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.302991][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.306176][ T6150] bridge_slave_0: entered allmulticast mode [ 102.310995][ T6150] bridge_slave_0: entered promiscuous mode [ 102.318254][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.320868][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.323456][ T6150] bridge_slave_1: entered allmulticast mode [ 102.327340][ T6150] bridge_slave_1: entered promiscuous mode [ 102.401357][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.414331][ T6150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.508798][ T6150] team0: Port device team_slave_0 added [ 102.516011][ T6150] team0: Port device team_slave_1 added [ 102.592182][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.595567][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.607216][ T6150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.613264][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.615713][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.627410][ T6150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.743205][ T6150] hsr_slave_0: entered promiscuous mode [ 102.748145][ T6150] hsr_slave_1: entered promiscuous mode [ 102.753483][ T6150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.756741][ T6150] Cannot create hsr debugfs directory [ 103.023133][ T6150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.123767][ T6150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.217949][ T58] usb 7-1: USB disconnect, device number 3 [ 103.245058][ T6150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.330407][ T6150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.457818][ T6150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.467125][ T6150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.478639][ T6150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.486532][ T6150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.565003][ T6150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.585624][ T6150] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.594809][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.597500][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.609223][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.612460][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.695543][ T58] usb 8-1: USB disconnect, device number 4 [ 103.823387][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.876762][ T6150] veth0_vlan: entered promiscuous mode [ 103.885726][ T6150] veth1_vlan: entered promiscuous mode [ 103.902630][ T5368] Bluetooth: hci0: command tx timeout [ 103.916359][ T6150] veth0_macvtap: entered promiscuous mode [ 103.922776][ T6150] veth1_macvtap: entered promiscuous mode [ 103.937307][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.941366][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.945554][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.949976][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.954396][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.958997][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.968175][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.973545][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.980591][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.993031][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.997206][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.001478][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.006381][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.010690][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.015723][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.019927][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.019974][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.023165][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.038137][ T6150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.038165][ T6150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.038188][ T6150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.038211][ T6150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.099760][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.099779][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.140512][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.140532][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.172060][ T6169] netlink: 188 bytes leftover after parsing attributes in process `syz.2.212'. [ 104.172106][ T6169] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 104.172118][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 104.553552][ T13] bridge_slave_1: left allmulticast mode [ 104.556589][ T13] bridge_slave_1: left promiscuous mode [ 104.560151][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.571349][ T13] bridge_slave_0: left allmulticast mode [ 104.571929][ T5359] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 104.575041][ T13] bridge_slave_0: left promiscuous mode [ 104.580585][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.628023][ T6185] No control pipe specified [ 104.775801][ T5359] usb 8-1: Using ep0 maxpacket: 8 [ 104.785005][ T5359] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.788861][ T5359] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.792519][ T5359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 104.797342][ T5359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 104.801618][ T5359] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.807030][ T5359] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.822892][ T5359] hub 8-1:1.0: bad descriptor, ignoring hub [ 104.828715][ T5359] hub 8-1:1.0: probe with driver hub failed with error -5 [ 104.831714][ T5359] cdc_wdm 8-1:1.0: skipping garbage [ 104.835213][ T5359] cdc_wdm 8-1:1.0: skipping garbage [ 104.838280][ T5359] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 104.841177][ T5359] cdc_wdm 8-1:1.0: Unknown control protocol [ 104.971895][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.980901][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.987261][ T13] bond0 (unregistering): Released all slaves [ 104.997582][ T13] bond1 (unregistering): Released all slaves [ 105.023657][ T5359] usb 5-1: USB disconnect, device number 6 [ 105.143235][ T2797] usb 8-1: USB disconnect, device number 5 [ 105.313439][ T6192] 9pnet_virtio: no channels available for device syz [ 105.614069][ T13] hsr_slave_0: left promiscuous