last executing test programs: 49.81179285s ago: executing program 2 (id=210): r0 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 49.811422368s ago: executing program 2 (id=211): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x891d, &(0x7f0000000100)={'veth1_to_batadv\x00', @ifru_data=0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0xffff1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000001100)={{0x2, 0x4e24, @local}, {0x6, @random="b9780ccb4d69"}, 0x68, {0x2, 0x4e22, @empty}, 'ipvlan0\x00'}) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @local}, {0x6}, 0x16, {0x2, 0x4e22, @loopback}, 'lo\x00'}) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4000000ed03352f25bd7000ffdbdf258a5f95e6bc1f0c8be87caf4396a7cf87d56ec72f461eecbbf30da94f6b0d867b340405313511d0b0987375ebb684e8ae73da8c959bcf03a767f881f60d08608ccfbfc4685e8e4e9fe4a1c9cbc6f4604bd705bf7918fa0e188a6f7920f678b1da01de3b92ee32d022cbcecfe26fcef74ed28bcc59b79d56f192f0d23b47e89b167d5fbfe620492a413b8e11517cd2802f8333898848a0b384450aa693e5ece872bf1d22b91de75e3172a1a56db41d289644c6c43b9b50f5b929cbd651568b8906bdf8148b4fc12424e1b06c97f82ca202db35ca8eda470da2272753d64812ee27100d0000"], 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r8, 0xbda44000) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x1, 0x1fe, [0x0, 0x20000480, 0x200005ee, 0x2000061e], 0x0, &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x269) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) 49.671979081s ago: executing program 2 (id=213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c090000120000032dbd7000fcdbdf250809900719ba4e200200000009000000920000000000a03c000200000900000000838fff3e03000000", @ANYRES32=0x0, @ANYBLOB="01000000ca0000000900000007000000dd080100545c6d7f5fddbd892b2fe5b06915acc76a95f396bdd117b722c97996ee2d44024040b38920a2fb7fa48a8d02be8f77eb9f160c09acbf76f11aae9a677449eb"], 0x92c}, 0x1, 0x0, 0x0, 0x1}, 0x20004051) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) (async) r5 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x54, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x40, 0x1, [@m_bpf={0x3c, 0x3ffe, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x20040050) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0xbc, 0x30, 0x7, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_nat={0xa4, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x3, 0x6, 0x3}, @loopback, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x5, 0x1, 0x3, 0xffffffff}, @private=0xa010100, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2f9d, 0x3ff, 0xe, 0x0, 0x6}, @remote, @empty, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 49.671673684s ago: executing program 2 (id=214): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x56209516, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x23, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0xb184d0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x94701a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000540)={0x10, 0x7, &(0x7f00000004c0)="0853f180b089e5051edcb587f28a7a0b63aa68d8aab90bd9bfd6c40137018f555682b278b08069626c717853f509f209b645d4abf93b129a3eedb2", {0x507a, 0x5, 0x31324d59, 0x7, 0x8, 0x5, 0xb, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xf4e) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x966, 0x0, 0x0, 0x0, 0xbe8}, {}, {}, [@jmp={0x5, 0x0, 0xd, 0xa, 0xa, 0x6, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x7e, &(0x7f0000000200)=""/126, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x4, 0x1, 0x4, 0x4}, {0x0, 0x3785, 0x9, 0x7}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='fsi_slave_invalid_cfam\x00', r4, 0x0, 0x4}, 0x18) 49.612054201s ago: executing program 2 (id=215): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000001f650000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0xb, 0xff}]}, 0xc, 0x1) 49.370963127s ago: executing program 2 (id=220): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000200)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$binfmt_script(r2, 0x0, 0x0) 49.253139217s ago: executing program 32 (id=220): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000200)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$binfmt_script(r2, 0x0, 0x0) 39.379283846s ago: executing program 4 (id=359): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2033010, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1063810, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x0, 0x1}}) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) mount_setattr(r1, &(0x7f0000000100)='./file0/file0\x00', 0x100, &(0x7f0000000200)={0x8b, 0x1, 0xa0000, {r1}}, 0x5) 37.261204653s ago: executing program 4 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x4, 0xb}, {0x9, 0x2}}, [@TCA_RATE={0x0, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x1285735666288145) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x29, 0x2, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') pread64(r5, &(0x7f0000000040)=""/103, 0x67, 0x1) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) 37.111613242s ago: executing program 4 (id=381): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000480)={0xa, 0x6, {0x8, @usage=0x9, 0x0, 0x400, 0x6, 0x5, 0x80, 0x2, 0x2e, @struct={0xa35fcae, 0x9}, 0x6, 0xfffffff9, [0x800, 0xdb, 0xb87, 0x8000000000000000, 0xfffffffffffffffe, 0x7]}, {0x100, @usage=0x8, 0x0, 0x7510, 0x4, 0x3, 0x5f5, 0x5, 0x40, @struct={0x0, 0x8}, 0x8001, 0x6, [0x72a5, 0x83, 0x3, 0x4, 0x9, 0x8000000000000001]}, {0x7fff, @struct={0x1, 0x8}, 0x0, 0x100000000, 0x4, 0x9, 0x7, 0xed, 0x4, @struct={0x0, 0x8001}, 0x2, 0x4, [0xffff, 0x4, 0xffff, 0x7f, 0x2, 0x8]}, {0x800, 0x1}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0xfb, 0x20}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x34, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48840) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000004f00)={'#! ', './file0', [{}, {0x20, 'f:.&&-#'}], 0xa, "8fba0d8bc4abb74004a169c25e27f05f8fdaa1ca8e4367589a4f800f33372b75c16e2699b31f3f4394e1e865c44ba5baf36c85734496eb0399658e14c08a83bbe68fc9b535f4602dd6f508d4077e3561d7921e59892d985b36fe8b204f63295ac53784faf57cc436bf1d7b50bc6cd91f7779e1d17d4b3c6659e3b0df0ccb60bac029f71e12c539789efb99b3"}, 0xa0) recvmmsg$unix(r6, &(0x7f0000004c40)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000980)=""/223, 0xdf}], 0x5, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000c00)=""/81, 0x51}], 0x1, &(0x7f0000000c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/163, 0xa3}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/183, 0xb7}, {&(0x7f0000000ec0)=""/222, 0xde}], 0x4, &(0x7f0000001000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001040), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/63, 0x3f}, {&(0x7f0000002140)=""/115, 0x73}], 0x2, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000022c0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002340)=""/119, 0x77}], 0x1, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002540), 0x6e, &(0x7f0000003880)=[{&(0x7f00000025c0)=""/154, 0x9a}, {&(0x7f0000002680)=""/119, 0x77}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/145, 0x91}, {&(0x7f00000037c0)=""/140, 0x8c}], 0x5, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003940)=""/116, 0x74}, {&(0x7f00000039c0)=""/229, 0xe5}], 0x2, &(0x7f0000003b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000003cc0)=""/188, 0xbc}, {&(0x7f0000003d80)=""/182, 0xb6}, {&(0x7f0000003e40)=""/148, 0x94}, {&(0x7f0000003f00)=""/45, 0x2d}, {&(0x7f0000003f40)=""/7, 0x7}, {&(0x7f0000003f80)=""/41, 0x29}], 0x6, &(0x7f0000004040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004180)=""/228, 0xe4}, {&(0x7f0000004280)=""/168, 0xa8}, {&(0x7f0000004340)=""/121, 0x79}, {&(0x7f00000043c0)=""/67, 0x43}, {&(0x7f0000004440)=""/90, 0x5a}, {&(0x7f00000044c0)=""/129, 0x81}], 0x6, &(0x7f0000004600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000046c0), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004740)=""/223, 0xdf}, {&(0x7f0000004840)=""/23, 0x17}, {&(0x7f0000004880)=""/226, 0xe2}, {&(0x7f0000004980)=""/54, 0x36}, {&(0x7f00000049c0)=""/91, 0x5b}, {&(0x7f0000004a40)=""/13, 0xd}], 0x6, &(0x7f0000004b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0xa, 0x1, &(0x7f0000004ec0)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) 37.011713691s ago: executing program 4 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x589000, 0x0) (async) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x589000, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000280)=0x8) getpid() (async) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xb, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x40095505, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/218, 0xda}], 0x1}}], 0x2, 0x10002, 0x0) add_key$keyring(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb430fb655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$link(0x8, r6, r5) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') ioperm(0x3, 0x6, 0x1000007) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socket$kcm(0x11, 0x6, 0x0) (async) r8 = socket$kcm(0x11, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e10500000088f7ffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) ptrace$getregset(0x4204, r7, 0x201, &(0x7f0000000000)={0x0, 0x300}) ioperm(0x1, 0x7, 0x8) r9 = creat(&(0x7f0000000040)='./file0\x00', 0xc0) ftruncate(r9, 0x8208200) 36.430523798s ago: executing program 4 (id=394): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000002c0)={0x3, 0x3, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0x28, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x0, {0x500, 0x300, 0x0, 0x300}}) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmmsg$sock(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="9e43946f6378f9530293b4b74a485fc41433270a5cea5e312b773bb1053090287d88327c5453521ef434b6cf41d2e69c5a7e2ed2cfb002d0c1c6ecbf51bcc37f6929a49d6ae505", 0x47}, {&(0x7f0000000140)="d1135699492dd67e70dc8f1108a6267769d194b553d28498d67eb65602ee3f82d032ea009505e2171f62e96a1443f9bfef8fc1a78a040ea5b3f2846e21f69626e1e16d5e6111c137290be3c775f19e97da15d3192ba75a127eb66e566e11a808508aecf3ccfcf0ba9b1852cd04836b71fae2b30026b3ee89956d31e9ce69ad2f50af841d14bd4120808138e3d80cd6dd7dd74b47a60c", 0x96}], 0x2, &(0x7f0000000240)}}, {{&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="25c7baa6ababdfe92146ccb8eeb67e25cd8402da701a6f492e6cfefa8e908ac1473eadb23d76b91583420d41fb74fab1ef6b5c40440b81a904869cf1886569faae74b6b8e4d87e00a2315b9035cd4119f42e50a5abee5c9c23009a9340b7b87b8d421cf82fbae0070d9904ebccb5aa21bb7ad21c28018d5ccc11d7ad8df43d48ddee4b03331fcf8fac50cf251b8bfd6565205d746007d146074647db49f7009c1581461e7d95c2f8793bfa8f6cfe96dc2e58672a1980b78a863caf546cacdcde287aeb5ca3f164d60a922391a467", 0xce}], 0x1, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x81d}}, @txtime={{0x18, 0x1, 0x3d, 0x98}}, @timestamping={{0x14, 0x1, 0x25, 0xce}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3828}}], 0x90}}, {{&(0x7f0000000540)=@nfc_llcp={0x27, r5, 0x0, 0x3, 0x3, 0x8, "28db0035b04fa3d4dadf880f8733b05ef00bf2556fe37fd30d9d4bdb5aaa56b16d6657314977e10f9ca414e05d889db31da5415f30d7b8e5db9f7bccaeb44d", 0x3d}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)="de27aaedf627707b20819182e0197f739198c60bc11ab336ef9155981020e1df0b678f09bec75a65585cdcd8599e749224d71b855dd630863be96fe30d8f44c0d01b7405d61e801c6ef70c576e9a5501b2bff548dcd4c7b8355e95fa22", 0x5d}, {&(0x7f00000005c0)="6c1f014bb7756614fdce47dbc6c2c57588033355986b87503439f35d2e34ee511bc5740c6f2eeac73440d6d4457799", 0x2f}, {&(0x7f0000000800)="5b22829acb0136e5892c71afcc801fe00d01ad2ff3b7f7ea586868788e21316e4314f5d5a724e804f7670a19dd69270da0c7f68254b1f2a484daec17294c8a5f70d660915b74b7935bf2d938f94b6c71a21451025c4c4f78781530cfc61ac9e2645f630ece8def6fcc2ed246756561c30b5b668bef9ba36f4e8d8a467e160ecd92072e3a32f12525082d", 0x8a}, {&(0x7f00000008c0)="e96d3f0c7dc3a6f3323691c2b12945ee23f9ff95dfaf6ab5b7027b5c776c9a552d0db119377e8c90108d498374ced945eee28c954721ff200d793a08e404fc8f934a8fae414b10f49647e1af64203d703694d1405ebf187d385a04158eb70fb9c6129d84797315004948ae75edec9b32842e4a1edc3789aea152bb7c8628b2", 0x7f}], 0x4, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x96}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}, {{&(0x7f0000000a00)=@in6={0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="d35c44d68dea2257be33a5ecd0d9b1a01e3b91997567306c863d43f33e5e550123afeafca6d9a29ac59562b4bbcd6f8c528f66f0d154bef26165250626960143651e462547940887008106cac4c7ea632e310c4b648009a4c1c5ea030356883393cd0ff6163353145c483ad0f9bb6667b0611b7c1b0d92ce7eeb3723168d7a8b6e927b408f0abde8fd8370202b119b6f5cff46e4279d7abf85011d7b9d23dbfe25197ed59436dd6e2c2ca1de9d2d22e150a49b3c32b89182", 0xb8}, {&(0x7f0000000b40)="039fa24ff5fbb7a61d985e12eb217eb3d63602b0e01a45ddc18e6d3c9a91f84683fcdd025c7561b434fa20cc966f95f276d351b294355b1f4d7c72c84c8c2a83a80e40c2358f4517da2c564aa586197c9a4d48324b529f5e7bbc16", 0x5b}], 0x2, &(0x7f0000000c00)=[@timestamping={{0x14, 0x1, 0x25, 0x2021}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}], 0x60}}], 0x4, 0x20004854) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) 36.2405139s ago: executing program 4 (id=400): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80440, 0x120) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="74723030301030303030346532332c00"/31]) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getpgrp(0x0) (async) r3 = getpgrp(0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r3}) fsopen(&(0x7f0000000340)='nfs4\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000340)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="120200000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="120200000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}}, 0x0) 36.172402138s ago: executing program 33 (id=400): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80440, 0x120) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="74723030301030303030346532332c00"/31]) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getpgrp(0x0) (async) r3 = getpgrp(0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r3}) fsopen(&(0x7f0000000340)='nfs4\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000340)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#%::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="120200000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="120200000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}}, 0x0) 21.609457575s ago: executing program 1 (id=596): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0496, 0x4200}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xf8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x6588f}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x600}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "36557fb79d8951c5588783b3f8c85ea1428a5bc3faf038a9fc939b941480eb73", "269c7c1dd97cf9a2e5e1e77d235a6e1427c23f24479a8f375e903772a5cba9cd", "69a242b24596dae8c735e5e66b795720482f4f1e77b5ef75a2888720c61f4971", "3c7ff85395ca594f57296bfa99913aaab0470a97591a843c66b8a3a800", "871bf5766c5e6bfc3baadd357a90abc1b11c4faf312d130721a99f1b6afac90b", "00fdffff1a00a90400", 0x5, 0x7fff, 0x800, 0x9, 0x9}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0xfd9, @private0, 0x8}, 0x20) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 21.461319814s ago: executing program 1 (id=598): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r0, 0x7d243a6ea807936d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48010000100013070000000000000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000000000000400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) 21.46043435s ago: executing program 1 (id=600): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x593a, 0x40, 0x0, 0x1, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) read(r5, &(0x7f0000000140)=""/109, 0x6d) (async) read(r5, &(0x7f0000000140)=""/109, 0x6d) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x5, 0x100103}) 21.341402272s ago: executing program 1 (id=601): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) 21.340955705s ago: executing program 1 (id=602): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x8080) r4 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0049364, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)=0x0) sendmsg$netlink(r5, &(0x7f0000000340)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000c40)={0x418, 0x13, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@generic="471d291002d1b423a1c78b9805355ed2f1e3bf79d65d2cd9394bb3fe39d736654ee11f75048a048d9effe7fcbebc7d5e6e29fdedfe75ec8beaf04ac6a4881189ca7c2d107eba4448bd4858a0787dc245a96930eb2292acbe043b92c5e4ef813af3b4603235f9c537ac91f30b76fb17b95613afc5be5cac3427c6ef0902ca1967f6878f71458873", @nested={0x18, 0xd, 0x0, 0x1, [@nested={0x4, 0x117}, @nested={0x4, 0xf2}, @typed={0x8, 0xad, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x119}]}, @nested={0x257, 0xc6, 0x0, 0x1, [@generic="164f69446f9378c6fc29688bc52b9249657a0269f49353dcd2419f800a7a74f3b106d1a9ef782176af85a5d08264bfb08c057f5f5d02cc3e561b7ddcc4ac8e5150eee9d34d54913bf5b0bbc21c46216b7d3a8607b68433c8c6754a647a6c63f84df6046ef6272253786bb1707dd9347fd043d2c8918a3fd8fb5f6dc5c90d0604fb3093c64751631f25751dabd95cc01e39f27f788ee392", @nested={0x4, 0x9a}, @generic="d701a43879133041430dc2e09b10c576965bd7342968f4dae684513bf0734840a0819e0b26bc327b1ea122f8dd177f3eb353bbe8a7139136d94a670d3d50e9b3e6f84b6d5325409f49e72217e42899f78a", @typed={0x8, 0x42, 0x0, 0x0, @u32=0x9}, @generic="7dcd8bf7655b8ad62f04487f4a8056844e445115e2cf67374d6a788bd2ad68e732a9cc13e0d652a8f199ea3814fd57d7e94b5083700f3ca583edf294d668713968eeee9f352031b955c4576da07f130969be2109b4d2e73065e7f71d74d7cc0b5002eee2b80ae7465cdbfd8ef0c0637550e4fc0921b7550f861cc4782e88a7b45b1e5f5154232e0b33647a6bf32aaabe7a520aab4ea3", @generic="dda4681cdee80698bb4590c0ad5c2e61b35564a0a42076d2edbea27bebdd880e3b632146c77eef0c7dec6f4fcd6900f20384e93ee663c635af3e634b8c29c93912ea7158f67a6df880b7143e1c6e7086e3791ea5dd605f9b3cb7023e36c6a9e6f6a4beeb456e44e0978f946b4278083f0ddba15c9765ee64f3f3fe7880e4d278fad354843226c836b722d92d521ef18101e483393272e5c2c2a9eabbbd9b57dd14dffcbc2680b997c91e44823ad9cba5bd7002ed87fcb7be17e487374c709bfec458cf339da97c952f"]}, @generic="99597a4af947186b8c5b7c63d66911b9ef4c541e05a0450946d249bcbaaebdd56fe41f91b685a424911fcbeea3a51117df80b90ba6e9da668097982b17ccdd64ba7f61d830e354336b1327a8890da3609d57da78b81810d1e64fc6f3214c2faf51a0c6a2f94227ecb5d68af3744afefcc63955e809645c81720e0cfe81847ea941c7f57da661565e7d22f28351f77897c15ee51d561ef091a1df4a79e2d9468c207d527cf315ad631ec71be0cf5cb6c148e08e79ad8253976a839515f6569763112b4d8f3c2c46b7ff0f028ae66ba308a467f930f08d57b2850caacc01a0e5344f67d85d7cf6054d2fc4", @nested={0x21, 0xb, 0x0, 0x1, [@generic="7a844a0f49e2c1229f9f4643a24f8922f7c0e644cd83ba519a5511e44d"]}]}, 0x418}, {&(0x7f0000000280)={0x5c, 0x25, 0x200, 0x70bd29, 0x25dfdbfe, "", [@typed={0x6, 0x82, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0xdd, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x11, 0x0, 0x0, @pid=r6}, @generic="a1f7820b1527de16a256326041a44813b422d7d37db95aa25f374886e630115c8e68ee19c2b3b231ae25d9", @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x5c}, {&(0x7f0000000500)={0x74, 0x25, 0x10, 0x70bd29, 0x25dfdbfc, "", [@nested={0xc, 0x118, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x4, 0x134}]}, @generic="aa1ca621756c0e6c24d0fe12826d784888cac6949b99739ac8d5765258afe3c0721fa1abd39b39951e806a47f10dbe432a1ad480ef1731d6418f9d160ff873dad8f3a5c2fafe3365667df7df7c24f707f64d7f705d2c3405"]}, 0x74}, {&(0x7f0000000780)={0x278, 0x42, 0x200, 0x70bd28, 0x25dfdbfb, "", [@generic="eb6b7d25d433ff9f1296684dcc9aeba7cf79cfc588a2d604ca8428ba35b21a4d4b31ee1aa26e6ca9d12680c3f2c7e8bf61f5b0c1d302406b3cbfd40fc231258f7b9dd2497c114552a212946fb3f58e2698db6b5ebb906bfeabb5ad3523e21ab6d331bb91bc9654a7686521c861986a794307dc1517612b3b75371fec9d88d03cdcbdfee18ed239b6f1c248556b4a7d7019d9504e59ac009f2806d2676a55fb8719a724967c05028e3ede612aa5c7e702d7f51b2e5168b16ea6", @nested={0xfc, 0x77, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @uid=0xee01}, @typed={0xc9, 0xa0, 0x0, 0x0, @binary="6dfe8b9b7163c63441e9b8701e10a36fd755ab1a2cf76eb9ddd8afb8e63ea78114f4f84c137ed56e0ef6f55bc67c1cd2f9d649e3ac7a6a8ab96b09eaa80f2e13e1a2f738dcd80861d8139fe390966ba074d80524323f4410b9a7d123c30fa464be6e5ee454f72df8201ead13d54b5d18f1c8972c32005f6a2dfd1a6f4a3cc90f835239d3ed69d0b849154d0bdf96648663c9875492653950af49c89d694f47c87cd5d26fcb2fd914dd6c235cf937b44b56fe5452c060ee53ff1bb1249e1defe817b48bde0a"}, @nested={0x4, 0x85}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xeb}, @typed={0x8, 0xd9, 0x0, 0x0, @u32=0xa5}]}, @generic="737ad0042ce26aaf139e710431ea3dfd9d1ddfdc0fbc0bb04c0bb8833d38accbfd72dcdb2e2bfd7a5b8b82783ca0945f403d213d189929cb754addaef3", @generic="5ff2a5ee4562ac11cbe4a743937a5f99d6b500d0105726920f40bccb70c16b0d3baba750990520f3bab860d6a1fadb37c75f54a8ebc469e2d75522dc17045d45bc0066ffff7dc366673be42771dffd21ff5b8f40d582ce3e074191b1b1d195b7a2f601d1e321d5c98b903037072972859343cd6f"]}, 0x278}, {&(0x7f0000001080)={0x1ec, 0x37, 0x300, 0x70bd28, 0x25dfdbfe, "", [@typed={0xfe, 0x11d, 0x0, 0x0, @binary="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"}, @typed={0x4, 0xe3}, @generic="b67b4e3621e692e1151de5ba77a89287f079052fd481cf6faf24852f1e0ac0bda9f144351817f146dbb08874806f00cae7226b8cbb320a3bf1b64cb743b514357375810e713f0fc59bac999e7a93362d0da4bd216057667f5fd0c2adbb1b864b5998e6378917487a556c7af70a071d806f83bf982fa9f2bfa6fd687487c5db57ee8fa317e9168bf11daa5ca269a321644f916af9170e488c2aec10655c729d827ff533656b834d5de1ad", @nested={0x18, 0x53, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x2}]}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x1}, @typed={0x7, 0x13a, 0x0, 0x0, @str='9p\x00'}]}, 0x1ec}, {&(0x7f0000001280)={0x26c, 0x30, 0x4, 0x70bd26, 0x25dfdbff, "", [@nested={0x24, 0x124, 0x0, 0x1, [@nested={0x4, 0x99}, @typed={0x8, 0x135, 0x0, 0x0, @str='*!