last executing test programs: 12.925901881s ago: executing program 3 (id=2149): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.845559893s ago: executing program 3 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) syz_usbip_server_init(0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './bus\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller0\x00', {0x2}, 0x1000}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='itimer_expire\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8500000023000000350000000000000085000000a000000095000000000000001b90b31a08f54ff40571eda5c56ad924a10c7b1e6003c9325fea577f8e56fe212b358f1d0838c8119ed74e74552ce4e6c8093375e35c8250f448a6a31260c2f9fbb70400000000000000b08b7aab5fd5d24dcff1ca14025b73c2da8f550900000000000000c340b111fcee90d6d90100000001000000babdee5b76635ce4f35f985e434196b5699ba66b9cb05e5259a1f61cafa3586a2228c4581dc29931a4ca0f4967706596014dc06b99b9c9ba49b34e516e0baed5cca7aeeb0d5dcdce0900000000000100ef363c9f5ca80b125dabc3adab1179388e76c44e7328318078af6a0a1a248a7b2ca42a05f4b033e9d8a7880a116a60bd69a463a73745e8950a8e03000000000000008c4e7c6037b670a823e59267ae980c73ba09410000000000000000000000000000000042f7ae3d341b2a8e0c1681be5db38db3bf61f7ede5efbf55df1ee21b8e21b7a4a0bbc1d6a5483477260c03bf09959a71dac6b9f67019fe6ddacf40aed79f018c9fb9e9fc69425618b0d4"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.44629677s ago: executing program 2 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601f000000000000000000000000005000100070000000900020073797a30000000000c000780050015000000000012000300686173683a6e65742c706f7274000000050005000a000000050004"], 0x58}}, 0x1f00000000000000) 11.295528417s ago: executing program 3 (id=2154): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000003300)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000fdffffff1d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000300000f14000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f05f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.106127819s ago: executing program 2 (id=2155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000fff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000ba000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11.024802089s ago: executing program 3 (id=2156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18, 0xf4000000}], 0x4924924924924b9, 0x0) 10.975960317s ago: executing program 2 (id=2157): socket$can_j1939(0x1d, 0x2, 0x7) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0xffffffffffffffc3) 10.86997535s ago: executing program 2 (id=2158): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000100000000000001102000000000000", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100002000000000000005000000080001"], 0x28}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x1c0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x404000, 0x0) syz_io_uring_submit(r9, r10, 0x0) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10.730159076s ago: executing program 3 (id=2159): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000100000000000001102000000000000", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100002000000000000005000000080001"], 0x28}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r7 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x1c0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x404000, 0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8.816103237s ago: executing program 1 (id=2164): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaece65fbcee5586dd6001010000181100fe8018000000000000000000000000bbfe80000000000000000000f0000000aa4e200e22"], 0x0) 8.80592502s ago: executing program 1 (id=2165): r0 = syz_clone(0x80, &(0x7f0000000000)="b2acc68c3ff28bb10bdd093288c9a1e6deb2ba921ce3537282d4cad30b7272b7f57a0aebd1543d34a1e540e7d4b9bcd760b311a8351d868032e1b77346beddf6531bb540b17f8153295da7bfe083b6af9cadccdaf1e0791bbdba2ead529ae6b913cde71bd07cd315425dbdad48843b8cd3b20423ca85cd2e22f00ac463556f008b8dd76e110f854edc", 0x89, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080001"], 0x24}}, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000003040)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x4a8, &(0x7f0000000300)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) mount$9p_unix(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000700), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d756e69782c7365636c6162656c2c00bc98a676d890fd6661e01365ad7d80f1eda84f9db5534e9653cc25ac0417c8cbeca3d860417b171bbd60405a1c6df285fed6697d584e18da94d021763ead15041163a29609ad533a65540d27edcfa34a8c573672aec2f8feedf275d7b7d67091f64483784f75586e443da9cdb1fdb64e47748466f1b7c7857c7576287366e3a6b9d5586391006e82aa51993705d643b7087fc0eac27f5f276f1d38272008bd"]) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x47, 0x0, @fd=r5, 0x800000001c, {0x0, r4}, 0x8001, 0x2, 0x0, {0x0, 0x0, r6}}) r10 = dup2(r5, r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2b, 0xf, 0x4, 0x3ff, 0x54, @mcast1, @local, 0x7800, 0x7880, 0xd700, 0x8}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r13 = socket$inet(0x2b, 0x801, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f0000000dc0)) connect$inet(r13, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r13, 0x0, r12, 0x0, 0x3, 0x0) 8.589457538s ago: executing program 1 (id=2166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000000c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000100)=0x9, 0x4) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x8000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ppoll(&(0x7f0000000700)=[{r7}], 0x1, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x1}) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb0004fef80e3707c0bc8ba91d9bff556067d1e46d01ad36b866002640b7692619a51d800e2010b9fcfba45705933a6b908ab1aeb36f1b9c7ed2c0000af5b0f625bc53793da9fc308f7166ab68dca91e58f4f16b1de03ac3ba1fdac976396ae85968153171e3a870756e4e1f35c49bfe59"], &(0x7f0000000080)={0x0, 0x4, [0x8, 0xbe9, 0x91c, 0x67c]}) pselect6(0x40, &(0x7f0000000900)={0x0, 0x0, 0x200040000000, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) (async) syz_open_dev$evdev(0x0, 0x0, 0x0) (async) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000000c0)) (async) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000100)=0x9, 0x4) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x8000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) (async) ppoll(&(0x7f0000000700)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x1}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket(0x11, 0x3, 0x0) (async) syz_emit_ethernet(0x78, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb0004fef80e3707c0bc8ba91d9bff556067d1e46d01ad36b866002640b7692619a51d800e2010b9fcfba45705933a6b908ab1aeb36f1b9c7ed2c0000af5b0f625bc53793da9fc308f7166ab68dca91e58f4f16b1de03ac3ba1fdac976396ae85968153171e3a870756e4e1f35c49bfe59"], &(0x7f0000000080)={0x0, 0x4, [0x8, 0xbe9, 0x91c, 0x67c]}) (async) pselect6(0x40, &(0x7f0000000900)={0x0, 0x0, 0x200040000000, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) (async) 8.165977705s ago: executing program 1 (id=2167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r0}, 0x18) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000950d000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r2 = getpid() setrlimit(0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0) ioctl$CDROMPAUSE(r5, 0x5301) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2a, 0x2, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYBLOB="38000100", @ANYBLOB="6480"], 0x90}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) 7.775487162s ago: executing program 1 (id=2168): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r6, r5], 0x2}) 7.116172343s ago: executing program 0 (id=2170): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.055023665s ago: executing program 0 (id=2171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) syz_usbip_server_init(0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './bus\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller0\x00', {0x2}, 0x1000}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x30000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='itimer_expire\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) 5.760432978s ago: executing program 3 (id=2172): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000ac0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)={r2}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x200, &(0x7f00000003c0)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x28008010) socket$pppoe(0x18, 0x1, 0x0) io_submit(r3, 0x0, 0x0) unshare(0x6a040000) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000140)=0x98, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='binder\x00', 0x810481, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000340)='./file1\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x0, &(0x7f0000000740)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x25, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x60010000, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) socket$kcm(0x2, 0x1, 0x84) 5.641756996s ago: executing program 0 (id=2173): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r4, r3, 0x2}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00222200000096231306e52a9008834298859883"], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000100)={0x1, 0x18, 0x6, 0x2ff, "56cfe30c486e5a643e11194e35a0156eaa7e2a5dc66f32f33ef0701953be82e2"}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.441562763s ago: executing program 2 (id=2174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) keyctl$set_reqkey_keyring(0xe, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x6, 0x5ac}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x4}) listen(r2, 0x4) 4.915556604s ago: executing program 1 (id=2175): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r4, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) unshare(0x20000400) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0xfbffffff) lseek(r4, 0x1003ff, 0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0xfffffff9, &(0x7f0000000400)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="940000", @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES16=r2, @ANYBLOB="42000e0080000000ffffffffffff080211000000505050505050c0ff000000000000000064000aa80406000000000000060200003c0401fb28177606000000000600000008000c006400000008000d00000000000a0034000202020202020000080035000010000008007e"], 0x94}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r8 = eventfd(0x0) r9 = getpid() r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/80, 0x50}], 0x1, 