mode [ 105.618378][ T13] hsr_slave_1: left promiscuous mode [ 105.625197][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.628354][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.635798][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.639009][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.693039][ T13] veth1_macvtap: left promiscuous mode [ 105.695967][ T13] veth0_macvtap: left promiscuous mode [ 105.698423][ T13] veth1_vlan: left promiscuous mode [ 105.700620][ T13] veth0_vlan: left promiscuous mode [ 105.984928][ T5368] Bluetooth: hci0: command tx timeout [ 106.346998][ T6212] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 106.467932][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 106.467946][ T39] audit: type=1400 audit(1725094135.243:319): avc: denied { read } for pid=6211 comm="syz.1.224" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.493497][ T39] audit: type=1400 audit(1725094135.263:320): avc: denied { open } for pid=6211 comm="syz.1.224" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.798475][ T6205] block nbd0: shutting down sockets [ 107.029429][ T13] team0 (unregistering): Port device team_slave_1 removed [ 107.137020][ T13] team0 (unregistering): Port device team_slave_0 removed [ 107.762075][ T6203] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 107.770242][ T6199] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 107.774782][ T6199] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 107.781353][ T6199] team0: Port device wlan1 added [ 107.981271][ T39] audit: type=1400 audit(1725094136.753:321): avc: denied { write } for pid=6230 comm="syz.1.232" name="event2" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.014180][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 108.017382][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.232'. [ 108.023993][ T39] audit: type=1400 audit(1725094136.753:322): avc: denied { remount } for pid=6230 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.031314][ T39] audit: type=1400 audit(1725094136.763:323): avc: denied { create } for pid=6230 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.171510][ T39] audit: type=1400 audit(1725094136.943:324): avc: denied { sqpoll } for pid=6228 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.180565][ T39] audit: type=1400 audit(1725094136.943:325): avc: denied { read } for pid=6228 comm="syz.3.231" dev="sockfs" ino=11666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.201031][ T39] audit: type=1400 audit(1725094136.963:326): avc: denied { write } for pid=6228 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.225488][ T6246] fuse: Bad value for 'user_id' [ 108.227974][ T6246] fuse: Bad value for 'user_id' [ 108.285922][ T6249] bridge0: entered allmulticast mode [ 108.301394][ T6249] pimreg: entered allmulticast mode [ 108.339671][ T39] audit: type=1400 audit(1725094137.113:327): avc: denied { write } for pid=6248 comm="syz.0.237" name="/" dev="9p" ino=36575594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.354310][ T39] audit: type=1400 audit(1725094137.113:328): avc: denied { add_name } for pid=6248 comm="syz.0.237" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.401899][ T5394] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 108.611948][ T5394] usb 7-1: Using ep0 maxpacket: 8 [ 108.616837][ T5394] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.621135][ T5394] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.625103][ T5394] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 108.629161][ T5394] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 108.633791][ T5394] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.637711][ T5394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.664231][ T5394] hub 7-1:1.0: bad descriptor, ignoring hub [ 108.669594][ T5394] hub 7-1:1.0: probe with driver hub failed with error -5 [ 108.679697][ T5394] cdc_wdm 7-1:1.0: skipping garbage [ 108.683096][ T5394] cdc_wdm 7-1:1.0: skipping garbage [ 108.686824][ T5394] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 108.690664][ T5394] cdc_wdm 7-1:1.0: Unknown control protocol [ 108.982601][ T6033] usb 7-1: USB disconnect, device number 4 [ 108.986178][ T6239] cdc_wdm 7-1:1.0: Error autopm - -16 [ 109.460899][ T6262] FAULT_INJECTION: forcing a failure. [ 109.460899][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.467391][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.0.242 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 109.472019][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.476686][ T6262] Call Trace: [ 109.478135][ T6262] [ 109.479454][ T6262] dump_stack_lvl+0x16c/0x1f0 [ 109.481532][ T6262] should_fail_ex+0x497/0x5b0 [ 109.483053][ T6264] Illegal XDP return value 4294967274 on prog (id 63) dev N/A, expect packet loss! [ 109.483616][ T6262] _copy_to_user+0x30/0xc0 [ 109.489141][ T6262] simple_read_from_buffer+0xd0/0x160 [ 109.491527][ T6262] proc_fail_nth_read+0x19e/0x280 [ 109.493768][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.496244][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.498690][ T6262] vfs_read+0x1d4/0xbd0 [ 109.501078][ T6262] ? __fdget_pos+0xeb/0x180 [ 109.503016][ T6262] ? __pfx_vfs_read+0x10/0x10 [ 109.505091][ T6262] ? __pfx___mutex_lock+0x10/0x10 [ 109.507329][ T6262] ? __fget_files+0x256/0x400 [ 109.509357][ T6262] ksys_read+0x12f/0x260 [ 109.511211][ T6262] ? __pfx_ksys_read+0x10/0x10 [ 109.513298][ T6262] do_syscall_64+0xcd/0x250 [ 109.515213][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.517758][ T6262] RIP: 0033:0x7f39ad7788fc [ 109.519735][ T6262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 109.527607][ T6262] RSP: 002b:00007f39ae480030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.530583][ T6262] RAX: ffffffffffffffda RBX: 00007f39ad915f80 RCX: 00007f39ad7788fc [ 109.533751][ T6262] RDX: 000000000000000f RSI: 00007f39ae4800a0 RDI: 0000000000000004 [ 109.537200][ T6262] RBP: 00007f39ae480090 R08: 0000000000000000 R09: 0000000000000000 [ 109.540370][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.543296][ T6262] R13: 0000000000000000 R14: 00007f39ad915f80 R15: 00007ffc7fe3d778 [ 109.546268][ T6262] [ 109.930498][ T6279] FAULT_INJECTION: forcing a failure. [ 109.930498][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.937331][ T6279] CPU: 2 UID: 0 PID: 6279 Comm: syz.3.249 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 109.942519][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.947102][ T6279] Call Trace: [ 109.948555][ T6279] [ 109.949837][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 109.951875][ T6279] should_fail_ex+0x497/0x5b0 [ 109.953891][ T6279] _copy_from_user+0x30/0xf0 [ 109.955883][ T6279] copy_msghdr_from_user+0x99/0x160 [ 109.957959][ T6279] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 109.960065][ T6279] ? __pfx___lock_acquire+0x10/0x10 [ 109.961825][ T6279] ___sys_sendmsg+0xff/0x1e0 [ 109.963428][ T6279] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.965201][ T6279] ? __pfx_lock_release+0x10/0x10 [ 109.966930][ T6279] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 109.968885][ T6279] ? __fget_light+0x173/0x210 [ 109.970587][ T6279] __sys_sendmmsg+0x1a1/0x450 [ 109.972262][ T6279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 109.974027][ T6279] ? vfs_write+0x14d/0x1140 [ 109.975670][ T6279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.977991][ T6279] ? fput+0x32/0x390 [ 109.979484][ T6279] ? ksys_write+0x1ab/0x260 [ 109.981480][ T6279] ? __pfx_ksys_write+0x10/0x10 [ 109.983147][ T6279] __x64_sys_sendmmsg+0x9c/0x100 [ 109.984895][ T6279] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.986679][ T6279] do_syscall_64+0xcd/0x250 [ 109.988314][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.990443][ T6279] RIP: 0033:0x7fc5b3379eb9 [ 109.992019][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.998798][ T6279] RSP: 002b:00007fc5b2dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.002435][ T6279] RAX: ffffffffffffffda RBX: 00007fc5b3515f80 RCX: 00007fc5b3379eb9 [ 110.005240][ T6279] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 110.007954][ T6279] RBP: 00007fc5b2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 110.010790][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.013748][ T6279] R13: 0000000000000000 R14: 00007fc5b3515f80 R15: 00007ffe86873c78 [ 110.016714][ T6279] [ 110.072028][ T5368] Bluetooth: hci0: command tx timeout [ 110.216867][ T6290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 110.586500][ T6306] tipc: Started in network mode [ 110.589552][ T6306] tipc: Node identity ffffffff, cluster identity 4711 [ 110.589566][ T6306] tipc: Node number set to 4294967295 [ 111.394602][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.395210][ T6338] 9p: Unknown Cache mode or invalid value fscach [ 111.452676][ T2797] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 111.572016][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 111.578343][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.582539][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.586155][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 111.590518][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 111.599151][ T30] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.602965][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.620602][ T30] hub 5-1:1.0: bad descriptor, ignoring hub [ 111.624101][ T30] hub 5-1:1.0: probe with driver hub failed with error -5 [ 111.626811][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 111.628563][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 111.633776][ T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 111.634232][ T2797] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.637245][ T30] cdc_wdm 5-1:1.0: Unknown control protocol [ 111.644241][ T2797] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.653098][ T2797] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.660403][ T2797] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 111.679319][ T2797] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 111.691558][ T2797] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.696339][ T2797] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.704016][ T2797] usb 7-1: Product: syz [ 111.707892][ T2797] usb 7-1: Manufacturer: syz [ 111.719319][ T2797] cdc_wdm 7-1:1.0: skipping garbage [ 111.721559][ T2797] cdc_wdm 7-1:1.0: skipping garbage [ 111.731028][ T2797] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 111.733861][ T2797] cdc_wdm 7-1:1.0: Unknown control protocol [ 111.972656][ T6033] usb 5-1: USB disconnect, device number 7 [ 111.978599][ T58] usb 7-1: USB disconnect, device number 5 [ 112.232105][ T2797] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.411989][ T2797] usb 8-1: Using ep0 maxpacket: 16 [ 112.416257][ T2797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.421068][ T2797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.424979][ T2797] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 112.431385][ T2797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.436469][ T2797] usb 8-1: config 0 descriptor?? [ 112.722637][ T5499] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 112.864370][ T2797] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5015.0002/input/input6 [ 112.902415][ T5499] usb 6-1: Using ep0 maxpacket: 16 [ 112.907270][ T5499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.911133][ T5499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.914549][ T5499] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 112.918049][ T5499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.922404][ T5499] usb 6-1: config 0 descriptor?? [ 112.958270][ T2797] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5015.0002/input/input7 [ 112.975442][ T2797] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5015.0002/input/input8 [ 113.043012][ T6343] FAULT_INJECTION: forcing a failure. [ 113.043012][ T6343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.048387][ T6343] CPU: 0 UID: 0 PID: 6343 Comm: syz.3.270 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 113.052676][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.056817][ T6343] Call Trace: [ 113.058106][ T6343] [ 113.059242][ T6343] dump_stack_lvl+0x16c/0x1f0 [ 113.061078][ T6343] should_fail_ex+0x497/0x5b0 [ 113.062971][ T6343] _copy_to_user+0x30/0xc0 [ 113.064727][ T6343] simple_read_from_buffer+0xd0/0x160 [ 113.066804][ T6343] proc_fail_nth_read+0x19e/0x280 [ 113.069478][ T6343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.071512][ T6343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.073628][ T6343] vfs_read+0x1d4/0xbd0 [ 113.075490][ T6343] ? __fdget_pos+0xeb/0x180 [ 113.077513][ T6343] ? __pfx_vfs_read+0x10/0x10 [ 113.079516][ T6343] ? __pfx___mutex_lock+0x10/0x10 [ 113.081397][ T6343] ? __fget_files+0x256/0x400 [ 113.083284][ T6343] ksys_read+0x12f/0x260 [ 113.085059][ T6343] ? __pfx_ksys_read+0x10/0x10 [ 113.087018][ T6343] do_syscall_64+0xcd/0x250 [ 113.088891][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.091261][ T6343] RIP: 0033:0x7fc5b33788fc [ 113.092832][ T6343] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 113.100232][ T6343] RSP: 002b:00007fc5b2dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.103636][ T6343] RAX: ffffffffffffffda RBX: 00007fc5b3515f80 RCX: 00007fc5b33788fc [ 113.106713][ T6343] RDX: 000000000000000f RSI: 00007fc5b2dff0a0 RDI: 0000000000000004 [ 113.109910][ T6343] RBP: 00007fc5b2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.113188][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.116429][ T6343] R13: 0000000000000000 R14: 00007fc5b3515f80 R15: 00007ffe86873c78 [ 113.119583][ T6343] [ 113.331280][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.337095][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.346306][ T5499] hid (null): invalid report_size 1729994413 [ 113.348887][ T5499] hid (null): invalid report_size 46228 [ 113.351160][ T5499] hid (null): global environment stack overflow [ 113.361098][ T5499] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5015.0003/input/input9 [ 113.436546][ T5499] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5015.0003/input/input10 [ 113.453087][ T5499] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5015.0003/input/input11 [ 114.253256][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 114.253271][ T39] audit: type=1326 audit(1725094143.023:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.278" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a80579eb9 code=0x0 [ 114.290567][ T6371] 9p: Unknown Cache mode or invalid value fscach [ 115.128387][ T6382] FAULT_INJECTION: forcing a failure. [ 115.128387][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.133979][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.1.281 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 115.138392][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.142858][ T6382] Call Trace: [ 115.144287][ T6382] [ 115.145546][ T6382] dump_stack_lvl+0x16c/0x1f0 [ 115.147554][ T6382] should_fail_ex+0x497/0x5b0 [ 115.149685][ T6382] _copy_from_user+0x30/0xf0 [ 115.152458][ T6382] do_seccomp+0x200/0x2650 [ 115.154391][ T6382] ? __pfx_do_seccomp+0x10/0x10 [ 115.156479][ T6382] ? fput+0x32/0x390 [ 115.158151][ T6382] ? ksys_write+0x1ab/0x260 [ 115.160105][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 115.162121][ T6382] do_syscall_64+0xcd/0x250 [ 115.164323][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.166878][ T6382] RIP: 0033:0x7f6a80579eb9 [ 115.168849][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.177173][ T6382] RSP: 002b:00007f6a813c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 115.180716][ T6382] RAX: ffffffffffffffda RBX: 00007f6a80715f80 RCX: 00007f6a80579eb9 [ 115.184079][ T6382] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000001 [ 115.187399][ T6382] RBP: 00007f6a813c5090 R08: 0000000000000000 R09: 0000000000000000 [ 115.190805][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.194107][ T6382] R13: 0000000000000000 R14: 00007f6a80715f80 R15: 00007ffccb55f178 [ 115.197256][ T6382] [ 115.350889][ T6391] Cannot find set identified by id 0 to match [ 115.376833][ T6391] can0: slcan on ttyS3. [ 115.482441][ T6390] can0 (unregistered): slcan off ttyS3. [ 116.275548][ T6327] cdc_wdm 5-1:1.0: Error autopm - -16 [ 116.280225][ T6335] cdc_wdm 5-1:1.0: Error autopm - -16 [ 116.305866][ T2797] kye 0003:0458:5015.0002: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 116.319155][ T5499] kye 0003:0458:5015.0003: input,hiddev2,hidraw2: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 116.379951][ T5499] usb 6-1: USB disconnect, device number 4 [ 116.398537][ T2797] usb 8-1: USB disconnect, device number 6 [ 116.545117][ T39] audit: type=1400 audit(1725094145.323:342): avc: denied { create } for pid=6398 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 116.845609][ T6407] netlink: 188 bytes leftover after parsing attributes in process `syz.0.288'. [ 116.849681][ T6407] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 116.854772][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 116.951939][ T5499] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 117.155291][ T5499] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.163695][ T5499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.170768][ T5499] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.179393][ T5499] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.183046][ T5499] usb 6-1: Manufacturer: syz [ 117.186797][ T5499] usb 6-1: config 0 descriptor?? [ 117.302190][ T5499] rc_core: IR keymap rc-hauppauge not found [ 117.304870][ T5499] Registered IR keymap rc-empty [ 117.313609][ T5499] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 117.334470][ T5499] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 117.461018][ T5499] usb 6-1: USB disconnect, device number 5 [ 117.475075][ T6423] FAULT_INJECTION: forcing a failure. [ 117.475075][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 117.480806][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.3.291 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 117.485084][ T6423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.489272][ T6423] Call Trace: [ 117.490423][ T6423] [ 117.491695][ T6423] dump_stack_lvl+0x16c/0x1f0 [ 117.493858][ T6423] should_fail_ex+0x497/0x5b0 [ 117.495879][ T6423] should_failslab+0xc2/0x120 [ 117.497857][ T6423] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 117.500226][ T6423] ? skb_clone+0x190/0x3f0 [ 117.502134][ T6423] skb_clone+0x190/0x3f0 [ 117.504007][ T6423] ip6_finish_output2+0xc6f/0x1a50 [ 117.506487][ T6423] ? ip6_copy_metadata+0x8a0/0xdc0 [ 117.508845][ T6423] ip6_fragment+0x20d7/0x27f0 [ 117.510823][ T6423] ? __pfx_ip6_finish_output2+0x10/0x10 [ 117.513277][ T6423] ? __pfx_ip6_fragment+0x10/0x10 [ 117.515443][ T6423] ? __pfx_lock_release+0x10/0x10 [ 117.517474][ T6423] ip6_finish_output+0x395/0x1300 [ 117.519559][ T6423] ip6_output+0x1f8/0x540 [ 117.521506][ T6423] ? __pfx_ip6_output+0x10/0x10 [ 117.523708][ T6423] ip6_local_out+0xcd/0x4a0 [ 117.525769][ T6423] ip6_send_skb+0x112/0x460 [ 117.527833][ T6423] udp_v6_send_skb+0x924/0x1870 [ 117.530085][ T6423] udp_v6_push_pending_frames+0x13c/0x220 [ 117.532620][ T6423] udpv6_sendmsg+0x1777/0x3030 [ 117.534781][ T6423] ? avc_has_perm_noaudit+0x119/0x3a0 [ 117.536979][ T6423] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.539423][ T6423] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 117.541534][ T6423] ? avc_has_perm_noaudit+0x143/0x3a0 [ 117.543628][ T6423] ? avc_has_perm+0x11b/0x1c0 [ 117.545754][ T6423] ? find_held_lock+0x2d/0x110 [ 117.547943][ T6423] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 117.550519][ T6423] ? inet6_sendmsg+0x105/0x140 [ 117.552677][ T6423] inet6_sendmsg+0x105/0x140 [ 117.554737][ T6423] __sys_sendto+0x371/0x4e0 [ 117.556416][ T6423] ? __pfx___sys_sendto+0x10/0x10 [ 117.558673][ T6423] ? ksys_write+0x1ab/0x260 [ 117.560499][ T6423] ? __pfx_ksys_write+0x10/0x10 [ 117.562640][ T6423] __x64_sys_sendto+0xe0/0x1c0 [ 117.564830][ T6423] ? do_syscall_64+0x91/0x250 [ 117.567417][ T6423] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.569731][ T6423] do_syscall_64+0xcd/0x250 [ 117.571702][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.574286][ T6423] RIP: 0033:0x7fc5b3379eb9 [ 117.576119][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.584487][ T6423] RSP: 002b:00007fc5b2dde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.588162][ T6423] RAX: ffffffffffffffda RBX: 00007fc5b3516058 RCX: 00007fc5b3379eb9 [ 117.591791][ T6423] RDX: 000000000000000f RSI: 0000000020000100 RDI: 0000000000000004 [ 117.595334][ T6423] RBP: 00007fc5b2dde090 R08: 0000000000000000 R09: 0000000000000000 [ 117.598853][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.602582][ T6423] R13: 0000000000000000 R14: 00007fc5b3516058 R15: 00007ffe86873c78 [ 117.606261][ T6423] [ 118.705116][ T6434] FAULT_INJECTION: forcing a failure. [ 118.705116][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 118.710980][ T6434] CPU: 3 UID: 0 PID: 6434 Comm: syz.3.294 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 118.715494][ T6434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.719985][ T6434] Call Trace: [ 118.721510][ T6434] [ 118.722852][ T6434] dump_stack_lvl+0x16c/0x1f0 [ 118.724620][ T6434] should_fail_ex+0x497/0x5b0 [ 118.726222][ T6434] should_failslab+0xc2/0x120 [ 118.727873][ T6434] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 118.730091][ T6434] ? skb_clone+0x190/0x3f0 [ 118.732061][ T6434] skb_clone+0x190/0x3f0 [ 118.733923][ T6434] netlink_deliver_tap+0xab3/0xd90 [ 118.736136][ T6434] netlink_unicast+0x6b4/0x7f0 [ 118.738223][ T6434] ? __pfx_netlink_unicast+0x10/0x10 [ 118.740428][ T6434] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 118.742389][ T6434] netlink_ack+0x6a8/0xb90 [ 118.744349][ T6434] netlink_rcv_skb+0x348/0x440 [ 118.746412][ T6434] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.748764][ T6434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.751097][ T6434] ? netlink_deliver_tap+0x1ae/0xd90 [ 118.753292][ T6434] netlink_unicast+0x53c/0x7f0 [ 118.754903][ T6434] ? __pfx_netlink_unicast+0x10/0x10 [ 118.756704][ T6434] netlink_sendmsg+0x8b8/0xd70 [ 118.758437][ T6434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.760438][ T6434] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.762722][ T6434] sock_sendmsg+0x3cb/0x470 [ 118.764468][ T6434] ? pipe_lock+0x64/0x80 [ 118.765911][ T6434] ? __pfx_sock_sendmsg+0x10/0x10 [ 118.767627][ T6434] ? __pfx_lock_release+0x10/0x10 [ 118.769462][ T6434] splice_to_socket+0xab2/0x1040 [ 118.771374][ T6434] ? __pfx_splice_to_socket+0x10/0x10 [ 118.773614][ T6434] ? mark_lock+0xb5/0xc60 [ 118.775574][ T6434] ? inode_has_perm+0x16f/0x1d0 [ 118.777732][ T6434] ? bpf_lsm_file_permission+0x9/0x10 [ 118.780083][ T6434] ? security_file_permission+0x98/0xc0 [ 118.782555][ T6434] ? __pfx_splice_to_socket+0x10/0x10 [ 118.784889][ T6434] do_splice+0x148c/0x1f90 [ 118.786832][ T6434] ? find_held_lock+0x2d/0x110 [ 118.788910][ T6434] ? __pfx_do_splice+0x10/0x10 [ 118.791017][ T6434] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 118.793383][ T6434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.795933][ T6434] __do_splice+0x327/0x360 [ 118.797888][ T6434] ? __pfx___do_splice+0x10/0x10 [ 118.800045][ T6434] __x64_sys_splice+0x1d2/0x260 [ 118.802160][ T6434] do_syscall_64+0xcd/0x250 [ 118.804139][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.806641][ T6434] RIP: 0033:0x7fc5b3379eb9 [ 118.808522][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.816517][ T6434] RSP: 002b:00007fc5b2dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 118.820041][ T6434] RAX: ffffffffffffffda RBX: 00007fc5b3516058 RCX: 00007fc5b3379eb9 [ 118.823315][ T6434] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 118.826620][ T6434] RBP: 00007fc5b2dde090 R08: 000000000004ffe6 R09: 0000000000000000 [ 118.829964][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.833335][ T6434] R13: 0000000000000001 R14: 00007fc5b3516058 R15: 00007ffe86873c78 [ 118.836772][ T6434] [ 119.028266][ T5368] Bluetooth: hci3: unexpected event 0x13 length: 0 < 1 [ 119.031535][ T39] audit: type=1400 audit(1725094147.803:343): avc: denied { ioctl } for pid=6435 comm="syz.0.295" path="socket:[13941]" dev="sockfs" ino=13941 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.193425][ T6442] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.462059][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 119.642197][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 119.646463][ T58] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.650337][ T58] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.652205][ T6033] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.662311][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 119.667372][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 119.684692][ T58] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 119.687859][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.705817][ T58] hub 6-1:1.0: bad descriptor, ignoring hub [ 119.708191][ T58] hub 6-1:1.0: probe with driver hub failed with error -5 [ 119.711269][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 119.717265][ T58] cdc_wdm 6-1:1.0: skipping garbage [ 119.737667][ T58] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 119.737685][ T58] cdc_wdm 6-1:1.0: Unknown control protocol [ 119.824741][ T6450] netlink: 188 bytes leftover after parsing attributes in process `syz.3.299'. [ 119.824764][ T6450] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 119.824798][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'. [ 119.856127][ T6033] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 