\b\x00'}, @nested={0x4, 0xbe}, @typed={0xd, 0x2b, 0x0, 0x0, @str='){r)g.[=\x00'}]}, @nested={0xa2, 0x100, 0x0, 0x1, [@typed={0x4, 0x98}, @nested={0x4, 0x4b}, @generic="168bb9d4a5581d95eb11bc2b73545fceec7140a1454cabc20b8373af543fab537bc252f87660fea83b93143c236a907762b7e86733ba6e59d52c51d5b60ce46117d3467ff25f46cc8559a712cf5d6c82f9f795eaf3eb3e44bdef29782c308295ec44508c5a569a4144b5ef27d68e2659618793868eae28f76484831b9d05278cf859ff7f4a7e55a7b06d44aa80a425445050", @nested={0x4, 0x40}]}, @typed={0x4, 0xa2}, @nested={0x11b, 0x9, 0x0, 0x1, [@typed={0x50, 0xb3, 0x0, 0x0, @binary="5416e3852181f3a74ba1fb0d9e58c7a11de6ab624b8b2ec4d624e4de701582046825c715b3f867a04f6b0e8722d5787dccbeca3c3efdf49a579a7c29c49c6a5e94fd4a911c86252900e1ab36"}, @nested={0x4, 0xbb}, @generic="aef7b524fb57e9c0a2173c028d7bcdd4af2f1314f1fcea3507fb10af1ada177a591f1b7aa1fff224d819b57796f4f71a5b75cb10ea54c87e8a32ddeab519af52dd62b55e63193850ccec73cc762cde348ee5421edd753daebb1794d86ba92549f5d3074c853bfbd7eda329560fec399296c09f5eeb3153612ad455625ab6811076d2930680cc174dcc70f3c33f30b6e677acfff2e7c970ff263e719964b5152d8678f8a5b0f7af4fedc45bf7315d5aad74c8a1c48447e0983c012a6893fa51", @nested={0x4, 0xfb}]}, @generic="6b8feaa4950d257eb06f3ecac8a87bf1904429e27da4235464982a4cc7aee23d8459dbce99af3809ae9e095a1f92858e8af9a824b414dfada1ce4ca571bcee9fd6fd7d47c3faca2f319fcee637104bb681e1a040a0d3f14a31deea10f6170e2c3d62a942d9b56d80ccb0639e03eca01d2dac72"]}, 0x26c}], 0x6, 0x0, 0x0, 0x41}, 0x4000010) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104e000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$packet(0x11, 0x4000000000002, 0x300) getsockopt$packet_int(r7, 0x107, 0x14, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 21.240841647s ago: executing program 1 (id=604): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 6.229035294s ago: executing program 34 (id=604): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1.359305793s ago: executing program 6 (id=882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.291130588s ago: executing program 6 (id=884): mount$9p_fd(0x100000000000000, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x4, 0x8, 0xbb7e5fa3aaf38b09, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2b923089}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1}, 0x2) 1.280613585s ago: executing program 6 (id=885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x6, 0x20363159, 0x5, 0xe, 0x2, 0x4, 0x2000f5e4, 0x0, 0x0, 0x2, 0x2}}) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x2911124ccec6066a, &(0x7f0000000000)=0x584, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1000, @loopback}, 0x1c) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=@deltaction={0x290, 0x31, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x70000000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1aacdc14}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x290}}, 0x4000000) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x4, 0x4) 1.200768559s ago: executing program 6 (id=887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f00000074c0)=[{{&(0x7f0000003780)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x6ec9}, {{&(0x7f0000003940)=@isdn, 0x80, &(0x7f0000003c00)=[{&(0x7f00000039c0)=""/202, 0xca}, {0x0}], 0x2}, 0x80}, {{&(0x7f0000003cc0)=@hci, 0x80, &(0x7f0000005280)=[{0x0}, {&(0x7f0000003dc0)=""/233, 0xe9}, {&(0x7f0000003f80)=""/243, 0xf3}, {&(0x7f0000004080)=""/68, 0x44}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000053c0)=""/234, 0xea}, {&(0x7f00000054c0)=""/179, 0xb3}], 0x2}}, {{&(0x7f0000006f00)=@nfc, 0x80, &(0x7f00000070c0)}, 0xf}], 0x5, 0x23, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}], 0x10) (async) sendto$inet6(r4, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfc00}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x90) (async) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x1000000, 0x0) 1.200609217s ago: executing program 6 (id=888): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x3}, &(0x7f0000000040), &(0x7f0000000140)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x5, 0x8, 0x3, @link_local, 'pim6reg1\x00'}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.130739951s ago: executing program 6 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setreuid(0xee01, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x39, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES8=0xffffffffffffffff, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x20000181}, 0x20008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r4], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) r7 = getuid() setreuid(r6, r7) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000040)={0x4, 0x6b24e784, 0x6, 0x1f, 0xfe, "4a3498e1ff06000000132209d7dc0b09000a48", 0x0, 0x8}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002880)=0x9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="100000000314010027bd7000ffdbdf25078eedced55881b87bf503593fb7c07c944bd12c43777c7e65319a1b236a8f71ccc4"], 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x24000015) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r9, 0x2084}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) syz_usb_connect$cdc_ncm(0x2, 0x74, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090262"], 0x0) ioctl$EVIOCRMFF(r10, 0x83c0550b, &(0x7f0000000500)) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x188}}, 0x0) r11 = getuid() setfsuid(r11) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080002400000000608000140000000020900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.130521369s ago: executing program 3 (id=891): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xab5, 0x6, 0xf808, 0x8}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.060940395s ago: executing program 3 (id=893): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.060341384s ago: executing program 5 (id=895): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="09000000010001", 0x7) 1.000675297s ago: executing program 5 (id=896): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readahead(r0, 0x101, 0x128) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x48) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff4307) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x0, 0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) memfd_create(&(0x7f0000000040)='*.-&\x00', 0x2) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) readahead(r0, 0x101, 0x128) (async) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x48) (async) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff4307) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x0, 0x0}, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) (async) memfd_create(&(0x7f0000000040)='*.-&\x00', 0x2) (async) 891.01202ms ago: executing program 5 (id=897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000002800), 0x10000, 0x60040) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000002a40)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000000009010100000000000000000a000007080005400000000c0900010073797a310000ff000c00048008090000000000063c0002000c00028005000100010000002c0001"], 0x70}}, 0x80) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000007061003000000000000000640000000bc1ad8ca9107000001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r5, @ANYBLOB="000000000000000008000300", @ANYRES32], 0x28}, 0x1, 0x8}, 0x0) 890.231155ms ago: executing program 5 (id=900): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) unshare(0x8000400) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x7d}, 0x0, &(0x7f0000000100)={0x5959, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) r1 = socket(0x2, 0x2, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x5, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0xfffffec6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 720.826368ms ago: executing program 5 (id=903): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x72, 0x2, &(0x7f0000000100)={0x8, "e4bcc761a6d547759a6271f1e87516c1e0cd3a8aa35ba93c081aaa8e5d99544136"}}) 719.971826ms ago: executing program 5 (id=904): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r4 = socket(0x2, 0xa, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000630000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) ppoll(&(0x7f0000000080)=[{r4}, {r5, 0x4}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="1840000008000000000000084000009d18120000f37b70a46d760672d38ff9e0734141fc71c9cef5ee111c9a96c66fec540c0529f72a506f45c519e514bf81f1bb04d546bc8fad6d029b05874efa2afc92d393643ef8", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000180)='GPL\x00', 0x200002, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = getpid() r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) kcmp(r8, r8, 0x0, 0xffffffffffffffff, r9) r10 = dup(r7) ioctl$BLKRRPART(r10, 0x125f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x438100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x800, {0x0}, {0xee00}, 0x1, 0x4}) migrate_pages(r11, 0x0, &(0x7f0000000080)=0x200000086, &(0x7f0000000300)=0xa) 550.991501ms ago: executing program 0 (id=905): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x30, 0x0, &(0x7f0000cab000)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff37, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800800015000100003140694700000002000000", @ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x14010}, 0x24000010) 550.615071ms ago: executing program 0 (id=906): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 540.805431ms ago: executing program 0 (id=907): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000740)=ANY=[@ANYBLOB="0400000000000000070000000100000000005782fad89a5a2f84000007000000000000000000000000000000000000000000000000000000030000000b8c33ca00000000000000000100000003000000070000000000f4be6067000000000000000000000000000000080000040000000000c20e0000000055edafb000000000000000000000000000000000000067d0000002"]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = eventfd2(0x100, 0x800) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f0000000040)={[{0x6, 0x9, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x1, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x29f1, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0x8e, 0xffffffffffffffb5}]}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x3b, @multicast2, 0x4e23, 0x0, 'rr\x00', 0x20, 0xff, 0x7a}, 0x2c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x4) 381.434606ms ago: executing program 0 (id=908): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x258, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0x2, @capture={0x1000, 0x1, {0x7fffffff, 0x6}, 0x2, 0x4}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f00000002c0), 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5500000020007fa7b72d13b2a4a26f9302000000030b43026c26236925000400fe71f3fb43495b7b91735433d195f27f0000bda7b74ffe612dca8a98050000000000000031afdc1338d509000000200100005ae583", 0x55}], 0x1}, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) 300.889431ms ago: executing program 0 (id=909): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0xfffffffffffffffc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet6(0xa, 0x1, 0x84) syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000140)="cf32e69a626b511f0cc8fb6b3445bbc9393f046082c10000", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x10000000000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) memfd_secret(0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) (async) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0xfffffffffffffffc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$inet6(0xa, 0x1, 0x84) (async) syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) (async) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet6(r2, &(0x7f0000000140)="cf32e69a626b511f0cc8fb6b3445bbc9393f046082c10000", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000240), 0x0) (async) tee(r3, r4, 0x10000000000000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) (async) 221.043454ms ago: executing program 0 (id=910): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000480)="00e4", 0x2, 0x20004891, &(0x7f0000000380)={0x2, 0x4e22, @private=0xa010100}, 0x10) 210.33881ms ago: executing program 3 (id=911): munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5, 0x0, 0x1, 0xd, 0x1, 0x8}, &(0x7f0000000300)=0x20) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 209.38184ms ago: executing program 3 (id=912): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfe, {0x80, 0x10, 0x20, 0x0, 0x0, 0x2, 0x0, 0xb}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x841) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000000)={0x28, 0x0, r8, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r10, &(0x7f0000000dc0)=""/129, 0x81) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000280)={0x28, 0x0, r8, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r11, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x50, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_RATE64={0xc, 0x4, 0xf9549afd277c8487}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81, 0xfffffffc}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x7c}}, 0x4000080) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 101.241708ms ago: executing program 3 (id=913): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x10}]}, 0x3c}}, 0x20) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x27d, 0x8) (rerun: 32) 0s ago: executing program 3 (id=914): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000040)=0x6) (async) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="949b48742b0d715f0ee727d774a410da73a069581a0bfcf50cd70e6df2f116c50f2efdf5a2694dc079bda3bdae7c5c118f5a0c7f7f69c3054d9a3e504f4328a4dd5f8963ef8808870b46bd9ee5b032f00acf8f4245002e3658ecd719d278646de25b55b2627019d12135b2c711cf36782040d148109b426f45c3ace63f56c2f2b75e6d97c9e9b89c0c3c13f193a837e8b5925e4d46c36772aae880ee00608677dd21ca98dbb0976295aea1f0a8695d8352eccc1783d8de6db54b2b2de0128b502660b40057fd039b"}) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000009000200"], 0x14}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000011c0)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{}, @any, 0x7, 0x1000, 0x7, 0xfb0, 0x3}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001500)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x4e21, 0xb312, @empty, 0x5}, @in6={0xa, 0x4e22, 0xc, @mcast2, 0x1}], 0x54) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000001c0), 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x175, &(0x7f00000012c0)='cgroup\x00\x06Yd\xc3\xe4n\xb8\x86?|}\xfar\x94\fa\x1c\x01f_f\xdb\xd4c\xf6\xcb\xa0Vy\x1a:\x00\x05\x9f\xd7\xe1\x8eG\xd7\x03\xb4\x97\xd7~d\xdb\xbe\xa4\x18\xd6b$\xde\xa4\x1a\xd7\xd1\xd3\x7f\xeb]\x81\x13\x1e$\xee\xfeO\x96\x83h\t\x15,\x81\x8a\x90\x84\xca\x87\x1f\xbf0\xdb\xd0\nU\xca\xb6\xe2\xfcHc\x8c36\x8b\xfe\xd3\xf3\'e\xa7\x91\xb2\xf2\xc0\xfa\x8d\xb2\x052\xbb\xd2\x8bE\xe6\xec\x9d\xb3#\xbf[\xec~\xadbC\x1cf\x14\xe3=\x9f~(\x9c&\xbc\xd1\xc8_\xd7\xcfz=\x8d\xf7.\\=\xc1\x91\xff\xd2gA\xcec\xd4r\xbbXc\xbf\xe0\xc0Z\x90\xd9\xdd\x99\\\x94\xa0f\xdaR\x04y#\x86zCV\x99\x19\xb0\xdbU\x8b\xdba\xc9&-\xa5\xf3\x86y\xce?\x0369\x19\xfe\xf4\xa7\xd3\x010u\x96\xcf\r\xed\x05\x00\x00\x00\x00\x00\x00\x00\xbcX\xec<\x95@\x1a\xe3\x06~\x03\xe2p\xae\x88\xb7\x06\x81\xee\"\x7f\xf3\xec\x1d\xd3\x95M\xed\x10\n\b\x92\xd2\xf9\xaf\x17\x03\x18\x01uw\"\xc3\x8c\x10'}, 0x30) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001580)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYRES16], 0x10) kernel console output (not intermixed with test programs): b 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.657689][ T5977] usb 8-1: Product: syz [ 68.659011][ T5977] usb 8-1: Manufacturer: syz [ 68.660405][ T5977] usb 8-1: SerialNumber: syz [ 68.822818][ T7299] overlayfs: conflicting options: metacopy=off,verity=on [ 68.850393][ T7302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.087056][ T5977] usb 8-1: USB disconnect, device number 4 [ 69.406774][ T7304] tmpfs: Unknown parameter 'grpquota_block{hardlimŠt' [ 69.610653][ T7317] Bluetooth: MGMT ver 1.23 [ 69.665629][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 69.827259][ T7327] xt_CT: No such helper "netbios-ns" [ 70.026259][ T5286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.026297][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 70.230919][ T39] kauditd_printk_skb: 52 callbacks suppressed [ 70.230930][ T39] audit: type=1400 audit(70.117:546): avc: denied { write } for pid=7352 comm="syz.4.381" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.245854][ T7353] netlink: 'syz.4.381': attribute type 11 has an invalid length. [ 70.334059][ T7357] trusted_key: syz.4.383 sent an empty control message without MSG_MORE. [ 70.344035][ T7360] netlink: 244 bytes leftover after parsing attributes in process `syz.0.384'. [ 70.565534][ T66] usb 6-1: device descriptor read/64, error -71 [ 70.582357][ T7371] tap0: tun_chr_ioctl cmd 1074025677 [ 70.584801][ T7371] tap0: linktype set to 772 [ 70.696965][ T7373] veth1_to_batadv: entered promiscuous mode [ 70.699010][ T7373] macsec2: entered promiscuous mode [ 70.704336][ T7373] netlink: 112 bytes leftover after parsing attributes in process `syz.0.388'. [ 70.740444][ T7375] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 70.816387][ T66] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 70.828376][ T7383] syz.0.390 (7383): /proc/7382/oom_adj is deprecated, please use /proc/7382/oom_score_adj instead. [ 70.875370][ T7387] nfs: Unknown parameter 'X' [ 70.969560][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 70.974230][ T66] usb 6-1: config 1 interface 0 altsetting 206 bulk endpoint 0x1 has invalid maxpacket 8 [ 70.979880][ T66] usb 6-1: config 1 interface 0 altsetting 206 bulk endpoint 0x82 has invalid maxpacket 1023 [ 70.983469][ T66] usb 6-1: config 1 interface 0 has no altsetting 0 [ 70.988495][ T66] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 70.991724][ T39] audit: type=1400 audit(70.877:547): avc: denied { read } for pid=7395 comm="syz.3.396" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 70.992904][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.997248][ T7397] input: syz1 as /devices/virtual/input/input13 [ 71.001418][ T39] audit: type=1400 audit(70.877:548): avc: denied { open } for pid=7395 comm="syz.3.396" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.003235][ T66] usb 6-1: Product: ç¸“ìŽ’â½¥ì½…è¸Œé®¾á¿²é¼”èªˆé² [ 71.006280][ T39] audit: type=1400 audit(70.877:549): avc: denied { watch } for pid=7395 comm="syz.3.396" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.007234][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 71.007928][ T7398] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 71.012193][ T66] usb 6-1: Manufacturer: ј [ 71.012204][ T66] usb 6-1: SerialNumber: ᥠ[ 71.014125][ T7355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.016265][ T39] audit: type=1400 audit(70.877:550): avc: denied { watch_sb watch_reads } for pid=7395 comm="syz.3.396" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.022347][ T7355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.025958][ T39] audit: type=1400 audit(70.887:551): avc: denied { mount } for pid=7395 comm="syz.3.396" name="/" dev="autofs" ino=16776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.029677][ T7398] syz_tun: entered promiscuous mode [ 71.031365][ T39] audit: type=1400 audit(70.897:552): avc: denied { connect } for pid=7396 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.043692][ T7398] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.093240][ T39] audit: type=1400 audit(70.977:553): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.153471][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.196944][ T39] audit: type=1400 audit(71.087:554): avc: denied { execute } for pid=7406 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.203326][ T39] audit: type=1400 audit(71.087:555): avc: denied { execute_no_trans } for pid=7406 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.222857][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.240470][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.243191][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285611][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.310740][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.314202][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.316951][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.320226][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.323901][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.326851][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.380728][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 71.391333][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 71.394019][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 71.397157][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 71.401332][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.439430][ T66] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 206 proto 2 vid 0x0525 pid 0xA4A8 [ 71.449519][ T7409] chnl_net:caif_netlink_parms(): no params data found [ 71.503768][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 71.506478][ T7432] netlink: 5 bytes leftover after parsing attributes in process `syz.0.408'. [ 71.519843][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.521907][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.523971][ T7409] bridge_slave_0: entered allmulticast mode [ 71.526195][ T7409] bridge_slave_0: entered promiscuous mode [ 71.532109][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534185][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.536323][ T7409] bridge_slave_1: entered allmulticast mode [ 71.538107][ T7435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.538714][ T7409] bridge_slave_1: entered promiscuous mode [ 71.570559][ T12] bridge_slave_1: left allmulticast mode [ 71.572965][ T12] bridge_slave_1: left promiscuous mode [ 71.575396][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.581079][ T12] bridge_slave_0: left allmulticast mode [ 71.583400][ T12] bridge_slave_0: left promiscuous mode [ 71.586678][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.601060][ T7437] program syz.0.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.844947][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.850544][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.855498][ T12] bond0 (unregistering): Released all slaves [ 71.862179][ T7409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.866232][ T7409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.907721][ T7409] team0: Port device team_slave_0 added [ 71.921608][ T7409] team0: Port device team_slave_1 added [ 71.950928][ T7409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.953170][ T7409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.961287][ T7409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.985419][ T7409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.987445][ T7409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.994709][ T7409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.009304][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.013349][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.016915][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.020263][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.026456][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.029005][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.035448][ T7409] hsr_slave_0: entered promiscuous mode [ 72.037923][ T7409] hsr_slave_1: entered promiscuous mode [ 72.040336][ T7409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.042526][ T7409] Cannot create hsr debugfs directory [ 72.121323][ T7452] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 72.124242][ T12] hsr_slave_0: left promiscuous mode [ 72.128836][ T12] hsr_slave_1: left promiscuous mode [ 72.131292][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.133575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.136556][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.139458][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.157176][ T12] veth1_macvtap: left promiscuous mode [ 72.158935][ T12] veth0_macvtap: left promiscuous mode [ 72.160630][ T12] veth1_vlan: left promiscuous mode [ 72.162269][ T12] veth0_vlan: left promiscuous mode [ 72.714432][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.778735][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.255086][ T7452] netlink: 'syz.0.414': attribute type 21 has an invalid length. [ 73.257454][ T30] usb 6-1: USB disconnect, device number 6 [ 73.257671][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 73.261532][ T30] usblp0: removed [ 73.334183][ T7409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.339256][ T7409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.354675][ T7409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.360554][ T7409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.385398][ T5947] Bluetooth: hci0: command tx timeout [ 73.437197][ T7409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.452067][ T7409] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.457475][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.459823][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.465071][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.467334][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.527051][ T7480] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 73.527368][ T7477] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.529787][ T7480] netlink: 'syz.1.420': attribute type 3 has an invalid length. [ 73.535024][ T7480] netlink: 224 bytes leftover after parsing attributes in process `syz.1.420'. [ 73.538460][ T7480] NCSI netlink: No device for ifindex 0 [ 73.581437][ T7409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.682749][ T7409] veth0_vlan: entered promiscuous mode [ 73.687231][ T7409] veth1_vlan: entered promiscuous mode [ 73.699399][ T7409] veth0_macvtap: entered promiscuous mode [ 73.704167][ T7409] veth1_macvtap: entered promiscuous mode [ 73.710884][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.714088][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.717119][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.719988][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.722798][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.727514][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.732360][ T7409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.738053][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.742101][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.745171][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.749653][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.752710][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.756196][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.760834][ T7409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.766779][ T7409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769681][ T7409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.772471][ T7409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775187][ T7409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.831314][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.834754][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.851455][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.854034][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.211562][ T7523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.432'. [ 74.214149][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 74.284680][ T7534] warning: `syz.0.436' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.288168][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 74.326139][ T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 74.450787][ T7553] Invalid option length (1047906) for dns_resolver key [ 74.454565][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 74.457696][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.461597][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.465962][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.469525][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.477688][ T7506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.480425][ T7556] mkiss: ax0: crc mode is auto. [ 74.482396][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.497221][ T30] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.501604][ T30] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.511738][ T30] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.515657][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.541145][ T7513] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 74.546487][ T30] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.715394][ T834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.866430][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 74.870009][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 74.873281][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.885310][ T834] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.887907][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.895768][ T834] usb 5-1: config 0 descriptor?? [ 74.897588][ T7556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 74.975849][ T833] usb 10-1: USB disconnect, device number 2 [ 75.122789][ T7567] syz_tun: entered allmulticast mode [ 75.139536][ T7567] syz_tun: left allmulticast mode [ 75.178011][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.181683][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.195659][ T25] usb 6-1: USB disconnect, device number 7 [ 75.231484][ T7572] vlan2: entered allmulticast mode [ 75.233996][ T7572] bond0: entered allmulticast mode [ 75.236049][ T7572] bond_slave_0: entered allmulticast mode [ 75.236270][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 75.236278][ T39] audit: type=1400 audit(75.127:588): avc: denied { listen } for pid=7573 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.238126][ T7572] bond_slave_1: entered allmulticast mode [ 75.240286][ T39] audit: type=1400 audit(75.127:589): avc: denied { accept } for pid=7573 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.257986][ T7572] bond0: left allmulticast mode [ 75.259893][ T7572] bond_slave_0: left allmulticast mode [ 75.261902][ T7572] bond_slave_1: left allmulticast mode [ 75.317870][ T834] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 75.320869][ T834] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 75.326509][ T834] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 75.475373][ T5947] Bluetooth: hci0: command tx timeout [ 75.579501][ T39] audit: type=1400 audit(75.467:590): avc: denied { nlmsg_read } for pid=7587 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.619829][ T25] usb 5-1: USB disconnect, device number 6 [ 76.006262][ T7616] syz.3.462 uses old SIOCAX25GETINFO [ 76.008694][ T39] audit: type=1400 audit(75.897:591): avc: denied { listen } for pid=7615 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.106453][ T7623] Bluetooth: MGMT ver 1.23 [ 76.112160][ T7623] fuse: Bad value for 'fd' [ 76.295390][ T35] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 76.435786][ T30] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 76.465412][ T35] usb 8-1: Invalid ep0 maxpacket: 16 [ 76.586482][ T30] usb 10-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 76.590306][ T30] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.593726][ T30] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 76.597577][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.603411][ T30] usb 10-1: config 0 descriptor?? [ 76.605511][ T35] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 76.755487][ T35] usb 8-1: Invalid ep0 maxpacket: 16 [ 76.757721][ T35] usb usb8-port1: attempt power cycle [ 76.809970][ T7630] __nla_validate_parse: 1 callbacks suppressed [ 76.809979][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 76.814791][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 76.829529][ T30] usb 10-1: USB disconnect, device number 3 [ 77.105416][ T35] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 77.126389][ T35] usb 8-1: Invalid ep0 maxpacket: 16 [ 77.255416][ T35] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 77.285762][ T35] usb 8-1: Invalid ep0 maxpacket: 16 [ 77.287475][ T35] usb usb8-port1: unable to enumerate USB device [ 77.297517][ T39] audit: type=1400 audit(77.187:592): avc: denied { create } for pid=7660 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.335832][ T7663] netlink: 'syz.1.475': attribute type 2 has an invalid length. [ 77.338302][ T7663] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 77.340741][ T7663] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 77.364305][ T7667] netlink: 'syz.1.477': attribute type 39 has an invalid length. [ 77.420007][ T39] audit: type=1400 audit(77.307:593): avc: denied { checkpoint_restore } for pid=7666 comm="syz.5.476" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.514588][ T39] audit: type=1400 audit(77.397:594): avc: denied { call } for pid=7670 comm="syz.5.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.514750][ T7671] binder_alloc: 7670: binder_alloc_buf, no vma [ 77.545380][ T5286] Bluetooth: hci0: command tx timeout [ 77.607505][ T39] audit: type=1400 audit(77.497:595): avc: denied { write } for pid=7675 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.612626][ T7681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7681 comm=syz.5.481 [ 77.718080][ T7691] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 77.733546][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.485'. [ 77.737475][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.485'. [ 77.775319][ T39] audit: type=1400 audit(77.657:596): avc: denied { connect } for pid=7695 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.810764][ T7700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.973540][ T7708] kvm: emulating exchange as write [ 78.185430][ T5947] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 78.188274][ T7632] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 78.190292][ T7633] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 78.338948][ T39] audit: type=1400 audit(78.227:597): avc: denied { write } for pid=7711 comm="syz.0.492" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.339089][ T7712] random: crng reseeded on system resumption [ 78.713379][ T7720] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.735358][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.887034][ T35] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 78.889924][ T35] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.894577][ T35] usb 5-1: config 1 interface 0 has no altsetting 0 [ 78.900031][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.902711][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.905047][ T35] usb 5-1: Product: à ” [ 78.906676][ T35] usb 5-1: Manufacturer: 갿ꤶå·ä§˜ä˜‰ë¨žë¶“㣆䱌í¡çŽæ–„痴⛿⎤ﵞèžâ¼©ç£€î¢‰ [ 78.909430][ T35] usb 5-1: SerialNumber: Ð¥ [ 78.916385][ T7712] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.919015][ T7712] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.955844][ T7747] xt_SECMARK: invalid mode: 0 [ 79.134313][ T7762] netlink: 452 bytes leftover after parsing attributes in process `syz.1.507'. [ 79.331764][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 79.336826][ T7776] macvtap0: entered promiscuous mode [ 79.338980][ T7776] macvtap0: left promiscuous mode [ 79.625387][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 79.773948][ T7789] block nbd3: NBD_DISCONNECT [ 80.075418][ T833] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 80.102375][ T7799] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 80.139592][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 80.145346][ T7801] netlink: 10 bytes leftover after parsing attributes in process `syz.1.518'. [ 80.223932][ T7807] tipc: Started in network mode [ 80.225505][ T7807] tipc: Node identity 7f000001, cluster identity 4711 [ 80.227946][ T7807] tipc: Enabled bearer , priority 10 [ 80.235354][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 80.240877][ T833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.242223][ T7811] tipc: Enabled bearer , priority 10 [ 80.243707][ T833] usb 8-1: config 0 has no interfaces? [ 80.248198][ T833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.251093][ T833] usb 8-1: config 0 has no interfaces? [ 80.253619][ T833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.256791][ T833] usb 8-1: config 0 has no interfaces? [ 80.268232][ T833] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.270884][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.273173][ T833] usb 8-1: Product: syz [ 80.274356][ T833] usb 8-1: Manufacturer: syz [ 80.275772][ T833] usb 8-1: SerialNumber: syz [ 80.277968][ T833] usb 8-1: config 0 descriptor?? [ 80.313158][ T7815] geneve2: entered promiscuous mode [ 80.314702][ T7815] geneve2: entered allmulticast mode [ 80.487703][ T5970] usb 8-1: USB disconnect, device number 9 [ 80.767300][ T7820] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7820 comm: syz.5.523) [ 80.771318][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 80.771328][ T39] audit: type=1800 audit(80.657:610): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.523" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=20987 res=0 errno=0 [ 80.778933][ T7820] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 80.782199][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.786940][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 80.790580][ T7821] vhci_hcd: connection closed [ 80.791758][ T1241] vhci_hcd: stop threads [ 80.794704][ T1241] vhci_hcd: release socket [ 80.796412][ T1241] vhci_hcd: disconnect device [ 81.226243][ T7827] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 81.235944][ T7831] 9pnet_virtio: no channels available for device syz [ 81.245399][ T7833] bridge: RTM_NEWNEIGH with invalid ether address [ 81.247332][ T7831] overlayfs: overlapping lowerdir path [ 81.249125][ T39] audit: type=1400 audit(81.137:611): avc: denied { shutdown } for pid=7832 