0x0) r11 = epoll_create1(0x0) ptrace$ARCH_SET_GS(0x1e, r9, &(0x7f0000000080), 0x1001) (async) kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r8, &(0x7f0000000000)={r11, r8, 0xfffffff8}) (async) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) r12 = eventfd(0x2) r13 = syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x51b9, 0x40, 0x6, 0x2d7, 0x0, r12}, &(0x7f0000000300), &(0x7f0000000140)) dup3(r13, r12, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r13, 0x1e, &(0x7f0000000180)=r12, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 1.846900066s ago: executing program 0 (id=2176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0xfff8, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.396223261s ago: executing program 0 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000048000a20000000000a03000000000000000000010000000900010073797a3000000000b8000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002b7c0011800b00010074617267657400006c00028059000100c8"], 0x100}}, 0x0) 495.759928ms ago: executing program 0 (id=2178): rt_sigaction(0xfffffffe, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) rt_tgsigqueueinfo(r1, 0x0, 0x2d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_POLL(r4, &(0x7f0000000280)={0x18}, 0x18) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2179): openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r0 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xca202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r4, 0x0, 0x8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r4, 0x0, 0x155}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000240)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000440)={0x30}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r1, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) r6 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0xa08) kernel console output (not intermixed with test programs): [ 286.117314][T11194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.120812][T11194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.123828][T11194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.126123][T11194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.130700][T11194] vxlan0: entered promiscuous mode [ 286.132573][T11194] vxlan0: entered allmulticast mode [ 286.138194][T11194] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.141443][T11194] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.144859][T11194] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.148312][T11194] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.167689][T11195] xt_hashlimit: size too large, truncated to 1048576 [ 286.255581][T11199] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 286.283220][T11202] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 286.292280][T11202] bond7: entered promiscuous mode [ 286.309184][T11202] bond7: (slave veth19): Enslaving as an active interface with a down link [ 286.312167][T11202] FAULT_INJECTION: forcing a failure. [ 286.312167][T11202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.315581][T11202] CPU: 0 UID: 0 PID: 11202 Comm: syz.2.1600 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 286.318440][T11202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.321217][T11202] Call Trace: [ 286.322110][T11202] [ 286.322897][T11202] dump_stack_lvl+0x16c/0x1f0 [ 286.324158][T11202] should_fail_ex+0x497/0x5b0 [ 286.325406][T11202] _copy_from_iter+0x2a1/0x1540 [ 286.326767][T11202] ? __pfx__copy_from_iter+0x10/0x10 [ 286.328151][T11202] ? __virt_addr_valid+0x1a4/0x590 [ 286.329472][T11202] ? __virt_addr_valid+0x5e/0x590 [ 286.330818][T11202] ? __phys_addr_symbol+0x30/0x80 [ 286.332179][T11202] ? __check_object_size+0x488/0x710 [ 286.333663][T11202] netlink_sendmsg+0x813/0xd70 [ 286.335038][T11202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.336644][T11202] ? __import_iovec+0x1fd/0x6e0 [ 286.337965][T11202] ____sys_sendmsg+0xaaf/0xc90 [ 286.339229][T11202] ? copy_msghdr_from_user+0x10b/0x160 [ 286.340660][T11202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.342057][T11202] ? __pfx___lock_acquire+0x10/0x10 [ 286.343424][T11202] ___sys_sendmsg+0x135/0x1e0 [ 286.344669][T11202] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.346039][T11202] ? lock_acquire+0x2f/0xb0 [ 286.347657][T11202] ? __fget_files+0x40/0x3f0 [ 286.349321][T11202] ? fdget+0x176/0x210 [ 286.350755][T11202] __sys_sendmsg+0x117/0x1f0 [ 286.352344][T11202] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.354182][T11202] ? __fget_files+0x244/0x3f0 [ 286.355824][T11202] do_syscall_64+0xcd/0x250 [ 286.357387][T11202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.359679][T11202] RIP: 0033:0x7feacf77dff9 [ 286.361313][T11202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.367831][T11202] RSP: 002b:00007fead0648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.370009][T11202] RAX: ffffffffffffffda RBX: 00007feacf935f80 RCX: 00007feacf77dff9 [ 286.372053][T11202] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 286.374099][T11202] RBP: 00007fead0648090 R08: 0000000000000000 R09: 0000000000000000 [ 286.376184][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.378307][T11202] R13: 0000000000000000 R14: 00007feacf935f80 R15: 00007ffc57d84568 [ 286.380418][T11202] [ 286.510302][T11220] ubi0: attaching mtd0 [ 286.515469][T11220] ubi0: scanning is finished [ 286.714073][T11220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 286.717163][T11220] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 286.719997][T11220] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 286.722709][T11220] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 286.725448][T11220] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 286.728937][T11220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 286.731971][T11220] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2190224574 [ 286.735659][T11220] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 286.739531][T11222] ubi0: detaching mtd0 [ 286.740601][T11232] ubi0: background thread "ubi_bgt0d" started, PID 11232 [ 286.749095][T11222] ubi0: mtd0 is detached [ 286.802512][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 286.903089][ T1101] Bluetooth: hci4: Frame reassembly failed (-84) [ 286.906572][T11245] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 286.911634][T11249] wireguard4: entered promiscuous mode [ 286.913110][T11249] wireguard4: entered allmulticast mode [ 287.143548][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 287.177353][ T8] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 287.193601][T11262] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 287.201396][T11262] bond2: entered promiscuous mode [ 287.226988][T11262] bond2: (slave veth9): Enslaving as an active interface with a down link [ 287.234060][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 287.239321][T11262] bond2 (unregistering): (slave veth9): Releasing active interface [ 287.243660][T11262] bond2 (unregistering): Released all slaves [ 287.327404][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 287.331153][ T8] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 287.334071][ T8] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 287.337681][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 287.342097][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.345391][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.348556][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 287.352596][ T8] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 287.355708][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.361058][ T8] usb 7-1: config 0 descriptor?? [ 287.571323][ T8] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 287.575637][ T8] usb 7-1: USB disconnect, device number 25 [ 287.578723][ T8] usblp0: removed [ 288.007198][ T5493] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 288.157203][ T5493] usb 7-1: Using ep0 maxpacket: 32 [ 288.160831][ T5493] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 288.163180][ T5493] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 288.165364][ T5493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 288.167738][ T5493] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.170175][ T5493] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 288.172625][ T5493] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.175889][ T5493] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 288.179437][ T5493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.182694][ T5493] usb 7-1: config 0 descriptor?? [ 288.187213][ T830] vhci_hcd: vhci_device speed not set [ 288.414593][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.417418][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.419967][ T5493] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 288.475927][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 288.588742][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 288.588759][ T39] audit: type=1400 audit(1729712034.531:877): avc: denied { write } for pid=11277 comm="syz.1.1625" name="ip_vs" dev="proc" ino=4026533238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 288.619019][T11286] netlink: 'syz.1.1625': attribute type 4 has an invalid length. [ 288.632792][ T56] usb 7-1: USB disconnect, device number 26 [ 288.636367][ T56] usblp0: removed [ 288.649710][T11286] netlink: 'syz.1.1625': attribute type 4 has an invalid length. [ 288.907250][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 288.910182][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 289.179447][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.226497][T11296] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 289.233324][T11296] bond2: entered promiscuous mode [ 289.256135][T11296] bond2: (slave veth11): Enslaving as an active interface with a down link [ 289.262604][T11296] FAULT_INJECTION: forcing a failure. [ 289.262604][T11296] name failslab, interval 1, probability 0, space 0, times 0 [ 289.268149][T11296] CPU: 3 UID: 0 PID: 11296 Comm: syz.1.1630 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 289.271117][T11296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.274175][T11296] Call Trace: [ 289.275051][T11296] [ 289.275823][T11296] dump_stack_lvl+0x16c/0x1f0 [ 289.277063][T11296] should_fail_ex+0x497/0x5b0 [ 289.278298][T11296] should_failslab+0xc2/0x120 [ 289.279570][T11296] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 289.281132][T11296] ? skb_clone+0x190/0x3f0 [ 289.282495][T11296] skb_clone+0x190/0x3f0 [ 289.284043][T11296] netlink_deliver_tap+0xab3/0xd90 [ 289.285884][T11296] netlink_unicast+0x5e1/0x7f0 [ 289.287131][T11296] ? __pfx_netlink_unicast+0x10/0x10 [ 289.288531][T11296] netlink_sendmsg+0x8b8/0xd70 [ 289.289890][T11296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.291334][T11296] ? __import_iovec+0x1fd/0x6e0 [ 289.292650][T11296] ____sys_sendmsg+0xaaf/0xc90 [ 289.294328][T11296] ? copy_msghdr_from_user+0x10b/0x160 [ 289.296289][T11296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.298139][T11296] ? __pfx___lock_acquire+0x10/0x10 [ 289.299923][T11296] ___sys_sendmsg+0x135/0x1e0 [ 289.301539][T11296] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.303355][T11296] ? lock_acquire+0x2f/0xb0 [ 289.304928][T11296] ? __fget_files+0x40/0x3f0 [ 289.306370][T11296] ? fdget+0x176/0x210 [ 289.307393][T11296] __sys_sendmsg+0x117/0x1f0 [ 289.308536][T11296] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.309820][T11296] ? __fget_files+0x244/0x3f0 [ 289.311018][T11296] do_syscall_64+0xcd/0x250 [ 289.312178][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.313793][T11296] RIP: 0033:0x7fb118d7dff9 [ 289.314942][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.319649][T11296] RSP: 002b:00007fb119c09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.321694][T11296] RAX: ffffffffffffffda RBX: 00007fb118f35f80 RCX: 00007fb118d7dff9 [ 289.323886][T11296] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 289.325831][T11296] RBP: 00007fb119c09090 R08: 0000000000000000 R09: 0000000000000000 [ 289.327774][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.329769][T11296] R13: 0000000000000000 R14: 00007fb118f35f80 R15: 00007ffc34c50ce8 [ 289.331714][T11296] [ 289.336204][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 289.345142][T11296] bond2 (unregistering): (slave veth11): Releasing active interface [ 289.349895][T11296] bond2 (unregistering): Released all slaves [ 289.358119][ T39] audit: type=1400 audit(1729712035.301:878): avc: denied { write } for pid=11298 comm="syz.2.1631" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.364373][T11299] binder: 11298:11299 ioctl c0306201 200001c0 returned -22 [ 290.094774][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 290.159269][T11324] FAULT_INJECTION: forcing a failure. [ 290.159269][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 290.163969][T11324] CPU: 2 UID: 0 PID: 11324 Comm: syz.3.1638 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 290.167959][T11324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.171989][T11324] Call Trace: [ 290.173475][T11324] [ 290.174809][T11324] dump_stack_lvl+0x16c/0x1f0 [ 290.176847][T11324] should_fail_ex+0x497/0x5b0 [ 290.178970][T11324] ? fs_reclaim_acquire+0xae/0x150 [ 290.180888][T11324] should_failslab+0xc2/0x120 [ 290.182639][T11324] __kmalloc_noprof+0xcb/0x400 [ 290.184551][T11324] ? d_absolute_path+0x137/0x1b0 [ 290.186389][T11324] tomoyo_encode2+0x100/0x3e0 [ 290.188140][T11324] tomoyo_encode+0x29/0x50 [ 290.189812][T11324] tomoyo_realpath_from_path+0x19d/0x720 [ 290.191887][T11324] tomoyo_path_number_perm+0x245/0x590 [ 290.193903][T11324] ? tomoyo_path_number_perm+0x232/0x590 [ 290.195931][T11324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.198175][T11324] ? trace_lock_acquire+0x14a/0x1d0 [ 290.200454][T11324] ? lock_acquire+0x2f/0xb0 [ 290.202606][T11324] ? __fget_files+0x40/0x3f0 [ 290.204761][T11324] ? __fget_files+0x244/0x3f0 [ 290.206529][T11324] security_file_ioctl+0x9b/0x240 [ 290.208416][T11324] __x64_sys_ioctl+0xbb/0x220 [ 290.210196][T11324] do_syscall_64+0xcd/0x250 [ 290.211895][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.214084][T11324] RIP: 0033:0x7f29ba97dff9 [ 290.215738][T11324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.223163][T11324] RSP: 002b:00007f29bb84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.226424][T11324] RAX: ffffffffffffffda RBX: 00007f29bab35f80 RCX: 00007f29ba97dff9 [ 290.229503][T11324] RDX: 0000000020000240 RSI: 000000004028700f RDI: 0000000000000003 [ 290.232692][T11324] RBP: 00007f29bb84f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.235601][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.238882][T11324] R13: 0000000000000000 R14: 00007f29bab35f80 R15: 00007fff889924d8 [ 290.242455][T11324] [ 290.246385][T11324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.346089][T11330] netlink: 'syz.3.1640': attribute type 10 has an invalid length. [ 290.409404][T11336] overlayfs: workdir and upperdir must reside under the same mount [ 290.488237][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.490240][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.492795][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.494788][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.497536][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.500057][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.502610][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.505102][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.507719][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.510662][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.512644][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.513203][ T39] audit: type=1400 audit(1729712036.451:879): avc: denied { accept } for pid=11337 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 290.514595][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.522846][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.524804][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.526784][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.529519][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.531507][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.533479][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.535485][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.537555][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.539538][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.541519][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.543063][T11338] netlink: 'syz.3.1643': attribute type 1 has an invalid length. [ 290.543481][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.547519][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.549474][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.551469][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.553428][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.555405][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.557457][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.559427][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.561389][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.563357][ T5493] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.569602][ T5493] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 290.602720][T11338] bond0: entered promiscuous mode [ 290.633207][T11348] team_slave_0: entered promiscuous mode [ 290.646160][T11348] team_slave_0: left promiscuous mode [ 290.693309][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 290.696396][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.697130][T11352] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.700017][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.707576][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.711052][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.716380][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.719965][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.723885][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.727488][ T5367] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 290.730129][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.735755][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.740591][T11354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11354 comm=syz.0.1649 [ 290.780324][T11356] ubi0: attaching mtd0 [ 290.782426][T11356] ubi0: scanning is finished [ 290.799788][ T39] audit: type=1400 audit(1729712036.741:880): avc: denied { read } for pid=11359 comm="syz.0.1651" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.807792][T11338] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.808541][ T39] audit: type=1400 audit(1729712036.741:881): avc: denied { open } for pid=11359 comm="syz.0.1651" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.819422][ T39] audit: type=1400 audit(1729712036.741:882): avc: denied { ioctl } for pid=11359 comm="syz.0.1651" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.859999][ T5367] usb 6-1: device descriptor read/64, error -71 [ 290.877649][T11356] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 290.879822][T11356] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 290.882895][T11365] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 290.882961][T11356] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 290.887239][T11365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.887717][T11356] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 290.892700][T11356] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 290.892793][T11365] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 290.894874][T11356] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 290.900233][T11356] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2190224574 [ 290.904596][T11356] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 290.907888][T11366] ubi0: background thread "ubi_bgt0d" started, PID 11366 [ 290.938356][T11338] bond0: (slave veth11): Enslaving as an active interface with a down link [ 290.952331][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 290.959055][T11344] bond0 (unregistering): (slave veth11): Releasing active interface [ 290.969610][T11344] bond0 (unregistering): Released all slaves [ 290.975388][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 291.097194][ T5367] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 291.228121][ T5367] usb 6-1: device descriptor read/64, error -71 [ 291.237465][ T8] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 291.310678][ T5379] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 291.339830][ T5367] usb usb6-port1: attempt power cycle [ 291.388547][ T8] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 291.390965][ T8] usb 7-1: config 0 has no interface number 0 [ 291.392734][ T8] usb 7-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 291.397980][ T8] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 291.400474][ T8] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 291.402895][ T8] usb 7-1: Product: syz [ 291.404509][ T8] usb 7-1: Manufacturer: syz [ 291.406344][ T8] usb 7-1: SerialNumber: syz [ 291.409643][ T8] usb 7-1: config 0 descriptor?? [ 291.413599][ T8] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 291.415814][ T8] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 291.418172][ T8] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 88 [ 291.420696][ T8] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 291.423640][ T8] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 291.426870][ T8] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 291.430456][ T8] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 291.433823][ T8] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 291.438037][ T8] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 291.443579][ T8] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 291.447797][ T8] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 291.474063][ T5379] usb 5-1: Using ep0 maxpacket: 32 [ 291.481647][ T5379] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 291.484609][ T5379] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 291.487940][ T5379] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 291.491120][ T5379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.494394][ T5379] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.497822][ T5379] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.502202][ T5379] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 291.505269][ T5379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.509956][ T5379] usb 5-1: config 0 descriptor?? [ 291.615981][ T35] usb 7-1: USB disconnect, device number 27 [ 291.621486][ T35] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 291.627453][ T35] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 291.633273][ T35] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 291.639609][ T35] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 291.643294][ T35] keyspan 7-1:0.107: device disconnected [ 291.687251][ T5367] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 291.707850][ T5367] usb 6-1: device descriptor read/8, error -71 [ 291.722136][ T5379] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 291.727402][ T5379] usb 5-1: USB disconnect, device number 24 [ 291.731145][ T5379] usblp0: removed [ 291.947181][ T5367] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 291.968046][ T5367] usb 6-1: device descriptor read/8, error -71 [ 291.982010][T11386] FAULT_INJECTION: forcing a failure. [ 291.982010][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 291.986375][T11386] CPU: 3 UID: 0 PID: 11386 Comm: syz.3.1659 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 291.990123][T11386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.993856][T11386] Call Trace: [ 291.995045][T11386] [ 291.996102][T11386] dump_stack_lvl+0x16c/0x1f0 [ 291.997796][T11386] should_fail_ex+0x497/0x5b0 [ 291.999475][T11386] should_failslab+0xc2/0x120 [ 292.001157][T11386] kmem_cache_alloc_node_noprof+0x71/0x310 [ 292.003231][T11386] ? __alloc_skb+0x2b1/0x380 [ 292.004896][T11386] __alloc_skb+0x2b1/0x380 [ 292.006502][T11386] ? __pfx___alloc_skb+0x10/0x10 [ 292.008273][T11386] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 292.010230][T11386] mroute_netlink_event+0xde/0x190 [ 292.012046][T11386] mroute_clean_tables+0x500/0xb30 [ 292.013871][T11386] ? __pfx_mroute_clean_tables+0x10/0x10 [ 292.015852][T11386] ? lock_acquire+0x2f/0xb0 [ 292.017461][T11386] ? __might_fault+0xe3/0x190 [ 292.019156][T11386] ip_mroute_setsockopt+0x9f0/0x1440 [ 292.021022][T11386] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 292.023037][T11386] ? avc_has_perm_noaudit+0x119/0x3a0 [ 292.024944][T11386] ? avc_has_perm_noaudit+0x143/0x3a0 [ 292.026847][T11386] do_ip_setsockopt+0x2e8/0x38b0 [ 292.028611][T11386] ? __pfx_avc_has_perm+0x10/0x10 [ 292.030390][T11386] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 292.032229][T11386] ? __lock_acquire+0xbdd/0x3ce0 [ 292.033907][T11386] ? sock_has_perm+0x25d/0x2f0 [ 292.035535][T11386] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 292.037796][T11386] ip_setsockopt+0x59/0xf0 [ 292.039395][T11386] raw_setsockopt+0xb8/0x290 [ 292.041035][T11386] ? __pfx_raw_setsockopt+0x10/0x10 [ 292.042842][T11386] ? selinux_socket_setsockopt+0x6a/0x80 [ 292.044800][T11386] ? sock_common_setsockopt+0x2e/0xf0 [ 292.046706][T11386] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 292.048788][T11386] do_sock_setsockopt+0x222/0x480 [ 292.050567][T11386] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 292.052473][T11386] ? fdget+0x176/0x210 [ 292.053925][T11386] __sys_setsockopt+0x1a4/0x270 [ 292.055634][T11386] ? __pfx___sys_setsockopt+0x10/0x10 [ 292.057526][T11386] ? fput+0x30/0x390 [ 292.058942][T11386] ? ksys_write+0x1ad/0x260 [ 292.060564][T11386] ? __pfx_ksys_write+0x10/0x10 [ 292.062310][T11386] __x64_sys_setsockopt+0xbd/0x160 [ 292.064121][T11386] ? do_syscall_64+0x91/0x250 [ 292.065802][T11386] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.067645][T11386] do_syscall_64+0xcd/0x250 [ 292.069265][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.071376][T11386] RIP: 0033:0x7f29ba97dff9 [ 292.072965][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.079656][T11386] RSP: 002b:00007f29bb84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 292.082570][T11386] RAX: ffffffffffffffda RBX: 00007f29bab35f80 RCX: 00007f29ba97dff9 [ 292.085326][T11386] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 292.088137][T11386] RBP: 00007f29bb84f090 R08: 0000000000000004 R09: 0000000000000000 [ 292.090925][T11386] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.093693][T11386] R13: 0000000000000000 R14: 00007f29bab35f80 R15: 00007fff889924d8 [ 292.096485][T11386] [ 292.099247][ T5367] usb usb6-port1: unable to enumerate USB device [ 292.167132][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 292.387148][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 292.394687][ T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.396993][ T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.399606][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.402014][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.404547][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.407283][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.410869][ T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.413314][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.419894][ T8] usb 5-1: config 0 descriptor?? [ 292.638096][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.641680][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.662946][ T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 292.865324][ T5493] usb 5-1: USB disconnect, device number 25 [ 292.884159][ T5493] usblp0: removed [ 293.456112][T11405] netlink: 'syz.3.1665': attribute type 10 has an invalid length. [ 293.458259][T11405] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1665'. [ 293.467382][T11406] input: syz1 as /devices/virtual/input/input12 [ 293.539818][T11418] FAULT_INJECTION: forcing a failure. [ 293.539818][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.544574][T11418] CPU: 3 UID: 0 PID: 11418 Comm: syz.1.1667 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 293.548517][T11418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.552348][T11418] Call Trace: [ 293.553620][T11418] [ 293.554748][T11418] dump_stack_lvl+0x16c/0x1f0 [ 293.556535][T11418] should_fail_ex+0x497/0x5b0 [ 293.558313][T11418] _copy_from_user+0x30/0xf0 [ 293.560067][T11418] rtc_dev_ioctl+0x628/0xdd0 [ 293.561819][T11418] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 293.563728][T11418] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 293.566286][T11418] ? trace_lock_acquire+0x14a/0x1d0 [ 293.568237][T11418] ? selinux_file_ioctl+0x180/0x270 [ 293.570199][T11418] ? selinux_file_ioctl+0xb4/0x270 [ 293.572092][T11418] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 293.574015][T11418] __x64_sys_ioctl+0x18f/0x220 [ 293.575683][T11418] do_syscall_64+0xcd/0x250 [ 293.577206][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.579158][T11418] RIP: 0033:0x7fb118d7dff9 [ 293.580726][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.587619][T11418] RSP: 002b:00007fb119c09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.590446][T11418] RAX: ffffffffffffffda RBX: 00007fb118f35f80 RCX: 00007fb118d7dff9 [ 293.593074][T11418] RDX: 0000000020000240 RSI: 000000004028700f RDI: 0000000000000003 [ 293.595723][T11418] RBP: 00007fb119c09090 R08: 0000000000000000 R09: 0000000000000000 [ 293.598395][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.601050][T11418] R13: 0000000000000000 R14: 00007fb118f35f80 R15: 00007ffc34c50ce8 [ 293.603755][T11418] [ 293.937150][ T6060] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 294.087128][ T6060] usb 8-1: Using ep0 maxpacket: 32 [ 294.090185][ T6060] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 294.092416][ T6060] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 294.094656][ T6060] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 294.097011][ T6060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.100078][ T6060] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.102664][ T6060] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.106214][ T6060] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 294.108803][ T6060] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.111847][ T6060] usb 8-1: config 0 descriptor?? [ 294.381544][T11437] ubi: mtd0 is already attached to ubi0 [ 294.385470][T11437] ubi0: detaching mtd0 [ 294.399150][T11437] ubi0: mtd0 is detached [ 294.406163][ T6060] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 294.410168][ T6060] usb 8-1: USB disconnect, device number 38 [ 294.412832][ T6060] usblp0: removed [ 294.735140][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 294.740543][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 294.807641][T11460] netlink: 'syz.2.1679': attribute type 3 has an invalid length. [ 294.857139][ T6060] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 295.017285][ T6060] usb 8-1: Using ep0 maxpacket: 32 [ 295.020704][ T6060] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.023562][ T6060] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.026504][ T6060] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.029732][ T6060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.032989][ T6060] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.036209][ T6060] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.040741][ T6060] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.043827][ T6060] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.048181][ T6060] usb 8-1: config 0 descriptor?? [ 295.188106][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 