119.856202][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.861042][ T6033] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 119.861064][ T6033] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 119.861081][ T6033] usb 5-1: Manufacturer: syz [ 119.863223][ T6033] usb 5-1: config 0 descriptor?? [ 119.992230][ T6033] rc_core: IR keymap rc-hauppauge not found [ 119.995290][ T6033] Registered IR keymap rc-empty [ 119.999659][ T6033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 120.007690][ T6033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 120.045046][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.047995][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.050335][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.053294][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.055831][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.058469][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.061358][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.063920][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.066433][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.068693][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.068903][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.073871][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.076349][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.079043][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.082191][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.084769][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.087248][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.089684][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.092255][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 120.094639][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 120.106556][ T831] usb 6-1: Failed to suspend device, error -71 [ 120.110585][ T831] usb 6-1: USB disconnect, device number 6 [ 120.868821][ T30] usb 5-1: USB disconnect, device number 8 [ 121.315692][ T6472] binder: 6471:6472 ioctl c0306201 20005dc0 returned -11 [ 121.417862][ T39] audit: type=1400 audit(1725094150.193:344): avc: denied { read } for pid=6479 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.735175][ T6491] netlink: 188 bytes leftover after parsing attributes in process `syz.1.312'. [ 121.739913][ T6491] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 121.744363][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 122.731874][ T58] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 122.779216][ T39] audit: type=1400 audit(1725094151.553:345): avc: denied { search } for pid=5056 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.912467][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 122.916745][ T58] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.919280][ T39] audit: type=1400 audit(1725094151.693:346): avc: denied { read } for pid=6520 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.921187][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.921230][ T58] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.940491][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 122.962794][ T6519] FAULT_INJECTION: forcing a failure. [ 122.962794][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 122.968396][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.0.321 Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 [ 122.973442][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.978122][ T6519] Call Trace: [ 122.979613][ T6519] [ 122.980902][ T6519] dump_stack_lvl+0x16c/0x1f0 [ 122.983009][ T6519] should_fail_ex+0x497/0x5b0 [ 122.985235][ T6519] should_failslab+0xc2/0x120 [ 122.987380][ T6519] __kmalloc_cache_noprof+0x6b/0x300 [ 122.989634][ T6519] ? proc_thread_self_get_link+0x1c6/0x240 [ 122.992092][ T6519] proc_thread_self_get_link+0x1c6/0x240 [ 122.994448][ T6519] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 122.997150][ T6519] step_into+0x19b5/0x2230 [ 122.999538][ T6519] ? __pfx_step_into+0x10/0x10 [ 123.001345][ T39] audit: type=1400 audit(1725094151.713:347): avc: denied { open } for pid=6520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.001671][ T6519] path_openat+0x44a/0x2d20 [ 123.011975][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.013536][ T6519] ? __pfx_path_openat+0x10/0x10 [ 123.013563][ T6519] ? __pfx___lock_acquire+0x10/0x10 [ 123.020021][ T58] usb 6-1: config 0 descriptor?? [ 123.021168][ T6519] ? find_held_lock+0x2d/0x110 [ 123.025457][ T6519] do_filp_open+0x1dc/0x430 [ 123.027283][ T6519] ? __pfx_do_filp_open+0x10/0x10 [ 123.029491][ T39] audit: type=1400 audit(1725094151.713:348): avc: denied { getattr } for pid=6520 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.035298][ T6519] ? find_held_lock+0x2d/0x110 [ 123.035342][ T6519] ? _raw_spin_unlock+0x28/0x50 [ 123.035365][ T6519] ? alloc_fd+0x2d7/0x6c0 [ 123.047376][ T39] audit: type=1400 audit(1725094151.723:349): avc: denied { write } for pid=6517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.047995][ T6519] do_sys_openat2+0x17a/0x1e0 [ 123.048026][ T6519] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.050302][ T39] audit: type=1400 audit(1725094151.723:350): avc: denied { add_name } for pid=6517 comm="dhcpcd-run-hook" name="resolv.conf.nr0.2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.052163][ T6519] __x64_sys_openat+0x175/0x210 [ 123.052191][ T6519] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.052212][ T6519] ? ksys_write+0x1ab/0x260 [ 123.052242][ T6519] do_syscall_64+0xcd/0x250 [ 123.052270][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.066278][ T58] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 123.066864][ T6519] RIP: 0033:0x7f39ad778850 [ 123.092283][ T6519] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 123.100363][ T6519] RSP: 002b:00007f39ae47ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 123.103782][ T6519] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39ad778850 [ 123.107065][ T6519] RDX: 0000000000000000 RSI: 00007f39ae47ffa0 RDI: 00000000ffffff9c [ 123.110418][ T6519] RBP: 00007f39ae47ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 123.113813][ T6519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 123.117085][ T6519] R13: 0000000000000000 R14: 00007f39ad915f80 R15: 00007ffc7fe3d778 [ 123.120322][ T6519] [ 123.155288][ T39] audit: type=1400 audit(1725094151.933:351): avc: denied { remove_name } for pid=6522 