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.279862][ T39] audit: type=1400 audit(81.167:612): avc: denied { mount } for pid=7835 comm="syz.1.528" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.286779][ T39] audit: type=1400 audit(81.167:613): avc: denied { remount } for pid=7835 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.292580][ T39] audit: type=1400 audit(81.177:614): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.310805][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 81.346829][ T5995] tipc: Node number set to 2130706433 [ 81.467121][ T2215] cfg80211: failed to load regulatory.db [ 81.487997][ T7846] Invalid source name [ 81.489428][ T7846] bridge0: port 3(netdevsim0) entered blocking state [ 81.491415][ T7846] bridge0: port 3(netdevsim0) entered disabled state [ 81.494009][ T7846] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 81.497313][ T7846] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 81.499600][ T7846] bridge0: port 3(netdevsim0) entered blocking state [ 81.501586][ T7846] bridge0: port 3(netdevsim0) entered forwarding state [ 81.576220][ T833] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.622800][ T7865] evm: overlay not supported [ 81.702467][ T7867] netlink: 'syz.3.538': attribute type 13 has an invalid length. [ 81.707355][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 81.718384][ T7867] gretap0: refused to change device tx_queue_len [ 81.724653][ T7867] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.746223][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 81.749542][ T833] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 81.752580][ T833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.756891][ T833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.760515][ T39] audit: type=1400 audit(81.647:615): avc: denied { ioctl } for pid=7868 comm="syz.3.540" path="socket:[19915]" dev="sockfs" ino=19915 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.769395][ T833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.772988][ T833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.778706][ T833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.781997][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.013882][ T833] usb 6-1: usb_control_msg returned -32 [ 82.015643][ T833] usbtmc 6-1:16.0: can't read capabilities [ 82.021622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.025692][ T6741] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 82.165439][ T6741] usb 8-1: device descriptor read/64, error -71 [ 82.396887][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 82.405353][ T6741] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 82.545405][ T6741] usb 8-1: device descriptor read/64, error -71 [ 82.580173][ T7886] fuse: Bad value for 'fd' [ 82.582613][ T7886] netlink: 'syz.5.544': attribute type 2 has an invalid length. [ 82.665898][ T6741] usb usb8-port1: attempt power cycle [ 83.015358][ T6741] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 83.035813][ T6741] usb 8-1: device descriptor read/8, error -71 [ 83.146028][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 83.285355][ T6741] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 83.315829][ T6741] usb 8-1: device descriptor read/8, error -71 [ 83.425662][ T6741] usb usb8-port1: unable to enumerate USB device [ 83.785367][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 83.948818][ T35] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 83.962190][ T25] usb 5-1: USB disconnect, device number 7 [ 83.965555][ T25] usblp1: removed [ 84.123210][ T39] audit: type=1400 audit(84.007:616): avc: denied { append } for pid=7914 comm="syz.0.555" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.183905][ T7919] FAULT_INJECTION: forcing a failure. [ 84.183905][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.189350][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.0.557 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 84.192809][ T7919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.196015][ T7919] Call Trace: [ 84.196987][ T7919] [ 84.197890][ T7919] dump_stack_lvl+0x16c/0x1f0 [ 84.199571][ T7919] should_fail_ex+0x497/0x5b0 [ 84.200958][ T7919] _copy_from_iter+0x2a1/0x1560 [ 84.202378][ T7919] ? trace_lock_acquire+0x14e/0x1f0 [ 84.203915][ T7919] ? __alloc_skb+0x1fe/0x380 [ 84.205364][ T7919] ? __pfx__copy_from_iter+0x10/0x10 [ 84.206909][ T7919] ? __virt_addr_valid+0x1a4/0x590 [ 84.208633][ T7919] ? __virt_addr_valid+0x5e/0x590 [ 84.210680][ T7919] ? __phys_addr_symbol+0x30/0x80 [ 84.212791][ T7919] ? __check_object_size+0x488/0x710 [ 84.214957][ T7919] netlink_sendmsg+0x813/0xd70 [ 84.216952][ T7919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.218932][ T7919] ____sys_sendmsg+0xaaf/0xc90 [ 84.220345][ T7919] ? copy_msghdr_from_user+0x10b/0x160 [ 84.221894][ T7919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.223436][ T7919] ___sys_sendmsg+0x135/0x1e0 [ 84.224797][ T7919] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.226394][ T7919] ? __pfx_lock_release+0x10/0x10 [ 84.227933][ T7919] ? trace_lock_acquire+0x14e/0x1f0 [ 84.230062][ T7919] ? __fget_files+0x206/0x3a0 [ 84.231950][ T7919] __sys_sendmsg+0x16e/0x220 [ 84.233295][ T7919] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.234854][ T7919] do_syscall_64+0xcd/0x250 [ 84.236281][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.237980][ T7919] RIP: 0033:0x7fb80cd85d29 [ 84.239506][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.245054][ T7919] RSP: 002b:00007fb80dbc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.247538][ T7919] RAX: ffffffffffffffda RBX: 00007fb80cf75fa0 RCX: 00007fb80cd85d29 [ 84.250350][ T7919] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 84.252724][ T7919] RBP: 00007fb80dbc5090 R08: 0000000000000000 R09: 0000000000000000 [ 84.254998][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.257338][ T7919] R13: 0000000000000000 R14: 00007fb80cf75fa0 R15: 00007ffe03e0e698 [ 84.259610][ T7919] [ 84.333101][ T35] usb 6-1: USB disconnect, device number 8 [ 84.399303][ T7937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=7937 comm=syz.0.565 [ 84.414875][ T7944] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 84.539911][ T39] audit: type=1400 audit(84.427:617): avc: denied { execute } for pid=7957 comm="syz.0.570" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.548412][ T39] audit: type=1400 audit(84.437:618): avc: denied { write } for pid=7959 comm="syz.1.571" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.625428][ T6741] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 84.743985][ T7974] netlink: 44 bytes leftover after parsing attributes in process `syz.1.575'. [ 84.785356][ T6741] usb 10-1: Using ep0 maxpacket: 8 [ 84.788863][ T6741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 125, changing to 10 [ 84.792189][ T6741] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34112, setting to 1024 [ 84.795420][ T6741] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.798162][ T6741] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.802657][ T6741] usb 10-1: config 0 descriptor?? [ 84.805354][ T7931] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 84.836181][ T7868] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 85.012896][ T6741] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 85.028938][ T39] audit: type=1326 audit(84.917:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.579" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75ab85d29 code=0x7ffc0000 [ 85.038200][ T7989] geneve2: entered promiscuous mode [ 85.039878][ T7989] geneve2: entered allmulticast mode [ 85.217438][ T6741] usb 10-1: USB disconnect, device number 4 [ 85.286056][ T7997] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 85.334949][ T7999] netlink: 'syz.1.583': attribute type 19 has an invalid length. [ 85.567814][ T8019] FAULT_INJECTION: forcing a failure. [ 85.567814][ T8019] name failslab, interval 1, probability 0, space 0, times 1 [ 85.571478][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.1.590 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 85.575564][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.579597][ T8019] Call Trace: [ 85.580866][ T8019] [ 85.581997][ T8019] dump_stack_lvl+0x16c/0x1f0 [ 85.583431][ T8019] should_fail_ex+0x497/0x5b0 [ 85.584791][ T8019] ? fs_reclaim_acquire+0xae/0x150 [ 85.586256][ T8019] should_failslab+0xc2/0x120 [ 85.587612][ T8019] __kmalloc_noprof+0xcb/0x510 [ 85.588994][ T8019] ? __asan_memset+0x23/0x50 [ 85.590387][ T8019] taprio_init+0x319/0x940 [ 85.591705][ T8019] ? lockdep_init_map_type+0x16d/0x7d0 [ 85.593409][ T8019] ? __pfx_taprio_init+0x10/0x10 [ 85.594846][ T8019] ? qdisc_alloc+0x950/0xc50 [ 85.596206][ T8019] ? __pfx_taprio_init+0x10/0x10 [ 85.597795][ T8019] qdisc_create+0x4f1/0x1100 [ 85.599166][ T8019] ? __pfx_qdisc_create+0x10/0x10 [ 85.600602][ T8019] tc_modify_qdisc+0x4d8/0x1c40 [ 85.602005][ T8019] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 85.603670][ T8019] ? rtnetlink_rcv_msg+0x372/0xea0 [ 85.605164][ T8019] ? trace_lock_acquire+0x14e/0x1f0 [ 85.606691][ T8019] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 85.608223][ T8019] rtnetlink_rcv_msg+0x3c7/0xea0 [ 85.609658][ T8019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.611240][ T8019] netlink_rcv_skb+0x16b/0x440 [ 85.612626][ T8019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.614283][ T8019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.615842][ T8019] ? netlink_deliver_tap+0x1ae/0xd30 [ 85.617370][ T8019] netlink_unicast+0x53c/0x7f0 [ 85.618769][ T8019] ? __pfx_netlink_unicast+0x10/0x10 [ 85.620304][ T8019] netlink_sendmsg+0x8b8/0xd70 [ 85.621690][ T8019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.623236][ T8019] ____sys_sendmsg+0xaaf/0xc90 [ 85.624660][ T8019] ? copy_msghdr_from_user+0x10b/0x160 [ 85.626505][ T8019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.628079][ T8019] ___sys_sendmsg+0x135/0x1e0 [ 85.629453][ T8019] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.630978][ T8019] ? __pfx_lock_release+0x10/0x10 [ 85.632437][ T8019] ? trace_lock_acquire+0x14e/0x1f0 [ 85.633964][ T8019] ? __fget_files+0x206/0x3a0 [ 85.635374][ T8019] __sys_sendmsg+0x16e/0x220 [ 85.636996][ T8019] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.638492][ T8019] do_syscall_64+0xcd/0x250 [ 85.639830][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.641544][ T8019] RIP: 0033:0x7f72abd85d29 [ 85.642838][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.648840][ T8019] RSP: 002b:00007f72acadd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.651243][ T8019] RAX: ffffffffffffffda RBX: 00007f72abf75fa0 RCX: 00007f72abd85d29 [ 85.653518][ T8019] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 85.655759][ T8019] RBP: 00007f72acadd090 R08: 0000000000000000 R09: 0000000000000000 [ 85.658258][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.660513][ T8019] R13: 0000000000000000 R14: 00007f72abf75fa0 R15: 00007ffc8e5a0298 [ 85.662840][ T8019] [ 85.798818][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 85.798833][ T39] audit: type=1400 audit(85.687:638): avc: denied { create } for pid=8038 comm="syz.5.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 85.815481][ T5995] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 85.865163][ T8043] netlink: 88 bytes leftover after parsing attributes in process `syz.1.598'. [ 85.876883][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 85.976594][ T5995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.979739][ T5995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.982661][ T5995] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.986954][ T5995] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.989870][ T5995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.993845][ T5995] usb 8-1: config 0 descriptor?? [ 85.994718][ T39] audit: type=1400 audit(85.877:639): avc: denied { append } for pid=8052 comm="syz.1.601" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.042389][ T8055] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 86.056028][ T8055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.069442][ T8055] bond1: (slave gretap1): making interface the new active one [ 86.072662][ T8055] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 86.084271][ T39] audit: type=1400 audit(85.967:640): avc: denied { mounton } for pid=8054 comm="syz.1.602" path="/163/file1/file0" dev="autofs" ino=21240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 86.205150][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.205972][ T8023] binder: 8020:8023 ioctl c0306201 200003c0 returned -22 [ 86.207593][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.212008][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.214146][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.216292][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.218392][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.220531][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.223772][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.225906][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.228075][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.230151][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.232168][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.235318][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.237348][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.239332][ T5995] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.242675][ T5995] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 86.247831][ T5995] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.253724][ T5995] usb 8-1: USB disconnect, device number 14 [ 86.503250][ T8082] binder: 8081:8082 ioctl c0306201 200003c0 returned -22 [ 86.509004][ T8082] random: crng reseeded on system resumption [ 86.526089][ T8077] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 86.606199][ T8086] fuse: Bad value for 'fd' [ 86.684244][ T8082] Restarting kernel threads ... done. [ 86.727388][ T8090] syz.0.614: attempt to access beyond end of device [ 86.727388][ T8090] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 86.731498][ T8090] FAT-fs (nbd0): unable to read boot sector [ 86.790284][ T39] audit: type=1326 audit(86.677:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8091 comm="syz.0.615" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb80cd85d29 code=0x0 [ 86.891800][ T8095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 87.178344][ T39] audit: type=1400 audit(87.067:642): avc: denied { listen } for pid=8102 comm="syz.5.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.218495][ T39] audit: type=1400 audit(87.107:643): avc: denied { setattr } for pid=8104 comm="syz.3.621" name="dlm_plock" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.224803][ T39] audit: type=1400 audit(87.107:644): avc: denied { setopt } for pid=8104 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.278496][ T8114] sctp: [Deprecated]: syz.5.622 (pid 8114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.278496][ T8114] Use struct sctp_sack_info instead [ 87.284809][ T8115] sctp: [Deprecated]: syz.5.622 (pid 8115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.284809][ T8115] Use struct sctp_sack_info instead [ 87.310738][ T8113] sp0: Synchronizing with TNC [ 87.329024][ T8118] FAULT_INJECTION: forcing a failure. [ 87.329024][ T8118] name failslab, interval 1, probability 0, space 0, times 0 [ 87.333282][ T8118] CPU: 1 UID: 0 PID: 8118 Comm: syz.5.624 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 87.336404][ T8118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.339614][ T8118] Call Trace: [ 87.340607][ T8118] [ 87.341515][ T8118] dump_stack_lvl+0x16c/0x1f0 [ 87.342856][ T8118] should_fail_ex+0x497/0x5b0 [ 87.344302][ T8118] ? fs_reclaim_acquire+0xae/0x150 [ 87.345818][ T8118] should_failslab+0xc2/0x120 [ 87.347235][ T8118] __kmalloc_node_noprof+0xd1/0x510 [ 87.348851][ T8118] ? fifo_init+0x394/0x710 [ 87.350170][ T8118] ? qdisc_alloc+0xbb/0xc50 [ 87.351539][ T8118] qdisc_alloc+0xbb/0xc50 [ 87.352829][ T8118] qdisc_create_dflt+0x73/0x430 [ 87.354303][ T8118] taprio_init+0x4b3/0x940 [ 87.355648][ T8118] ? __pfx_taprio_init+0x10/0x10 [ 87.357102][ T8118] ? qdisc_alloc+0x950/0xc50 [ 87.358519][ T8118] ? __pfx_taprio_init+0x10/0x10 [ 87.360022][ T8118] qdisc_create+0x4f1/0x1100 [ 87.361384][ T8118] ? __pfx_qdisc_create+0x10/0x10 [ 87.362870][ T8118] tc_modify_qdisc+0x4d8/0x1c40 [ 87.364331][ T8118] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 87.365873][ T8118] ? rtnetlink_rcv_msg+0x372/0xea0 [ 87.367399][ T8118] ? trace_lock_acquire+0x14e/0x1f0 [ 87.368991][ T8118] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 87.370535][ T8118] rtnetlink_rcv_msg+0x3c7/0xea0 [ 87.372032][ T8118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.373641][ T8118] netlink_rcv_skb+0x16b/0x440 [ 87.375073][ T8118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.377182][ T8118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.379022][ T8118] ? netlink_deliver_tap+0x1ae/0xd30 [ 87.380919][ T8118] netlink_unicast+0x53c/0x7f0 [ 87.382574][ T8118] ? __pfx_netlink_unicast+0x10/0x10 [ 87.384393][ T8118] netlink_sendmsg+0x8b8/0xd70 [ 87.386040][ T8118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.387884][ T8118] ____sys_sendmsg+0xaaf/0xc90 [ 87.389523][ T8118] ? copy_msghdr_from_user+0x10b/0x160 [ 87.391381][ T8118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.393179][ T8118] ___sys_sendmsg+0x135/0x1e0 [ 87.394753][ T8118] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.396537][ T8118] ? __pfx_lock_release+0x10/0x10 [ 87.398256][ T8118] ? trace_lock_acquire+0x14e/0x1f0 [ 87.400022][ T8118] ? __fget_files+0x206/0x3a0 [ 87.401613][ T8118] __sys_sendmsg+0x16e/0x220 [ 87.403151][ T8118] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.404884][ T8118] do_syscall_64+0xcd/0x250 [ 87.406446][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.408467][ T8118] RIP: 0033:0x7f8521f85d29 [ 87.409985][ T8118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.416406][ T8118] RSP: 002b:00007f8522e90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.419238][ T8118] RAX: ffffffffffffffda RBX: 00007f8522175fa0 RCX: 00007f8521f85d29 [ 87.421893][ T8118] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 87.424559][ T8118] RBP: 00007f8522e90090 R08: 0000000000000000 R09: 0000000000000000 [ 87.427215][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.429845][ T8118] R13: 0000000000000000 R14: 00007f8522175fa0 R15: 00007ffe4d8c5c28 [ 87.432508][ T8118] [ 87.571671][ T8125] bridge0: port 3(veth0_to_bridge) entered blocking state [ 87.574416][ T8125] bridge0: port 3(veth0_to_bridge) entered disabled state [ 87.578350][ T8125] veth0_to_bridge: entered allmulticast mode [ 87.581320][ T8125] veth0_to_bridge: entered promiscuous mode [ 87.583562][ T8125] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.588853][ T8125] bridge0: port 3(veth0_to_bridge) entered blocking state [ 87.591505][ T8125] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 87.743769][ T8146] FAULT_INJECTION: forcing a failure. [ 87.743769][ T8146] name failslab, interval 1, probability 0, space 0, times 0 [ 87.748114][ T8146] CPU: 2 UID: 0 PID: 8146 Comm: syz.3.633 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 87.751221][ T8146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.754250][ T8146] Call Trace: [ 87.755225][ T8146] [ 87.756103][ T8146] dump_stack_lvl+0x16c/0x1f0 [ 87.757468][ T8146] should_fail_ex+0x497/0x5b0 [ 87.758846][ T8146] ? fs_reclaim_acquire+0xae/0x150 [ 87.760476][ T8146] should_failslab+0xc2/0x120 [ 87.761842][ T8146] __kmalloc_node_noprof+0xd1/0x510 [ 87.763343][ T8146] ? fifo_init+0x394/0x710 [ 87.764626][ T8146] ? qdisc_alloc+0xbb/0xc50 [ 87.765938][ T8146] qdisc_alloc+0xbb/0xc50 [ 87.767191][ T8146] qdisc_create_dflt+0x73/0x430 [ 87.768592][ T8146] taprio_init+0x4b3/0x940 [ 87.769887][ T8146] ? __pfx_taprio_init+0x10/0x10 [ 87.771318][ T8146] ? qdisc_alloc+0x950/0xc50 [ 87.772657][ T8146] ? __pfx_taprio_init+0x10/0x10 [ 87.774093][ T8146] qdisc_create+0x4f1/0x1100 [ 87.775434][ T8146] ? __pfx_qdisc_create+0x10/0x10 [ 87.776902][ T8146] tc_modify_qdisc+0x4d8/0x1c40 [ 87.778316][ T8146] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 87.779833][ T8146] ? rtnetlink_rcv_msg+0x372/0xea0 [ 87.781301][ T8146] ? trace_lock_acquire+0x14e/0x1f0 [ 87.782797][ T8146] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 87.784319][ T8146] rtnetlink_rcv_msg+0x3c7/0xea0 [ 87.785750][ T8146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.787329][ T8146] netlink_rcv_skb+0x16b/0x440 [ 87.788718][ T8146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.790280][ T8146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.791808][ T8146] ? netlink_deliver_tap+0x1ae/0xd30 [ 87.793325][ T8146] netlink_unicast+0x53c/0x7f0 [ 87.794718][ T8146] ? __pfx_netlink_unicast+0x10/0x10 [ 87.796223][ T8146] netlink_sendmsg+0x8b8/0xd70 [ 87.797608][ T8146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.799166][ T8146] ____sys_sendmsg+0xaaf/0xc90 [ 87.800542][ T8146] ? copy_msghdr_from_user+0x10b/0x160 [ 87.802105][ T8146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.803633][ T8146] ___sys_sendmsg+0x135/0x1e0 [ 87.804991][ T8146] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.806544][ T8146] ? __pfx_lock_release+0x10/0x10 [ 87.808015][ T8146] ? trace_lock_acquire+0x14e/0x1f0 [ 87.809510][ T8146] ? __fget_files+0x206/0x3a0 [ 87.810867][ T8146] __sys_sendmsg+0x16e/0x220 [ 87.812209][ T8146] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.813694][ T8146] do_syscall_64+0xcd/0x250 [ 87.815013][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.816716][ T8146] RIP: 0033:0x7fd75ab85d29 [ 87.818008][ T8146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.823499][ T8146] RSP: 002b:00007fd7589f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.825878][ T8146] RAX: ffffffffffffffda RBX: 00007fd75ad75fa0 RCX: 00007fd75ab85d29 [ 87.828158][ T8146] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 87.830415][ T8146] RBP: 00007fd7589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.832686][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.834943][ T8146] R13: 0000000000000000 R14: 00007fd75ad75fa0 R15: 00007fff79346298 [ 87.837209][ T8146] [ 87.840445][ T8147] netlink: 'syz.5.631': attribute type 13 has an invalid length. [ 87.925434][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.111688][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.116228][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.119259][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.122046][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.132738][ T8136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.145516][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.336368][ T66] usb 5-1: USB disconnect, device number 8 [ 88.815344][ T66] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 88.849246][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 88.939422][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.638'. [ 88.967965][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 88.970064][ T39] audit: type=1400 audit(88.857:645): avc: denied { append } for pid=8164 comm="syz.3.639" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.971742][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 88.975449][ T66] usb 10-1: Using ep0 maxpacket: 8 [ 88.976752][ T66] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 88.976778][ T66] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.976798][ T66] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.976818][ T66] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.976846][ T66] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.976865][ T66] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.000992][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.004566][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.008208][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.011799][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.015899][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.020340][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.025420][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.030155][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:be:4a:8f:e5:a6, vlan:0) [ 89.179594][ T66] usb 10-1: GET_CAPABILITIES returned 0 [ 89.181195][ T66] usbtmc 10-1:16.0: can't read capabilities [ 89.183705][ T39] audit: type=1400 audit(89.067:646): avc: denied { setopt } for pid=8157 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.245008][ T2215] usb 10-1: USB disconnect, device number 5 [ 89.254919][ T39] audit: type=1400 audit(89.137:647): avc: denied { remount } for pid=8186 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 89.366188][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.648'. [ 89.490378][ T8203] netlink: 104 bytes leftover after parsing attributes in process `syz.5.649'. [ 89.520761][ T8205] xt_hashlimit: size too large, truncated to 1048576 [ 89.572805][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.650'. [ 89.891562][ T8211] netlink: 100 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.896850][ T8211] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 89.915689][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.922792][ T8211] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 89.927198][ T8211] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 89.934843][ T8211] bond1: (slave vti0): making interface the new active one [ 89.942275][ T8211] bond1: (slave vti0): Enslaving as an active interface with an up link [ 89.967029][ T8214] FAULT_INJECTION: forcing a failure. [ 89.967029][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 89.970740][ T8214] CPU: 0 UID: 0 PID: 8214 Comm: syz.3.652 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 89.973761][ T8214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.976824][ T8214] Call Trace: [ 89.977794][ T8214] [ 89.978653][ T8214] dump_stack_lvl+0x16c/0x1f0 [ 89.980018][ T8214] should_fail_ex+0x497/0x5b0 [ 89.981397][ T8214] ? fs_reclaim_acquire+0xae/0x150 [ 89.982914][ T8214] should_failslab+0xc2/0x120 [ 89.984299][ T8214] __kmalloc_node_noprof+0xd1/0x510 [ 89.985807][ T8214] ? fifo_init+0x394/0x710 [ 89.987121][ T8214] ? qdisc_alloc+0xbb/0xc50 [ 89.988463][ T8214] qdisc_alloc+0xbb/0xc50 [ 89.989722][ T8214] qdisc_create_dflt+0x73/0x430 [ 89.991138][ T8214] taprio_init+0x4b3/0x940 [ 89.992437][ T8214] ? __pfx_taprio_init+0x10/0x10 [ 89.993888][ T8214] ? qdisc_alloc+0x950/0xc50 [ 89.995289][ T8214] ? __pfx_taprio_init+0x10/0x10 [ 89.996728][ T8214] qdisc_create+0x4f1/0x1100 [ 89.998099][ T8214] ? __pfx_qdisc_create+0x10/0x10 [ 89.999559][ T8214] tc_modify_qdisc+0x4d8/0x1c40 [ 90.000982][ T8214] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 90.002510][ T8214] ? rtnetlink_rcv_msg+0x372/0xea0 [ 90.003990][ T8214] ? trace_lock_acquire+0x14e/0x1f0 [ 90.005505][ T8214] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 90.007156][ T8214] rtnetlink_rcv_msg+0x3c7/0xea0 [ 90.008604][ T8214] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.010179][ T8214] netlink_rcv_skb+0x16b/0x440 [ 90.011720][ T8214] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.013335][ T8214] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.014803][ T8214] ? netlink_deliver_tap+0x1ae/0xd30 [ 90.016320][ T8214] netlink_unicast+0x53c/0x7f0 [ 90.017718][ T8214] ? __pfx_netlink_unicast+0x10/0x10 [ 90.019260][ T8214] netlink_sendmsg+0x8b8/0xd70 [ 90.020676][ T8214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.022224][ T8214] ____sys_sendmsg+0xaaf/0xc90 [ 90.023629][ T8214] ? copy_msghdr_from_user+0x10b/0x160 [ 90.025238][ T8214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.026830][ T8214] ___sys_sendmsg+0x135/0x1e0 [ 90.027423][ T8218] Context (ID=0x0) not attached to queue pair (handle=0x4d2:0x0) [ 90.028215][ T8214] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.028234][ T8214] ? __pfx_lock_release+0x10/0x10 [ 90.033686][ T8214] ? trace_lock_acquire+0x14e/0x1f0 [ 90.035229][ T8214] ? __fget_files+0x206/0x3a0 [ 90.036616][ T8214] __sys_sendmsg+0x16e/0x220 [ 90.038007][ T8214] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.039522][ T8214] do_syscall_64+0xcd/0x250 [ 90.040866][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.042589][ T8214] RIP: 0033:0x7fd75ab85d29 [ 90.043907][ T8214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.049474][ T8214] RSP: 002b:00007fd7589f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.051907][ T8214] RAX: ffffffffffffffda RBX: 00007fd75ad75fa0 RCX: 00007fd75ab85d29 [ 90.054185][ T8214] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 90.056456][ T8214] RBP: 00007fd7589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.058740][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.061035][ T8214] R13: 0000000000000000 R14: 00007fd75ad75fa0 R15: 00007fff79346298 [ 90.063317][ T8214] [ 90.318701][ T8242] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 90.535460][ T66] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 90.550301][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.587285][ T8253] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 90.591382][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.593404][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.643712][ T8257] pim6reg1: entered promiscuous mode [ 90.646479][ T8257] pim6reg1: entered allmulticast mode [ 90.685421][ T66] usb 10-1: Using ep0 maxpacket: 8 [ 90.687950][ T66] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 90.690367][ T66] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 90.692813][ T66] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 90.696017][ T66] usb 10-1: config 250 has no interface number 0 [ 90.697882][ T66] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 90.701254][ T66] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 90.704243][ T66] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.707729][ T66] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 90.710713][ T66] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 90.714650][ T66] usb 10-1: config 250 interface 228 has no altsetting 0 [ 90.718765][ T66] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 90.722419][ T66] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 90.726075][ T66] usb 10-1: Product: syz [ 90.727864][ T66] usb 10-1: SerialNumber: syz [ 90.732953][ T66] hub 10-1:250.228: bad descriptor, ignoring hub [ 90.735031][ T66] hub 10-1:250.228: probe with driver hub failed with error -5 [ 90.882388][ T8263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.667'. [ 90.944474][ T8270] bridge0: port 3(veth0_to_bridge) entered disabled state [ 90.946703][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.948816][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.951926][ T8270] bridge0: entered allmulticast mode [ 90.960883][ T66] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 90.965672][ T8271] veth0_to_bridge: left allmulticast mode [ 90.969038][ T8271] veth0_to_bridge: left promiscuous mode [ 90.972355][ T8271] bridge0: port 3(veth0_to_bridge) entered disabled state [ 90.985950][ T66] usb 10-1: USB disconnect, device number 6 [ 90.986255][ T8271] bridge_slave_1: left allmulticast mode [ 90.989273][ T8271] bridge_slave_1: left promiscuous mode [ 90.991007][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.991858][ T8277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.992933][ T66] usblp0: removed [ 91.000635][ T8277] fuse: Bad value for 'fd' [ 91.003135][ T8271] bridge_slave_0: left allmulticast mode [ 91.004861][ T8271] bridge_slave_0: left promiscuous mode [ 91.007084][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.083662][ T8281] hfsplus: unable to find HFS+ superblock [ 91.125943][ T8281] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 91.185621][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 91.185630][ T39] audit: type=1400 audit(91.067:651): avc: denied { connect } for pid=8286 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.245769][ T8298] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.343467][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 91.520409][ T39] audit: type=1400 audit(91.407:652): avc: denied { unmount } for pid=7409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.545490][ T5286] Bluetooth: hci0: command 0x0419 tx timeout [ 91.715850][ T39] audit: type=1400 audit(91.607:653): avc: denied { view } for pid=8324 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.741243][ T8327] FAULT_INJECTION: forcing a failure. [ 91.741243][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 91.744862][ T8327] CPU: 1 UID: 0 PID: 8327 Comm: syz.0.686 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 91.747936][ T8327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.751040][ T8327] Call Trace: [ 91.752011][ T8327] [ 91.752875][ T8327] dump_stack_lvl+0x16c/0x1f0 [ 91.754259][ T8327] should_fail_ex+0x497/0x5b0 [ 91.755658][ T8327] ? fs_reclaim_acquire+0xae/0x150 [ 91.757164][ T8327] should_failslab+0xc2/0x120 [ 91.758548][ T8327] __kmalloc_node_noprof+0xd1/0x510 [ 91.760089][ T8327] ? fifo_init+0x394/0x710 [ 91.761406][ T8327] ? qdisc_alloc+0xbb/0xc50 [ 91.762735][ T8327] qdisc_alloc+0xbb/0xc50 [ 91.764039][ T8327] qdisc_create_dflt+0x73/0x430 [ 91.765493][ T8327] taprio_init+0x4b3/0x940 [ 91.766805][ T8327] ? __pfx_taprio_init+0x10/0x10 [ 91.768257][ T8327] ? qdisc_alloc+0x950/0xc50 [ 91.769604][ T8327] ? __pfx_taprio_init+0x10/0x10 [ 91.771059][ T8327] qdisc_create+0x4f1/0x1100 [ 91.772389][ T8327] ? __pfx_qdisc_create+0x10/0x10 [ 91.773876][ T8327] tc_modify_qdisc+0x4d8/0x1c40 [ 91.775301][ T8327] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 91.776849][ T8327] ? rtnetlink_rcv_msg+0x372/0xea0 [ 91.778359][ T8327] ? trace_lock_acquire+0x14e/0x1f0 [ 91.779887][ T8327] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 91.781413][ T8327] rtnetlink_rcv_msg+0x3c7/0xea0 [ 91.782854][ T8327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.784476][ T8327] netlink_rcv_skb+0x16b/0x440 [ 91.786009][ T8327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.787670][ T8327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.789470][ T8327] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.791047][ T8327] netlink_unicast+0x53c/0x7f0 [ 91.792692][ T8327] ? __pfx_netlink_unicast+0x10/0x10 [ 91.794393][ T8327] netlink_sendmsg+0x8b8/0xd70 [ 91.795883][ T8327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.797429][ T8327] ____sys_sendmsg+0xaaf/0xc90 [ 91.798845][ T8327] ? copy_msghdr_from_user+0x10b/0x160 [ 91.800446][ T8327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.801989][ T8327] ___sys_sendmsg+0x135/0x1e0 [ 91.803383][ T8327] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.804896][ T8327] ? __pfx_lock_release+0x10/0x10 [ 91.806362][ T8327] ? trace_lock_acquire+0x14e/0x1f0 [ 91.807931][ T8327] ? __fget_files+0x206/0x3a0 [ 91.809321][ T8327] __sys_sendmsg+0x16e/0x220 [ 91.810673][ T8327] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.812178][ T8327] do_syscall_64+0xcd/0x250 [ 91.813525][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.815251][ T8327] RIP: 0033:0x7fb80cd85d29 [ 91.816561][ T8327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.822597][ T8327] RSP: 002b:00007fb80dbc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.824994][ T8327] RAX: ffffffffffffffda RBX: 00007fb80cf75fa0 RCX: 00007fb80cd85d29 [ 91.827271][ T8327] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 91.829560][ T8327] RBP: 00007fb80dbc5090 R08: 0000000000000000 R09: 0000000000000000 [ 91.831845][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.834093][ T8327] R13: 0000000000000000 R14: 00007fb80cf75fa0 R15: 00007ffe03e0e698 [ 91.836394][ T8327] [ 91.837419][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.847469][ T8330] can0: slcan on ptm0. [ 91.880087][ T8329] sctp: [Deprecated]: syz.5.687 (pid 8329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.880087][ T8329] Use struct sctp_sack_info instead [ 91.884856][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.687'. [ 91.965473][ T8328] can0 (unregistered): slcan off ptm0. [ 91.994897][ T8341] netlink: 'syz.0.689': attribute type 19 has an invalid length. [ 92.013264][ T8345] netlink: 'syz.5.691': attribute type 4 has an invalid length. [ 92.023811][ T8346] netlink: 'syz.5.691': attribute type 4 has an invalid length. [ 92.048358][ T8350] binder: 8349:8350 ioctl c00c6211 0 returned -14 [ 92.052008][ T8350] binder: 8349:8350 ioctl ae41 2 returned -22 [ 92.106958][ T39] audit: type=1400 audit(91.997:654): avc: denied { ioctl } for pid=8356 comm="syz.3.694" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x4b35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 92.118032][ T39] audit: type=1400 audit(92.007:655): avc: denied { bind } for pid=8356 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.252767][ T8398] 9p: Unknown uid 00000000004294967295 [ 92.578826][ T8417] program syz.3.