last executing test programs: 22.490231324s ago: executing program 0 (id=668): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000500), 0x9, 0x4000) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000540)={0xeb66}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000180)="050000000e", 0x5}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') write$cgroup_int(r5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x44) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x800) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000400)={'nat\x00', 0x0, [0x2, 0x2, 0x8000000, 0x0, 0x6]}, &(0x7f0000000480)=0x54) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000028e, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xbf, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0xf, &(0x7f0000000140), &(0x7f0000000240), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000000c0), 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22.299650147s ago: executing program 0 (id=669): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfff}]}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="0200"], 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="130000001a001f00030300f9002304000a04d6", 0x13) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040) (async) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040) read$FUSE(r9, &(0x7f0000004200)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) (async) r12 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) finit_module(r12, 0x0, 0x1) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x20000001) (async) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x20000001) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x200, 0x0) write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, r11, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) 21.927982274s ago: executing program 0 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001a001307000000000000000000000000000000000000000000000001e00000020000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000926f82fdb28e758000000000000000000000000000000000000000000000000000008000c0006000000"], 0x140}}, 0x0) 21.750150554s ago: executing program 0 (id=679): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) ioctl$TIOCNXCL(r1, 0x540d) syz_open_dev$loop(&(0x7f0000000180), 0x9, 0xa00) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000011c0)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x1, 0x4, r1, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000140)}}) 13.251651625s ago: executing program 0 (id=679): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) ioctl$TIOCNXCL(r1, 0x540d) syz_open_dev$loop(&(0x7f0000000180), 0x9, 0xa00) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000011c0)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x1, 0x4, r1, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000140)}}) 6.548728502s ago: executing program 0 (id=679): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) ioctl$TIOCNXCL(r1, 0x540d) syz_open_dev$loop(&(0x7f0000000180), 0x9, 0xa00) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000011c0)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x1, 0x4, r1, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000140)}}) 5.555816438s ago: executing program 3 (id=838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket(0x1e, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x10f, 0x6, 0x0, &(0x7f0000001800)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05007e44f71f0000003800003f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="1001000000020101000000000000000001000004bc00018006000340000200001400018008000100ac14143a080002007f00000114000180080001007f00000108000200e000000282000340000300001400018008000100ac14147f08010200ac1414bb2c00018014000300fc02000000000000000000000000000014000400fc0100000000000000000000000000001400018008000100ac1e060008000200000000000c00028005000100130000001400018008000100ac14141f08000200ffffffff0c000280050001002f00000008000940000100010e000600736e6d705f7472617000000013000b0063616c6c666f7277617264696e67000014000a8008000140000000000800014000000001"], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x40000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) 5.359885421s ago: executing program 3 (id=846): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYBLOB="2465badbd344030682c965719759407823222da96ff79f6e15ad2364fdfd3865b3d1ef40efb4e39b19f865aacd19978a7cf24fb07079d9fa4fb964403fab9a72d6f80d9617237837664d53a0542325c51131c148af0a9c93afbaf4cdbceedbd0254bde0cd030ad", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000340), 0x802000, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10010, r2, 0x0) io_submit(0x0, 0x1, &(0x7f00000019c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x9, r1, 0x0}]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x28600, 0x0) socket(0x23, 0xa, 0x1000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x0, 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x254}}, 0x2008040) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x7, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) 5.04909288s ago: executing program 3 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x200000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x7, 0x100000002], 0x3000, 0x280384}) kexec_load(0x4, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c4ac3c81801911ec4df9849ae41d2ef22f2703a619e207c109280a716693e82bd7c93d13f0c4f9d1d201658634cf7f7f95d7543d4a8e045c00d20679c0847b54d06960d63dfa2b81833272e", 0x4c, 0x91ac, 0x7}, {&(0x7f0000000400)="6aa994652757fd9343a888f5db0809dff7e3642fa3224fc71652f1cfae15e5859f8e3244d356ca08bb29ac86b2aac943e811f82e15170a90d3228f7691869ff1914ce822e464e650573abc0525acc8a7fd486bf74b969240fc45f616844f914055b242ec46d6e7de85be60859ca9d7560b2bdf28e9c399569f936fe2ca2a5e100f2f08469651c26db038f7071090c29fb4eee61e95bbf94d633fc880c62214bdf8457a0d5c48f3a772a12dd6b8c0f343596149d0fd20b74927513e53def759f54a408d628991f289455d6871dd23019b2340412b25467f7fb2b616651747", 0xde, 0x8, 0x1ff}], 0xa0000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x34000, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) ioprio_set$pid(0x2, 0x0, 0x2007) writev(r3, &(0x7f00000002c0)=[{&(0x7f00000006c0)="3f0bb2a0", 0x4}], 0x1) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f00000006c0)="3f0bb2a0", 0x4}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) fcntl$notify(r2, 0x402, 0x8000003d) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001f2a08bfe393dd7ede51fbc5a1a80d00"/39], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001f2a08bfe393dd7ede51fbc5a1a80d00"/39], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r5}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r5, 0x4, 0x5e849876322a6866}, 0xc) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000000)=[{r3, 0x1000}, {r6}], 0x2, 0x200) (async) poll(&(0x7f0000000000)=[{r3, 0x1000}, {r6}], 0x2, 0x200) symlinkat(&(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f00000005c0)={0x6, 0x9, 0x2, 0x7fff, 0xb1c, 0x3}) 4.407215606s ago: executing program 3 (id=881): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000000)={0x1d, "67d60edc3620031d451e5aa44d3cdb5637321451672f37163f5c64b821c4b14563"}}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) (async) syz_emit_ethernet(0x4c, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "410100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="df813361e608f3ac2455e3fa4f11"}}}}}}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async, rerun: 32) syz_usb_disconnect(r4) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x810) 2.259587577s ago: executing program 1 (id=904): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x1a1) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00', 0x1}}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000008c0)=[{0x30, 0x112, 0xd2d, "2bec22aa569a2a48863162a4e4af6f4ec0ece5c5992e39874397efda523d1b"}, {0x108, 0x114, 0x401, "d6ab236a92e35360dd4d7016941b3dfe93aa054f10a2217069ce409e15fad8e38437a225c5ce7f7834c30997097d62b41e943b264186b023ea5c9a590e92d8c8770375f1d666150708663af92172b2db744055b720165e1c8e6f8740ca87fc0b6b4b73e2951f8eda851fbc61a05609f65de31ae76f0ffc9044f15befb12332d2b00f5cd3879260796f23035032ebd0d2fdd28f206d38adbc853411953caaedb64fe1825315ea6ef9c6cc760a6951bc7923eeeee00403716e11645e3721b322d0673f54051561d99c02b4820b4e3fafa13782550c17958306ce3f44f96208082138e2724ee178b2a76190f3130bdf77189de1e5"}], 0x138}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000100000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x4000001) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x4400, 0x2, 0x0, 0xa55, 0x3, 0xfff, 0x1, r10}, 0x20) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r11}, &(0x7f00000006c0), &(0x7f00000007c0)=r4}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 2.254456499s ago: executing program 1 (id=905): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001100)) open_tree(0xffffffffffffff9c, 0x0, 0x0) 2.249688375s ago: executing program 1 (id=906): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0x8, 0x12, {0x12, 0x30, "17aa9754b8f50373964e56f1e1c41749"}}, 0x0}, &(0x7f0000000440)={0x44, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x1, "f0"}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "1652b4"}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.777375923s ago: executing program 2 (id=912): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x2822c1, 0x0) r2 = socket(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000080)=0x8, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0xa800, &(0x7f0000000900)=ANY=[@ANYRES16=r3, @ANYRES64=r3, @ANYRESDEC=r1, @ANYRESDEC, @ANYRESDEC=r3, @ANYRESDEC=r2]) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000006c0)=0x90000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x80000000, 0x3, 0x0, 0x869c, 0x80}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000007c0)={r5, 0xffff8001}, &(0x7f0000000800)=0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000680)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000140)={&(0x7f0000000240)={{@host, 0x9}, {@my=0x1, 0x5}, 0x400, "f94bc7d736f4cd8787b5c1c6f405832ce1887a6b8c1b96c8c43a4b184bae9eaabd676205f35e41080cccb50744e36d76a4d2459bafaa3e5e3deccfaf95f571d89bd48e19f8b3ade294567bb3528f50a46e75af8d990529c11ab850197a967546ae486dd014e01abf06aa705de4555d117ef08a187d74ece3dae184d6b0447bf3b01e5bf96fe503c09ac433a9ca6a9282fae568d653eb2a052bc9a1253cb762a686a0ea2d98167ebafa4af71e53479d691b2f5e4bf35822ebfb79ba1db2f98a1fb80d2d0fb2a92d5268818610b7326929c56fe85980e1c53df2580de0b4da915952bcc94017720540da4752a28b600a226762328eb80fe65e024949598615cfeed20ef3143192faf6ecd7a785ccb7766922a302bb9347fd6649edd94383b0074cf9b9eb95b68aca55e8afc200e50bed4928a9a7d0d802a56890828cf98fada22aa9d001aafde3708e9662b1be04907d775f0e2d6407538587b2a9b94a1a8d7e1c77529ceca114c74ab2824927e8dcfc7976724d7084ede102fc4f0b0e2ddf44759eb4f152ab62bd10caab4ab834b80e7ac7812d90166d2868f0a31c2dd6aa1fc5b64aa2a4132688006c5e8e42a97366336147bc63053bc5162fd2b7a7c946d8ee4ca461d45171cc5ff0c416910af5c9e573b35b076deb3b7f76a4b8a6612992363c7245388dc51aa0fca97d2e9ef1eb37234dc4d6c2fc628a807cbdc8487c6c96f6453fc7e540e270201513406f22f442f4e8df6fa2fc02e1cfdfb58783afa3fbc9e24a9dd0139aaa97005fc6826eed992448c6ca68657b54af54cbee3762fdd69ee76dc5920ec5606aa1d7a67d005f109424165fa449aa48c48a2f3845ba52446864925a4590cdf014cd40810e55d8966726f047a90876cd3d11c45133bb9203bd5adfc31456327db1a78d694b19aef40a9325caee80f1d7087d592c4d8b33c2cd56d1d1ff8b1db502f6ccde488ffa383f4cc0e9525b9358154d784d4854e3c318b6a4cde1f5c5de93a3be9a81abcbae9e912054856fccc5cfd5c8d62bce2973afdd45de01535411d262cebdd12bcab773f3d4ecbf2db0493813283828e8e90a8b6aea2df1f15bad7ed89fa9c4c13789df1eb6f2c070609a7d4d25c5e99d745dc37bf996a20b25c850b739356848ec9553d7c2fe77626dec666041763887afc7e077eb512a7388e2b7e1e383fe1dc1ff20e741f3da61fc976ee73ca9e2171ab2cdecc645c38043209c3241a7150b4cdcc7aa0062f60cd9aac0462927d65397519476e5e19c54d92322864a536fde45dcd749ca70e517ee4458c50c3e22ae5e0e8739b93b5dbdcbff93d0fabad9248412cf5fbb40e76bc6ab728adb3861fd1aa545db5e74612a45cd5935662729bac3f8c22d9fb1eb79c620696390e4ccb6437f9671198efc8e3a49f0f5dc6d5b4c000000000000000000000000000000003f00"}, 0xfe31, 0xe}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="36de878762fc79e223f881caf586113b98", 0x11}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}, 0x40000) recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}, {{0x0, 0x0, 0x0}, 0xffffff0b}], 0x2, 0x2101, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xa5027fd272bef376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000840)={{@my=0x0, 0xfffeffff}, 0x1, 0x200000000001, 0x2, 0xfffffffffffffff9, 0xad7, 0x75, 0x7, 0x7}) clock_settime(0x1ed5d7403, &(0x7f00000008c0)={0x0, 0x3938700}) io_setup(0x1fd, &(0x7f0000000480)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.678818932s ago: executing program 2 (id=913): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x6, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/59, 0x3b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/33, 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)="6d2affb15328e22661eda8f4045f2d12debe6578302eced8aa75b7", 0x1b}, {&(0x7f0000000480)="b57d0e39cbda422d9e4778a6d4210669f62d4392eacee1a4568bdf48d7fb39ccb7fb69926093df0604034b6478b2a322c354d178a710789494509d02520c16f06b83f4cb77311400"/85, 0x55}, {&(0x7f0000000300)="d2b61872a4dfc7975e9291ed650cd3c11b178c5ad36d21e1f2a6f8b477ad0cd8f6a7d012e9287017d390175592120e1b9d8261523734ba3f8b5c735506972faff82fc835e2c535e11c5abd048b81f50709f5f790f4341cb5588b3c0cc7cbd0f07bafc77191290ad1678d01f44158111f591ffd48a100007f6ea6e23e32ac1dc6070e5564825c3ac340f2f7a9c9ee31efcb17789f56a920e81eeb5851a2efdf78362e238d2acfef4a261e49237dd7fe39f0147f1c6790a3a3ff8f910a33efc0ec4fea4812407750b6a23241fc429413064fbf08", 0xd3}], 0x3) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000280), 0x8, 0x448d01) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x4, 0x10, 0x6f, 0x7, "c95f07aeca77598b1efde859c2d7c629e087203a1b6ff3e32234a7ddace6f989"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000002c40), &(0x7f0000002c80)=0x4) 1.529989873s ago: executing program 2 (id=914): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_dev$midi(&(0x7f0000000040), 0x6, 0x480800) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$NBD_DO_IT(r1, 0xab03) 1.369856282s ago: executing program 3 (id=915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8182, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000040)=""/15) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r7, 0x4, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}, {0x8000}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 1.250047609s ago: executing program 3 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x1e, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3}}]}}]}}, 0x0) r1 = socket$inet(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'bond0\x00'}) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x10d, 0xb, &(0x7f0000000000)={0x4, @remote, 0x0, 0x3, 'nq\x00', 0x29, 0x2000000, 0x1a}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 1.169961487s ago: executing program 2 (id=917): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202280, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x100) r1 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf2518000000de80fef4b605e591261f6498bc3b0e0001006e6574646576696d0000000f0002006e657464657673696d300000080003000000000008000b000300000006001600feff0000050012000100000006"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8844) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x23, 0x2, 0x1, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0xb5315258}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="81d973cd8d788678893fe964613d82da8ccccec4893bca96176e2b833aef6b165ede0aa0d1ff225611bc2cbd23fcb4554b620924b31ab16958616563b781499b3f86833649fa6fb80981cfa4472b7eaf0d57916fcb53dad5aaa62e76928d0472bfbcf96262e2bea58ced6b5f86fda2a17b7fd97f7221556ec07f5c1ceaa1fb89857298250be011b60654405b239adbd6", @ANYRES16=r5, @ANYBLOB="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"], 0xd30}, 0x1, 0x0, 0x0, 0x404c011}, 0x44) 1.169474234s ago: executing program 2 (id=918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000005"], 0x104}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x8000000000000001, 0x444000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.109804141s ago: executing program 2 (id=919): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x10000012, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000600)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81io\xf9\x00\x00\x00\x00\x00\x00\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6\x9e\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d\n6\vg\xdbf\x91l\rp\xbaLx\x994\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0x9) ftruncate(r4, 0xffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60eb370000180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='d@'], 0x0) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x1, 0x1000, 0x2000}) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x11, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r2, 0x701, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000000)=""/12, 0xc}], 0x1, 0x10000, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x2c}}, 0x4040804) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 110.088878ms ago: executing program 1 (id=920): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x80}], 