295.224080][T11471] Cannot find add_set index 3 as target [ 295.231322][T11471] netlink: 'syz.2.1685': attribute type 4 has an invalid length. [ 295.233901][T11471] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1685'. [ 295.253230][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.253226][ T6060] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.260793][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.350244][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.353500][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.356257][ T8] usb 5-1: Product: syz [ 295.357830][ T8] usb 5-1: Manufacturer: syz [ 295.359421][ T8] usb 5-1: SerialNumber: syz [ 295.366787][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.374866][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 295.377271][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 295.379836][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 295.383072][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 295.387370][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=286 [ 295.391092][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=286 [ 295.399272][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=287 [ 295.402635][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=287 [ 295.405923][ T8] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=287 [ 295.409331][ T8] usb 5-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -5 [ 295.412673][ T8] usb 5-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -5 [ 295.415952][ T8] usb 5-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 295.487150][ T5493] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 295.527199][ T5367] usb 8-1: USB disconnect, device number 39 [ 295.530431][ T5367] usblp0: removed [ 295.668418][ T5493] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 295.670616][ T5493] usb 7-1: config 0 has no interface number 0 [ 295.674189][ T5493] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 295.676564][ T5493] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 295.678790][ T5493] usb 7-1: Product: syz [ 295.679943][ T5493] usb 7-1: Manufacturer: syz [ 295.681270][ T5493] usb 7-1: SerialNumber: syz [ 295.686046][ T5493] usb 7-1: config 0 descriptor?? [ 295.690480][ T5493] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 295.693215][ T5493] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 295.696002][ T5493] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 88 [ 295.699422][ T5493] keyspan 7-1:0.107: unsupported endpoint type 0 [ 295.702907][ T5493] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 295.708721][ T5493] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 295.712426][ T5493] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 295.717974][ T5493] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 295.721567][ T5493] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 295.725126][ T5493] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 295.731720][ T5493] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 295.891464][ T5367] usb 7-1: USB disconnect, device number 28 [ 295.894339][ T5367] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 295.899335][ T5367] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 295.903317][ T5367] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 295.906849][ T5367] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 295.909899][ T5367] keyspan 7-1:0.107: device disconnected [ 296.058520][ T39] audit: type=1400 audit(1729712042.001:883): avc: denied { connect } for pid=11478 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.166258][ T39] audit: type=1400 audit(1729712042.101:884): avc: denied { getopt } for pid=11478 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 296.176752][T11481] netlink: 'syz.3.1687': attribute type 10 has an invalid length. [ 296.426016][T11485] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 296.431754][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.435071][T11485] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 296.583303][T11491] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.593873][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 296.670531][T11493] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1692'. [ 296.676128][ T39] audit: type=1326 audit(1729712042.611:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.1.1692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 296.685217][ T39] audit: type=1326 audit(1729712042.621:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.1.1692" exe="/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 296.691217][ T39] audit: type=1326 audit(1729712042.621:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.1.1692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 296.699081][ T39] audit: type=1326 audit(1729712042.621:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11490 comm="syz.1.1692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 297.019085][T11496] netlink: 'syz.3.1693': attribute type 10 has an invalid length. [ 297.099148][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.447233][ T5379] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 297.804467][ T5379] usb 8-1: Using ep0 maxpacket: 32 [ 297.810353][ T5379] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 297.813587][ T5379] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 297.816811][ T5379] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 297.820515][ T5379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.824449][ T5379] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.828666][ T5379] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 297.833740][ T5379] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 297.837194][ T5379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.840703][T11508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 297.843283][T11508] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.847690][T11508] vhci_hcd vhci_hcd.0: Device attached [ 297.848393][ T5379] usb 8-1: config 0 descriptor?? [ 297.895483][T11508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 298.017711][ T8855] usb 5-1: USB disconnect, device number 26 [ 298.078491][ T9] vhci_hcd: vhci_device speed not set [ 298.079061][ T5379] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 298.111103][ T5379] usb 8-1: USB disconnect, device number 40 [ 298.115677][ T5379] usblp0: removed [ 298.137286][ T9] usb 17-1: new full-speed USB device number 19 using vhci_hcd [ 298.406889][T11518] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 298.410446][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 298.537246][ T5379] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 298.547907][T11511] vhci_hcd: connection reset by peer [ 298.585178][ T11] vhci_hcd: stop threads [ 298.586991][ T11] vhci_hcd: release socket [ 298.589959][ T11] vhci_hcd: disconnect device [ 298.594172][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 298.598328][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1698'. [ 298.606023][ T5493] IPVS: starting estimator thread 0... [ 298.697291][T11523] IPVS: using max 33 ests per chain, 79200 per kthread [ 298.761144][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 299.110417][T11527] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 299.207139][ T5379] usb 8-1: Using ep0 maxpacket: 32 [ 299.213391][ T5379] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 299.215657][ T5379] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 299.240845][ T5379] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 299.256028][ T5379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.264910][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 299.300829][ T5379] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 299.318792][ T5379] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.328847][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.330588][ T5379] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 299.337174][ T5379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.342993][ T5379] usb 8-1: config 0 descriptor?? [ 299.557583][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.558914][ T5379] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 299.571333][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.687520][T11532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.832805][ T830] usb 8-1: USB disconnect, device number 41 [ 299.836054][ T830] usblp0: removed [ 300.255603][T11544] wireguard2: entered promiscuous mode [ 300.257895][T11544] wireguard2: entered allmulticast mode [ 300.304689][T11547] netlink: 'syz.0.1708': attribute type 10 has an invalid length. [ 300.333350][T11547] syz.0.1708 (11547) used greatest stack depth: 21168 bytes left [ 300.516204][T11555] netlink: 'syz.0.1712': attribute type 7 has an invalid length. [ 300.615347][ T39] audit: type=1400 audit(1729712046.551:889): avc: denied { bind } for pid=11562 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.697697][T11563] /dev/sr0: Can't open blockdev [ 301.066853][T11570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 301.069189][T11570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 301.073377][T11570] vhci_hcd vhci_hcd.0: Device attached [ 301.078225][T11570] overlayfs: failed to resolve './file1': -2 [ 301.257201][ T5379] vhci_hcd: vhci_device speed not set [ 301.331931][ T5379] usb 15-1: new full-speed USB device number 18 using vhci_hcd [ 301.845386][T11571] vhci_hcd: connection reset by peer [ 301.847563][T11325] vhci_hcd: stop threads [ 301.849141][T11325] vhci_hcd: release socket [ 301.851072][T11325] vhci_hcd: disconnect device [ 302.557858][T11590] ubi0: attaching mtd0 [ 302.568460][T11590] ubi0: scanning is finished [ 302.751713][T11590] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 302.755882][T11590] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 302.761866][T11590] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 302.764451][T11590] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 302.767418][T11590] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 302.770107][T11590] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 302.773600][T11590] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2190224574 [ 302.778983][T11590] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 302.783140][T11593] ubi0: background thread "ubi_bgt0d" started, PID 11593 [ 302.783301][T11591] ubi0: detaching mtd0 [ 302.790964][T11591] ubi0: mtd0 is detached [ 302.801110][T11597] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 302.803898][T11597] netlink: 'syz.3.1725': attribute type 2 has an invalid length. [ 303.026003][T11607] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 303.114873][ T39] audit: type=1400 audit(1729712049.051:890): avc: denied { read } for pid=11609 comm="syz.3.