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.928333][ T8431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8431 comm=syz.3.717 [ 93.150020][ T39] audit: type=1400 audit(93.037:656): avc: denied { append } for pid=8444 comm="syz.3.720" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.321821][ T8458] FAULT_INJECTION: forcing a failure. [ 93.321821][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 93.325435][ T8458] CPU: 3 UID: 0 PID: 8458 Comm: syz.3.724 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 93.328443][ T8458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.331548][ T8458] Call Trace: [ 93.332558][ T8458] [ 93.333590][ T8458] dump_stack_lvl+0x16c/0x1f0 [ 93.334971][ T8458] should_fail_ex+0x497/0x5b0 [ 93.336331][ T8458] ? fs_reclaim_acquire+0xae/0x150 [ 93.337834][ T8458] should_failslab+0xc2/0x120 [ 93.339218][ T8458] __kmalloc_node_noprof+0xd1/0x510 [ 93.340713][ T8458] ? fifo_init+0x394/0x710 [ 93.342003][ T8458] ? qdisc_alloc+0xbb/0xc50 [ 93.343552][ T8458] qdisc_alloc+0xbb/0xc50 [ 93.344832][ T8458] qdisc_create_dflt+0x73/0x430 [ 93.346254][ T8458] taprio_init+0x4b3/0x940 [ 93.347619][ T8458] ? __pfx_taprio_init+0x10/0x10 [ 93.349109][ T8458] ? qdisc_alloc+0x950/0xc50 [ 93.350462][ T8458] ? __pfx_taprio_init+0x10/0x10 [ 93.351940][ T8458] qdisc_create+0x4f1/0x1100 [ 93.353270][ T8458] ? __pfx_qdisc_create+0x10/0x10 [ 93.355030][ T8458] tc_modify_qdisc+0x4d8/0x1c40 [ 93.356443][ T8458] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 93.358024][ T8458] ? rtnetlink_rcv_msg+0x372/0xea0 [ 93.359505][ T8458] ? trace_lock_acquire+0x14e/0x1f0 [ 93.361039][ T8458] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 93.362617][ T8458] rtnetlink_rcv_msg+0x3c7/0xea0 [ 93.364339][ T8458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.366075][ T8458] netlink_rcv_skb+0x16b/0x440 [ 93.367578][ T8458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.369148][ T8458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.370685][ T8458] ? netlink_deliver_tap+0x1ae/0xd30 [ 93.372263][ T8458] netlink_unicast+0x53c/0x7f0 [ 93.373655][ T8458] ? __pfx_netlink_unicast+0x10/0x10 [ 93.375386][ T8458] netlink_sendmsg+0x8b8/0xd70 [ 93.376864][ T8458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.378426][ T8458] ____sys_sendmsg+0xaaf/0xc90 [ 93.379844][ T8458] ? copy_msghdr_from_user+0x10b/0x160 [ 93.381407][ T8458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.382953][ T8458] ___sys_sendmsg+0x135/0x1e0 [ 93.384369][ T8458] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.385985][ T8458] ? __pfx_lock_release+0x10/0x10 [ 93.387476][ T8458] ? trace_lock_acquire+0x14e/0x1f0 [ 93.388980][ T8458] ? __fget_files+0x206/0x3a0 [ 93.390337][ T8458] __sys_sendmsg+0x16e/0x220 [ 93.391672][ T8458] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.393148][ T8458] do_syscall_64+0xcd/0x250 [ 93.394422][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.396210][ T8458] RIP: 0033:0x7fd75ab85d29 [ 93.397520][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.403131][ T8458] RSP: 002b:00007fd7589f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.405480][ T8458] RAX: ffffffffffffffda RBX: 00007fd75ad75fa0 RCX: 00007fd75ab85d29 [ 93.407776][ T8458] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 93.410015][ T8458] RBP: 00007fd7589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.412259][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.414511][ T8458] R13: 0000000000000000 R14: 00007fd75ad75fa0 R15: 00007fff79346298 [ 93.416767][ T8458] [ 93.455402][ T8460] fuseblk: Bad value for 'rootmode' [ 93.619544][ T39] audit: type=1400 audit(93.507:657): avc: denied { ioctl } for pid=8483 comm="syz.3.731" path="socket:[24772]" dev="sockfs" ino=24772 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.658635][ T39] audit: type=1400 audit(93.547:658): avc: denied { getopt } for pid=8487 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.727534][ T39] audit: type=1400 audit(93.617:659): avc: denied { listen } for pid=8493 comm="syz.3.735" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.481156][ T8499] xt_hashlimit: size too large, truncated to 1048576 [ 94.552710][ T8501] __nla_validate_parse: 3 callbacks suppressed [ 94.552721][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.736'. [ 94.821267][ T8512] net_ratelimit: 19164 callbacks suppressed [ 94.821282][ T8512] openvswitch: netlink: IP tunnel dst address not specified [ 95.033011][ T8520] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.742'. [ 95.036711][ T8520] openvswitch: netlink: Unknown key attributes 20 [ 95.039896][ T8520] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 95.462905][ T8526] rdma_op ffff888024cd39f0 conn xmit_rdma 0000000000000000 [ 95.515046][ T8528] usb usb8: usbfs: process 8528 (syz.3.745) did not claim interface 0 before use [ 95.542651][ T8528] kvm: apic: phys broadcast and lowest prio [ 95.670123][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 95.674338][ T8543] xt_hashlimit: size too large, truncated to 1048576 [ 95.711230][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 95.755343][ T8554] openvswitch: netlink: EtherType 0 is less than min 600 [ 95.762487][ T8550] ucma_write: process 283 (syz.5.748) changed security contexts after opening file descriptor, this is not allowed. [ 95.800274][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 95.802293][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.806194][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.809120][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 95.811306][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.814071][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.818139][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(42) [ 95.820685][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.823717][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.827892][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(44) [ 95.829850][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.832203][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.834618][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(46) [ 95.836594][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.840656][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.843936][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(48) [ 95.846475][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.849662][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.865084][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(50) [ 95.867145][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.869811][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.872372][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(52) [ 95.874349][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.877091][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 95.886031][ T8558] vhci_hcd vhci_hcd.0: port 0 already used [ 95.890503][ T8559] vhci_hcd: connection closed [ 95.892660][ T67] vhci_hcd: stop threads [ 95.896247][ T67] vhci_hcd: release socket [ 95.897952][ T67] vhci_hcd: disconnect device [ 96.043380][ T8588] FAULT_INJECTION: forcing a failure. [ 96.043380][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 96.049193][ T8588] CPU: 3 UID: 0 PID: 8588 Comm: syz.0.754 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 96.053429][ T8588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.057747][ T8588] Call Trace: [ 96.059112][ T8588] [ 96.060314][ T8588] dump_stack_lvl+0x16c/0x1f0 [ 96.062186][ T8588] should_fail_ex+0x497/0x5b0 [ 96.064116][ T8588] ? fs_reclaim_acquire+0xae/0x150 [ 96.066128][ T8588] should_failslab+0xc2/0x120 [ 96.067991][ T8588] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 96.070260][ T8588] ? __alloc_skb+0x2b1/0x380 [ 96.072145][ T8588] __alloc_skb+0x2b1/0x380 [ 96.073944][ T8588] ? __pfx___alloc_skb+0x10/0x10 [ 96.075992][ T8588] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 96.078072][ T8588] netlink_ack+0x15f/0xb80 [ 96.079857][ T8588] netlink_rcv_skb+0x348/0x440 [ 96.081731][ T8588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.083880][ T8588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.085982][ T8588] ? netlink_deliver_tap+0x1ae/0xd30 [ 96.088086][ T8588] netlink_unicast+0x53c/0x7f0 [ 96.089593][ T8588] ? __pfx_netlink_unicast+0x10/0x10 [ 96.091202][ T8588] netlink_sendmsg+0x8b8/0xd70 [ 96.092600][ T8588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.094120][ T8588] ____sys_sendmsg+0xaaf/0xc90 [ 96.095584][ T8588] ? copy_msghdr_from_user+0x10b/0x160 [ 96.097109][ T8588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.098688][ T8588] ___sys_sendmsg+0x135/0x1e0 [ 96.100112][ T8588] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.101634][ T8588] ? __pfx_lock_release+0x10/0x10 [ 96.103151][ T8588] ? trace_lock_acquire+0x14e/0x1f0 [ 96.104670][ T8588] ? __fget_files+0x206/0x3a0 [ 96.106109][ T8588] __sys_sendmsg+0x16e/0x220 [ 96.107474][ T8588] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.108977][ T8588] do_syscall_64+0xcd/0x250 [ 96.110364][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.112049][ T8588] RIP: 0033:0x7fb80cd85d29 [ 96.113317][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.118759][ T8588] RSP: 002b:00007fb80dbc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.121091][ T8588] RAX: ffffffffffffffda RBX: 00007fb80cf75fa0 RCX: 00007fb80cd85d29 [ 96.123316][ T8588] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 96.125505][ T8588] RBP: 00007fb80dbc5090 R08: 0000000000000000 R09: 0000000000000000 [ 96.127872][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.130115][ T8588] R13: 0000000000000000 R14: 00007fb80cf75fa0 R15: 00007ffe03e0e698 [ 96.132313][ T8588] [ 96.168241][ T8590] netlink: 'syz.0.755': attribute type 5 has an invalid length. [ 96.242657][ T39] audit: type=1400 audit(96.127:660): avc: denied { create } for pid=8589 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.248926][ T39] audit: type=1400 audit(96.137:661): avc: denied { ioctl } for pid=8589 comm="syz.0.755" path="socket:[24058]" dev="sockfs" ino=24058 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.404854][ T8573] vhci_hcd: connection closed [ 96.406352][ T67] vhci_hcd: stop threads [ 96.406959][ T8571] vhci_hcd: connection closed [ 96.407843][ T67] vhci_hcd: release socket [ 96.408622][ T8569] vhci_hcd: connection closed [ 96.409204][ T8563] vhci_hcd: connection closed [ 96.409265][ T8561] vhci_hcd: connection closed [ 96.409652][ T8565] vhci_hcd: connection closed [ 96.410956][ T8567] vhci_hcd: connection closed [ 96.411609][ T67] vhci_hcd: disconnect device [ 96.415371][ T67] vhci_hcd: stop threads [ 96.422422][ T67] vhci_hcd: release socket [ 96.423787][ T67] vhci_hcd: disconnect device [ 96.425256][ T67] vhci_hcd: stop threads [ 96.427809][ T67] vhci_hcd: release socket [ 96.429595][ T67] vhci_hcd: disconnect device [ 96.432754][ T67] vhci_hcd: stop threads [ 96.434385][ T67] vhci_hcd: release socket [ 96.437339][ T6741] usb 43-2: new low-speed USB device number 2 using vhci_hcd [ 96.441408][ T67] vhci_hcd: disconnect device [ 96.443238][ T6741] usb 43-2: enqueue for inactive port 1 [ 96.446707][ T67] vhci_hcd: stop threads [ 96.448332][ T67] vhci_hcd: release socket [ 96.450498][ T67] vhci_hcd: disconnect device [ 96.453881][ T67] vhci_hcd: stop threads [ 96.455615][ T67] vhci_hcd: release socket [ 96.457568][ T67] vhci_hcd: disconnect device [ 96.460520][ T67] vhci_hcd: stop threads [ 96.462217][ T67] vhci_hcd: release socket [ 96.464148][ T67] vhci_hcd: disconnect device [ 96.498788][ T39] audit: type=1400 audit(96.387:662): avc: denied { read } for pid=8600 comm="syz.3.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.516621][ T6741] vhci_hcd: vhci_device speed not set [ 96.804969][ T39] audit: type=1400 audit(96.687:663): avc: denied { name_bind } for pid=8602 comm="syz.5.759" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 96.974588][ T8606] xt_hashlimit: size too large, truncated to 1048576 [ 97.261526][ T8616] FAULT_INJECTION: forcing a failure. [ 97.261526][ T8616] name failslab, interval 1, probability 0, space 0, times 0 [ 97.266510][ T8616] CPU: 2 UID: 0 PID: 8616 Comm: syz.0.763 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 97.269596][ T8616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.272739][ T8616] Call Trace: [ 97.273725][ T8616] [ 97.274594][ T8616] dump_stack_lvl+0x16c/0x1f0 [ 97.276031][ T8616] should_fail_ex+0x497/0x5b0 [ 97.277452][ T8616] should_failslab+0xc2/0x120 [ 97.279073][ T8616] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 97.281152][ T8616] ? skb_clone+0x190/0x3f0 [ 97.282964][ T8616] skb_clone+0x190/0x3f0 [ 97.284678][ T8616] netlink_deliver_tap+0xabd/0xd30 [ 97.286737][ T8616] netlink_unicast+0x6b4/0x7f0 [ 97.288695][ T8616] ? __pfx_netlink_unicast+0x10/0x10 [ 97.290683][ T8616] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 97.292303][ T8616] netlink_ack+0x6ac/0xb80 [ 97.293663][ T8616] netlink_rcv_skb+0x348/0x440 [ 97.295136][ T8616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.296694][ T8616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.298255][ T8616] ? netlink_deliver_tap+0x1ae/0xd30 [ 97.299868][ T8616] netlink_unicast+0x53c/0x7f0 [ 97.301715][ T8616] ? __pfx_netlink_unicast+0x10/0x10 [ 97.303752][ T8616] netlink_sendmsg+0x8b8/0xd70 [ 97.305695][ T8616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.307864][ T8616] ____sys_sendmsg+0xaaf/0xc90 [ 97.309810][ T8616] ? copy_msghdr_from_user+0x10b/0x160 [ 97.311996][ T8616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.314129][ T8616] ___sys_sendmsg+0x135/0x1e0 [ 97.316005][ T8616] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.318097][ T8616] ? __pfx_lock_release+0x10/0x10 [ 97.320146][ T8616] ? trace_lock_acquire+0x14e/0x1f0 [ 97.322249][ T8616] ? __fget_files+0x206/0x3a0 [ 97.324139][ T8616] __sys_sendmsg+0x16e/0x220 [ 97.326027][ T8616] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.328159][ T8616] do_syscall_64+0xcd/0x250 [ 97.330021][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.332381][ T8616] RIP: 0033:0x7fb80cd85d29 [ 97.334206][ T8616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.341843][ T8616] RSP: 002b:00007fb80dbc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.345183][ T8616] RAX: ffffffffffffffda RBX: 00007fb80cf75fa0 RCX: 00007fb80cd85d29 [ 97.348397][ T8616] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 97.351511][ T8616] RBP: 00007fb80dbc5090 R08: 0000000000000000 R09: 0000000000000000 [ 97.354639][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.357807][ T8616] R13: 0000000000000000 R14: 00007fb80cf75fa0 R15: 00007ffe03e0e698 [ 97.360947][ T8616] [ 97.407361][ T8620] netlink: 'syz.0.764': attribute type 27 has an invalid length. [ 97.433348][ T8620] syz_tun: left promiscuous mode [ 97.438693][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.442041][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.489710][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.496806][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.533506][ T8620] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.536857][ T8620] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.539442][ T8620] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.542221][ T8620] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.565006][ T8620] macsec2: left promiscuous mode [ 97.591884][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.764'. [ 97.594628][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.597232][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.600670][ T8623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.841866][ T8641] fuse: Bad value for 'user_id' [ 97.843916][ T8641] fuse: Bad value for 'user_id' [ 97.854961][ T8641] vlan2: entered promiscuous mode [ 97.857788][ T8641] team0: entered promiscuous mode [ 97.859800][ T8641] team_slave_0: entered promiscuous mode [ 97.862544][ T8641] team_slave_1: entered promiscuous mode [ 97.865472][ T8641] team0: Device vlan2 is already an upper device of the team interface [ 97.876734][ T8641] team0: left promiscuous mode [ 97.878640][ T8641] team_slave_0: left promiscuous mode [ 97.880430][ T8641] team_slave_1: left promiscuous mode [ 97.912519][ T8644] ufs: Invalid option: "grpquota" or missing value [ 97.916501][ T8644] ufs: wrong mount options [ 97.925041][ T8645] ufs: Invalid option: "grpquota" or missing value [ 97.927809][ T8645] ufs: wrong mount options [ 97.984059][ T8647] FAULT_INJECTION: forcing a failure. [ 97.984059][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 97.991455][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.3.772 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 97.995209][ T8647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.999185][ T8647] Call Trace: [ 98.000478][ T8647] [ 98.001614][ T8647] dump_stack_lvl+0x16c/0x1f0 [ 98.003416][ T8647] should_fail_ex+0x497/0x5b0 [ 98.005283][ T8647] should_failslab+0xc2/0x120 [ 98.007096][ T8647] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 98.009170][ T8647] ? skb_clone+0x190/0x3f0 [ 98.010921][ T8647] skb_clone+0x190/0x3f0 [ 98.012510][ T8647] netlink_deliver_tap+0xabd/0xd30 [ 98.014482][ T8647] netlink_unicast+0x6b4/0x7f0 [ 98.016332][ T8647] ? __pfx_netlink_unicast+0x10/0x10 [ 98.018354][ T8647] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 98.020320][ T8647] netlink_ack+0x6ac/0xb80 [ 98.022057][ T8647] netlink_rcv_skb+0x348/0x440 [ 98.023904][ T8647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.025967][ T8647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.027855][ T8647] ? netlink_deliver_tap+0x1ae/0xd30 [ 98.029796][ T8647] netlink_unicast+0x53c/0x7f0 [ 98.031523][ T8647] ? __pfx_netlink_unicast+0x10/0x10 [ 98.033469][ T8647] netlink_sendmsg+0x8b8/0xd70 [ 98.035302][ T8647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.037297][ T8647] ____sys_sendmsg+0xaaf/0xc90 [ 98.039072][ T8647] ? copy_msghdr_from_user+0x10b/0x160 [ 98.041295][ T8647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.043449][ T8647] ___sys_sendmsg+0x135/0x1e0 [ 98.045256][ T8647] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.047283][ T8647] ? __pfx_lock_release+0x10/0x10 [ 98.049179][ T8647] ? trace_lock_acquire+0x14e/0x1f0 [ 98.051166][ T8647] ? __fget_files+0x206/0x3a0 [ 98.052953][ T8647] __sys_sendmsg+0x16e/0x220 [ 98.054920][ T8647] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.056853][ T8647] do_syscall_64+0xcd/0x250 [ 98.058615][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.060897][ T8647] RIP: 0033:0x7fd75ab85d29 [ 98.062566][ T8647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.069414][ T8647] RSP: 002b:00007fd7589f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.072436][ T8647] RAX: ffffffffffffffda RBX: 00007fd75ad75fa0 RCX: 00007fd75ab85d29 [ 98.075361][ T8647] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000003 [ 98.078570][ T8647] RBP: 00007fd7589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.081654][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.083958][ T8647] R13: 0000000000000000 R14: 00007fd75ad75fa0 R15: 00007fff79346298 [ 98.086855][ T8647] [ 98.130061][ T8653] xt_hashlimit: size too large, truncated to 1048576 [ 98.191205][ T39] audit: type=1400 audit(98.077:664): avc: denied { accept } for pid=8660 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.385517][ T35] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 98.525419][ T35] usb 8-1: device descriptor read/64, error -71 [ 98.785431][ T35] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 98.925431][ T35] usb 8-1: device descriptor read/64, error -71 [ 99.022325][ T8660] delete_channel: no stack [ 99.045627][ T35] usb usb8-port1: attempt power cycle [ 99.093073][ T8666] xt_hashlimit: size too large, truncated to 1048576 [ 99.144905][ T8669] xt_hashlimit: size too large, truncated to 1048576 [ 99.149929][ T8669] syz.5.780: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 99.155450][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.5.780 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 99.159154][ T8669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.163237][ T8669] Call Trace: [ 99.164537][ T8669] [ 99.165714][ T8669] dump_stack_lvl+0x16c/0x1f0 [ 99.167568][ T8669] warn_alloc+0x24d/0x3a0 [ 99.169251][ T8669] ? __pfx_warn_alloc+0x10/0x10 [ 99.171173][ T8669] ? __get_vm_area_node+0x1b0/0x2f0 [ 99.173179][ T8669] ? __get_vm_area_node+0x1dc/0x2f0 [ 99.175209][ T8669] __vmalloc_node_range_noprof+0x1105/0x1530 [ 99.177512][ T8669] ? __pfx___lock_acquire+0x10/0x10 [ 99.179542][ T8669] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 99.181865][ T8669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.184217][ T8669] ? __pfx_lock_release+0x10/0x10 [ 99.186167][ T8669] ? trace_lock_acquire+0x14e/0x1f0 [ 99.188145][ T8669] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 99.190425][ T8669] vmalloc_noprof+0x6b/0x90 [ 99.192159][ T8669] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 99.194438][ T8669] hashlimit_mt_check_common+0x8b0/0x1450 [ 99.196686][ T8669] hashlimit_mt_check+0x71/0x90 [ 99.198594][ T8669] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 99.200569][ T8669] xt_check_match+0x284/0xa50 [ 99.201916][ T8669] ? __schedule+0x59b2/0x5ad0 [ 99.203230][ T8669] ? __pfx_xt_check_match+0x10/0x10 [ 99.204735][ T8669] ? xt_find_target+0x1ee/0x290 [ 99.206158][ T8669] ? xt_find_match+0x1f2/0x290 [ 99.207617][ T8669] find_check_entry.constprop.0+0x34d/0xa20 [ 99.209442][ T8669] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 99.211811][ T8669] ? kvfree+0x47/0x50 [ 99.213423][ T8669] translate_table+0xd06/0x17b0 [ 99.215366][ T8669] ? __pfx_translate_table+0x10/0x10 [ 99.217425][ T8669] ? __might_fault+0xe3/0x190 [ 99.219343][ T8669] do_ip6t_set_ctl+0x926/0xbf0 [ 99.221231][ T8669] ? trace_contention_end+0xee/0x140 [ 99.223306][ T8669] ? __mutex_lock+0x1cc/0xa60 [ 99.225161][ T8669] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 99.227270][ T8669] ? __mutex_unlock_slowpath+0x164/0x690 [ 99.229542][ T8669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.231463][ T8669] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 99.233264][ T8669] nf_setsockopt+0x8a/0xf0 [ 99.234615][ T8669] ipv6_setsockopt+0x135/0x170 [ 99.236083][ T8669] rawv6_setsockopt+0xd7/0x680 [ 99.237561][ T8669] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 99.239149][ T8669] ? selinux_socket_setsockopt+0x6a/0x80 [ 99.241024][ T8669] ? sock_common_setsockopt+0x2e/0xf0 [ 99.242602][ T8669] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.244376][ T8669] do_sock_setsockopt+0x222/0x480 [ 99.245873][ T8669] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.247565][ T8669] ? lock_acquire+0x2f/0xb0 [ 99.248870][ T8669] __sys_setsockopt+0x1a0/0x230 [ 99.250358][ T8669] __x64_sys_setsockopt+0xbd/0x160 [ 99.251902][ T8669] ? do_syscall_64+0x91/0x250 [ 99.253341][ T8669] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.254906][ T8669] do_syscall_64+0xcd/0x250 [ 