0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000000000000000020d0000", @ANYRES32=r3, @ANYRES16=r3], 0x28}}, 0x8040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@debug={'debug', 0x3d, 0xa}}, {@noextend}, {@access_any}], [], 0x6b}}) 184.678µs ago: executing program 1 (id=921): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x30600, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x402) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x1, 0x0, 0x5, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x1, 0x0, 0x5, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x17, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) close(r2) 0s ago: executing program 1 (id=922): mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c0001800800014000000002"], 0xa0}}, 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) kernel console output (not intermixed with test programs): will be removed. [ 68.219354][ T5950] usb usb6-port1: attempt power cycle [ 68.239851][ T6679] md2: using deprecated bitmap file support [ 68.241908][ T6679] md2: error: failed to get bitmap file [ 68.310990][ T6683] capability: warning: `syz.2.220' uses deprecated v2 capabilities in a way that may be insecure [ 68.376955][ T40] audit: type=1400 audit(1744843803.414:385): avc: denied { read write } for pid=6684 comm="syz.2.221" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.385262][ T40] audit: type=1400 audit(1744843803.414:386): avc: denied { open } for pid=6684 comm="syz.2.221" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.396945][ T6685] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 68.571414][ T5950] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 68.590158][ T5950] usb 6-1: device descriptor read/8, error -71 [ 68.702157][ T6709] syzkaller0: entered promiscuous mode [ 68.704219][ T6709] syzkaller0: entered allmulticast mode [ 68.728907][ T6711] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 68.735904][ T6711] syz_tun: entered promiscuous mode [ 68.744786][ T6711] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.798664][ T6713] netlink: 'syz.2.229': attribute type 10 has an invalid length. [ 68.829068][ T5950] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 68.843495][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 68.849868][ T5950] usb 6-1: device descriptor read/8, error -71 [ 68.879343][ T6717] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 68.881872][ T6717] netlink: 'syz.2.231': attribute type 3 has an invalid length. [ 68.884348][ T6717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.231'. [ 68.919810][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 68.922975][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 68.926545][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 68.930796][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 68.959324][ T5950] usb usb6-port1: unable to enumerate USB device [ 69.013586][ T6723] Failed to get privilege flags for destination (handle=0x2:0x0) [ 70.361470][ T6742] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 70.420270][ T6745] FAULT_INJECTION: forcing a failure. [ 70.420270][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 70.425705][ T6745] CPU: 3 UID: 0 PID: 6745 Comm: syz.1.237 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 70.425723][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.425730][ T6745] Call Trace: [ 70.425735][ T6745] [ 70.425739][ T6745] dump_stack_lvl+0x16c/0x1f0 [ 70.425759][ T6745] should_fail_ex+0x512/0x640 [ 70.425771][ T6745] ? fs_reclaim_acquire+0xae/0x150 [ 70.425788][ T6745] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.425804][ T6745] should_failslab+0xc2/0x120 [ 70.425818][ T6745] __kmalloc_noprof+0xd2/0x510 [ 70.425832][ T6745] tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.425852][ T6745] tomoyo_check_open_permission+0x2ab/0x3c0 [ 70.425865][ T6745] ? init_file+0x93/0x4c0 [ 70.425878][ T6745] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 70.425891][ T6745] ? ovl_dir_read_merged+0x357/0x5d0 [ 70.425906][ T6745] ? vfs_rmdir+0x203/0x690 [ 70.425920][ T6745] ? do_rmdir+0x2e8/0x3c0 [ 70.425942][ T6745] ? do_raw_spin_lock+0x12c/0x2b0 [ 70.425965][ T6745] tomoyo_file_open+0x6b/0x90 [ 70.425976][ T6745] security_file_open+0x84/0x1e0 [ 70.425993][ T6745] do_dentry_open+0x596/0x1c10 [ 70.426005][ T6745] ? lockdep_init_map_type+0x5c/0x280 [ 70.426018][ T6745] vfs_open+0x82/0x3f0 [ 70.426033][ T6745] dentry_open+0x71/0xd0 [ 70.426046][ T6745] ovl_path_open+0x198/0x1f0 [ 70.426062][ T6745] ovl_dir_read_merged+0x357/0x5d0 [ 70.426077][ T6745] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 70.426093][ T6745] ? __pfx_ovl_fill_merge+0x10/0x10 [ 70.426111][ T6745] ? avc_has_perm_noaudit+0x149/0x3b0 [ 70.426124][ T6745] ovl_check_empty_dir+0xaf/0x4c0 [ 70.426139][ T6745] ? __pfx_avc_has_perm+0x10/0x10 [ 70.426149][ T6745] ? __pfx_ovl_check_empty_dir+0x10/0x10 [ 70.426168][ T6745] ovl_do_remove+0xc4/0xf70 [ 70.426182][ T6745] ? __pfx_may_link+0x10/0x10 [ 70.426200][ T6745] ? __pfx_ovl_do_remove+0x10/0x10 [ 70.426217][ T6745] vfs_rmdir+0x203/0x690 [ 70.426233][ T6745] do_rmdir+0x2e8/0x3c0 [ 70.426244][ T6745] ? __pfx_do_rmdir+0x10/0x10 [ 70.426259][ T6745] ? getname_flags.part.0+0x1c5/0x550 [ 70.426274][ T6745] __x64_sys_rmdir+0xc5/0x110 [ 70.426285][ T6745] do_syscall_64+0xcd/0x260 [ 70.426301][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.426312][ T6745] RIP: 0033:0x7fc16898e169 [ 70.426322][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.426332][ T6745] RSP: 002b:00007fc169732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 70.426343][ T6745] RAX: ffffffffffffffda RBX: 00007fc168bb5fa0 RCX: 00007fc16898e169 [ 70.426349][ T6745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 70.426355][ T6745] RBP: 00007fc169732090 R08: 0000000000000000 R09: 0000000000000000 [ 70.426362][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.426367][ T6745] R13: 0000000000000000 R14: 00007fc168bb5fa0 R15: 00007ffc0f17e898 [ 70.426381][ T6745] [ 70.426385][ T6745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.564634][ T6747] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 70.610998][ T6749] geneve0: mtu less than device minimum [ 70.689535][ T6757] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 70.725416][ T6759] FAULT_INJECTION: forcing a failure. [ 70.725416][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.730112][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.1.243 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 70.730127][ T6759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.730133][ T6759] Call Trace: [ 70.730137][ T6759] [ 70.730141][ T6759] dump_stack_lvl+0x16c/0x1f0 [ 70.730159][ T6759] should_fail_ex+0x512/0x640 [ 70.730173][ T6759] _copy_to_user+0x32/0xd0 [ 70.730186][ T6759] simple_read_from_buffer+0xcb/0x170 [ 70.730203][ T6759] proc_fail_nth_read+0x197/0x270 [ 70.730220][ T6759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.730236][ T6759] ? rw_verify_area+0xcf/0x680 [ 70.730250][ T6759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.730266][ T6759] vfs_read+0x1de/0xc70 [ 70.730283][ T6759] ? __pfx___mutex_lock+0x10/0x10 [ 70.730298][ T6759] ? __pfx_vfs_read+0x10/0x10 [ 70.730317][ T6759] ? __fget_files+0x20e/0x3c0 [ 70.730331][ T6759] ksys_read+0x12a/0x240 [ 70.730339][ T6759] ? __pfx_ksys_read+0x10/0x10 [ 70.730351][ T6759] do_syscall_64+0xcd/0x260 [ 70.730366][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.730376][ T6759] RIP: 0033:0x7fc16898cb7c [ 70.730385][ T6759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.730395][ T6759] RSP: 002b:00007fc169732030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.730405][ T6759] RAX: ffffffffffffffda RBX: 00007fc168bb5fa0 RCX: 00007fc16898cb7c [ 70.730411][ T6759] RDX: 000000000000000f RSI: 00007fc1697320a0 RDI: 0000000000000005 [ 70.730416][ T6759] RBP: 00007fc169732090 R08: 0000000000000000 R09: 0000000000000000 [ 70.730422][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.730427][ T6759] R13: 0000000000000000 R14: 00007fc168bb5fa0 R15: 00007ffc0f17e898 [ 70.730439][ T6759] [ 70.740632][ T6760] block device autoloading is deprecated and will be removed. [ 70.836234][ T6769] netlink: 'syz.1.246': attribute type 12 has an invalid length. [ 70.887301][ T6773] FAULT_INJECTION: forcing a failure. [ 70.887301][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 70.893436][ T6773] CPU: 0 UID: 0 PID: 6773 Comm: syz.1.247 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 70.893453][ T6773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.893460][ T6773] Call Trace: [ 70.893464][ T6773] [ 70.893468][ T6773] dump_stack_lvl+0x16c/0x1f0 [ 70.893486][ T6773] should_fail_ex+0x512/0x640 [ 70.893498][ T6773] ? __kmalloc_noprof+0xbf/0x510 [ 70.893509][ T6773] ? ovl_cache_entry_new+0x3d/0x730 [ 70.893522][ T6773] should_failslab+0xc2/0x120 [ 70.893535][ T6773] __kmalloc_noprof+0xd2/0x510 [ 70.893548][ T6773] ovl_cache_entry_new+0x3d/0x730 [ 70.893563][ T6773] ovl_fill_merge+0x2c1/0xa90 [ 70.893578][ T6773] ? __pfx_ovl_fill_merge+0x10/0x10 [ 70.893591][ T6773] offset_readdir+0x28f/0x6d0 [ 70.893605][ T6773] iterate_dir+0x293/0xb40 [ 70.893622][ T6773] ovl_dir_read_merged+0x3ef/0x5d0 [ 70.893636][ T6773] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 70.893651][ T6773] ? __pfx_ovl_fill_merge+0x10/0x10 [ 70.893668][ T6773] ? avc_has_perm_noaudit+0x149/0x3b0 [ 70.893681][ T6773] ovl_check_empty_dir+0xaf/0x4c0 [ 70.893695][ T6773] ? __pfx_avc_has_perm+0x10/0x10 [ 70.893705][ T6773] ? __pfx_ovl_check_empty_dir+0x10/0x10 [ 70.893723][ T6773] ovl_do_remove+0xc4/0xf70 [ 70.893735][ T6773] ? __pfx_may_link+0x10/0x10 [ 70.893753][ T6773] ? __pfx_ovl_do_remove+0x10/0x10 [ 70.893769][ T6773] vfs_rmdir+0x203/0x690 [ 70.893786][ T6773] do_rmdir+0x2e8/0x3c0 [ 70.893797][ T6773] ? __pfx_do_rmdir+0x10/0x10 [ 70.893811][ T6773] ? getname_flags.part.0+0x1c5/0x550 [ 70.893826][ T6773] __x64_sys_rmdir+0xc5/0x110 [ 70.893836][ T6773] do_syscall_64+0xcd/0x260 [ 70.893852][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.893863][ T6773] RIP: 0033:0x7fc16898e169 [ 70.893872][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.893882][ T6773] RSP: 002b:00007fc169732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 70.893892][ T6773] RAX: ffffffffffffffda RBX: 00007fc168bb5fa0 RCX: 00007fc16898e169 [ 70.893898][ T6773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 70.893904][ T6773] RBP: 00007fc169732090 R08: 0000000000000000 R09: 0000000000000000 [ 70.893909][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.893915][ T6773] R13: 0000000000000000 R14: 00007fc168bb5fa0 R15: 00007ffc0f17e898 [ 70.893928][ T6773] [ 71.019807][ T6775] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 71.025631][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.030594][ T6775] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 71.303990][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306602][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.779088][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.920587][ T6791] __nla_validate_parse: 16 callbacks suppressed [ 71.920600][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'. [ 71.929980][ T6789] process 'syz.3.251' launched './file0' with NULL argv: empty string added [ 71.994408][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 71.994423][ T40] audit: type=1400 audit(1744843807.034:407): avc: denied { write } for pid=6794 comm="syz.1.254" path="socket:[14377]" dev="sockfs" ino=14377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.007180][ T40] audit: type=1400 audit(1744843807.034:408): avc: denied { write } for pid=6794 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.017714][ T40] audit: type=1400 audit(1744843807.034:409): avc: denied { watch watch_reads } for pid=6794 comm="syz.1.254" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.148339][ T40] audit: type=1400 audit(1744843807.184:410): avc: denied { getopt } for pid=6799 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.304076][ T40] audit: type=1400 audit(1744843807.344:411): avc: denied { append } for pid=6810 comm="syz.0.261" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.354972][ T6813] kvm: pic: non byte read [ 72.357804][ T6813] kvm: pic: level sensitive irq not supported [ 72.358094][ T6813] kvm: pic: non byte read [ 72.363296][ T6813] kvm: pic: level sensitive irq not supported [ 72.363530][ T6813] kvm: pic: non byte read [ 72.372689][ T40] audit: type=1326 audit(1744843807.414:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.0.263" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac3e38e169 code=0x0 [ 72.485814][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 72.489264][ T40] audit: type=1400 audit(1744843807.524:413): avc: denied { mount } for pid=6820 comm="syz.2.265" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.495658][ T6821] pim6reg1: entered promiscuous mode [ 72.498318][ T6821] pim6reg1: entered allmulticast mode [ 72.591542][ T40] audit: type=1400 audit(1744843807.634:414): avc: denied { unmount } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.654845][ T40] audit: type=1800 audit(1744843807.694:415): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.251" name="/" dev="fuse" ino=0 res=0 errno=0 [ 72.784805][ T6840] omfs: Invalid superblock (0) [ 72.839172][ T5991] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.002182][ T5991] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.005134][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.007679][ T5991] usb 5-1: Product: syz [ 73.009390][ T5991] usb 5-1: Manufacturer: syz [ 73.010791][ T5991] usb 5-1: SerialNumber: syz [ 73.016145][ T5991] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 73.038107][ T40] audit: type=1400 audit(1744843808.074:416): avc: denied { firmware_load } for pid=5991 comm="kworker/2:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 73.053945][ T5991] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.246106][ T6877] block device autoloading is deprecated and will be removed. [ 73.280725][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 73.504464][ T6890] tmpfs: Group quota block hardlimit too large. [ 73.505150][ T837] usb 5-1: USB disconnect, device number 5 [ 73.576018][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.288'. [ 73.578853][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 73.670768][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 73.674108][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 73.784819][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 73.987700][ T6913] mmap: syz.3.295 (6913) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.054370][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 74.339374][ T5991] usb 5-1: Service connection timeout for: 256 [ 74.345719][ T5991] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 74.360579][ T5991] ath9k_htc: Failed to initialize the device [ 74.364178][ T837] usb 5-1: ath9k_htc: USB layer deinitialized [ 74.652436][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'. [ 74.949090][ T6952] md2: using deprecated bitmap file support [ 74.951017][ T6952] md2: error: failed to get bitmap file [ 75.282779][ T6970] netlink: 'syz.1.317': attribute type 6 has an invalid length. [ 75.287607][ T6970] netlink: 'syz.1.317': attribute type 11 has an invalid length. [ 75.530272][ T6986] netlink: 'syz.0.324': attribute type 29 has an invalid length. [ 75.575262][ T6993] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 75.619688][ T6997] random: crng reseeded on system resumption [ 75.876721][ T7021] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 76.005159][ T7027] FAULT_INJECTION: forcing a failure. [ 76.005159][ T7027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.010526][ T7027] CPU: 3 UID: 0 PID: 7027 Comm: syz.2.338 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 76.010541][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.010548][ T7027] Call Trace: [ 76.010552][ T7027] [ 76.010556][ T7027] dump_stack_lvl+0x16c/0x1f0 [ 76.010575][ T7027] should_fail_ex+0x512/0x640 [ 76.010588][ T7027] _copy_from_iter+0x2a4/0x15b0 [ 76.010603][ T7027] ? __alloc_skb+0x200/0x380 [ 76.010616][ T7027] ? __pfx__copy_from_iter+0x10/0x10 [ 76.010628][ T7027] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 76.010648][ T7027] netlink_sendmsg+0x829/0xdd0 [ 76.010664][ T7027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.010683][ T7027] ____sys_sendmsg+0xa95/0xc70 [ 76.010699][ T7027] ? copy_msghdr_from_user+0x10a/0x160 [ 76.010711][ T7027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.010732][ T7027] ___sys_sendmsg+0x134/0x1d0 [ 76.010746][ T7027] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.010773][ T7027] __sys_sendmsg+0x16d/0x220 [ 76.010786][ T7027] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.010802][ T7027] ? rcu_is_watching+0x12/0xc0 [ 76.010819][ T7027] do_syscall_64+0xcd/0x260 [ 76.010835][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.010845][ T7027] RIP: 0033:0x7f088838e169 [ 76.010854][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.010864][ T7027] RSP: 002b:00007f08891ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.010874][ T7027] RAX: ffffffffffffffda RBX: 00007f08885b5fa0 RCX: 00007f088838e169 [ 76.010880][ T7027] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000010 [ 76.010886][ T7027] RBP: 00007f08891ad090 R08: 0000000000000000 R09: 0000000000000000 [ 76.010892][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.010903][ T7027] R13: 