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.227315][ T9] vhci_hcd: vhci_device speed not set [ 303.541326][ T39] audit: type=1400 audit(1729712049.481:891): avc: denied { connect } for pid=11614 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.546471][ T39] audit: type=1400 audit(1729712049.481:892): avc: denied { name_connect } for pid=11614 comm="syz.3.1730" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 303.593788][ T39] audit: type=1400 audit(1729712049.531:893): avc: denied { accept } for pid=11614 comm="syz.3.1730" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.635141][T11623] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 303.635141][T11623] The task syz.2.1731 (11623) triggered the difference, watch for misbehavior. [ 304.217283][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 304.220687][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 304.232511][T11626] binder: 11624:11626 unknown command 0 [ 304.234616][T11626] binder: 11624:11626 ioctl c0306201 20000480 returned -22 [ 304.567209][ T830] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 304.718306][ T830] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.721242][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 304.724067][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.727719][ T830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.731078][ T830] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.733386][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.736528][ T830] usb 7-1: config 0 descriptor?? [ 304.738645][T11632] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 304.940827][T11642] FAULT_INJECTION: forcing a failure. [ 304.940827][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 304.944245][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.3.1739 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 304.947033][T11642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 304.949929][T11642] Call Trace: [ 304.950914][T11642] [ 304.951731][T11642] dump_stack_lvl+0x16c/0x1f0 [ 304.953024][T11642] should_fail_ex+0x497/0x5b0 [ 304.954262][T11642] should_failslab+0xc2/0x120 [ 304.955478][T11642] kmem_cache_alloc_node_noprof+0x71/0x310 [ 304.957174][T11642] ? __alloc_skb+0x2b1/0x380 [ 304.957197][T11642] __alloc_skb+0x2b1/0x380 [ 304.957213][T11642] ? __pfx___alloc_skb+0x10/0x10 [ 304.957230][T11642] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 304.957246][T11642] mroute_netlink_event+0xde/0x190 [ 304.957260][T11642] mroute_clean_tables+0x500/0xb30 [ 304.957274][T11642] ? __pfx_mroute_clean_tables+0x10/0x10 [ 304.957286][T11642] ? lock_acquire+0x2f/0xb0 [ 304.957297][T11642] ? __might_fault+0xe3/0x190 [ 304.957317][T11642] ip_mroute_setsockopt+0x9f0/0x1440 [ 304.957331][T11642] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 304.957343][T11642] ? avc_has_perm_noaudit+0x119/0x3a0 [ 304.957363][T11642] ? avc_has_perm_noaudit+0x143/0x3a0 [ 304.957378][T11642] do_ip_setsockopt+0x2e8/0x38b0 [ 304.957395][T11642] ? __pfx_avc_has_perm+0x10/0x10 [ 304.957409][T11642] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 304.957423][T11642] ? __lock_acquire+0xbdd/0x3ce0 [ 304.957436][T11642] ? sock_has_perm+0x25d/0x2f0 [ 304.957453][T11642] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 304.957466][T11642] ip_setsockopt+0x59/0xf0 [ 304.957482][T11642] raw_setsockopt+0xb8/0x290 [ 304.957499][T11642] ? __pfx_raw_setsockopt+0x10/0x10 [ 304.957515][T11642] ? selinux_socket_setsockopt+0x6a/0x80 [ 304.957529][T11642] ? sock_common_setsockopt+0x2e/0xf0 [ 304.957543][T11642] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 304.957556][T11642] do_sock_setsockopt+0x222/0x480 [ 304.957570][T11642] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 304.957604][T11642] ? fdget+0x176/0x210 [ 304.957633][T11642] __sys_setsockopt+0x1a4/0x270 [ 304.957655][T11642] ? __pfx___sys_setsockopt+0x10/0x10 [ 304.957671][T11642] ? fput+0x30/0x390 [ 304.957684][T11642] ? ksys_write+0x1ad/0x260 [ 304.957700][T11642] ? __pfx_ksys_write+0x10/0x10 [ 304.957717][T11642] __x64_sys_setsockopt+0xbd/0x160 [ 304.957737][T11642] ? do_syscall_64+0x91/0x250 [ 304.957753][T11642] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.957768][T11642] do_syscall_64+0xcd/0x250 [ 304.957784][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.957799][T11642] RIP: 0033:0x7f29ba97dff9 [ 304.957810][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.957821][T11642] RSP: 002b:00007f29bb84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.957833][T11642] RAX: ffffffffffffffda RBX: 00007f29bab35f80 RCX: 00007f29ba97dff9 [ 304.957841][T11642] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 304.957848][T11642] RBP: 00007f29bb84f090 R08: 0000000000000004 R09: 0000000000000000 [ 304.957855][T11642] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.957862][T11642] R13: 0000000000000000 R14: 00007f29bab35f80 R15: 00007fff889924d8 [ 304.957876][T11642] [ 304.981745][T11644] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 305.049146][T11644] bond0: entered promiscuous mode [ 305.073928][T11644] bond0: (slave veth13): Enslaving as an active interface with a down link [ 305.078853][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 305.086164][T11644] bond0 (unregistering): (slave veth13): Releasing active interface [ 305.091562][T11644] bond0 (unregistering): Released all slaves [ 306.017643][ T830] usbhid 7-1:0.0: can't add hid device: -71 [ 306.019318][ T830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 306.034204][ T830] usb 7-1: USB disconnect, device number 29 [ 306.121136][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 306.144361][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 306.146840][T11670] netlink: 'syz.1.1748': attribute type 2 has an invalid length. [ 306.270098][T11677] input: syz0 as /devices/virtual/input/input13 [ 306.427676][ T5379] vhci_hcd: vhci_device speed not set [ 307.202375][T11702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 307.246237][T11706] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 307.254808][T11706] bond8: entered promiscuous mode [ 307.288714][T11706] bond8: (slave veth21): Enslaving as an active interface with a down link [ 307.293195][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 307.327284][T11706] bond8 (unregistering): (slave veth21): Releasing active interface [ 307.340850][T11706] bond8 (unregistering): Released all slaves [ 307.463214][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1765'. [ 307.576192][T11733] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 307.582156][ T39] audit: type=1400 audit(1729712053.521:894): avc: denied { write } for pid=11736 comm="syz.3.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 307.596978][ T39] audit: type=1400 audit(1729712053.531:895): avc: denied { ioctl } for pid=11736 comm="syz.3.1771" path="socket:[35138]" dev="sockfs" ino=35138 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 307.617604][ T39] audit: type=1400 audit(1729712053.551:896): avc: denied { read } for pid=11736 comm="syz.3.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 307.687117][T11744] netlink: 'syz.0.1773': attribute type 4 has an invalid length. [ 307.693543][T11744] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1773'. [ 307.737204][ T56] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 307.891928][ T56] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.900858][ T56] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.913230][ T56] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.915857][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 307.922060][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 307.938364][ T56] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.950062][ T56] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.959468][ T56] usb 7-1: Product: syz [ 307.965849][ T56] usb 7-1: Manufacturer: syz [ 308.010445][ T56] cdc_wdm 7-1:1.0: skipping garbage [ 308.012315][ T56] cdc_wdm 7-1:1.0: skipping garbage [ 308.018486][ T56] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 308.020507][ T56] cdc_wdm 7-1:1.0: Unknown control protocol [ 308.396307][T11762] tap0: tun_chr_ioctl cmd 1074025678 [ 308.398369][T11762] tap0: group set to 0 [ 308.535722][ T5398] usb 7-1: USB disconnect, device number 30 [ 308.535803][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 308.540383][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 308.542499][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 308.548724][T11727] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 308.553756][T11766] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 308.903634][ T39] audit: type=1326 audit(1729712054.841:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 308.910917][ T39] audit: type=1326 audit(1729712054.841:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 308.916915][ T39] audit: type=1326 audit(1729712054.851:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 308.922924][ T39] audit: type=1326 audit(1729712054.851:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 308.932306][ T39] audit: type=1326 audit(1729712054.861:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 309.013704][ T39] audit: type=1326 audit(1729712054.951:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 309.021564][ T39] audit: type=1326 audit(1729712054.951:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.1.1781" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7ffc0000 [ 309.108897][T11782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 309.110810][T11782] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.113067][T11782] vhci_hcd vhci_hcd.0: Device attached [ 309.126209][T11782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.287219][ T56] vhci_hcd: vhci_device speed not set [ 309.347405][ T56] usb 19-1: new full-speed USB device number 23 using vhci_hcd [ 309.360185][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 309.603548][T11799] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 309.605295][T11799] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.608544][T11799] vhci_hcd vhci_hcd.0: Device attached [ 309.633846][T11799] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.970214][T11783] vhci_hcd: connection reset by peer [ 309.972789][ T8010] vhci_hcd: stop threads [ 309.974434][ T8010] vhci_hcd: release socket [ 309.976276][ T8010] vhci_hcd: disconnect device [ 310.254838][T11801] vhci_hcd: connection closed [ 310.255095][T11331] vhci_hcd: stop threads [ 310.258688][T11331] vhci_hcd: release socket [ 310.260399][T11331] vhci_hcd: disconnect device [ 311.293878][T11820] netlink: 'syz.0.1793': attribute type 4 has an invalid length. [ 311.296646][T11820] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1793'. [ 311.629456][T11830] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 311.636432][T11830] bond2: entered promiscuous mode [ 311.649296][ T39] audit: type=1400 audit(1729712057.591:904): avc: denied { setopt } for pid=11826 comm="syz.2.