99.256262][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.258039][ T8669] RIP: 0033:0x7f8521f85d29 [ 99.259397][ T8669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.265184][ T8669] RSP: 002b:00007f8522e4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.267686][ T8669] RAX: ffffffffffffffda RBX: 00007f8522176160 RCX: 00007f8521f85d29 [ 99.270014][ T8669] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 99.272376][ T8669] RBP: 00007f8522001b08 R08: 0000000000000588 R09: 0000000000000000 [ 99.274717][ T8669] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 99.277057][ T8669] R13: 0000000000000001 R14: 00007f8522176160 R15: 00007ffe4d8c5c28 [ 99.279433][ T8669] [ 99.280507][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.285981][ T8669] Mem-Info: [ 99.287024][ T8669] active_anon:21935 inactive_anon:0 isolated_anon:0 [ 99.287024][ T8669] active_file:3396 inactive_file:50710 isolated_file:0 [ 99.287024][ T8669] unevictable:1768 dirty:37 writeback:0 [ 99.287024][ T8669] slab_reclaimable:11795 slab_unreclaimable:73656 [ 99.287024][ T8669] mapped:24125 shmem:17771 pagetables:787 [ 99.287024][ T8669] sec_pagetables:299 bounce:0 [ 99.287024][ T8669] kernel_misc_reclaimable:0 [ 99.287024][ T8669] free:435604 free_pcp:3031 free_cma:0 [ 99.302582][ T8669] Node 0 active_anon:87740kB inactive_anon:0kB active_file:13548kB inactive_file:202764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96464kB dirty:148kB writeback:0kB shmem:67548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3148kB sec_pagetables:1196kB all_unreclaimable? no [ 99.312323][ T8669] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.321798][ T8669] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.332349][ T8669] lowmem_reserve[]: 0 1212 0 0 0 [ 99.334459][ T8669] Node 0 DMA32 free:137264kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:87740kB inactive_anon:0kB active_file:13548kB inactive_file:202764kB unevictable:3536kB writepending:148kB present:2080628kB managed:1269908kB mlocked:0kB bounce:0kB free_pcp:11264kB local_pcp:1524kB free_cma:0kB [ 99.346613][ T8669] lowmem_reserve[]: 0 0 0 0 0 [ 99.348625][ T8669] Node 1 Normal free:1589792kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:852kB local_pcp:72kB free_cma:0kB [ 99.360129][ T8669] lowmem_reserve[]: 0 0 0 0 0 [ 99.362011][ T8669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.367067][ T8669] Node 0 DMA32: 31*4kB (UME) 315*8kB (ME) 366*16kB (ME) 253*32kB (ME) 74*64kB (UME) 9*128kB (ME) 20*256kB (ME) 14*512kB (UM) 14*1024kB (M) 7*2048kB (UME) 18*4096kB (UM) = 137172kB [ 99.374060][ T8669] Node 1 Normal: 2*4kB (UM) 9*8kB (ME) 9*16kB (UE) 146*32kB (UME) 66*64kB (UME) 17*128kB (UME) 10*256kB (UE) 4*512kB (ME) 1*1024kB (E) 4*2048kB (UM) 382*4096kB (M) = 1589792kB [ 99.380976][ T8669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.384014][ T8669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.385456][ T35] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 99.388339][ T8669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.393365][ T8669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.396046][ T8669] 71877 total pagecache pages [ 99.397394][ T8669] 0 pages in swap cache [ 99.398636][ T8669] Free swap = 124472kB [ 99.399951][ T8669] Total swap = 124996kB [ 99.401165][ T8669] 1048443 pages RAM [ 99.402349][ T8669] 0 pages HighMem/MovableOnly [ 99.403755][ T8669] 281645 pages reserved [ 99.404994][ T8669] 0 pages cma reserved [ 99.417604][ T35] usb 8-1: device descriptor read/8, error -71 [ 99.557535][ T8672] program syz.0.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.620351][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 99.655391][ T35] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 99.672627][ T8678] pim6reg1: entered promiscuous mode [ 99.674655][ T8678] pim6reg1: entered allmulticast mode [ 99.675919][ T35] usb 8-1: device descriptor read/8, error -71 [ 99.679487][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 99.683413][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.784'. [ 99.691290][ T39] audit: type=1400 audit(99.577:665): avc: denied { connect } for pid=8677 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.785820][ T35] usb usb8-port1: unable to enumerate USB device [ 99.799880][ T8686] fuse: Unknown parameter 'uid>00000000000000024576' [ 99.803374][ T39] audit: type=1400 audit(99.687:666): avc: denied { mounton } for pid=8685 comm="syz.0.786" path="/185/file0" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.835759][ T39] audit: type=1400 audit(99.727:667): avc: denied { create } for pid=8689 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.914322][ T8695] overlayfs: failed to resolve './file1': -2 [ 99.921321][ T39] audit: type=1400 audit(99.807:668): avc: denied { setattr } for pid=8694 comm="syz.0.789" name="SCTP" dev="sockfs" ino=24166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.142209][ T8708] xt_hashlimit: size too large, truncated to 1048576 [ 100.198552][ T8711] netlink: 'syz.0.793': attribute type 3 has an invalid length. [ 100.201583][ T8711] netlink: 558 bytes leftover after parsing attributes in process `syz.0.793'. [ 100.455965][ T8723] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 100.459898][ T8723] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 100.692113][ T39] audit: type=1400 audit(100.577:669): avc: denied { setopt } for pid=8728 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.722912][ T8731] xt_hashlimit: size too large, truncated to 1048576 [ 101.242085][ T5286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.249632][ T5286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.253749][ T5286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.264182][ T5286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.269138][ T5286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.271516][ T5286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.389489][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 101.468582][ T7729] bridge0: port 3(syz_tun) entered disabled state [ 101.478786][ T7729] syz_tun (unregistering): left allmulticast mode [ 101.480797][ T7729] syz_tun (unregistering): left promiscuous mode [ 101.482661][ T7729] bridge0: port 3(syz_tun) entered disabled state [ 101.497066][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.499136][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.501187][ T8745] bridge_slave_0: entered allmulticast mode [ 101.503332][ T8745] bridge_slave_0: entered promiscuous mode [ 101.507121][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.509167][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.511201][ T8745] bridge_slave_1: entered allmulticast mode [ 101.513327][ T8745] bridge_slave_1: entered promiscuous mode [ 101.533022][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.537049][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.564768][ T8745] team0: Port device team_slave_0 added [ 101.569056][ T8745] team0: Port device team_slave_1 added [ 101.589485][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.591552][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.600584][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.603612][ T39] audit: type=1400 audit(101.487:670): avc: denied { setopt } for pid=8759 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.610333][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.612382][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.621285][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.654248][ T8745] hsr_slave_0: entered promiscuous mode [ 101.659293][ T8745] hsr_slave_1: entered promiscuous mode [ 101.661416][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.664591][ T8745] Cannot create hsr debugfs directory [ 101.756371][ T8745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.760070][ T8745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.763528][ T8745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.769478][ T8745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.779187][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.781274][ T8745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.783498][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.785592][ T8745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.789622][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.792909][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.832898][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.840930][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.851273][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.853932][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.861192][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.864012][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.980812][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.993579][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 102.001691][ T11] Bluetooth: hci3: Frame reassembly failed (-84) [ 102.008001][ T8785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27152 sclass=netlink_route_socket pid=8785 comm=syz.0.811 [ 102.097065][ T8799] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 102.100202][ T8799] netlink: 'syz.0.813': attribute type 3 has an invalid length. [ 102.102773][ T8799] netlink: 224 bytes leftover after parsing attributes in process `syz.0.813'. [ 102.107741][ T8799] TCP: TCP_TX_DELAY enabled [ 102.137157][ T8745] veth0_vlan: entered promiscuous mode [ 102.141343][ T8745] veth1_vlan: entered promiscuous mode [ 102.150528][ T8745] veth0_macvtap: entered promiscuous mode [ 102.153380][ T8745] veth1_macvtap: entered promiscuous mode [ 102.162870][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.166518][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.169332][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.172316][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.175097][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.178883][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.182464][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.190538][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.193546][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.199035][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.202086][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.204915][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.208057][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.211518][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.218150][ T8745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.220794][ T8745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.223491][ T8745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.226837][ T8745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.266250][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.269322][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.271827][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.281076][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.291625][ T39] audit: type=1400 audit(102.177:671): avc: denied { mounton } for pid=8745 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.333328][ T39] audit: type=1400 audit(102.217:672): avc: denied { connect } for pid=8804 comm="syz.6.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.355885][ T8808] xt_hashlimit: size too large, truncated to 1048576 [ 102.358154][ T8808] xt_hashlimit: max too large, truncated to 1048576 [ 102.507361][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.818'. [ 102.514521][ T8819] tipc: Started in network mode [ 102.517580][ T8819] tipc: Node identity ac14140f, cluster identity 4711 [ 102.520437][ T8819] tipc: New replicast peer: 255.255.255.255 [ 102.524655][ T8819] tipc: Enabled bearer , priority 10 [ 102.532425][ T8819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.579232][ T2215] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.648761][ T39] audit: type=1400 audit(102.537:673): avc: denied { read append open } for pid=8833 comm="syz.3.821" path="/233/file0/cgroup.kill" dev="9p" ino=36575055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.657239][ T39] audit: type=1400 audit(102.547:674): avc: denied { map } for pid=8833 comm="syz.3.821" path="/233/file0/cgroup.kill" dev="9p" ino=36575055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.664527][ T39] audit: type=1400 audit(102.547:675): avc: denied { write } for pid=8833 comm="syz.3.821" path="/233/file0/cgroup.kill" dev="9p" ino=36575055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.669315][ T8834] netfs: Couldn't get user pages (rc=-14) [ 102.674291][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 102.678505][ T8831] netlink: 'syz.0.820': attribute type 22 has an invalid length. [ 102.681558][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 102.718406][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'. [ 102.750006][ T8841] xt_hashlimit: invalid interval [ 102.791168][ T8849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 102.797555][ T8850] netlink: 140 bytes leftover after parsing attributes in process `syz.0.826'. [ 102.842860][ T39] audit: type=1400 audit(102.727:676): avc: denied { write } for pid=8848 comm="syz.6.827" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 102.844684][ T8849] netlink: 'syz.6.827': attribute type 4 has an invalid length. [ 102.854091][ T39] audit: type=1400 audit(102.737:677): avc: denied { ioctl } for pid=8848 comm="syz.6.827" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 102.863292][ T8853] sp0: Synchronizing with TNC [ 102.885213][ T8855] macsec0: entered promiscuous mode [ 102.889190][ T8853] vxfs: WRONG superblock magic 00000000 at 1 [ 102.893036][ T8853] vxfs: WRONG superblock magic 00000000 at 8 [ 102.894788][ T8853] vxfs: can't find superblock. [ 102.937735][ T8853] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 103.066299][ T8879] devtmpfs: Cannot enable quota on remount [ 103.126194][ T8883] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 103.129194][ T8883] nbd: error processing sock list [ 103.195545][ T8] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 103.306721][ T5286] Bluetooth: hci4: command tx timeout [ 103.345358][ T8] usb 8-1: Invalid ep0 maxpacket: 64 [ 103.390513][ T39] audit: type=1400 audit(103.277:678): avc: denied { read } for pid=8901 comm="syz.6.845" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.397340][ T39] audit: type=1400 audit(103.277:679): avc: denied { open } for pid=8901 comm="syz.6.845" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.485342][ T8] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 103.525386][ T5975] tipc: Node number set to 2886997007 [ 103.637583][ T8] usb 8-1: Invalid ep0 maxpacket: 64 [ 103.639314][ T8] usb usb8-port1: attempt power cycle [ 103.985375][ T8] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 104.005926][ T8] usb 8-1: Invalid ep0 maxpacket: 64 [ 104.019069][ T8906] netlink: 'syz.0.846': attribute type 15 has an invalid length. [ 104.025499][ T5947] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 104.135526][ T8] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 104.162020][ T8] usb 8-1: Invalid ep0 maxpacket: 64 [ 104.164553][ T8] usb usb8-port1: unable to enumerate USB device [ 104.167248][ T5947] Bluetooth: hci0: ACL packet for unknown connection handle 457 [ 104.235107][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 104.237755][ T8933] binder: 8931:8933 ioctl 4018620d 20004a80 returned -16 [ 104.446396][ T8938] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 104.621300][ T8978] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 104.624785][ T8978] SELinux: failed to load policy [ 104.662800][ T8983] futex_wake_op: syz.6.868 tries to shift op by -1; fix this program [ 104.669851][ T8983] __nla_validate_parse: 6 callbacks suppressed [ 104.669861][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.6.868'. [ 104.678089][ T8983] netlink: 'syz.6.868': attribute type 21 has an invalid length. [ 104.760712][ T8989] netlink: 16 bytes leftover after parsing attributes in process `syz.6.870'. [ 104.801484][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.871'. [ 104.816243][ T8991] ntfs3(sr0): Primary boot signature is not NTFS. [ 104.818597][ T8991] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 104.857526][ T8991] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 104.875888][ T6741] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 105.025405][ T6741] usb 5-1: Using ep0 maxpacket: 8 [ 105.029928][ T6741] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.032198][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.035535][ T6741] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.038896][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.042108][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.046215][ T6741] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.048420][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.051642][ T6741] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.054992][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.058351][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.062368][ T6741] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.064719][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.068150][ T6741] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.072199][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.075873][ T6741] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.081178][ T6741] usb 5-1: string descriptor 0 read error: -22 [ 105.083145][ T6741] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.085898][ T6741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.092080][ T6741] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.345660][ T66] usb 5-1: USB disconnect, device number 10 [ 105.396156][ T5947] Bluetooth: hci4: command tx timeout [ 105.863236][ T9020] (syz.6.876,9020,2):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 105.867296][ T9020] (syz.6.876,9020,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 105.921637][ T9024] netlink: 'syz.6.878': attribute type 10 has an invalid length. [ 105.934847][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.942335][ T9024] team0: Port device bond0 added [ 105.983924][ T9030] binder_alloc: 9029: binder_install_single_page failed to insert page at offset 0 with -14 [ 106.104805][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 106.220309][ T9066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.383146][ T9088] hub 6-0:1.0: USB hub found [ 106.385079][ T9088] hub 6-0:1.0: 1 port detected [ 106.446110][ T9094] netlink: 703 bytes leftover after parsing attributes in process `syz.5.897'. [ 106.450131][ T9094] netlink: 'syz.5.897': attribute type 2 has an invalid length. [ 106.458073][ T9094] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 106.492350][ T9099] syz.5.900: attempt to access beyond end of device [ 106.492350][ T9099] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 106.498582][ T9099] syz.5.900: attempt to access beyond end of device [ 106.498582][ T9099] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 106.503242][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 106.506362][ T9099] syz.5.900: attempt to access beyond end of device [ 106.506362][ T9099] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 106.511336][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 106.515969][ T9099] syz.5.900: attempt to access beyond end of device [ 106.515969][ T9099] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 106.520155][ T9099] syz.5.900: attempt to access beyond end of device [ 106.520155][ T9099] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 106.523931][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 106.527612][ T9099] syz.5.900: attempt to access beyond end of device [ 106.527612][ T9099] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 106.531395][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 106.534523][ T9099] syz.5.900: attempt to access beyond end of device [ 