comm="rm" name="resolv.conf.nr0.2.link" dev="tmpfs" ino=2834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.172099][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 123.176608][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.180967][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.188110][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 123.196661][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 123.201428][ T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.207132][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.221129][ T25] hub 7-1:1.0: bad descriptor, ignoring hub [ 123.229630][ T25] hub 7-1:1.0: probe with driver hub failed with error -5 [ 123.233913][ T39] audit: type=1400 audit(1725094152.013:352): avc: denied { search } for pid=4818 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.256249][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 123.258522][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 123.265115][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 123.271465][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 123.552507][ T30] usb 7-1: USB disconnect, device number 6 [ 123.555862][ T6509] cdc_wdm 7-1:1.0: Error autopm - -16 [ 123.630528][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 124.053584][ T6545] netlink: 188 bytes leftover after parsing attributes in process `syz.0.326'. [ 124.058059][ T6545] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 124.062782][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 124.200149][ T5056] skbuff: skb_under_panic: text:ffffffff89fd546a len:24 put:20 head:ffff88802a0b9b00 data:ffff88802a0b9afe tail:0x16 end:0x140 dev:nr0.2 [ 124.206061][ T5056] ------------[ cut here ]------------ [ 124.208475][ T5056] kernel BUG at net/core/skbuff.c:205! [ 124.210660][ T5056] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 124.213824][ T5056] CPU: 2 UID: 0 PID: 5056 Comm: dhcpcd Not tainted 6.11.0-rc5-syzkaller-00207-gfb24560f31f9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.220103][ T5056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.224656][ T5056] RIP: 0010:skb_panic+0x157/0x1d0 [ 124.226760][ T5056] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 8b 4b 70 41 56 45 89 e8 48 c7 c7 80 3f 7a 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 0a ee 83 f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 04 38 02 f9 4c [ 124.234655][ T5056] RSP: 0018:ffffc9000404f668 EFLAGS: 00010286 [ 124.237147][ T5056] RAX: 0000000000000086 RBX: ffff88802335c780 RCX: ffffffff816c4a19 [ 124.239978][ T5056] RDX: 0000000000000000 RSI: ffffffff816cde56 RDI: 0000000000000005 [ 124.242944][ T5056] RBP: ffffffff8c7a52a0 R08: 0000000000000005 R09: 0000000000000000 [ 124.245991][ T5056] R10: 0000000000000201 R11: 0000000000000000 R12: ffffffff89fd546a [ 124.249235][ T5056] R13: 0000000000000014 R14: ffff88805209a130 R15: 0000000000000140 [ 124.252249][ T5056] FS: 00007f4e4cfb9740(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 124.255836][ T5056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.258253][ T5056] CR2: 00000000203e9000 CR3: 0000000028878000 CR4: 0000000000350ef0 [ 124.261369][ T5056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.264676][ T5056] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.267772][ T5056] Call Trace: [ 124.269186][ T5056] [ 124.270384][ T5056] ? show_regs+0x8c/0xa0 [ 124.271829][ T5056] ? die+0x36/0xa0 [ 124.273119][ T5056] ? do_trap+0x232/0x430 [ 124.274938][ T5056] ? skb_panic+0x157/0x1d0 [ 124.276743][ T5056] ? skb_panic+0x157/0x1d0 [ 124.278611][ T5056] ? do_error_trap+0xf4/0x230 [ 124.280542][ T5056] ? skb_panic+0x157/0x1d0 [ 124.282482][ T5056] ? handle_invalid_op+0x34/0x40 [ 124.284340][ T5056] ? skb_panic+0x157/0x1d0 [ 124.286008][ T5056] ? exc_invalid_op+0x2e/0x50 [ 124.287804][ T5056] ? asm_exc_invalid_op+0x1a/0x20 [ 124.289732][ T5056] ? nr_header+0x2a/0x3e0 [ 124.291383][ T5056] ? __wake_up_klogd.part.0+0x99/0xf0 [ 124.293421][ T5056] ? vprintk+0x86/0xa0 [ 124.294969][ T5056] ? skb_panic+0x157/0x1d0 [ 124.296627][ T5056] ? skb_panic+0x156/0x1d0 [ 124.298334][ T5056] ? rcu_is_watching+0x12/0xc0 [ 124.300160][ T5056] ? nr_header+0x2a/0x3e0 [ 124.301977][ T5056] skb_push+0xca/0xf0 [ 124.303709][ T5056] nr_header+0x2a/0x3e0 [ 124.305446][ T5056] ? __pfx_nr_header+0x10/0x10 [ 124.308114][ T5056] vlan_dev_hard_header+0x13f/0x520 [ 124.310210][ T5056] ? __pfx_vlan_dev_hard_header+0x10/0x10 [ 124.312253][ T5056] lapbeth_data_transmit+0x2a0/0x350 [ 124.314422][ T5056] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 124.316842][ T5056] lapb_data_transmit+0x93/0xc0 [ 124.318862][ T5056] lapb_transmit_buffer+0xce/0x390 [ 124.321009][ T5056] lapb_send_control+0x1c8/0x320 [ 124.323091][ T5056] lapb_establish_data_link+0xeb/0x110 [ 124.325372][ T5056] lapb_device_event+0x398/0x570 [ 124.327490][ T5056] notifier_call_chain+0xb9/0x410 [ 124.329591][ T5056] ? __pfx_lapb_device_event+0x10/0x10 [ 124.331858][ T5056] call_netdevice_notifiers_info+0xbe/0x140 [ 124.334137][ T5056] __dev_notify_flags+0x12d/0x2e0 [ 124.336045][ T5056] ? __pfx___dev_notify_flags+0x10/0x10 [ 124.338235][ T5056] ? __pfx___dev_change_flags+0x10/0x10 [ 124.340406][ T5056] dev_change_flags+0x10c/0x160 [ 124.342022][ T5056] devinet_ioctl+0x127a/0x1f10 [ 124.343906][ T5056] ? __pfx_devinet_ioctl+0x10/0x10 [ 124.346092][ T5056] ? _copy_from_user+0x5d/0xf0 [ 124.348164][ T5056] inet_ioctl+0x3aa/0x3f0 [ 124.350052][ T5056] ? __pfx_inet_ioctl+0x10/0x10 [ 124.352229][ T5056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.354768][ T5056] sock_do_ioctl+0x116/0x280 [ 124.356765][ T5056] ? __pfx_sock_do_ioctl+0x10/0x10 [ 124.358950][ T5056] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 124.361725][ T5056] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 124.364648][ T5056] sock_ioctl+0x22e/0x6c0 [ 124.366997][ T5056] ? __pfx_sock_ioctl+0x10/0x10 [ 124.368921][ T5056] ? selinux_file_ioctl+0x180/0x270 [ 124.370978][ T5056] ? selinux_file_ioctl+0xb4/0x270 [ 124.374831][ T5056] ? __pfx_sock_ioctl+0x10/0x10 [ 124.376760][ T5056] __x64_sys_ioctl+0x193/0x220 [ 124.378669][ T5056] do_syscall_64+0xcd/0x250 [ 124.380424][ T5056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.382660][ T5056] RIP: 0033:0x7f4e4d087d49 [ 124.384356][ T5056] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 124.391504][ T5056] RSP: 002b:00007ffeb96a1d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.394673][ T5056] RAX: ffffffffffffffda RBX: 00007f4e4cfb96c0 RCX: 00007f4e4d087d49 [ 