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.825248][T11840] PKCS8: Unsupported PKCS#8 version [ 311.828816][T11840] PKCS8: Unsupported PKCS#8 version [ 311.830285][T11840] PKCS8: Unsupported PKCS#8 version [ 311.831663][T11840] PKCS8: Unsupported PKCS#8 version [ 311.833155][T11840] PKCS8: Unsupported PKCS#8 version [ 311.834612][T11840] PKCS8: Unsupported PKCS#8 version [ 311.836293][T11840] PKCS8: Unsupported PKCS#8 version [ 311.838622][T11840] PKCS8: Unsupported PKCS#8 version [ 311.840569][T11840] PKCS8: Unsupported PKCS#8 version [ 311.842059][T11840] PKCS8: Unsupported PKCS#8 version [ 311.844575][T11840] PKCS8: Unsupported PKCS#8 version [ 311.846561][T11840] PKCS8: Unsupported PKCS#8 version [ 311.854754][T11840] PKCS8: Unsupported PKCS#8 version [ 311.856760][T11840] PKCS8: Unsupported PKCS#8 version [ 311.859261][T11840] PKCS8: Unsupported PKCS#8 version [ 311.861267][T11840] PKCS8: Unsupported PKCS#8 version [ 311.863144][T11840] PKCS8: Unsupported PKCS#8 version [ 311.864539][T11840] PKCS8: Unsupported PKCS#8 version [ 311.875387][T11840] PKCS8: Unsupported PKCS#8 version [ 311.878574][T11840] PKCS8: Unsupported PKCS#8 version [ 311.887554][T11840] PKCS8: Unsupported PKCS#8 version [ 311.889659][T11840] PKCS8: Unsupported PKCS#8 version [ 311.894189][T11841] ptm ptm24: ldisc open failed (-12), clearing slot 24 [ 312.042769][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 312.677926][T11844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.901393][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'. [ 312.904768][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 312.977161][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 313.709520][T11891] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1815'. [ 313.712172][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 313.715175][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1815'. [ 313.723782][T11891] ipt_REJECT: TCP_RESET invalid for non-tcp [ 314.498110][ T56] vhci_hcd: vhci_device speed not set [ 314.539368][T11904] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 314.544156][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 314.756601][T11904] bond3: entered promiscuous mode [ 314.817963][T11906] bond3: (slave veth15): Enslaving as an active interface with a down link [ 314.820266][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 314.825570][T11908] bond3 (unregistering): (slave veth15): Releasing active interface [ 314.848647][T11908] bond3 (unregistering): Released all slaves [ 315.002670][T11902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.588405][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 315.745289][ T39] audit: type=1800 audit(1729712061.681:905): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1828" name="/" dev="fuse" ino=1 res=0 errno=0 [ 316.837615][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.839381][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.331861][ T39] audit: type=1326 audit(1729712063.271:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.338611][ T39] audit: type=1326 audit(1729712063.271:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.345592][ T39] audit: type=1326 audit(1729712063.271:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.353801][ T39] audit: type=1326 audit(1729712063.271:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.359872][ T39] audit: type=1326 audit(1729712063.281:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.365965][ T39] audit: type=1326 audit(1729712063.281:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.373958][ T39] audit: type=1326 audit(1729712063.281:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.380054][ T39] audit: type=1326 audit(1729712063.281:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 317.385899][ T39] audit: type=1326 audit(1729712063.281:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11955 comm="syz.1.1834" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x7fc00000 [ 318.113042][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 318.116074][T11979] netlink: 'syz.0.1842': attribute type 2 has an invalid length. [ 318.157531][T11982] Bluetooth: MGMT ver 1.23 [ 318.200681][T11980] netlink: 'syz.1.1837': attribute type 4 has an invalid length. [ 318.202846][T11980] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1837'. [ 319.194391][T12004] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 319.196144][T12004] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 319.200669][T12004] vhci_hcd vhci_hcd.0: Device attached [ 319.233182][T12004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.571808][ T9] vhci_hcd: vhci_device speed not set [ 319.818045][ T9] usb 15-1: new full-speed USB device number 19 using vhci_hcd [ 319.822051][T12006] vhci_hcd: connection closed [ 319.837380][T11331] vhci_hcd: stop threads [ 319.839961][T11331] vhci_hcd: release socket [ 319.841268][T11331] vhci_hcd: disconnect device [ 319.923076][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 320.227715][T12038] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 320.230720][T12037] netlink: 'syz.2.1862': attribute type 4 has an invalid length. [ 320.233645][T12037] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1862'. [ 320.239902][T12038] bond4: entered promiscuous mode [ 320.266382][T12038] bond4: (slave veth9): Enslaving as an active interface with a down link [ 320.275467][T12042] wireguard5: entered promiscuous mode [ 320.278220][T12042] wireguard5: entered allmulticast mode [ 320.281403][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'. [ 320.287420][T12038] bond4 (unregistering): (slave veth9): Releasing active interface [ 320.295620][T12038] bond4 (unregistering): Released all slaves [ 320.384256][T12047] overlay: ./file0 is not a directory [ 320.477201][ T5379] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 320.649955][ T5379] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 320.653103][ T5379] usb 7-1: config 0 has no interface number 0 [ 320.655643][ T5379] usb 7-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.662379][ T5379] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 320.666130][ T5379] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 320.669459][ T5379] usb 7-1: Product: syz [ 320.671271][ T5379] usb 7-1: Manufacturer: syz [ 320.672961][ T5379] usb 7-1: SerialNumber: syz [ 320.677787][ T5379] usb 7-1: config 0 descriptor?? [ 320.682836][ T5379] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 320.685761][ T5379] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 320.688984][ T5379] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 88 [ 320.692379][ T5379] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 320.696082][ T5379] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 320.700290][ T5379] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 320.706206][ T5379] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 320.710035][ T5379] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 320.713630][ T5379] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 320.718041][ T5379] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 320.721842][ T5379] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 320.884288][ T5379] usb 7-1: USB disconnect, device number 31 [ 320.888733][ T5379] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 320.894056][ T5379] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 320.903252][ T5379] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 320.915494][ T5379] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 320.919699][ T5379] keyspan 7-1:0.107: device disconnected [ 321.416381][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 321.448590][T12076] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 321.598344][T12086] netlink: 'syz.0.1877': attribute type 3 has an invalid length. [ 322.147145][T12099] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 322.149381][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 322.153134][T12099] vhci_hcd vhci_hcd.0: Device attached [ 322.164230][T12099] overlayfs: failed to resolve './file1': -2 [ 322.327210][ T56] vhci_hcd: vhci_device speed not set [ 322.387497][ T56] usb 13-1: new full-speed USB device number 21 using vhci_hcd [ 322.951747][T12100] vhci_hcd: connection reset by peer [ 322.958823][ T8007] vhci_hcd: stop threads [ 322.960412][ T8007] vhci_hcd: release socket [ 322.962085][ T8007] vhci_hcd: disconnect device [ 323.059781][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 323.059799][ T39] audit: type=1400 audit(1729712069.001:976): avc: denied { listen } for pid=12103 comm="syz.3.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.114398][T12107] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 323.131515][T12107] bond8: entered promiscuous mode [ 323.189804][T12107] bond8: (slave veth23): Enslaving as an active interface with a down link [ 323.194588][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 323.200256][T12107] bond8 (unregistering): (slave veth23): Releasing active interface [ 323.208184][T12107] bond8 (unregistering): Released all slaves [ 323.483703][T12117] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 323.485917][T12117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.489796][T12117] vhci_hcd vhci_hcd.0: Device attached [ 323.545133][T12117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 323.620860][T12123] vivid-001: kernel_thread() failed [ 323.757136][ T9043] vhci_hcd: vhci_device speed not set [ 323.813022][T12138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 323.815353][T12138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.818490][T12138] vhci_hcd vhci_hcd.0: Device attached [ 323.824971][T12105] orangefs_mount: mount request failed with -4 [ 323.827134][ T9043] usb 17-1: new full-speed USB device number 20 using vhci_hcd [ 323.835884][T12141] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 323.838149][T12141] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.841624][T12141] vhci_hcd vhci_hcd.0: Device attached [ 323.888541][T12138] overlay: ./file1 is not a directory [ 323.902435][T12141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 324.485025][T12118] vhci_hcd: connection reset by peer [ 324.543230][T11331] vhci_hcd: stop threads [ 324.544673][T11331] vhci_hcd: release socket [ 324.546996][T11331] vhci_hcd: disconnect device [ 324.606537][T12139] vhci_hcd: connection closed [ 324.627969][T11331] vhci_hcd: stop threads [ 324.631458][T11331] vhci_hcd: release socket [ 324.632783][T11331] vhci_hcd: disconnect device [ 324.681575][T12142] vhci_hcd: connection reset by peer [ 324.684235][T11331] vhci_hcd: stop threads [ 324.687201][T11331] vhci_hcd: release socket [ 324.689921][T11331] vhci_hcd: disconnect device [ 324.897307][ T9] vhci_hcd: vhci_device speed not set [ 325.052184][ T39] audit: type=1400 audit(1729712070.991:977): avc: denied { setopt } for pid=12152 comm="syz.3.