106.534523][ T9099] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 106.539261][ T9099] syz.5.900: attempt to access beyond end of device [ 106.539261][ T9099] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 106.543103][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 106.545870][ T9103] IPv6: sit1: Disabled Multicast RS [ 106.545920][ T9099] syz.5.900: attempt to access beyond end of device [ 106.545920][ T9099] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 106.553643][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 106.557560][ T9099] syz.5.900: attempt to access beyond end of device [ 106.557560][ T9099] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 106.562263][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 106.565177][ T9099] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 106.568028][ T9099] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 106.637807][ T9115] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 106.705378][ T6741] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 106.756480][ T9107] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 106.806446][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 106.806456][ T39] audit: type=1400 audit(106.697:694): avc: denied { ioctl } for pid=9114 comm="syz.5.904" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.845642][ T9125] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 106.851537][ T9125] kvm: user requested TSC rate below hardware speed [ 106.856871][ T6741] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.859976][ T6741] usb 11-1: config 0 has no interfaces? [ 106.863166][ T6741] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.866322][ T6741] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.869990][ T6741] usb 11-1: Product: syz [ 106.871362][ T6741] usb 11-1: Manufacturer: syz [ 106.872763][ T6741] usb 11-1: SerialNumber: syz [ 106.876333][ T6741] usb 11-1: config 0 descriptor?? [ 106.987872][ T9128] netlink: 'syz.0.908': attribute type 4 has an invalid length. [ 106.990987][ T9128] netlink: 17 bytes leftover after parsing attributes in process `syz.0.908'. [ 107.001351][ T9127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.206119][ T9139] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 107.334668][ T39] audit: type=1400 audit(107.217:695): avc: denied { append } for pid=9153 comm="syz.3.914" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.443098][ T9154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.445104][ T9154] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.465705][ T5947] Bluetooth: hci4: command tx timeout [ 107.468439][ T9154] ------------[ cut here ]------------ [ 107.470327][ T9154] refcount_t: underflow; use-after-free. [ 107.472216][ T9154] WARNING: CPU: 0 PID: 9154 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 107.474987][ T9154] Modules linked in: [ 107.476410][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.3.914 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 107.480675][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.483741][ T9154] RIP: 0010:refcount_warn_saturate+0x14a/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 107.485571][ T9154] Code: ff 89 de e8 28 e3 f9 fc 84 db 0f 85 66 ff ff ff e8 7b e8 f9 fc c6 05 0a bc a7 0b 01 90 48 c7 c7 a0 99 d1 8b e8 37 1f ba fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 58 e8 f9 fc 0f b6 1d e5 bb a7 0b 31 [ 107.491379][ T9154] RSP: 0018:ffffc90003ec7218 EFLAGS: 00010282 [ 107.493104][ T9154] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5139 [ 107.495458][ T9154] RDX: ffff8880358e4880 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 107.497661][ T9154] RBP: ffff88804ca13478 R08: 0000000000000001 R09: 0000000000000000 [ 107.499908][ T9154] R10: 0000000000000000 R11: 0000000000000007 R12: ffff88802ff2f800 [ 107.502108][ T9154] R13: ffff88804ca13478 R14: ffffffff85c50370 R15: dffffc0000000000 [ 107.504343][ T9154] FS: 00007fd7589f66c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 107.507002][ T9154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.508852][ T9154] CR2: 0000000000000000 CR3: 000000004c462000 CR4: 0000000000352ef0 [ 107.511131][ T9154] DR0: 0000000000008839 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.513359][ T9154] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 107.515876][ T9154] Call Trace: [ 107.516868][ T9154] [ 107.517751][ T9154] ? __warn+0xea/0x3c0 [ 107.518972][ T9154] ? refcount_warn_saturate+0x14a/0x210 [ 107.520588][ T9154] ? report_bug+0x3c0/0x580 [ 107.521919][ T9154] ? handle_bug+0x54/0xa0 [ 107.523273][ T9154] ? exc_invalid_op+0x17/0x50 [ 107.524764][ T9154] ? asm_exc_invalid_op+0x1a/0x20 [ 107.526652][ T9154] ? __pfx_klist_children_put+0x10/0x10 [ 107.528269][ T9154] ? __warn_printk+0x199/0x350 [ 107.529659][ T9154] ? __warn_printk+0x1a6/0x350 [ 107.531052][ T9154] ? refcount_warn_saturate+0x14a/0x210 [ 107.532649][ T9154] ? refcount_warn_saturate+0x149/0x210 [ 107.534249][ T9154] klist_put+0x11b/0x1b0 [ 107.535570][ T9154] klist_remove+0x140/0x2b0 [ 107.536892][ T9154] ? __pfx_klist_remove+0x10/0x10 [ 107.538349][ T9154] ? get_device_parent+0x1ed/0x4e0 [ 107.539845][ T9154] device_move+0x12d/0x10b0 [ 107.541164][ T9154] hci_conn_del_sysfs+0x81/0x170 [ 107.542592][ T9154] hci_conn_del+0x54e/0xdb0 [ 107.543924][ T9154] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 107.545704][ T9154] hci_conn_failed+0x2a6/0x3e0 [ 107.547120][ T9154] ? __pfx_hci_conn_failed+0x10/0x10 [ 107.548650][ T9154] ? lock_acquire+0x2f/0xb0 [ 107.549973][ T9154] ? hci_abort_conn_sync+0x170/0xfe0 [ 107.551522][ T9154] hci_abort_conn_sync+0x91c/0xfe0 [ 107.553017][ T9154] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 107.554649][ T9154] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 107.556849][ T9154] ? __pfx_lock_release+0x10/0x10 [ 107.558335][ T9154] ? trace_lock_acquire+0x14e/0x1f0 [ 107.559866][ T9154] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 107.561755][ T9154] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 107.563642][ T9154] hci_suspend_sync+0x772/0xab0 [ 107.565072][ T9154] ? __pfx_hci_suspend_sync+0x10/0x10 [ 107.566686][ T9154] ? __mutex_unlock_slowpath+0x23b/0x690 [ 107.568340][ T9154] hci_suspend_dev+0x30a/0x510 [ 107.569735][ T9154] ? __pfx_hci_suspend_dev+0x10/0x10 [ 107.571278][ T9154] ? rcu_barrier+0x46b/0x700 [ 107.572628][ T9154] ? kobject_get+0xbb/0x150 [ 107.573964][ T9154] hci_suspend_notifier+0x28d/0x2f0 [ 107.575555][ T9154] notifier_call_chain+0xb7/0x410 [ 107.577012][ T9154] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 107.578682][ T9154] blocking_notifier_call_chain_robust+0xc9/0x170 [ 107.580547][ T9154] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 107.582567][ T9154] pm_notifier_call_chain_robust+0x27/0x60 [ 107.584265][ T9154] snapshot_open+0x189/0x2b0 [ 107.585674][ T9154] ? __pfx_snapshot_open+0x10/0x10 [ 107.587167][ T9154] misc_open+0x35a/0x420 [ 107.588414][ T9154] ? __pfx_misc_open+0x10/0x10 [ 107.589809][ T9154] chrdev_open+0x237/0x6a0 [ 107.591085][ T9154] ? __pfx_chrdev_open+0x10/0x10 [ 107.592527][ T9154] do_dentry_open+0xf59/0x1ea0 [ 107.593779][ T9154] ? __pfx_chrdev_open+0x10/0x10 [ 107.595061][ T9154] ? inode_permission+0xdd/0x5f0 [ 107.596553][ T9154] vfs_open+0x82/0x3f0 [ 107.597690][ T9154] ? may_open+0x1f2/0x400 [ 107.598904][ T9154] path_openat+0x1e6a/0x2d60 [ 107.600183][ T9154] ? __pfx_path_openat+0x10/0x10 [ 107.601555][ T9154] ? __pfx___lock_acquire+0x10/0x10 [ 107.602990][ T9154] ? lock_acquire.part.0+0x11b/0x380 [ 107.604449][ T9154] ? find_held_lock+0x2d/0x110 [ 107.605860][ T9154] do_filp_open+0x20c/0x470 [ 107.607199][ T9154] ? __pfx_do_filp_open+0x10/0x10 [ 107.608764][ T9154] ? find_held_lock+0x2d/0x110 [ 107.610144][ T9154] ? alloc_fd+0x41f/0x760 [ 107.611389][ T9154] do_sys_openat2+0x17a/0x1e0 [ 107.612723][ T9154] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.614199][ T9154] ? do_user_addr_fault+0xe50/0x13f0 [ 107.615876][ T9154] ? __pfx_lock_release+0x10/0x10 [ 107.617318][ T9154] __x64_sys_openat+0x175/0x210 [ 107.618745][ T9154] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.620314][ T9154] ? do_user_addr_fault+0x83d/0x13f0 [ 107.621846][ T9154] do_syscall_64+0xcd/0x250 [ 107.623186][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.624993][ T9154] RIP: 0033:0x7fd75ab85d29 [ 107.626571][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.632054][ T9154] RSP: 002b:00007fd7589f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.634444][ T9154] RAX: ffffffffffffffda RBX: 00007fd75ad75fa0 RCX: 00007fd75ab85d29 [ 107.637175][ T9154] RDX: 0000000000002400 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 107.639467][ T9154] RBP: 00007fd75ac01b08 R08: 0000000000000000 R09: 0000000000000000 [ 107.641733][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.644003][ T9154] R13: 0000000000000001 R14: 00007fd75ad75fa0 R15: 00007fff79346298 [ 107.646503][ T9154] [ 107.647442][ T9154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.649554][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.3.914 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 107.652550][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.655650][ T9154] Call Trace: [ 107.656619][ T9154] [ 107.657477][ T9154] dump_stack_lvl+0x3d/0x1f0 [ 107.658836][ T9154] panic+0x71d/0x800 [ 107.659974][ T9154] ? __pfx_panic+0x10/0x10 [ 107.661273][ T9154] ? show_trace_log_lvl+0x29d/0x3d0 [ 107.662781][ T9154] ? check_panic_on_warn+0x1f/0xb0 [ 107.664270][ T9154] ? refcount_warn_saturate+0x14a/0x210 [ 107.665869][ T9154] check_panic_on_warn+0xab/0xb0 [ 107.667309][ T9154] __warn+0xf6/0x3c0 [ 107.668456][ T9154] ? refcount_warn_saturate+0x14a/0x210 [ 107.670056][ T9154] report_bug+0x3c0/0x580 [ 107.671327][ T9154] handle_bug+0x54/0xa0 [ 107.672548][ T9154] exc_invalid_op+0x17/0x50 [ 107.673880][ T9154] asm_exc_invalid_op+0x1a/0x20 [ 107.675304][ T9154] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 107.677089][ T9154] Code: ff 89 de e8 28 e3 f9 fc 84 db 0f 85 66 ff ff ff e8 7b e8 f9 fc c6 05 0a bc a7 0b 01 90 48 c7 c7 a0 99 d1 8b e8 37 1f ba fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 58 e8 f9 fc 0f b6 1d e5 bb a7 0b 31 [ 107.682587][ T9154] RSP: 0018:ffffc90003ec7218 EFLAGS: 00010282 [ 107.684341][ T9154] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5139 [ 107.686605][ T9154] RDX: ffff8880358e4880 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 107.688896][ T9154] RBP: ffff88804ca13478 R08: 0000000000000001 R09: 0000000000000000 [ 107.691162][ T9154] R10: 0000000000000000 R11: 0000000000000007 R12: ffff88802ff2f800 [ 107.693455][ T9154] R13: ffff88804ca13478 R14: ffffffff85c50370 R15: dffffc0000000000 [ 107.695728][ T9154] ? __pfx_klist_children_put+0x10/0x10 [ 107.697318][ T9154] ? __warn_printk+0x199/0x350 [ 107.698710][ T9154] ? __warn_printk+0x1a6/0x350 [ 107.700110][ T9154] ? refcount_warn_saturate+0x149/0x210 [ 107.701709][ T9154] klist_put+0x11b/0x1b0 [ 107.702956][ T9154] klist_remove+0x140/0x2b0 [ 107.704275][ T9154] ? __pfx_klist_remove+0x10/0x10 [ 107.705740][ T9154] ? get_device_parent+0x1ed/0x4e0 [ 107.707226][ T9154] device_move+0x12d/0x10b0 [ 107.708547][ T9154] hci_conn_del_sysfs+0x81/0x170 [ 107.709975][ T9154] hci_conn_del+0x54e/0xdb0 [ 107.711301][ T9154] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 107.712866][ T9154] hci_conn_failed+0x2a6/0x3e0 [ 107.714250][ T9154] ? __pfx_hci_conn_failed+0x10/0x10 [ 107.715786][ T9154] ? lock_acquire+0x2f/0xb0 [ 107.717099][ T9154] ? hci_abort_conn_sync+0x170/0xfe0 [ 107.718625][ T9154] hci_abort_conn_sync+0x91c/0xfe0 [ 107.720084][ T9154] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 107.721733][ T9154] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 107.723619][ T9154] ? __pfx_lock_release+0x10/0x10 [ 107.725068][ T9154] ? trace_lock_acquire+0x14e/0x1f0 [ 107.726591][ T9154] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 107.728489][ T9154] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 107.730353][ T9154] hci_suspend_sync+0x772/0xab0 [ 107.731781][ T9154] ? __pfx_hci_suspend_sync+0x10/0x10 [ 107.733337][ T9154] ? __mutex_unlock_slowpath+0x23b/0x690 [ 107.734966][ T9154] hci_suspend_dev+0x30a/0x510 [ 107.736355][ T9154] ? __pfx_hci_suspend_dev+0x10/0x10 [ 107.737890][ T9154] ? rcu_barrier+0x46b/0x700 [ 107.739241][ T9154] ? kobject_get+0xbb/0x150 [ 107.740565][ T9154] hci_suspend_notifier+0x28d/0x2f0 [ 107.742066][ T9154] notifier_call_chain+0xb7/0x410 [ 107.743535][ T9154] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 107.745173][ T9154] blocking_notifier_call_chain_robust+0xc9/0x170 [ 107.747024][ T9154] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 107.749041][ T9154] pm_notifier_call_chain_robust+0x27/0x60 [ 107.750717][ T9154] snapshot_open+0x189/0x2b0 [ 107.752063][ T9154] ? __pfx_snapshot_open+0x10/0x10 [ 107.753535][ T9154] misc_open+0x35a/0x420 [ 107.754783][ T9154] ? __pfx_misc_open+0x10/0x10 [ 107.756187][ T9154] chrdev_open+0x237/0x6a0 [ 107.757503][ T9154] ? __pfx_chrdev_open+0x10/0x10 [ 107.758946][ T9154] do_dentry_open+0xf59/0x1ea0 [ 107.760331][ T9154] ? __pfx_chrdev_open+0x10/0x10 [ 107.761771][ T9154] ? inode_permission+0xdd/0x5f0 [ 107.763224][ T9154] vfs_open+0x82/0x3f0 [ 107.764410][ T9154] ? may_open+0x1f2/0x400 [ 107.765665][ T9154] path_openat+0x1e6a/0x2d60 [ 107.767015][ T9154] ? __pfx_path_openat+0x10/0x10 [ 107.768451][ T9154] ? __pfx___lock_acquire+0x10/0x10 [ 107.769954][ T9154] ? lock_acquire.part.0+0x11b/0x380 [ 107.771491][ T9154] ? find_held_lock+0x2d/0x110 [ 107.772898][ T9154] do_filp_open+0x20c/0x470 [ 107.774215][ T9154] ? __pfx_do_filp_open+0x10/0x10 [ 107.775688][ T9154] ? find_held_lock+0x2d/0x110 [ 107.777084][ T9154] ? alloc_fd+0x41f/0x760 [ 107.778364][ T9154] do_sys_openat2+0x17a/0x1e0 [ 107.779765][ T9154] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.781264][ T9154] ? do_user_addr_fault+0xe50/0x13f0 [ 107.782789][ T9154] ? __pfx_lock_release+0x10/0x10 [ 107.784251][ T9154] __x64_sys_openat+0x175/0x210 [ 107.785641][ T9154] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.787192][ T9154] ? do_user_addr_fault+0x83d/0x13f0 [ 107.788736][ T9154] do_syscall_64+0xcd/0x250 [ 107.790050][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.791752][ T9154] RIP: 0033:0x7fd75ab85d29 [ 107.793036][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.798525][ T9154] RSP: 002b:00007fd7589f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.800912][ T9154] RAX: ffffffffffffffda RBX: 00007fd75ad75fa0 RCX: 00007fd75ab85d29 [ 107.803162][ T9154] RDX: 0000000000002400 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 107.805414][ T9154] RBP: 00007fd75ac01b08 R08: 0000000000000000 R09: 0000000000000000 [ 107.807707][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.809991][ T9154] R13: 0000000000000001 R14: 00007fd75ad75fa0 R15: 00007fff79346298 [ 107.812260][ T9154] [ 107.813728][ T9154] Kernel Offset: disabled [ 107.815200][ T9154] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:41:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851be9f5 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc90003ec6b78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000000b R12=0000000000000000 R13=0000000000000020 R14=ffffffff851be990 R15=0000000000000000 RIP=ffffffff851bea1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd7589f66c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004c462000 CR4=00352ef0 DR0=0000000000008839 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff79346630 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd75ac02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd75ac02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd75ac02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd75ac02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd75ac02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd75ac02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff94000203d88 RBX=0000000000000000 RCX=ffffffff81efa538 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea000101ec40 RBP=fffff94000203d88 RSP=ffffc9000571f3b8 R8 =0000000000000000 R9 =fffff94000203d88 R10=ffffea000101ec47 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000000 R14=00000000000407b0 R15=ffffea000101ec40 RIP=ffffffff81fcb4fa RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f833a4a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000007fffffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f833994b6a3 00007f833994b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf41424c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555571ae5bf2 0000555571ae5560 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555571a6f173 0000555571a6ef50 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100000008060a 0156cc4000000709 fa10000380034010 0005800401000006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0110100003800404 0800500800010000 0008060a0156cc40 00000709fa100003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003401000058004 0100000608060601 47da400200070008 0005e00300100005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00300100005c003 02100005b0037810 0006900320020002 f00328040002ec03 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a040002e8030a04 0002e00302040002 dc030c040002d803 04080002d0031604 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000fc8d7 RBX=0000000000000002 RCX=ffffffff8b29e7d9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1eca0 RBP=ffffed1003a50000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d280000 R14=ffffffff905f3d90 R15=0000000000000000 RIP=ffffffff8b29fbbf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd7589b3f98 CR3=0000000023646000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000040000000 Opmask02=00000000003fffff Opmask03=0104100080810010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd20a88f80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00ff0000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78742f7365756575 712fc22f74656e2f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120c22f74656e2f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000271 0000302d78742f73 65756575712fc22f 74656e2f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 440032313738313d 4d554e5145530034 32313d5845444e49 464900c23d454341 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 015332445b54143d 70181b1f14165334 767d72070d100f19 100c44c200010f0e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b7f777f7f7f7f7f 777e7f3f7e7f7f37 7f7d763f7f3f7f3f 79ff7ff77f276f7f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633380a007d6c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30323a304e490000 34313738313d4d55 3d45455300564544 00752f3d4d452f30 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3000323037000000 302f3238313d0034 0030342f00443444 003500353d452f30 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=00000000001378c3 RBX=0000000000000003 RCX=ffffffff8b29e7d9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1eca0 RBP=ffffed1003a50488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d282440 R14=ffffffff905f3d90 R15=0000000000000000 RIP=ffffffff8b29fbbf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd7589f5f98 CR3=0000000041390000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6202090103020100 40a4a10525080000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33fce02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33fce02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33fce02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33fce02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33fce02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33fce02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000300058002001c 0000746300010007 800100288004002c 0000000200000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a797300020009 00000000307a7973 0001000902000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4002000800000000 000300058002001c 0000746300010007 800100288004002c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000