0000000000000000 R14: 00007f08885b5fa0 R15: 00007ffed76b8198 [ 76.010916][ T7027] [ 76.082430][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.162792][ T7030] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 76.165613][ T7030] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 76.294269][ T7037] netlink: 'syz.0.342': attribute type 10 has an invalid length. [ 76.302129][ T7037] team0: Device ipvlan1 failed to register rx_handler [ 76.411850][ T7048] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 76.438836][ T7050] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.441545][ T7050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.449227][ T7050] vhci_hcd vhci_hcd.0: Device attached [ 76.465424][ T7051] vhci_hcd: connection closed [ 76.467545][ T1166] vhci_hcd: stop threads [ 76.472261][ T1166] vhci_hcd: release socket [ 76.474430][ T1166] vhci_hcd: disconnect device [ 77.199103][ T837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.329086][ T5991] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.359042][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 77.362172][ T837] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 77.364883][ T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.368108][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.371276][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.374462][ T837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.378685][ T837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.381652][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.479142][ T5991] usb 5-1: Using ep0 maxpacket: 8 [ 77.483121][ T5991] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 77.486518][ T5991] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.490626][ T5991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.494497][ T5991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.498708][ T5991] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.504223][ T5991] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.508299][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.595355][ T837] usb 6-1: usb_control_msg returned -32 [ 77.597657][ T837] usbtmc 6-1:16.0: can't read capabilities [ 77.718326][ T5991] usb 5-1: usb_control_msg returned -32 [ 77.721373][ T5991] usbtmc 5-1:16.0: can't read capabilities [ 77.962429][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 77.962440][ T40] audit: type=1400 audit(1744843813.004:451): avc: denied { listen } for pid=7098 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.967090][ T7099] syzkaller0: entered promiscuous mode [ 77.973741][ T7099] syzkaller0: entered allmulticast mode [ 77.996861][ T7102] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 78.028935][ T40] audit: type=1400 audit(1744843813.064:452): avc: denied { accept } for pid=7098 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.742443][ T40] audit: type=1400 audit(1744843813.784:453): avc: denied { map } for pid=7124 comm="syz.3.372" path="socket:[15387]" dev="sockfs" ino=15387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.775847][ T5959] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 79.030145][ T5991] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.179152][ T5991] usb 8-1: Using ep0 maxpacket: 16 [ 79.183133][ T5991] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.188934][ T5991] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 79.193026][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=2 [ 79.196395][ T5991] usb 8-1: Manufacturer: syz [ 79.198013][ T5991] usb 8-1: SerialNumber: syz [ 79.200927][ T5991] usb 8-1: config 0 descriptor?? [ 79.206350][ T5991] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 79.213865][ T40] audit: type=1400 audit(1744843814.254:454): avc: denied { read } for pid=5343 comm="acpid" name="mouse2" dev="devtmpfs" ino=2845 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.219239][ T836] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.221187][ T40] audit: type=1400 audit(1744843814.254:455): avc: denied { open } for pid=5343 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2845 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.379118][ T836] usb 7-1: Using ep0 maxpacket: 32 [ 79.383707][ T836] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 79.389771][ T836] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.392703][ T836] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.395523][ T836] usb 7-1: Product: syz [ 79.397040][ T836] usb 7-1: Manufacturer: syz [ 79.398599][ T836] usb 7-1: SerialNumber: syz [ 79.401724][ T836] usb 7-1: config 0 descriptor?? [ 79.403932][ T7132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 79.406997][ T836] hub 7-1:0.0: bad descriptor, ignoring hub [ 79.408939][ T836] hub 7-1:0.0: probe with driver hub failed with error -5 [ 79.420606][ T7130] input: syz0 as /devices/virtual/input/input6 [ 79.769448][ T4584] usb 7-1: USB disconnect, device number 6 [ 81.542723][ T65] cfg80211: failed to load regulatory.db [ 81.785899][ T5343] bcm5974 8-1:0.0: could not read from device [ 81.790848][ T5343] bcm5974 8-1:0.0: could not read from device [ 81.795238][ T5343] bcm5974 8-1:0.0: could not read from device [ 81.795434][ T5991] usb 8-1: USB disconnect, device number 2 [ 81.871339][ T40] audit: type=1400 audit(1744844072.914:456): avc: denied { bind } for pid=7135 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.904573][ T7140] FAULT_INJECTION: forcing a failure. [ 81.904573][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 81.909572][ T7140] CPU: 1 UID: 0 PID: 7140 Comm: syz.3.376 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 81.909589][ T7140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.909595][ T7140] Call Trace: [ 81.909610][ T7140] [ 81.909615][ T7140] dump_stack_lvl+0x16c/0x1f0 [ 81.909635][ T7140] should_fail_ex+0x512/0x640 [ 81.909646][ T7140] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 81.909658][ T7140] should_failslab+0xc2/0x120 [ 81.909670][ T7140] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 81.909681][ T7140] ? prepare_creds+0x2c/0x7d0 [ 81.909695][ T7140] prepare_creds+0x2c/0x7d0 [ 81.909707][ T7140] selinux_inode_copy_up+0x14e/0x1a0 [ 81.909722][ T7140] security_inode_copy_up+0x1e3/0x210 [ 81.909737][ T7140] ovl_copy_up_one+0xbbf/0x38f0 [ 81.909752][ T7140] ? arch_stack_walk+0xa6/0x100 [ 81.909772][ T7140] ? stack_trace_save+0x8e/0xc0 [ 81.909786][ T7140] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 81.909806][ T7140] ? stack_depot_save_flags+0x28/0xa50 [ 81.909818][ T7140] ? __lock_acquire+0xaa4/0x1ba0 [ 81.909829][ T7140] ? kasan_save_stack+0x42/0x60 [ 81.909839][ T7140] ? kasan_save_free_info+0x3b/0x60 [ 81.909852][ T7140] ? __kasan_slab_free+0x51/0x70 [ 81.909861][ T7140] ? kfree+0x2b6/0x4d0 [ 81.909875][ T7140] ? ovl_check_empty_dir+0x239/0x4c0 [ 81.909888][ T7140] ? ovl_do_remove+0xc4/0xf70 [ 81.909899][ T7140] ? vfs_rmdir+0x203/0x690 [ 81.909913][ T7140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.909945][ T7140] ? dget_parent+0xf8/0x5e0 [ 81.909963][ T7140] ovl_copy_up_flags+0x18d/0x200 [ 81.909980][ T7140] ovl_nlink_start+0x31c/0x3e0 [ 81.909997][ T7140] ovl_do_remove+0x16f/0xf70 [ 81.910009][ T7140] ? __pfx_may_link+0x10/0x10 [ 81.910026][ T7140] ? __pfx_ovl_do_remove+0x10/0x10 [ 81.910043][ T7140] vfs_rmdir+0x203/0x690 [ 81.910058][ T7140] do_rmdir+0x2e8/0x3c0 [ 81.910069][ T7140] ? __pfx_do_rmdir+0x10/0x10 [ 81.910083][ T7140] ? getname_flags.part.0+0x1c5/0x550 [ 81.910098][ T7140] __x64_sys_rmdir+0xc5/0x110 [ 81.910109][ T7140] do_syscall_64+0xcd/0x260 [ 81.910125][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.910135][ T7140] RIP: 0033:0x7f53bb38e169 [ 81.910144][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.910165][ T7140] RSP: 002b:00007f53bc112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 81.910176][ T7140] RAX: ffffffffffffffda RBX: 00007f53bb5b5fa0 RCX: 00007f53bb38e169 [ 81.910183][ T7140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 81.910188][ T7140] RBP: 00007f53bc112090 R08: 0000000000000000 R09: 0000000000000000 [ 81.910194][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.910200][ T7140] R13: 0000000000000000 R14: 00007f53bb5b5fa0 R15: 00007fff53f59768 [ 81.910214][ T7140] [ 82.081634][ T40] audit: type=1400 audit(1744844073.124:457): avc: denied { write } for pid=7148 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.146344][ T7154] vti0: entered promiscuous mode [ 82.411018][ T6011] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.559117][ T6011] usb 8-1: Using ep0 maxpacket: 16 [ 82.563332][ T6011] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 82.566710][ T6011] usb 8-1: config 0 has no interface number 0 [ 82.569540][ T6011] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.574036][ T6011] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.580095][ T6011] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 82.583860][ T6011] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 82.587380][ T6011] usb 8-1: Product: syz [ 82.589370][ T6011] usb 8-1: SerialNumber: syz [ 82.593782][ T6011] usb 8-1: config 0 descriptor?? [ 82.598003][ T6011] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 82.601517][ T6011] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input7 [ 82.609240][ T40] audit: type=1400 audit(1744844073.644:458): avc: denied { ioctl } for pid=5343 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2852 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.855679][ T40] audit: type=1400 audit(1744844073.894:459): avc: denied { mount } for pid=7155 comm="syz.3.382" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.858357][ T7157] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 83.461706][ T7112] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 83.467100][ T6011] usb 6-1: USB disconnect, device number 7 [ 83.474823][ T5950] usb 5-1: USB disconnect, device number 6 [ 83.575863][ T40] audit: type=1400 audit(1744844074.614:460): avc: denied { setopt } for pid=7172 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.586577][ T40] audit: type=1400 audit(1744844074.624:461): avc: denied { getopt } for pid=7174 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.595369][ T7175] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 83.598036][ T7175] __nla_validate_parse: 8 callbacks suppressed [ 83.598045][ T7175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.390'. [ 83.657545][ T40] audit: type=1400 audit(1744844074.694:462): avc: denied { getattr } for pid=7185 comm="syz.0.392" name="/" dev="9p" ino=37617690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.665324][ T7186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.711903][ T7187] block device autoloading is deprecated and will be removed. [ 83.749237][ T7184] md2: using deprecated bitmap file support [ 83.751134][ T7184] md2: error: failed to get bitmap file [ 83.753603][ T7184] fuse: Bad value for 'fd' [ 83.843139][ T40] audit: type=1401 audit(1744844074.884:463): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 83.866611][ T40] audit: type=1400 audit(1744844074.904:464): avc: denied { read } for pid=7202 comm="syz.1.399" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.903445][ T40] audit: type=1400 audit(1744844074.904:465): avc: denied { open } for pid=7202 comm="syz.1.399" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.916108][ T40] audit: type=1400 audit(1744844074.954:466): avc: denied { write } for pid=7207 comm="syz.1.400" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.923749][ T40] audit: type=1400 audit(1744844074.954:467): avc: denied { ioctl } for pid=7207 comm="syz.1.400" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.029120][ T6011] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.199053][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 84.203177][ T6011] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 84.205882][ T6011] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.209098][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.212055][ T6011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.215117][ T6011] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.219236][ T6011] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.222006][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.429755][ T6011] usb 5-1: usb_control_msg returned -32 [ 84.431740][ T6011] usbtmc 5-1:16.0: can't read capabilities [ 84.556663][ T40] audit: type=1400 audit(1744844075.594:468): avc: denied { ioctl } for pid=7212 comm="syz.2.402" path="socket:[13252]" dev="sockfs" ino=13252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.071324][ T40] audit: type=1400 audit(1744844076.114:469): avc: denied { connect } for pid=7216 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.073691][ T7217] netlink: 'syz.2.403': attribute type 15 has an invalid length. [ 85.091817][ T7217] macvlan1: entered promiscuous mode [ 85.093637][ T7217] macvlan1: entered allmulticast mode [ 85.134302][ T7222] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 85.313513][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.313575][ T5950] usb 8-1: USB disconnect, device number 3 [ 85.315745][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 85.323882][ T5950] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 85.334444][ T4584] usb 5-1: USB disconnect, device number 7 [ 85.882393][ T7241] wireguard: wg0: Could not create IPv4 socket [ 85.924822][ T7241] trusted_key: syz.2.410 sent an empty control message without MSG_MORE. [ 86.019907][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.020233][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 86.067617][ T7251] block device autoloading is deprecated and will be removed. [ 86.118473][ T7253] nfs: Unknown parameter 'ÿÿÿÿ' [ 86.139069][ T6011] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.229378][ T7249] md2: using deprecated bitmap file support [ 86.231384][ T7249] md2: error: failed to get bitmap file [ 86.263315][ T7255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16148 sclass=netlink_route_socket pid=7255 comm=syz.2.414 [ 86.309159][ T6011] usb 5-1: Using ep0 maxpacket: 16 [ 86.313780][ T6011] usb 5-1: config 1 has an invalid interface number: 215 but max is 1 [ 86.317333][ T6011] usb 5-1: config 1 has an invalid interface number: 98 but max is 1 [ 86.320783][ T6011] usb 5-1: config 1 has no interface number 0 [ 86.323251][ T6011] usb 5-1: config 1 has no interface number 1 [ 86.325765][ T6011] usb 5-1: config 1 interface 215 altsetting 7 endpoint 0x7 has invalid maxpacket 1088, setting to 64 [ 86.329493][ T6011] usb 5-1: config 1 interface 215 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 86.332910][ T6011] usb 5-1: config 1 interface 98 altsetting 80 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 86.336301][ T6011] usb 5-1: config 1 interface 98 altsetting 80 has a duplicate endpoint with address 0x7, skipping [ 86.340082][ T6011] usb 5-1: config 1 interface 98 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 86.343472][ T6011] usb 5-1: config 1 interface 215 has no altsetting 0 [ 86.345640][ T6011] usb 5-1: config 1 interface 98 has no altsetting 0 [ 86.349617][ T6011] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=4d.bb [ 86.352882][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.355461][ T6011] usb 5-1: Product:   [ 86.356855][ T6011] usb 5-1: Manufacturer: à ¬ [ 86.358430][ T6011] usb 5-1: SerialNumber: ဠ[ 86.393076][ T7259] FAULT_INJECTION: forcing a failure. [ 86.393076][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 86.397415][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.2.416 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 86.397430][ T7259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.397437][ T7259] Call Trace: [ 86.397442][ T7259] [ 86.397447][ T7259] dump_stack_lvl+0x16c/0x1f0 [ 86.397465][ T7259] should_fail_ex+0x512/0x640 [ 86.397478][ T7259] ? __kvmalloc_node_noprof+0x122/0x600 [ 86.397490][ T7259] should_failslab+0xc2/0x120 [ 86.397502][ T7259] __kvmalloc_node_noprof+0x135/0x600 [ 86.397511][ T7259] ? do_raw_spin_lock+0x12c/0x2b0 [ 86.397523][ T7259] ? find_held_lock+0x2b/0x80 [ 86.397536][ T7259] ? simple_xattr_alloc+0x41/0xa0 [ 86.397551][ T7259] ? simple_xattr_alloc+0x41/0xa0 [ 86.397563][ T7259] simple_xattr_alloc+0x41/0xa0 [ 86.397576][ T7259] shmem_initxattrs+0x127/0x5b0 [ 86.397590][ T7259] ? evm_inode_init_security+0x237/0x320 [ 86.397608][ T7259] security_inode_init_security+0x26b/0x390 [ 86.397620][ T7259] ? __pfx_shmem_initxattrs+0x10/0x10 [ 86.397635][ T7259] ? __pfx_security_inode_init_security+0x10/0x10 [ 86.397651][ T7259] shmem_mknod+0x22e/0x450 [ 86.397668][ T7259] shmem_mkdir+0x31/0x80 [ 86.397683][ T7259] vfs_mkdir+0x590/0x8c0 [ 86.397700][ T7259] ovl_create_real+0x479/0x750 [ 86.397714][ T7259] ovl_copy_up_one+0xc97/0x38f0 [ 86.397728][ T7259] ? arch_stack_walk+0xa6/0x100 [ 86.397749][ T7259] ? stack_trace_save+0x8e/0xc0 [ 86.397762][ T7259] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 86.397777][ T7259] ? stack_depot_save_flags+0x28/0xa50 [ 86.397789][ T7259] ? __lock_acquire+0xaa4/0x1ba0 [ 86.397800][ T7259] ? kasan_save_stack+0x42/0x60 [ 86.397810][ T7259] ? kasan_save_free_info+0x3b/0x60 [ 86.397823][ T7259] ? __kasan_slab_free+0x51/0x70 [ 86.397832][ T7259] ? kfree+0x2b6/0x4d0 [ 86.397846][ T7259] ? ovl_check_empty_dir+0x239/0x4c0 [ 86.397859][ T7259] ? ovl_do_remove+0xc4/0xf70 [ 86.397869][ T7259] ? vfs_rmdir+0x203/0x690 [ 86.397883][ T7259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.397914][ T7259] ? dget_parent+0xf8/0x5e0 [ 86.397932][ T7259] ovl_copy_up_flags+0x18d/0x200 [ 86.397949][ T7259] ovl_nlink_start+0x31c/0x3e0 [ 86.397966][ T7259] ovl_do_remove+0x16f/0xf70 [ 86.397979][ T7259] ? __pfx_may_link+0x10/0x10 [ 86.397996][ T7259] ? __pfx_ovl_do_remove+0x10/0x10 [ 86.398013][ T7259] vfs_rmdir+0x203/0x690 [ 86.398033][ T7259] do_rmdir+0x2e8/0x3c0 [ 86.398044][ T7259] ? __pfx_do_rmdir+0x10/0x10 [ 86.398058][ T7259] ? getname_flags.part.0+0x1c5/0x550 [ 86.398074][ T7259] __x64_sys_rmdir+0xc5/0x110 [ 86.398084][ T7259] do_syscall_64+0xcd/0x260 [ 86.398100][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.398110][ T7259] RIP: 0033:0x7f088838e169 [ 86.398119][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.398130][ T7259] RSP: 002b:00007f08891ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 86.398140][ T7259] RAX: ffffffffffffffda RBX: 00007f08885b5fa0 RCX: 00007f088838e169 [ 86.398146][ T7259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 86.398152][ T7259] RBP: 00007f08891ad090 R08: 0000000000000000 R09: 0000000000000000 [ 86.398158][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.398163][ T7259] R13: 0000000000000000 R14: 00007f08885b5fa0 R15: 00007ffed76b8198 [ 86.398177][ T7259] [ 86.584051][ T6011] usb 5-1: USB disconnect, device number 8 [ 86.809062][ T6506] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.970562][ T6506] usb 7-1: Using ep0 maxpacket: 8 [ 86.975379][ T6506] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 86.978786][ T6506] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.983730][ T6506] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.987637][ T6506] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.992213][ T6506] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.996530][ T6506] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.999605][ T6506] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.189108][ T6011] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.197743][ T7278] vxcan1: tx address claim with dlc 0 [ 87.207478][ T6506] usb 7-1: usb_control_msg returned -32 [ 87.209454][ T6506] usbtmc 7-1:16.0: can't read capabilities [ 87.341422][ T6011] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.344231][ T6011] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.347378][ T6011] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.350977][ T6011] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.354512][ T6011] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.358715][ T6011] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.362569][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.365202][ T6011] usb 6-1: Product: syz [ 87.366522][ T6011] usb 6-1: Manufacturer: syz [ 87.375761][ T6011] cdc_wdm 6-1:1.0: skipping garbage [ 87.377492][ T6011] cdc_wdm 6-1:1.0: skipping garbage [ 87.381842][ T6011] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 87.384085][ T6011] cdc_wdm 6-1:1.0: Unknown control protocol [ 87.579480][ T7265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7265 comm=syz.1.419 [ 87.583691][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'. [ 87.587521][ T6506] usb 6-1: USB disconnect, device number 8 [ 87.913494][ T7284] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 88.112894][ T6011] usb 7-1: USB disconnect, device number 7 [ 88.114958][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 88.438542][ T7313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.442007][ T7311] ata1.00: invalid command format 71 [ 88.450340][ T7313] batman_adv: batadv0: Adding interface: gretap1 [ 88.452529][ T7313] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 88.605855][ T7321] usb usb8: usbfs: process 7321 (syz.1.437) did not claim interface 0 before use [ 88.614127][ T7323] pim6reg1: entered promiscuous mode [ 88.615856][ T7323] pim6reg1: entered allmulticast mode [ 88.647800][ T5955] Bluetooth: hci3: hardware error 0x09 [ 88.660490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.690372][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 88.690390][ T40] audit: type=1400 audit(1744844079.724:484): avc: denied { setopt } for pid=7331 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.072356][ T837] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 89.229177][ T837] usb 7-1: Using ep0 maxpacket: 8 [ 89.232259][ T837] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 89.235057][ T837] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.238198][ T837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.241459][ T837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.244666][ T837] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.248810][ T837] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.251827][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.390937][ T7351] ata1.00: invalid command format 71 [ 89.461586][ T837] usb 7-1: usb_control_msg returned -32 [ 89.463822][ T837] usbtmc 7-1:16.0: can't read capabilities [ 89.475754][ T40] audit: type=1400 audit(1744844080.514:485): avc: denied { append } for pid=7358 comm="syz.3.452" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.515590][ T7365] bridge0: entered promiscuous mode [ 89.518129][ T7365] macvlan2: entered promiscuous mode [ 89.526682][ T7365] bridge0: port 3(macvlan2) entered blocking state [ 89.529294][ T7365] bridge0: port 3(macvlan2) entered disabled state [ 89.531685][ T7365] macvlan2: entered allmulticast mode [ 89.533478][ T7365] bridge0: entered allmulticast mode [ 89.540132][ T7365] macvlan2: left allmulticast mode [ 89.541933][ T7365] bridge0: left allmulticast mode [ 89.544341][ T7365] bridge0: left promiscuous mode [ 89.626506][ T40] audit: type=1400 audit(1744844080.664:486): avc: denied { accept } for pid=7376 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.710483][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 89.782133][ T40] audit: type=1400 audit(1744844080.824:487): avc: denied { ioctl } for pid=7385 comm="syz.0.462" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.816222][ T7390] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.842441][ T7396] netlink: 80 bytes leftover after parsing attributes in process `syz.0.464'. [ 89.857656][ T7398] FAULT_INJECTION: forcing a failure. [ 89.857656][ T7398] name failslab, interval 1, probability 0, space 0, times 0 [ 89.862016][ T7398] CPU: 2 UID: 0 PID: 7398 Comm: syz.1.465 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 89.862031][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.862038][ T7398] Call Trace: [ 89.862042][ T7398] [ 89.862047][ T7398] dump_stack_lvl+0x16c/0x1f0 [ 89.862080][ T7398] should_fail_ex+0x512/0x640 [ 89.862095][ T7398] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 89.862108][ T7398] should_failslab+0xc2/0x120 [ 89.862121][ T7398] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 89.862131][ T7398] ? make_vfsuid+0xec/0x140 [ 89.862144][ T7398] ? alloc_empty_file+0x55/0x1e0 [ 89.862160][ T7398] alloc_empty_file+0x55/0x1e0 [ 89.862173][ T7398] dentry_open+0x46/0xd0 [ 89.862186][ T7398] ovl_path_open+0x198/0x1f0 [ 89.862201][ T7398] ovl_copy_up_metadata+0x758/0x890 [ 89.862217][ T7398] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 89.862235][ T7398] ? down_write_nested+0x151/0x210 [ 89.862247][ T7398] ? __pfx_down_write_nested+0x10/0x10 [ 89.862262][ T7398] ? lock_two_directories+0x225/0x2d0 [ 89.862277][ T7398] ovl_copy_up_one+0x235b/0x38f0 [ 89.862292][ T7398] ? arch_stack_walk+0xa6/0x100 [ 89.862312][ T7398] ? stack_trace_save+0x8e/0xc0 [ 89.862327][ T7398] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 89.862341][ T7398] ? stack_depot_save_flags+0x28/0xa50 [ 89.862352][ T7398] ? __lock_acquire+0xaa4/0x1ba0 [ 89.862363][ T7398] ? kasan_save_stack+0x42/0x60 [ 89.862373][ T7398] ? kasan_save_free_info+0x3b/0x60 [ 89.862387][ T7398] ? __kasan_slab_free+0x51/0x70 [ 89.862397][ T7398] ? kfree+0x2b6/0x4d0 [ 89.862410][ T7398] ? ovl_check_empty_dir+0x239/0x4c0 [ 89.862424][ T7398] ? ovl_do_remove+0xc4/0xf70 [ 89.862435][ T7398] ? vfs_rmdir+0x203/0x690 [ 89.862448][ T7398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.862481][ T7398] ? dget_parent+0xf8/0x5e0 [ 89.862500][ T7398] ovl_copy_up_flags+0x18d/0x200 [ 89.862517][ T7398] ovl_nlink_start+0x31c/0x3e0 [ 89.862533][ T7398] ovl_do_remove+0x16f/0xf70 [ 89.862545][ T7398] ? __pfx_may_link+0x10/0x10 [ 89.862563][ T7398] ? __pfx_ovl_do_remove+0x10/0x10 [ 89.862580][ T7398] vfs_rmdir+0x203/0x690 [ 89.862596][ T7398] do_rmdir+0x2e8/0x3c0 [ 89.862606][ T7398] ? __pfx_do_rmdir+0x10/0x10 [ 89.862620][ T7398] ? getname_flags.part.0+0x1c5/0x550 [ 89.862635][ T7398] __x64_sys_rmdir+0xc5/0x110 [ 89.862646][ T7398] do_syscall_64+0xcd/0x260 [ 89.862662][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.862671][ T7398] RIP: 0033:0x7fc16898e169 [ 89.862681][ T7398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.862691][ T7398] RSP: 002b:00007fc169732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 89.862701][ T7398] RAX: ffffffffffffffda RBX: 00007fc168bb5fa0 RCX: 00007fc16898e169 [ 89.862707][ T7398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 89.862713][ T7398] RBP: 00007fc169732090 R08: 0000000000000000 R09: 0000000000000000 [ 89.862719][ T7398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.862724][ T7398] R13: 0000000000000000 R14: 00007fc168bb5fa0 R15: 00007ffc0f17e898 [ 89.862742][ T7398] [ 89.933076][ T7400] Bluetooth: MGMT ver 1.23 [ 89.963617][ T7409] vlan2: entered promiscuous mode [ 89.979211][ T7409] bond0: entered promiscuous mode [ 89.982815][ T7409] bond_slave_0: entered promiscuous mode [ 89.989359][ T7409] bond_slave_1: entered promiscuous mode [ 90.016700][ T7400] syzkaller1: entered promiscuous mode [ 90.019203][ T7400] syzkaller1: entered allmulticast mode [ 90.021544][ T7406] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 90.101684][ T40] audit: type=1400 audit(1744844081.144:488): avc: denied { read write } for pid=7418 comm="syz.1.471" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.109254][ T40] audit: type=1400 audit(1744844081.144:489): avc: denied { open } for pid=7418 comm="syz.1.471" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.176523][ T7430] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 90.184985][ T7429] syzkaller0: entered allmulticast mode [ 90.194877][ T40] audit: type=1804 audit(1744844081.234:490): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.474" name="/newroot/124/file0" dev="tmpfs" ino=711 res=1 errno=0 [ 90.203694][ T7421] "syz.0.472" (7421) uses obsolete ecb(arc4) skcipher [ 90.204120][ T40] audit: type=1800 audit(1744844081.234:491): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.474" name="file0" dev="tmpfs" ino=711 res=0 errno=0 [ 90.214431][ T40] audit: type=1804 audit(1744844081.234:492): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.474" name="/newroot/124/file0" dev="tmpfs" ino=711 res=1 errno=0 [ 90.216573][ T7433] syzkaller0 (unregistering): left allmulticast mode [ 90.225914][ T40] audit: type=1400 audit(1744844081.244:493): avc: denied { bind } for pid=7420 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.388118][ T5991] usb 7-1: USB disconnect, device number 8 [ 90.398395][ T7443] FAULT_INJECTION: forcing a failure. [ 90.398395][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 90.402949][ T7443] CPU: 3 UID: 0 PID: 7443 Comm: syz.0.476 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 90.402986][ T7443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.402997][ T7443] Call Trace: [ 90.403004][ T7443] [ 90.403011][ T7443] dump_stack_lvl+0x16c/0x1f0 [ 90.403046][ T7443] should_fail_ex+0x512/0x640 [ 90.403064][ T7443] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 90.403085][ T7443] should_failslab+0xc2/0x120 [ 90.403103][ T7443] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 90.403119][ T7443] ? security_file_alloc+0x34/0x2b0 [ 90.403144][ T7443] security_file_alloc+0x34/0x2b0 [ 90.403169][ T7443] init_file+0x93/0x4c0 [ 90.403186][ T7443] alloc_empty_file+0x73/0x1e0 [ 90.403206][ T7443] dentry_open+0x46/0xd0 [ 90.403224][ T7443] ovl_path_open+0x198/0x1f0 [ 90.403247][ T7443] ovl_copy_up_metadata+0x758/0x890 [ 90.403273][ T7443] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 90.403301][ T7443] ? down_write_nested+0x151/0x210 [ 90.403319][ T7443] ? __pfx_down_write_nested+0x10/0x10 [ 90.403345][ T7443] ? lock_two_directories+0x225/0x2d0 [ 90.403371][ T7443] ovl_copy_up_one+0x235b/0x38f0 [ 90.403393][ T7443] ? arch_stack_walk+0xa6/0x100 [ 90.403425][ T7443] ? stack_trace_save+0x8e/0xc0 [ 90.403447][ T7443] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 90.403469][ T7443] ? stack_depot_save_flags+0x28/0xa50 [ 90.403488][ T7443] ? __lock_acquire+0xaa4/0x1ba0 [ 90.403506][ T7443] ? kasan_save_stack+0x42/0x60 [ 90.403522][ T7443] ? kasan_save_free_info+0x3b/0x60 [ 90.403543][ T7443] ? __kasan_slab_free+0x51/0x70 [ 90.403558][ T7443] ? kfree+0x2b6/0x4d0 [ 90.403578][ T7443] ? ovl_check_empty_dir+0x239/0x4c0 [ 90.403598][ T7443] ? ovl_do_remove+0xc4/0xf70 [ 90.403615][ T7443] ? vfs_rmdir+0x203/0x690 [ 90.403636][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.403693][ T7443] ? dget_parent+0xf8/0x5e0 [ 90.403724][ T7443] ovl_copy_up_flags+0x18d/0x200 [ 90.403753][ T7443] ovl_nlink_start+0x31c/0x3e0 [ 90.403779][ T7443] ovl_do_remove+0x16f/0xf70 [ 90.403798][ T7443] ? __pfx_may_link+0x10/0x10 [ 90.403827][ T7443] ? __pfx_ovl_do_remove+0x10/0x10 [ 90.403854][ T7443] vfs_rmdir+0x203/0x690 [ 90.403877][ T7443] do_rmdir+0x2e8/0x3c0 [ 90.403896][ T7443] ? __pfx_do_rmdir+0x10/0x10 [ 90.403920][ T7443] ? getname_flags.part.0+0x1c5/0x550 [ 90.403946][ T7443] __x64_sys_rmdir+0xc5/0x110 [ 90.403962][ T7443] do_syscall_64+0xcd/0x260 [ 90.403987][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.404001][ T7443] RIP: 0033:0x7fac3e38e169 [ 90.404015][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.404038][ T7443] RSP: 002b:00007fac3f1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 90.404054][ T7443] RAX: ffffffffffffffda RBX: 00007fac3e5b5fa0 RCX: 00007fac3e38e169 [ 90.404064][ T7443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 90.404074][ T7443] RBP: 00007fac3f1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 90.404083][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.404093][ T7443] R13: 0000000000000000 R14: 00007fac3e5b5fa0 R15: 00007ffc15985588 [ 90.404118][ T7443] [ 90.456000][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 90.516500][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'. [ 90.568509][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 90.574883][ T7459] xfrm1: entered promiscuous mode [ 90.576903][ T7459] xfrm1: entered allmulticast mode [ 90.655940][ T7474] Failed to initialize the IGMP autojoin socket (err -2) [ 90.739141][ T5955] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 90.742341][ T5955] Bluetooth: hci3: hardware error 0x09 [ 90.759312][ T7477] FAULT_INJECTION: forcing a failure. [ 90.759312][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 90.765629][ T7477] CPU: 3 UID: 0 PID: 7477 Comm: syz.0.489 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 90.765646][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.765653][ T7477] Call Trace: [ 90.765657][ T7477] [ 90.765662][ T7477] dump_stack_lvl+0x16c/0x1f0 [ 90.765680][ T7477] should_fail_ex+0x512/0x640 [ 90.765692][ T7477] ? fs_reclaim_acquire+0xae/0x150 [ 90.765708][ T7477] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 90.765723][ T7477] should_failslab+0xc2/0x120 [ 90.765735][ T7477] __kmalloc_noprof+0xd2/0x510 [ 90.765749][ T7477] tomoyo_realpath_from_path+0xc2/0x6e0 [ 90.765776][ T7477] tomoyo_check_open_permission+0x2ab/0x3c0 [ 90.765789][ T7477] ? security_file_alloc+0x34/0x2b0 [ 90.765805][ T7477] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 90.765818][ T7477] ? ovl_path_open+0x198/0x1f0 [ 90.765832][ T7477] ? ovl_copy_up_flags+0x18d/0x200 [ 90.765847][ T7477] ? ovl_nlink_start+0x31c/0x3e0 [ 90.765874][ T7477] ? do_raw_spin_lock+0x12c/0x2b0 [ 90.765891][ T7477] tomoyo_file_open+0x6b/0x90 [ 90.765901][ T7477] security_file_open+0x84/0x1e0 [ 90.765917][ T7477] do_dentry_open+0x596/0x1c10 [ 90.765928][ T7477] ? lockdep_init_map_type+0x5c/0x280 [ 90.765940][ T7477] vfs_open+0x82/0x3f0 [ 90.765955][ T7477] dentry_open+0x71/0xd0 [ 90.765967][ T7477] ovl_path_open+0x198/0x1f0 [ 90.765981][ T7477] ovl_copy_up_metadata+0x758/0x890 [ 90.765997][ T7477] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 90.766015][ T7477] ? down_write_nested+0x151/0x210 [ 90.766026][ T7477] ? __pfx_down_write_nested+0x10/0x10 [ 90.766041][ T7477] ? lock_two_directories+0x225/0x2d0 [ 90.766057][ T7477] ovl_copy_up_one+0x235b/0x38f0 [ 90.766071][ T7477] ? arch_stack_walk+0xa6/0x100 [ 90.766091][ T7477] ? stack_trace_save+0x8e/0xc0 [ 90.766105][ T7477] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 90.766119][ T7477] ? stack_depot_save_flags+0x28/0xa50 [ 90.766131][ T7477] ? __lock_acquire+0xaa4/0x1ba0 [ 90.766142][ T7477] ? kasan_save_stack+0x42/0x60 [ 90.766151][ T7477] ? kasan_save_free_info+0x3b/0x60 [ 90.766165][ T7477] ? __kasan_slab_free+0x51/0x70 [ 90.766174][ T7477] ? kfree+0x2b6/0x4d0 [ 90.766187][ T7477] ? ovl_check_empty_dir+0x239/0x4c0 [ 90.766200][ T7477] ? ovl_do_remove+0xc4/0xf70 [ 90.766211][ T7477] ? vfs_rmdir+0x203/0x690 [ 90.766225][ T7477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.766257][ T7477] ? dget_parent+0xf8/0x5e0 [ 90.766276][ T7477] ovl_copy_up_flags+0x18d/0x200 [ 90.766294][ T7477] ovl_nlink_start+0x31c/0x3e0 [ 90.766310][ T7477] ovl_do_remove+0x16f/0xf70 [ 90.766323][ T7477] ? __pfx_may_link+0x10/0x10 [ 90.766340][ T7477] ? __pfx_ovl_do_remove+0x10/0x10 [ 90.766357][ T7477] vfs_rmdir+0x203/0x690 [ 90.766373][ T7477] do_rmdir+0x2e8/0x3c0 [ 90.766384][ T7477] ? __pfx_do_rmdir+0x10/0x10 [ 90.766398][ T7477] ? getname_flags.part.0+0x1c5/0x550 [ 90.766413][ T7477] __x64_sys_rmdir+0xc5/0x110 [ 90.766424][ T7477] do_syscall_64+0xcd/0x260 [ 90.766439][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.766449][ T7477] RIP: 0033:0x7fac3e38e169 [ 90.766458][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.766468][ T7477] RSP: 002b:00007fac3f1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 90.766478][ T7477] RAX: ffffffffffffffda RBX: 00007fac3e5b5fa0 RCX: 00007fac3e38e169 [ 90.766484][ T7477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 90.766490][ T7477] RBP: 00007fac3f1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 90.766496][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.766502][ T7477] R13: 0000000000000000 R14: 00007fac3e5b5fa0 R15: 00007ffc15985588 [ 90.766515][ T7477] [ 90.766520][ T7477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.775752][ T7479] veth1_to_team: entered allmulticast mode [ 90.948461][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 90.985834][ T7495] netlink: 'syz.3.496': attribute type 21 has an invalid length. [ 90.989206][ T7495] netlink: 156 bytes leftover after parsing attributes in process `syz.3.496'. [ 91.041640][ T7509] cgroup: subsys name conflicts with all [ 91.041750][ T7506] netlink: 64 bytes leftover after parsing attributes in process `syz.3.499'. [ 91.205732][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 91.260252][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 91.279136][ T4584] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 91.359856][ T7544] fuse: Bad value for 'fd' [ 91.449647][ T4584] usb 6-1: Using ep0 maxpacket: 8 [ 91.453022][ T4584] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 91.455820][ T4584] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.458885][ T4584] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.462130][ T4584] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.465190][ T4584] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.469568][ T4584] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.472555][ T4584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.538268][ T7555] 8021q: VLANs not supported on gre0 [ 91.639819][ T5991] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.662446][ T7555] team0: Port device team_slave_0 removed [ 91.679071][ T7564] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 91.683252][ T4584] usb 6-1: usb_control_msg returned -32 [ 91.685122][ T4584] usbtmc 6-1:16.0: can't read capabilities [ 91.688447][ T7564] /dev/ppp: Can't lookup blockdev [ 91.811488][ T5991] usb 5-1: Using ep0 maxpacket: 8 [ 91.814401][ T5991] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.817448][ T5991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.820655][ T5991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.823692][ T5991] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.827692][ T5991] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.830678][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.868786][ T7572] netlink: 'syz.3.522': attribute type 3 has an invalid length. [ 92.036777][ T5991] usb 5-1: GET_CAPABILITIES returned 0 [ 92.039232][ T5991] usbtmc 5-1:16.0: can't read capabilities [ 92.253811][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.256819][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.332278][ T6506] usb 5-1: USB disconnect, device number 9 [ 92.387561][ T7591] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 92.512631][ T7601] Failed to initialize the IGMP autojoin socket (err -2) [ 92.570434][ T7601] netlink: 'syz.3.530': attribute type 3 has an invalid length. [ 92.574021][ T7601] netlink: 'syz.3.530': attribute type 2 has an invalid length. [ 92.588166][ T6011] usb 6-1: USB disconnect, device number 9 [ 92.819076][ T5955] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 92.898754][ T7615] SELinux: policydb magic number 0xf2539a25 does not match expected magic number 0xf97cff8c [ 92.903796][ T7615] SELinux: failed to load policy [ 93.157685][ T7630] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 93.729092][ T6506] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 93.808761][ T7656] sp0: Synchronizing with TNC [ 93.859280][ T6506] usb 6-1: device descriptor read/64, error -71 [ 93.976525][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 94.099543][ T6506] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.229161][ T6506] usb 6-1: device descriptor read/64, error -71 [ 94.232309][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 94.259141][ T5959] Bluetooth: hci0: command tx timeout [ 94.340088][ T6506] usb usb6-port1: attempt power cycle [ 94.679120][ T6506] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 94.699824][ T6506] usb 6-1: device descriptor read/8, error -71 [ 94.739528][ T4584] libceph: mon0 (1)[c::]:6789 connect error [ 94.797370][ T7667] ceph: No mds server is up or the cluster is laggy [ 94.857867][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 94.857884][ T40] audit: type=1400 audit(1744844085.894:527): avc: denied { bind } for pid=7678 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.959116][ T6506] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 94.991050][ T6506] usb 6-1: device descriptor read/8, error -71 [ 95.099281][ T6506] usb usb6-port1: unable to enumerate USB device [ 95.139291][ T5959] Bluetooth: hci2: command 0x0405 tx timeout [ 95.209113][ T6010] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 95.339070][ T6010] usb 7-1: device descriptor read/64, error -71 [ 95.589134][ T6010] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 95.729192][ T6010] usb 7-1: device descriptor read/64, error -71 [ 95.804271][ T40] audit: type=1400 audit(1744844086.844:528): avc: denied { create } for pid=7704 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 95.840169][ T6010] usb usb7-port1: attempt power cycle [ 96.010171][ T7710] __nla_validate_parse: 16 callbacks suppressed [ 96.010184][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 96.189112][ T6010] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 96.209849][ T6010] usb 7-1: device descriptor read/8, error -71 [ 96.449139][ T6010] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 96.470284][ T6010] usb 7-1: device descriptor read/8, error -71 [ 96.474326][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 96.581073][ T6010] usb usb7-port1: unable to enumerate USB device [ 97.340814][ T7780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.373686][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 97.513252][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.516153][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.533669][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.536544][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.568651][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.572422][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.719143][ T5991] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 97.879043][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 97.881988][ T5991] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 97.884877][ T5991] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.887911][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.891023][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.894079][ T5991] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.898063][ T5991] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.900957][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.109102][ T5991] usb 6-1: usb_control_msg returned -32 [ 98.110934][ T5991] usbtmc 6-1:16.0: can't read capabilities [ 98.274449][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.419033][ T6010] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 98.579579][ T6010] usb 7-1: Using ep0 maxpacket: 8 [ 98.583244][ T6010] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 98.585913][ T6010] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.589068][ T6010] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.592135][ T6010] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.595255][ T6010] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.599524][ T6010] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.602445][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.810176][ T6010] usb 7-1: usb_control_msg returned -32 [ 98.811975][ T6010] usbtmc 7-1:16.0: can't read capabilities [ 98.843847][ T40] audit: type=1400 audit(1744844089.884:529): avc: denied { relabelfrom } for pid=7809 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 98.850736][ T40] audit: type=1400 audit(1744844089.884:530): avc: denied { relabelto } for pid=7809 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 99.093438][ T40] audit: type=1400 audit(1744844090.134:531): avc: denied { setopt } for pid=7815 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.341720][ T40] audit: type=1400 audit(1744844090.384:532): avc: denied { bind } for pid=7823 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.412158][ T7826] SELinux: failed to load policy [ 99.607256][ T40] audit: type=1400 audit(1744844090.644:533): avc: denied { map } for pid=7838 comm="syz.0.584" path="/proc/sys/net/ipv4/vs/ignore_tunneled" dev="proc" ino=20551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 100.156694][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 100.277565][ T5959] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 100.279435][ T40] audit: type=1400 audit(1744844091.324:534): avc: denied { setopt } for pid=7862 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.522970][ T7870] tmpfs: User quota block hardlimit too large. [ 100.527313][ T40] audit: type=1400 audit(1744844091.564:535): avc: denied { mounton } for pid=7869 comm="syz.3.594" path="/172/file0" dev="hugetlbfs" ino=18956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 100.528612][ T7870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.537948][ T7870] overlayfs: maximum fs stacking depth exceeded [ 100.546043][ T7870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.550212][ T7870] overlayfs: maximum fs stacking depth exceeded [ 100.763863][ T40] audit: type=1400 audit(1744844091.804:536): avc: denied { read } for pid=7886 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.789954][ T40] audit: type=1400 audit(1744844091.834:537): avc: denied { mounton } for pid=7890 comm="syz.3.601" path="/176/bus" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 100.790015][ T7891] /dev/sg0: Can't lookup blockdev [ 100.925914][ T7894] netlink: 'syz.3.602': attribute type 2 has an invalid length. [ 100.930332][ T40] audit: type=1400 audit(1744844091.974:538): avc: denied { map } for pid=7893 comm="syz.3.602" path="socket:[19062]" dev="sockfs" ino=19062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.937712][ T40] audit: type=1400 audit(1744844091.974:539): avc: denied { read } for pid=7893 comm="syz.3.602" path="socket:[19062]" dev="sockfs" ino=19062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.065665][ T40] audit: type=1400 audit(1744844092.104:540): avc: denied { bind } for pid=7900 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.072094][ T40] audit: type=1400 audit(1744844092.104:541): avc: denied { ioctl } for pid=7900 comm="syz.0.604" path="socket:[19073]" dev="sockfs" ino=19073 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.079993][ T40] audit: type=1400 audit(1744844092.104:542): avc: denied { remount } for pid=7900 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 101.086287][ T40] audit: type=1400 audit(1744844092.104:543): avc: denied { write } for pid=7900 comm="syz.0.604" path="socket:[19073]" dev="sockfs" ino=19073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.114276][ T7906] fuse: blksize only supported for fuseblk [ 101.314980][ T7923] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 101.318208][ T7923] hsr0: entered promiscuous mode [ 101.322628][ T7923] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 101.326024][ T7923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 101.330159][ T7923] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 101.356529][ T7925] __nla_validate_parse: 2 callbacks suppressed [ 101.356541][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 101.408520][ T7930] syz.0.615 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.566471][ T7943] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 101.571222][ T7943] Error validating options; rc = [-22] [ 103.517950][ T7960] geneve2: entered promiscuous mode [ 103.939487][ T7805] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 103.954851][ T34] usb 6-1: USB disconnect, device number 14 [ 103.983848][ T7963] Failed to initialize the IGMP autojoin socket (err -2) [ 104.030444][ T6506] usb 7-1: USB disconnect, device number 13 [ 104.229652][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 104.249452][ T7988] openvswitch: netlink: Missing valid actions attribute. [ 104.251823][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.285279][ T7994] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 104.288391][ T7994] overlayfs: missing 'lowerdir' [ 104.344116][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'. [ 104.605318][ T8008] syz.3.639: attempt to access beyond end of device [ 104.605318][ T8008] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 104.610736][ T8008] XFS (nbd3): SB validate failed with error -5. [ 104.932313][ T8025] syzkaller0: entered promiscuous mode [ 104.934150][ T8025] syzkaller0: entered allmulticast mode [ 104.937196][ T8025] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 105.203175][ T8037] openvswitch: netlink: IPv4 tunnel dst address is zero [ 105.206383][ T8037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=8037 comm=syz.3.648 [ 105.300728][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 105.300738][ T40] audit: type=1400 audit(1744844096.344:552): avc: denied { map } for pid=8040 comm="syz.2.650" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.423468][ T8046] Bluetooth: hci4: Frame reassembly failed (-84) [ 105.426186][ T1166] Bluetooth: hci4: Frame reassembly failed (-84) [ 105.652619][ T40] audit: type=1400 audit(1744844096.694:553): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.683676][ T40] audit: type=1400 audit(1744844096.724:554): avc: denied { map } for pid=8048 comm="syz.1.653" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.707534][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 105.779039][ T4584] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 105.909106][ T4584] usb 7-1: device descriptor read/64, error -71 [ 106.130598][ T40] audit: type=1400 audit(1744844097.174:555): avc: denied { write } for pid=8060 comm="syz.0.657" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.130630][ T8061] random: crng reseeded on system resumption [ 106.159212][ T4584] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 106.185093][ T40] audit: type=1400 audit(1744844097.224:556): avc: denied { listen } for pid=8060 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.196108][ T40] audit: type=1400 audit(1744844097.234:557): avc: denied { accept } for pid=8060 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.252532][ T40] audit: type=1400 audit(1744844097.294:558): avc: denied { write } for pid=8060 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.299089][ T4584] usb 7-1: device descriptor read/64, error -71 [ 106.419215][ T4584] usb usb7-port1: attempt power cycle [ 106.585714][ T8054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.686911][ T8067] [U] [ 106.688077][ T8067] [U] [ 106.689075][ T8067] [U] [ 106.690010][ T8067] [U] [ 106.691739][ T8067] [U] [ 106.692688][ T8067] [U] [ 106.693592][ T8067] [U] [ 106.694472][ T8067] [U] [ 106.759067][ T4584] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 106.779777][ T4584] usb 7-1: device descriptor read/8, error -71 [ 106.889288][ T8067] [U] [ 106.890308][ T8067] [U] [ 106.891344][ T8067] [U] [ 106.892285][ T8067] [U] [ 107.018447][ T8067] [U] [ 107.029416][ T4584] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 107.037220][ T8079] netlink: 'syz.1.662': attribute type 4 has an invalid length. [ 107.043517][ T5955] Bluetooth: hci1: unexpected event 0x04 length: 17 > 10 [ 107.043574][ T5955] Bluetooth: hci1: connection err: -111 [ 107.050614][ T4584] usb 7-1: device descriptor read/8, error -71 [ 107.087268][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 107.111663][ T40] audit: type=1400 audit(1744844098.154:559): avc: denied { allowed } for pid=8082 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.118728][ T40] audit: type=1400 audit(1744844098.154:560): avc: denied { sqpoll } for pid=8082 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.160128][ T4584] usb usb7-port1: unable to enumerate USB device [ 107.252927][ T40] audit: type=1400 audit(1744844098.294:561): avc: denied { write } for pid=8092 comm="syz.0.668" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.459176][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 107.459388][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 107.779275][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.940132][ T8125] input: syz0 as /devices/virtual/input/input10 [ 108.003208][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.019987][ T8130] ip_vti0: entered promiscuous mode [ 108.098126][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.146508][ T8147] fuse: Bad value for 'fd' [ 108.156011][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.198655][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.203401][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.206665][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.207786][ T8151] block device autoloading is deprecated and will be removed. [ 108.210230][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.215134][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.226493][ T8149] Failed to initialize the IGMP autojoin socket (err -2) [ 108.238751][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.249391][ T8147] md2: using deprecated bitmap file support [ 108.251339][ T8147] md2: error: failed to get bitmap file [ 108.359214][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.687'. [ 108.363076][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.687'. [ 108.375546][ T77] bridge_slave_1: left allmulticast mode [ 108.379288][ T77] bridge_slave_1: left promiscuous mode [ 108.382399][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.391934][ T77] bridge_slave_0: left allmulticast mode [ 108.393765][ T77] bridge_slave_0: left promiscuous mode [ 108.395663][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.535620][ T77] batman_adv: batadv0: Removing interface: gretap1 [ 108.765452][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.769650][ T77] bond_slave_0: left promiscuous mode [ 108.773011][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.776063][ T77] bond_slave_1: left promiscuous mode [ 108.779853][ T77] bond0 (unregistering): Released all slaves [ 108.790081][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.793964][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.982117][ T8199] block device autoloading is deprecated and will be removed. [ 109.041720][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 109.044508][ T8184] md2: using deprecated bitmap file support [ 109.046423][ T8184] md2: error: failed to get bitmap file [ 109.160698][ T8184] md2: using deprecated bitmap file support [ 109.162676][ T8184] md2: error: failed to get bitmap file [ 109.178894][ T77] hsr_slave_0: left promiscuous mode [ 109.187044][ T77] hsr_slave_1: left promiscuous mode [ 109.193673][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.196152][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.207236][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.209784][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.211077][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 109.233729][ T77] veth1_macvtap: left promiscuous mode [ 109.235732][ T77] veth0_macvtap: left promiscuous mode [ 109.237603][ T77] veth1_vlan: left promiscuous mode [ 109.240264][ T77] veth0_vlan: left promiscuous mode [ 109.356295][ T8237] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.704'. [ 109.362457][ T8237] netlink: zone id is out of range [ 109.364113][ T8237] netlink: zone id is out of range [ 109.365754][ T8237] netlink: zone id is out of range [ 109.367462][ T8237] netlink: get zone limit has 8 unknown bytes [ 109.878530][ T77] team0 (unregistering): Port device team_slave_1 removed [ 109.947688][ T77] team0 (unregistering): Port device team_slave_0 removed [ 110.260953][ T5959] Bluetooth: hci0: command tx timeout [ 110.484349][ T8237] batadv_slave_1: entered promiscuous mode [ 110.486491][ T8238] batadv_slave_1: left promiscuous mode [ 110.518759][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.527504][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 110.527514][ T40] audit: type=1400 audit(1744844101.564:570): avc: denied { ioctl } for pid=8244 comm="syz.1.705" path="socket:[21187]" dev="sockfs" ino=21187 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.527662][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.530454][ T40] audit: type=1400 audit(1744844101.564:571): avc: denied { setopt } for pid=8244 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.538215][ T8149] bridge_slave_0: entered allmulticast mode [ 110.544095][ T40] audit: type=1400 audit(1744844101.584:572): avc: denied { write } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.548451][ T8149] bridge_slave_0: entered promiscuous mode [ 110.549768][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.560291][ T40] audit: type=1400 audit(1744844101.584:573): avc: denied { remove_name } for pid=5340 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.564230][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.566644][ T8249] program syz.2.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.568065][ T40] audit: type=1400 audit(1744844101.584:574): avc: denied { add_name } for pid=5340 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.569694][ T8149] bridge_slave_1: entered allmulticast mode [ 110.582352][ T8149] bridge_slave_1: entered promiscuous mode [ 110.677888][ T40] audit: type=1400 audit(1744844101.714:575): avc: denied { write } for pid=8248 comm="syz.2.706" path="socket:[20352]" dev="sockfs" ino=20352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.684374][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.693773][ T40] audit: type=1400 audit(1744844101.714:576): avc: denied { nlmsg_read } for pid=8248 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.706105][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.758848][ T40] audit: type=1400 audit(1744844101.794:577): avc: denied { getopt } for pid=8259 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.836721][ T40] audit: type=1400 audit(1744844101.874:578): avc: denied { listen } for pid=8262 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.869272][ T8149] team0: Port device team_slave_0 added [ 110.893826][ T8149] team0: Port device team_slave_1 added [ 111.013964][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.013978][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.013991][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.014795][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.014804][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.014817][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.149045][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 111.167422][ T8149] hsr_slave_0: entered promiscuous mode [ 111.173218][ T8149] hsr_slave_1: entered promiscuous mode [ 111.309206][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 111.313479][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.316551][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.320551][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.323623][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.328282][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.331657][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.367683][ T8283] block device autoloading is deprecated and will be removed. [ 111.419266][ T8282] md2: using deprecated bitmap file support [ 111.421215][ T8282] md2: error: failed to get bitmap file [ 111.509334][ T8282] md2: using deprecated bitmap file support [ 111.511351][ T8282] md2: error: failed to get bitmap file [ 111.548528][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 111.551288][ T34] usbtmc 6-1:16.0: can't read capabilities [ 111.748526][ T8269] netlink: 124 bytes leftover after parsing attributes in process `syz.1.713'. [ 111.751878][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 111.758877][ T4584] usb 6-1: USB disconnect, device number 15 [ 112.014926][ T40] audit: type=1400 audit(1744844103.054:579): avc: denied { override_creds } for pid=8301 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.339369][ T5959] Bluetooth: hci0: command tx timeout [ 112.779714][ T8318] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 112.833791][ T8149] netdevsim netdevsim0 netdevsim0: renamed from eth2 [ 112.860821][ T8149] netdevsim netdevsim0 netdevsim1: renamed from eth3 [ 112.886404][ T8149] netdevsim netdevsim0 netdevsim2: renamed from eth4 [ 112.906715][ T8327] netlink: 'syz.3.726': attribute type 8 has an invalid length. [ 112.926642][ T8149] netdevsim netdevsim0 netdevsim3: renamed from eth5 [ 113.024039][ T8316] infiniband syz1: set active [ 113.026652][ T8316] infiniband syz1: added syz_tun [ 113.030291][ T8316] syz1: rxe_create_cq: returned err = -12 [ 113.032344][ T8316] infiniband syz1: Couldn't create ib_mad CQ [ 113.034359][ T8316] infiniband syz1: Couldn't open port 1 [ 113.064764][ T8316] RDS/IB: syz1: added [ 113.066360][ T8316] smc: adding ib device syz1 with port count 1 [ 113.068491][ T8316] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 113.129680][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.145769][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.148111][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.180046][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.182374][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.399997][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.511824][ T8149] veth0_vlan: entered promiscuous mode [ 113.516349][ T8351] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 113.517405][ T8149] veth1_vlan: entered promiscuous mode [ 113.518840][ T8351] netlink: 152 bytes leftover after parsing attributes in process `syz.2.732'. [ 113.528755][ T8351] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 113.581330][ T8149] veth0_macvtap: entered promiscuous mode [ 113.594190][ T8149] veth1_macvtap: entered promiscuous mode [ 113.626640][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.630147][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.633204][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.636579][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.640641][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.643879][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.662053][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.669826][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.673276][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.676491][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.680073][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.683321][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.686779][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.701558][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.711344][ T8149] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.732587][ T8149] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 113.741828][ T8149] wireguard: wg0: Could not create IPv4 socket [ 113.742462][ T8362] syz.1.733: attempt to access beyond end of device [ 113.742462][ T8362] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 113.746990][ T8149] wireguard: wg1: Could not create IPv4 socket [ 113.748776][ T8362] syz.1.733: attempt to access beyond end of device [ 113.748776][ T8362] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 113.752715][ T8149] wireguard: wg2: Could not create IPv4 socket [ 113.754725][ T8362] Mount JFS Failure: -5 [ 113.757860][ T8362] jfs_mount failed w/return code = -5 [ 113.819225][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 114.439205][ T6011] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 114.592261][ T6011] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.595244][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.597905][ T6011] usb 6-1: Product: syz [ 114.602623][ T6011] usb 6-1: Manufacturer: syz [ 114.604556][ T6011] usb 6-1: SerialNumber: syz [ 114.614477][ T6011] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.644192][ T65] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.214054][ T8441] overlayfs: missing 'lowerdir' [ 115.549152][ T4584] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 115.679119][ T4584] usb 7-1: device descriptor read/64, error -71 [ 115.699040][ T65] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 115.701845][ T65] ath9k_htc: Failed to initialize the device [ 115.724983][ T65] usb 6-1: ath9k_htc: USB layer deinitialized [ 115.929121][ T4584] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 115.942347][ T5950] usb 6-1: USB disconnect, device number 16 [ 116.069470][ T4584] usb 7-1: device descriptor read/64, error -71 [ 116.179616][ T4584] usb usb7-port1: attempt power cycle [ 116.510733][ T8526] bond0: (slave batadv0): Releasing backup interface [ 116.518334][ T8526] bridge_slave_0: left allmulticast mode [ 116.522698][ T8526] bridge_slave_0: left promiscuous mode [ 116.522729][ T4584] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 116.524658][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.531370][ T8526] bridge_slave_1: left allmulticast mode [ 116.533273][ T8526] bridge_slave_1: left promiscuous mode [ 116.535141][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.539959][ T8526] bond0: (slave bond_slave_0): Releasing backup interface [ 116.541812][ T4584] usb 7-1: device descriptor read/8, error -71 [ 116.547729][ T8526] bond0: (slave bond_slave_1): Releasing backup interface [ 116.562134][ T8526] team0: Port device team_slave_0 removed [ 116.568593][ T8526] team0: Port device team_slave_1 removed [ 116.573653][ T8526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.576037][ T8526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.579435][ T8526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.581850][ T8526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.589545][ T8526] bond0: (slave bond1): Releasing backup interface [ 116.683008][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.686633][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.689664][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.693403][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.696689][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.712039][ T8538] Failed to initialize the IGMP autojoin socket (err -2) [ 116.799099][ T4584] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 116.829704][ T4584] usb 7-1: device descriptor read/8, error -71 [ 116.933078][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 116.933088][ T40] audit: type=1400 audit(1744844107.974:585): avc: denied { write } for pid=8552 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.939291][ T4584] usb usb7-port1: unable to enumerate USB device [ 116.941980][ T40] audit: type=1400 audit(1744844107.974:586): avc: denied { audit_control } for pid=8552 comm="syz.3.751" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 117.452304][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 117.494900][ T40] audit: type=1400 audit(1744844108.534:587): avc: denied { read } for pid=8591 comm="syz.1.755" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.532365][ T8596] syz.1.756: attempt to access beyond end of device [ 117.532365][ T8596] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 117.536726][ T8596] befs: (nbd1): unable to read superblock [ 117.551417][ T8596] syz.1.756: attempt to access beyond end of device [ 117.551417][ T8596] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 117.556352][ T8596] befs: (nbd1): unable to read superblock [ 117.724124][ T5955] Bluetooth: Frame is too long (len 10, expected len 4) [ 117.728654][ T8616] netlink: 'syz.1.759': attribute type 178 has an invalid length. [ 117.845031][ T8626] openvswitch: netlink: Message has 3 unknown bytes. [ 117.847201][ T8626] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.109208][ T6010] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 118.249092][ T6010] usb 6-1: device descriptor read/64, error -71 [ 118.284670][ T8538] netdevsim netdevsim0 netdevsim0: renamed from eth2 [ 118.309478][ T8538] netdevsim netdevsim0 netdevsim1: renamed from eth3 [ 118.325330][ T8538] netdevsim netdevsim0 netdevsim2: renamed from eth4 [ 118.342898][ T8538] netdevsim netdevsim0 netdevsim3: renamed from eth5 [ 118.500773][ T6010] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 118.629093][ T6010] usb 6-1: device descriptor read/64, error -71 [ 118.741526][ T5955] Bluetooth: hci0: command tx timeout [ 118.749614][ T6010] usb usb6-port1: attempt power cycle [ 119.101832][ T6010] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 119.134669][ T6010] usb 6-1: device descriptor read/8, error -71 [ 119.282862][ T40] audit: type=1400 audit(1744844110.314:588): avc: denied { write } for pid=8673 comm="syz.3.765" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.297053][ T40] audit: type=1400 audit(1744844110.334:589): avc: denied { ioctl } for pid=8673 comm="syz.3.765" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.389037][ T6010] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 119.420268][ T6010] usb 6-1: device descriptor read/8, error -71 [ 119.542840][ T6010] usb usb6-port1: unable to enumerate USB device [ 119.646354][ T8678] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 119.649417][ T8678] CPU: 3 UID: 0 PID: 8678 Comm: syz.3.766 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 119.649433][ T8678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.649441][ T8678] Call Trace: [ 119.649446][ T8678] [ 119.649451][ T8678] dump_stack_lvl+0x16c/0x1f0 [ 119.649489][ T8678] sysfs_warn_dup+0x7f/0xa0 [ 119.649501][ T8678] sysfs_do_create_link_sd+0x124/0x140 [ 119.649515][ T8678] sysfs_create_link+0x61/0xc0 [ 119.649538][ T8678] device_add+0x62c/0x1a70 [ 119.649552][ T8678] ? __pfx_device_add+0x10/0x10 [ 119.649561][ T8678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.649576][ T8678] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 119.649596][ T8678] wiphy_register+0x1c9c/0x2850 [ 119.649606][ T8678] ? netdev_run_todo+0x864/0x1320 [ 119.649621][ T8678] ? __dev_printk+0x1a0/0x270 [ 119.649639][ T8678] ? __pfx_wiphy_register+0x10/0x10 [ 119.649658][ T8678] ieee80211_register_hw+0x2432/0x4020 [ 119.649681][ T8678] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 119.649705][ T8678] ? find_held_lock+0x2b/0x80 [ 119.649720][ T8678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.649732][ T8678] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 119.649749][ T8678] ? __hrtimer_setup+0x176/0x280 [ 119.649764][ T8678] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 119.649786][ T8678] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 119.649800][ T8678] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 119.649814][ T8678] ? __asan_memcpy+0x3c/0x60 [ 119.649832][ T8678] hwsim_new_radio_nl+0xb51/0x12c0 [ 119.649846][ T8678] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.649862][ T8678] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 119.649881][ T8678] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 119.649901][ T8678] genl_family_rcv_msg_doit+0x206/0x2f0 [ 119.649919][ T8678] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.649941][ T8678] ? bpf_lsm_capable+0x9/0x10 [ 119.649951][ T8678] ? security_capable+0x7e/0x260 [ 119.649964][ T8678] ? ns_capable+0xd7/0x110 [ 119.649979][ T8678] genl_rcv_msg+0x55c/0x800 [ 119.650001][ T8678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.650016][ T8678] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.650029][ T8678] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.650042][ T8678] ? __lock_acquire+0xaa4/0x1ba0 [ 119.650055][ T8678] netlink_rcv_skb+0x16a/0x440 [ 119.650069][ T8678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.650086][ T8678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.650109][ T8678] ? __pfx_down_read+0x10/0x10 [ 119.650127][ T8678] ? netlink_deliver_tap+0x1ae/0xd30 [ 119.650143][ T8678] genl_rcv+0x28/0x40 [ 119.650157][ T8678] netlink_unicast+0x53a/0x7f0 [ 119.650173][ T8678] ? __pfx_netlink_unicast+0x10/0x10 [ 119.650192][ T8678] netlink_sendmsg+0x8d1/0xdd0 [ 119.650209][ T8678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.650229][ T8678] ____sys_sendmsg+0xa95/0xc70 [ 119.650246][ T8678] ? copy_msghdr_from_user+0x10a/0x160 [ 119.650259][ T8678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.650277][ T8678] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.650294][ T8678] ___sys_sendmsg+0x134/0x1d0 [ 119.650308][ T8678] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.650340][ T8678] __sys_sendmsg+0x16d/0x220 [ 119.650353][ T8678] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.650366][ T8678] ? __x64_sys_futex+0x1e0/0x4c0 [ 119.650391][ T8678] do_syscall_64+0xcd/0x260 [ 119.650407][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.650418][ T8678] RIP: 0033:0x7f53bb38e169 [ 119.650428][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.650439][ T8678] RSP: 002b:00007f53bc112038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.650449][ T8678] RAX: ffffffffffffffda RBX: 00007f53bb5b5fa0 RCX: 00007f53bb38e169 [ 119.650456][ T8678] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 119.650463][ T8678] RBP: 00007f53bb410a68 R08: 0000000000000000 R09: 0000000000000000 [ 119.650468][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.650474][ T8678] R13: 0000000000000000 R14: 00007f53bb5b5fa0 R15: 00007fff53f59768 [ 119.650488][ T8678] [ 119.736543][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.737505][ C3] vkms_vblank_simulate: vblank timer overrun [ 119.739205][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.803428][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.806599][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.827386][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.833853][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.836833][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.840544][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.848072][ T8538] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 119.856282][ T8538] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 119.862854][ T8538] wireguard: wg0: Could not create IPv4 socket [ 119.865948][ T8538] wireguard: wg1: Could not create IPv4 socket [ 119.869186][ T8538] wireguard: wg2: Could not create IPv4 socket [ 120.000648][ T8719] Invalid source name [ 120.002289][ T8719] UBIFS error (pid: 8719): cannot open "./file0", error -22 [ 120.106087][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 120.122788][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.199042][ T8733] bridge_slave_1 (unregistering): left allmulticast mode [ 120.202132][ T8733] bridge_slave_1 (unregistering): left promiscuous mode [ 120.205185][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.762586][ T40] audit: type=1400 audit(1744844111.804:590): avc: denied { getopt } for pid=8789 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.894426][ T8804] netlink: 'syz.1.783': attribute type 2 has an invalid length. [ 120.896806][ T40] audit: type=1400 audit(1744844111.934:591): avc: denied { ioctl } for pid=8805 comm="syz.3.784" path="socket:[25604]" dev="sockfs" ino=25604 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.898545][ T8804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.914546][ T8804] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.916043][ T8802] netlink: 108 bytes leftover after parsing attributes in process `syz.2.782'. [ 120.966800][ T8815] netlink: 9 bytes leftover after parsing attributes in process `syz.3.787'. [ 120.977210][ T8815] 0·: renamed from hsr_slave_1 (while UP) [ 120.986312][ T8815] 0·: entered allmulticast mode [ 120.988056][ T8815] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 120.988443][ T40] audit: type=1400 audit(1744844112.024:592): avc: denied { read } for pid=8820 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.168172][ T8844] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 121.168215][ T8844] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.168288][ T8844] overlayfs: failed to set uuid (202/file1, err=-13); falling back to uuid=null. [ 121.211850][ T8853] 9pnet_virtio: no channels available for device syz [ 121.283002][ T40] audit: type=1400 audit(1744844112.324:593): avc: denied { validate_trans } for pid=8846 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.443233][ T40] audit: type=1400 audit(1744844112.484:594): avc: denied { map } for pid=8867 comm="syz.1.798" path="/dev/qrtr-tun" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.890630][ T8910] fuse: Unknown parameter 'g' [ 121.892576][ T8909] fuse: Unknown parameter 'Rootmode' [ 121.967969][ T8919] random: crng reseeded on system resumption [ 122.027819][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 122.027830][ T40] audit: type=1326 audit(1744844113.064:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.2.810" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088838e169 code=0x0 [ 122.132325][ T40] audit: type=1400 audit(1744844113.174:602): avc: denied { setattr } for pid=8918 comm="syz.2.810" name="file0" dev="9p" ino=37617828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.388909][ T8936] fuse: Unknown parameter 'g' [ 122.461458][ T40] audit: type=1400 audit(1744844113.504:603): avc: denied { read } for pid=8941 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.513448][ T40] audit: type=1400 audit(1744844113.554:604): avc: denied { setopt } for pid=8941 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.529909][ T40] audit: type=1400 audit(1744844113.574:605): avc: denied { bind } for pid=8941 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.848164][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 123.446827][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.463665][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.468751][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.476893][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.495999][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.771358][ T8967] Failed to initialize the IGMP autojoin socket (err -2) [ 124.111270][ T40] audit: type=1326 audit(1744844115.154:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.1.837" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16898e169 code=0x0 [ 124.181377][ T9007] Failed to initialize the IGMP autojoin socket (err -2) [ 124.331403][ T9034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.844'. [ 124.334365][ T9034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.844'. [ 124.369905][ T40] audit: type=1400 audit(1744844115.414:607): avc: denied { append } for pid=9037 comm="syz.1.847" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.388943][ T40] audit: type=1400 audit(1744844115.414:608): avc: denied { map } for pid=9037 comm="syz.1.847" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.400547][ T40] audit: type=1400 audit(1744844115.414:609): avc: denied { execute } for pid=9037 comm="syz.1.847" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 124.600877][ T9067] netlink: 'syz.1.855': attribute type 10 has an invalid length. [ 124.617822][ T9067] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.622310][ T8967] netdevsim netdevsim0 netdevsim0: renamed from eth2 [ 124.622560][ T40] audit: type=1400 audit(1744844115.664:610): avc: denied { ioctl } for pid=9066 comm="syz.1.855" path="socket:[26133]" dev="sockfs" ino=26133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.649228][ T8967] netdevsim netdevsim0 netdevsim1: renamed from eth3 [ 124.677805][ T9077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.857'. [ 124.681194][ T8967] netdevsim netdevsim0 netdevsim2: renamed from eth4 [ 124.701882][ T9077] netlink: 84 bytes leftover after parsing attributes in process `syz.2.857'. [ 124.705911][ T8967] netdevsim netdevsim0 netdevsim3: renamed from eth5 [ 124.778652][ T9092] fuse: Bad value for 'group_id' [ 124.781221][ T9092] fuse: Bad value for 'group_id' [ 124.783674][ T9092] fuse: Bad value for 'group_id' [ 124.785338][ T9092] fuse: Bad value for 'group_id' [ 124.856312][ T9108] overlayfs: missing 'lowerdir' [ 124.873270][ T9108] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.875841][ T9108] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 124.878828][ T9108] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.882372][ T9108] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 124.890329][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.895878][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.901648][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.902737][ T9114] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.905090][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.907405][ T9114] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 124.907481][ T9114] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.913941][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.917506][ T9114] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 124.920151][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.926117][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.929825][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.936260][ T8967] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 124.944703][ T8967] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 124.958793][ T8967] wireguard: wg0: Could not create IPv4 socket [ 124.963746][ T8967] wireguard: wg1: Could not create IPv4 socket [ 124.967368][ T8967] wireguard: wg2: Could not create IPv4 socket [ 124.994556][ T9125] fuse: Bad value for 'group_id' [ 124.996181][ T9125] fuse: Bad value for 'group_id' [ 124.998509][ T9125] fuse: Bad value for 'group_id' [ 125.002383][ T9125] fuse: Bad value for 'group_id' [ 125.078220][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 125.082111][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 125.087774][ T9133] geneve3: entered promiscuous mode [ 125.090967][ T9133] geneve3: entered allmulticast mode [ 125.298001][ T9156] syz.1.880: attempt to access beyond end of device [ 125.298001][ T9156] sr0: rw=2048, sector=0, nr_sectors = 4 limit=0 [ 125.310644][ T9156] hfsplus: unable to find HFS+ superblock [ 125.343061][ T9149] kvm: kvm [9148]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 125.350326][ T9149] kvm: kvm [9148]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 125.355272][ T9149] kvm: kvm [9148]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 125.385491][ T9149] kvm: kvm [9148]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 125.599370][ T9191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.886'. [ 125.665828][ T9201] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.711620][ T9209] tmpfs: Invalid uid '0x00000000ffffffff' [ 125.713637][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.881'. [ 126.361949][ T9255] netlink: 'syz.1.895': attribute type 11 has an invalid length. [ 126.365871][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 126.714966][ T9280] overlayfs: failed to resolve 'context=root': -2 [ 126.717335][ T9281] overlayfs: failed to resolve 'context=root': -2 [ 126.781861][ T9284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.876390][ T9284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.996115][ T9284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.136371][ T9284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.227325][ T9284] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.240982][ T9284] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.248236][ T9284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.255672][ T9284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.292707][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 127.297633][ T9316] netlink: 'syz.2.901': attribute type 3 has an invalid length. [ 127.302073][ T9316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.901'. [ 127.373212][ T9323] ntfs3(sr0): try to read out of volume at offset 0x0 [ 127.474735][ T9321] QAT: failed to copy from user. [ 127.478030][ T9321] netlink: 'syz.2.902': attribute type 4 has an invalid length. [ 127.772791][ T4584] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 127.908924][ T9363] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.913014][ T9363] overlayfs: missing 'lowerdir' [ 127.929037][ T4584] usb 6-1: Using ep0 maxpacket: 8 [ 127.938635][ T4584] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 127.949036][ T4584] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.952165][ T4584] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.955244][ T4584] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.958448][ T4584] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.963515][ T4584] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.966370][ T4584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.180833][ T4584] usb 6-1: usb_control_msg returned -32 [ 128.182643][ T4584] usbtmc 6-1:16.0: can't read capabilities [ 128.390060][ T9391] block nbd2: Device being setup by another task [ 128.452238][ T9392] block nbd2: shutting down sockets [ 128.476252][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.3.916'. [ 128.585550][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 128.589576][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 128.639270][ T9417] syz.2.919: attempt to access beyond end of device [ 128.639270][ T9417] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 128.644792][ T9417] (syz.2.919,9417,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 128.647886][ T9417] (syz.2.919,9417,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 128.652132][ T9417] (syz.2.919,9417,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 128.654827][ T9417] (syz.2.919,9417,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 128.884190][ T9429] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 12 [ 128.909472][ T4584] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 129.070541][ T4584] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 129.072971][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 129.076097][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.079488][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 129.082913][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.085970][ T6010] usb 6-1: USB disconnect, device number 21 [ 129.093009][ T4584] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 129.095404][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 129.098501][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.101892][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 129.105353][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.109354][ T4584] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 129.111726][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 129.114992][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.118022][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 129.121857][ T4584] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.127128][ T4584] usb 7-1: string descriptor 0 read error: -22 [ 129.129401][ T4584] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.132223][ T4584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.139144][ T4584] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.341677][ T4584] usb 7-1: USB disconnect, device number 22 [ 129.613959][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 129.774632][ T8765] INFO: trying to register non-static key. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 129.776654][ T8765] The code is fine but needs lockdep annotation, or maybe [ 129.779783][ T8765] you didn't initialize this object before use? [ 129.782447][ T8765] turning off the locking correctness validator. [ 129.784358][ T8765] CPU: 2 UID: 0 PID: 8765 Comm: kworker/u32:18 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 129.784372][ T8765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.784380][ T8765] Workqueue: rdma_cm cma_work_handler [ 129.784413][ T8765] Call Trace: [ 129.784417][ T8765] [ 129.784421][ T8765] dump_stack_lvl+0x116/0x1f0 [ 129.784438][ T8765] register_lock_class+0x4a3/0x4c0 [ 129.784448][ T8765] ? save_trace+0x4e/0x380 [ 129.784463][ T8765] __lock_acquire+0x99/0x1ba0 [ 129.784474][ T8765] lock_acquire+0x179/0x350 [ 129.784482][ T8765] ? __timer_delete_sync+0x145/0x1b0 [ 129.784498][ T8765] ? __timer_delete_sync+0x145/0x1b0 [ 129.784512][ T8765] __timer_delete_sync+0x152/0x1b0 [ 129.784526][ T8765] ? __timer_delete_sync+0x145/0x1b0 [ 129.784540][ T8765] rxe_qp_do_cleanup+0x5c3/0x7e0 [ 129.784551][ T8765] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.784564][ T8765] ? __pfx_rxe_qp_do_cleanup+0x10/0x10 [ 129.784576][ T8765] execute_in_process_context+0x3a/0x160 [ 129.784589][ T8765] ? __pfx_rxe_qp_cleanup+0x10/0x10 [ 129.784600][ T8765] __rxe_cleanup+0x267/0x3c0 [ 129.784615][ T8765] ? __pfx___rxe_cleanup+0x10/0x10 [ 129.784628][ T8765] ? _raw_spin_unlock+0x28/0x50 [ 129.784639][ T8765] ? __rxe_add_to_pool+0xa9/0x340 [ 129.784654][ T8765] rxe_create_qp+0x3f7/0x5f0 [ 129.784663][ T8765] create_qp+0x62d/0xa80 [ 129.784678][ T8765] ? __pfx_create_qp+0x10/0x10 [ 129.784694][ T8765] ib_create_qp_kernel+0x9f/0x310 [ 129.784709][ T8765] rdma_create_qp+0x10c/0x340 [ 129.784721][ T8765] rds_ib_setup_qp+0xc86/0x19a0 [ 129.784739][ T8765] ? __pfx_rds_ib_setup_qp+0x10/0x10 [ 129.784754][ T8765] ? __pfx_rds_ib_qp_event_handler+0x10/0x10 [ 129.784770][ T8765] ? rcu_is_watching+0x12/0xc0 [ 129.784783][ T8765] ? trace_contention_end+0xdd/0x130 [ 129.784793][ T8765] rds_ib_cm_initiate_connect+0x1e8/0x3d0 [ 129.784809][ T8765] ? __pfx_rds_ib_cm_initiate_connect+0x10/0x10 [ 129.784825][ T8765] ? lockdep_unlock+0x64/0xe0 [ 129.784840][ T8765] rds_rdma_cm_event_handler_cmn+0x61f/0x8c0 [ 129.784855][ T8765] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 129.784868][ T8765] ? mark_held_locks+0x20/0x80 [ 129.784878][ T8765] cma_cm_event_handler+0x94/0x300 [ 129.784889][ T8765] cma_work_handler+0x15b/0x230 [ 129.784903][ T8765] process_one_work+0x9cc/0x1b70 [ 129.784916][ T8765] ? __pfx_process_one_req+0x10/0x10 [ 129.784927][ T8765] ? __pfx_process_one_work+0x10/0x10 [ 129.784940][ T8765] ? assign_work+0x1a0/0x250 [ 129.784950][ T8765] worker_thread+0x6c8/0xf10 [ 129.784964][ T8765] ? __pfx_worker_thread+0x10/0x10 [ 129.784975][ T8765] kthread+0x3c2/0x780 [ 129.784985][ T8765] ? __pfx_kthread+0x10/0x10 [ 129.784994][ T8765] ? __pfx_kthread+0x10/0x10 [ 129.785003][ T8765] ? __pfx_kthread+0x10/0x10 [ 129.785012][ T8765] ? __pfx_kthread+0x10/0x10 [ 129.785021][ T8765] ? rcu_is_watching+0x12/0xc0 [ 129.785033][ T8765] ? __pfx_kthread+0x10/0x10 [ 129.785042][ T8765] ret_from_fork+0x45/0x80 [ 129.785054][ T8765] ? __pfx_kthread+0x10/0x10 [ 129.785063][ T8765] ret_from_fork_asm+0x1a/0x30 [ 129.785082][ T8765] [ 129.892361][ T8765] ------------[ cut here ]------------ [ 129.894072][ T8765] ODEBUG: assert_init not available (active state 0) object: ffff88805db12a58 object type: timer_list hint: 0x0 [ 129.898107][ T8765] WARNING: CPU: 2 PID: 8765 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 129.901428][ T8765] Modules linked in: [ 129.902649][ T8765] CPU: 2 UID: 0 PID: 8765 Comm: kworker/u32:18 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 129.906533][ T8765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.910203][ T8765] Workqueue: rdma_cm cma_work_handler [ 129.911894][ T8765] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 129.913750][ T8765] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 75 f4 8b 4c 89 e6 48 c7 c7 60 6a f4 8b e8 df e7 a5 fc 90 <0f> 0b 90 90 58 83 05 36 a9 b1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 129.919873][ T8765] RSP: 0018:ffffc9000dc7f3e8 EFLAGS: 00010282 [ 129.921774][ T8765] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817acff8 [ 129.924182][ T8765] RDX: ffff8880524e0000 RSI: ffffffff817ad005 RDI: 0000000000000001 [ 129.926594][ T8765] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 129.929039][ T8765] R10: 0000000000000001 R11: 203a47554245444f R12: ffffffff8bf47140 [ 129.931450][ T8765] R13: ffffffff8b8fc8c0 R14: 0000000000000000 R15: ffffc9000dc7f4a8 [ 129.933950][ T8765] FS: 0000000000000000(0000) GS:ffff8880d6bb1000(0000) knlGS:0000000000000000 [ 129.936649][ T8765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.938635][ T8765] CR2: 00007ffc0f17dec0 CR3: 000000002493e000 CR4: 0000000000352ef0 [ 129.941396][ T8765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.944156][ T8765] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.946505][ T8765] Call Trace: [ 129.947592][ T8765] [ 129.948540][ T8765] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 129.950749][ T8765] debug_object_assert_init+0x1ec/0x2f0 [ 129.952536][ T8765] ? __pfx_debug_object_assert_init+0x10/0x10 [ 129.954432][ T8765] ? rcu_is_watching+0x12/0xc0 [ 129.955917][ T8765] __try_to_del_timer_sync+0x7f/0x170 [ 129.957620][ T8765] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 129.959725][ T8765] ? __timer_delete_sync+0x174/0x1b0 [ 129.961475][ T8765] ? __timer_delete_sync+0x17f/0x1b0 [ 129.963065][ T8765] __timer_delete_sync+0xf4/0x1b0 [ 129.964655][ T8765] rxe_qp_do_cleanup+0x5c3/0x7e0 [ 129.966184][ T8765] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 129.968008][ T8765] ? __pfx_rxe_qp_do_cleanup+0x10/0x10 [ 129.970004][ T8765] execute_in_process_context+0x3a/0x160 [ 129.971720][ T8765] ? __pfx_rxe_qp_cleanup+0x10/0x10 [ 129.973336][ T8765] __rxe_cleanup+0x267/0x3c0 [ 129.974753][ T8765] ? __pfx___rxe_cleanup+0x10/0x10 [ 129.976326][ T8765] ? _raw_spin_unlock+0x28/0x50 [ 129.977822][ T8765] ? __rxe_add_to_pool+0xa9/0x340 [ 129.979513][ T8765] rxe_create_qp+0x3f7/0x5f0 [ 129.980943][ T8765] create_qp+0x62d/0xa80 [ 129.982270][ T8765] ? __pfx_create_qp+0x10/0x10 [ 129.983727][ T8765] ib_create_qp_kernel+0x9f/0x310 [ 129.985321][ T8765] rdma_create_qp+0x10c/0x340 [ 129.986968][ T8765] rds_ib_setup_qp+0xc86/0x19a0 [ 129.988604][ T8765] ? __pfx_rds_ib_setup_qp+0x10/0x10 [ 129.990388][ T8765] ? __pfx_rds_ib_qp_event_handler+0x10/0x10 [ 129.992273][ T8765] ? rcu_is_watching+0x12/0xc0 [ 129.993891][ T8765] ? trace_contention_end+0xdd/0x130 [ 129.995815][ T8765] rds_ib_cm_initiate_connect+0x1e8/0x3d0 [ 129.997673][ T8765] ? __pfx_rds_ib_cm_initiate_connect+0x10/0x10 [ 130.000181][ T8765] ? lockdep_unlock+0x64/0xe0 [ 130.001672][ T8765] rds_rdma_cm_event_handler_cmn+0x61f/0x8c0 [ 130.003644][ T8765] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 130.005720][ T8765] ? mark_held_locks+0x20/0x80 [ 130.007231][ T8765] cma_cm_event_handler+0x94/0x300 [ 130.008892][ T8765] cma_work_handler+0x15b/0x230 [ 130.010449][ T8765] process_one_work+0x9cc/0x1b70 [ 130.011989][ T8765] ? __pfx_process_one_req+0x10/0x10 [ 130.013618][ T8765] ? __pfx_process_one_work+0x10/0x10 [ 130.015244][ T8765] ? assign_work+0x1a0/0x250 [ 130.016699][ T8765] worker_thread+0x6c8/0xf10 [ 130.018173][ T8765] ? __pfx_worker_thread+0x10/0x10 [ 130.019882][ T8765] kthread+0x3c2/0x780 [ 130.021189][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.022633][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.024072][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.025539][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.027013][ T8765] ? rcu_is_watching+0x12/0xc0 [ 130.028587][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.030468][ T8765] ret_from_fork+0x45/0x80 [ 130.032047][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.033520][ T8765] ret_from_fork_asm+0x1a/0x30 [ 130.035039][ T8765] [ 130.036054][ T8765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.038501][ T8765] CPU: 2 UID: 0 PID: 8765 Comm: kworker/u32:18 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 130.042445][ T8765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.045755][ T8765] Workqueue: rdma_cm cma_work_handler [ 130.047442][ T8765] Call Trace: [ 130.048666][ T8765] [ 130.049619][ T8765] dump_stack_lvl+0x3d/0x1f0 [ 130.051069][ T8765] panic+0x71c/0x800 [ 130.052303][ T8765] ? __pfx_panic+0x10/0x10 [ 130.053696][ T8765] ? show_trace_log_lvl+0x29b/0x3e0 [ 130.055310][ T8765] ? check_panic_on_warn+0x1f/0xb0 [ 130.056879][ T8765] ? debug_print_object+0x1a2/0x2b0 [ 130.058586][ T8765] check_panic_on_warn+0xab/0xb0 [ 130.060252][ T8765] __warn+0xf6/0x3c0 [ 130.061486][ T8765] ? debug_print_object+0x1a2/0x2b0 [ 130.063132][ T8765] report_bug+0x3c3/0x580 [ 130.064517][ T8765] ? debug_print_object+0x1a2/0x2b0 [ 130.066145][ T8765] handle_bug+0x184/0x210 [ 130.067511][ T8765] exc_invalid_op+0x17/0x50 [ 130.068952][ T8765] asm_exc_invalid_op+0x1a/0x20 [ 130.070437][ T8765] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 130.072355][ T8765] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 75 f4 8b 4c 89 e6 48 c7 c7 60 6a f4 8b e8 df e7 a5 fc 90 <0f> 0b 90 90 58 83 05 36 a9 b1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 130.078715][ T8765] RSP: 0018:ffffc9000dc7f3e8 EFLAGS: 00010282 [ 130.080740][ T8765] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817acff8 [ 130.083132][ T8765] RDX: ffff8880524e0000 RSI: ffffffff817ad005 RDI: 0000000000000001 [ 130.085811][ T8765] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 130.088286][ T8765] R10: 0000000000000001 R11: 203a47554245444f R12: ffffffff8bf47140 [ 130.090796][ T8765] R13: ffffffff8b8fc8c0 R14: 0000000000000000 R15: ffffc9000dc7f4a8 [ 130.093270][ T8765] ? __warn_printk+0x198/0x350 [ 130.094800][ T8765] ? __warn_printk+0x1a5/0x350 [ 130.096281][ T8765] ? debug_print_object+0x1a1/0x2b0 [ 130.097907][ T8765] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 130.099832][ T8765] debug_object_assert_init+0x1ec/0x2f0 [ 130.101636][ T8765] ? __pfx_debug_object_assert_init+0x10/0x10 [ 130.103512][ T8765] ? rcu_is_watching+0x12/0xc0 [ 130.104995][ T8765] __try_to_del_timer_sync+0x7f/0x170 [ 130.106648][ T8765] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 130.108498][ T8765] ? __timer_delete_sync+0x174/0x1b0 [ 130.110299][ T8765] ? __timer_delete_sync+0x17f/0x1b0 [ 130.111940][ T8765] __timer_delete_sync+0xf4/0x1b0 [ 130.113543][ T8765] rxe_qp_do_cleanup+0x5c3/0x7e0 [ 130.115121][ T8765] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.116941][ T8765] ? __pfx_rxe_qp_do_cleanup+0x10/0x10 [ 130.118658][ T8765] execute_in_process_context+0x3a/0x160 [ 130.120535][ T8765] ? __pfx_rxe_qp_cleanup+0x10/0x10 [ 130.122233][ T8765] __rxe_cleanup+0x267/0x3c0 [ 130.123678][ T8765] ? __pfx___rxe_cleanup+0x10/0x10 [ 130.125297][ T8765] ? _raw_spin_unlock+0x28/0x50 [ 130.126811][ T8765] ? __rxe_add_to_pool+0xa9/0x340 [ 130.128709][ T8765] rxe_create_qp+0x3f7/0x5f0 [ 130.130194][ T8765] create_qp+0x62d/0xa80 [ 130.131569][ T8765] ? __pfx_create_qp+0x10/0x10 [ 130.133171][ T8765] ib_create_qp_kernel+0x9f/0x310 [ 130.134793][ T8765] rdma_create_qp+0x10c/0x340 [ 130.136330][ T8765] rds_ib_setup_qp+0xc86/0x19a0 [ 130.137882][ T8765] ? __pfx_rds_ib_setup_qp+0x10/0x10 [ 130.139818][ T8765] ? __pfx_rds_ib_qp_event_handler+0x10/0x10 [ 130.141681][ T8765] ? rcu_is_watching+0x12/0xc0 [ 130.143177][ T8765] ? trace_contention_end+0xdd/0x130 [ 130.144892][ T8765] rds_ib_cm_initiate_connect+0x1e8/0x3d0 [ 130.146722][ T8765] ? __pfx_rds_ib_cm_initiate_connect+0x10/0x10 [ 130.148799][ T8765] ? lockdep_unlock+0x64/0xe0 [ 130.150249][ T8765] rds_rdma_cm_event_handler_cmn+0x61f/0x8c0 [ 130.152063][ T8765] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 130.154009][ T8765] ? mark_held_locks+0x20/0x80 [ 130.155527][ T8765] cma_cm_event_handler+0x94/0x300 [ 130.157182][ T8765] cma_work_handler+0x15b/0x230 [ 130.158673][ T8765] process_one_work+0x9cc/0x1b70 [ 130.160257][ T8765] ? __pfx_process_one_req+0x10/0x10 [ 130.161885][ T8765] ? __pfx_process_one_work+0x10/0x10 [ 130.163538][ T8765] ? assign_work+0x1a0/0x250 [ 130.165017][ T8765] worker_thread+0x6c8/0xf10 [ 130.166743][ T8765] ? __pfx_worker_thread+0x10/0x10 [ 130.168641][ T8765] kthread+0x3c2/0x780 [ 130.170226][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.171685][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.173096][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.174527][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.176139][ T8765] ? rcu_is_watching+0x12/0xc0 [ 130.177722][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.179174][ T8765] ret_from_fork+0x45/0x80 [ 130.180579][ T8765] ? __pfx_kthread+0x10/0x10 [ 130.182042][ T8765] ret_from_fork_asm+0x1a/0x30 [ 130.183503][ T8765] [ 130.185019][ T8765] Kernel Offset: disabled [ 130.186326][ T8765] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:51:04 Registers: info registers vcpu 0 CPU#0 RAX=1ffff1100536081f RBX=ffff888029b040e0 RCX=ffffffff8198678c RDX=ffffffff8b8e97c0 RSI=0000000000000004 RDI=ffff888029b040f8 RBP=ffffc9000334fc20 RSP=ffffc9000334fb30 R8 =0000000000000001 R9 =fffff52000669f54 R10=0000000000000202 R11=ffffffff9add4330 R12=0000000000000006 R13=ffff888029ae5e80 R14=dffffc0000000000 R15=1ffff92000669f6a RIP=ffffffff84d5189c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005654c332fc38 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e0fefffe Opmask01=0000000000000000 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0302000100008881 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0302000100008881 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183883a3d007e 7d7c605d5c5b3f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000005654c3321 0000000000000091 0000000000000000 000000000000005b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000011787c RBX=0000000000000001 RCX=ffffffff8b726439 RDX=ffffed100d4a65be RSI=ffffffff8bf46480 RDI=ffffffff8191a751 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff90866010 R15=0000000000000000 RIP=ffffffff8b724ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdd372b000 CR3=000000002bf1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000023003 Opmask01=0000000001c00000 Opmask02=00000000edfdfdff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001e7cfac0 0000000000000081 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd71448d20 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000080fe ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000002ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000002ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355544154535449 584557203a732520 3a73250064697074 696177203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355544154535449 584557051f560005 1f560000414c5551 4c4452051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000130 0000000000000000 0000562832251d39 6c5f747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f656764697243 0000562831fd1bb0 0000562857360ef3 736512a20127e63c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f656feefd7ffb 7aef767f7bff7fbc 6567777977777fff 7f7f7ef37577ff7d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0425 RDI=ffffffff9ae27460 RBP=ffffffff9ae27420 RSP=ffffc9000dc7ef90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e64696420756f79 R12=0000000000000000 R13=000000000000006e R14=ffffffff9ae27420 R15=ffffffff854e03c0 RIP=ffffffff854e044f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc0f17dec0 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc168a11a4a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc168a11a57 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc168a11a51 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc168a11a65 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc168a11aeb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc168a11bc9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a6415e0 RCX=ffffffff81af2699 RDX=ffff8880243e0000 RSI=ffffffff81af2673 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000319f5c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007c66 R12=ffffed100d4c82bd R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a73b040 RIP=ffffffff81af2675 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f893a4e7d60 CR3=0000000021244000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89399836a3 00007f89399836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcac17a150 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556600d056 000055556600cff0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556601d173 000055556601caa0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 033d6f6e6466722c 64663d736e617274 1e08158003007039 01ffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011580040010000a 80040b8004001000 0a0141800100000e 0ca40615d0033d6f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6466772c0e0815 c2030100000c0ca4 06159e033d6f6e64 66722c64663d736e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6172741e08158003 00703901ffffffff fffffffff9080a80 030030656c69662f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffef080b800308 07880e050807800c 0500100007800404 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000