124.397664][ T5056] RDX: 00007ffeb96b1f88 RSI: 0000000000008914 RDI: 000000000000001b [ 124.400692][ T5056] RBP: 00007ffeb96c2148 R08: 00007ffeb96b1f48 R09: 00007ffeb96b1ef8 [ 124.403743][ T5056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.406725][ T5056] R13: 00007ffeb96b1f88 R14: 0000000000000028 R15: 0000000000008914 [ 124.409778][ T5056] [ 124.410970][ T5056] Modules linked in: [ 124.412449][ T5056] ---[ end trace 0000000000000000 ]--- [ 124.414459][ T5056] RIP: 0010:skb_panic+0x157/0x1d0 [ 124.415981][ T5056] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 8b 4b 70 41 56 45 89 e8 48 c7 c7 80 3f 7a 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 0a ee 83 f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 04 38 02 f9 4c [ 124.422916][ T5056] RSP: 0018:ffffc9000404f668 EFLAGS: 00010286 [ 124.425536][ T5056] RAX: 0000000000000086 RBX: ffff88802335c780 RCX: ffffffff816c4a19 [ 124.429264][ T5056] RDX: 0000000000000000 RSI: ffffffff816cde56 RDI: 0000000000000005 [ 124.432468][ T5056] RBP: ffffffff8c7a52a0 R08: 0000000000000005 R09: 0000000000000000 [ 124.435522][ T5056] R10: 0000000000000201 R11: 0000000000000000 R12: ffffffff89fd546a [ 124.438574][ T5056] R13: 0000000000000014 R14: ffff88805209a130 R15: 0000000000000140 [ 124.441545][ T5056] FS: 00007f4e4cfb9740(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 124.445270][ T5056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.447945][ T5056] CR2: 00000000203e9000 CR3: 0000000028878000 CR4: 0000000000350ef0 [ 124.451236][ T5056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.454451][ T5056] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.457471][ T5056] Kernel panic - not syncing: Fatal exception in interrupt [ 124.461045][ T5056] Kernel Offset: disabled [ 124.462797][ T5056] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:49:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000cc37b80 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b8beb4 RDI=ffffc9000cc37b80 RBP=ffffffff84b8bea0 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000cc37b48 RIP=ffffffff84b8bedd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000206f5000 CR3=0000000047ace000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a093 ffffffff81307e22 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81307e22 ffffffff8100a093 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a093 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0006000c00000000 000000020006000c 0000000000000003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8204740c ffffffff8204737b ffffffff00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82047001 ffffffff82046f81 ffffffff82046f4e ffffffff82046f31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001c9114 RBX=0000000000000001 RCX=ffffffff8b16cb79 RDX=ffffed100d4e6fda RSI=ffffffff8bb0f880 RDI=ffffffff8163ab5c RBP=ffffed1003ad8910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6fd9 R10=ffff88806a737ecb R11=0000000000000001 R12=0000000000000001 R13=ffff88801d6c4880 R14=ffffffff90144098 R15=0000000000000000 RIP=ffffffff8b16df6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207f0000 CR3=0000000031bc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a093 ffffffff81307e22 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81307e22 ffffffff8100a093 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a093 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5b33e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0006000c00000000 000000020006000c 0000000000000003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8204740c ffffffff8204737b ffffffff00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff82047001 ffffffff82046f81 ffffffff82046f4e ffffffff82046f31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8502daa5 RDI=ffffffff9a5b2f20 RBP=ffffffff9a5b2ee0 RSP=ffffc9000404eff8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff8502da40 R15=0000000000000000 RIP=ffffffff8502dacf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4e4cfb9740 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000203e9000 CR3=0000000028878000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0718000000000000 000001002b000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad7e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad7e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad7e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad7e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad7e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad7e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad8eb488 00007f39ad8eb480 00007f39ad8eb478 00007f39ad8eb450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ae44d100 00007f39ad8eb440 00007f39ad8e0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ad8eb498 00007f39ad8eb490 00007f39ad8eb488 00007f39ad8eb480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40d31f77486920c3 51cfc08e25e856b9 9576d74fca2580a6 6a031a012208a60d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b37e9fbe4b61e6e 437440d31f774869 20c351cfc08e25e8 56b99576d74fca25 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a66a031a012208 a60d436d74688ee4 74c004824fbb286a e3cc03847f73bf38 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 763bd855cfd3ee68 59bde26ad0edf928 b832cdabfd792605 81e2051f03925649 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e5ecd6ed0777de14 ada7fba65f7c5ce8 4c15838e162656e6 ef4be2f833139a54 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801b8fbf40 RCX=ffffc90006791000 RDX=0000000000040000 RSI=ffffffff81f5fa77 RDI=ffff88801b8fbf40 RBP=ffff88801b8fbf40 RSP=ffffc90021bd7448 R8 =0000000000000006 R9 =0000000000000001 R10=0000000000000001 R11=1ffff110051b399a R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8b16be24 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f39ae4806c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000203ff000 CR3=0000000029760000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd98ee2120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f976f1e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f976f1e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f976f1e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f976f1e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f976f1e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f976f1e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000074 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000