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 325.058166][ T39] audit: type=1400 audit(1729712070.991:978): avc: denied { bind } for pid=12152 comm="syz.3.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 325.125444][T12157] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1899'. [ 325.214668][T12161] team_slave_0: entered promiscuous mode [ 325.216652][T12161] team_slave_1: entered promiscuous mode [ 325.226346][T12161] team_slave_0: left promiscuous mode [ 325.228413][T12161] team_slave_1: left promiscuous mode [ 325.470647][T12170] netlink: 'syz.1.1905': attribute type 5 has an invalid length. [ 325.574797][ T39] audit: type=1400 audit(1729712071.511:979): avc: denied { ioctl } for pid=12169 comm="syz.1.1905" path="socket:[35806]" dev="sockfs" ino=35806 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 325.702389][ T39] audit: type=1400 audit(1729712071.641:980): avc: denied { read } for pid=12171 comm="syz.0.1906" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.712355][T12175] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 325.744662][T12175] bond4: entered promiscuous mode [ 325.880585][T12175] bond4: (slave veth11): Enslaving as an active interface with a down link [ 325.952485][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 325.964186][T12175] bond4 (unregistering): (slave veth11): Releasing active interface [ 325.987981][T12175] bond4 (unregistering): Released all slaves [ 326.477512][T12183] wireguard6: entered promiscuous mode [ 326.479511][T12183] wireguard6: entered allmulticast mode [ 327.131452][T12199] netlink: 'syz.3.1912': attribute type 1 has an invalid length. [ 327.150088][T12199] bond0: entered promiscuous mode [ 327.163899][T12199] bond0: (slave veth15): Enslaving as an active interface with a down link [ 327.170123][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 327.181186][T12199] bond0 (unregistering): (slave veth15): Releasing active interface [ 327.186423][T12199] bond0 (unregistering): Released all slaves [ 327.687700][T12213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.751516][T12211] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 327.753893][T12211] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 327.757780][T12211] vhci_hcd vhci_hcd.0: Device attached [ 327.807624][ T56] vhci_hcd: vhci_device speed not set [ 327.869425][ T5339] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 327.947833][ T5379] vhci_hcd: vhci_device speed not set [ 328.007284][ T5379] usb 19-1: new full-speed USB device number 24 using vhci_hcd [ 328.019160][T12220] Cannot find del_set index 4 as target [ 328.097399][T12223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 328.099779][T12223] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 328.102754][T12223] vhci_hcd vhci_hcd.0: Device attached [ 328.107274][ T5339] usb 7-1: Using ep0 maxpacket: 8 [ 328.111509][ T5339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.112639][T12223] overlayfs: failed to resolve './file1': -2 [ 328.114421][ T5339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.119469][ T5339] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 257, setting to 64 [ 328.122552][ T5339] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 328.125047][ T5339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.178124][T12214] vhci_hcd: connection reset by peer [ 328.180255][ T8010] vhci_hcd: stop threads [ 328.181679][ T8010] vhci_hcd: release socket [ 328.183335][ T8010] vhci_hcd: disconnect device [ 328.243781][ T5339] hub 7-1:1.0: bad descriptor, ignoring hub [ 328.253734][ T5339] hub 7-1:1.0: probe with driver hub failed with error -5 [ 328.262564][ T5339] cdc_wdm 7-1:1.0: skipping garbage [ 328.273812][ T5339] cdc_wdm 7-1:1.0: skipping garbage [ 328.282865][ T5339] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 328.317263][ T56] vhci_hcd: vhci_device speed not set [ 328.377150][ T56] usb 13-1: device descriptor read/64, error -110 [ 328.557199][ T56] vhci_hcd: vhci_device speed not set [ 328.617217][ T56] usb 13-1: new full-speed USB device number 22 using vhci_hcd [ 328.784326][ T39] audit: type=1400 audit(1729712074.721:981): avc: denied { read append } for pid=12230 comm="syz.1.1923" name="btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 328.792582][ T39] audit: type=1400 audit(1729712074.721:982): avc: denied { open } for pid=12230 comm="syz.1.1923" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 328.898155][T12224] vhci_hcd: connection reset by peer [ 328.903353][ T8010] vhci_hcd: stop threads [ 328.905242][ T8010] vhci_hcd: release socket [ 328.908096][ T8010] vhci_hcd: disconnect device [ 328.997193][ T9043] vhci_hcd: vhci_device speed not set [ 329.037541][ T39] audit: type=1400 audit(1729712074.971:983): avc: denied { create } for pid=12238 comm="syz.3.1925" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 329.050319][ T39] audit: type=1400 audit(1729712074.991:984): avc: denied { ioctl } for pid=12238 comm="syz.3.1925" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 329.057252][T12239] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 329.059333][T12239] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1925'. [ 329.082309][T12243] netlink: 'syz.1.1927': attribute type 4 has an invalid length. [ 329.084983][T12243] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1927'. [ 329.327209][ T35] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 329.482353][ T35] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 329.485146][ T35] usb 6-1: config 0 has no interface number 0 [ 329.487590][ T35] usb 6-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.492945][ T35] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 329.496022][ T35] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 329.499163][ T35] usb 6-1: Product: syz [ 329.500607][ T35] usb 6-1: Manufacturer: syz [ 329.502210][ T35] usb 6-1: SerialNumber: syz [ 329.507960][ T35] usb 6-1: config 0 descriptor?? [ 329.511265][ T35] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 329.513976][ T35] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 329.519498][ T35] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 88 [ 329.522706][ T35] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 329.526444][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 329.529988][ T35] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 329.535041][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 329.538029][ T35] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 329.541930][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 329.544489][ T35] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 329.547613][ T35] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 329.721630][ T9] usb 6-1: USB disconnect, device number 39 [ 329.728790][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 329.734006][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 329.738566][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 329.746179][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 329.749813][ T9] keyspan 6-1:0.107: device disconnected [ 330.358923][ T5339] usb 7-1: USB disconnect, device number 32 [ 330.448520][T12263] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 330.459060][T12263] bond4: entered promiscuous mode [ 330.478195][T12263] bond4: (slave veth13): Enslaving as an active interface with a down link [ 330.481784][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'. [ 330.498811][T12263] FAULT_INJECTION: forcing a failure. [ 330.498811][T12263] name failslab, interval 1, probability 0, space 0, times 0 [ 330.502209][T12263] CPU: 3 UID: 0 PID: 12263 Comm: syz.0.1935 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 330.505008][T12263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.507841][T12263] Call Trace: [ 330.508726][T12263] [ 330.509538][T12263] dump_stack_lvl+0x16c/0x1f0 [ 330.510891][T12263] should_fail_ex+0x497/0x5b0 [ 330.512458][T12263] ? fs_reclaim_acquire+0xae/0x150 [ 330.514151][T12263] should_failslab+0xc2/0x120 [ 330.515602][T12263] __kmalloc_noprof+0xcb/0x400 [ 330.516878][T12263] bond_update_slave_arr+0x126/0xb00 [ 330.518284][T12263] ? __pfx_bond_update_slave_arr+0x10/0x10 [ 330.519846][T12263] ? netdev_upper_dev_unlink+0x84/0xb0 [ 330.521292][T12263] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 330.522858][T12263] __bond_release_one+0xafb/0x1830 [ 330.524278][T12263] ? lock_acquire+0x2f/0xb0 [ 330.525641][T12263] ? __pfx___bond_release_one+0x10/0x10 [ 330.527485][T12263] ? ib_device_get_by_netdev+0x1c3/0x520 [ 330.529416][T12263] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 330.531459][T12263] ? __pfx_bond_netpoll_cleanup+0x10/0x10 [ 330.533456][T12263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 330.535330][T12263] bond_uninit+0x125/0x320 [ 330.536464][T12263] ? __pfx_bond_uninit+0x10/0x10 [ 330.537761][T12263] ? __pfx_bond_uninit+0x10/0x10 [ 330.539060][T12263] unregister_netdevice_many_notify+0xf77/0x1e50 [ 330.540715][T12263] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 330.542512][T12263] ? __pfx___nla_validate_parse+0x10/0x10 [ 330.543919][T12263] ? unregister_netdevice_queue+0x22f/0x3f0 [ 330.545547][T12263] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 330.547128][T12263] ? __nla_parse+0x40/0x60 [ 330.548450][T12263] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 330.550079][T12263] rtnl_dellink+0x3c9/0xae0 [ 330.551230][T12263] ? find_held_lock+0x2d/0x110 [ 330.552487][T12263] ? __pfx_rtnl_dellink+0x10/0x10 [ 330.553800][T12263] ? bpf_trace_run2+0x266/0x590 [ 330.555147][T12263] ? __pfx_lock_release+0x10/0x10 [ 330.556476][T12263] ? trace_contention_end+0xea/0x140 [ 330.557868][T12263] ? __mutex_lock+0x1a6/0x9c0 [ 330.559411][T12263] ? rtnetlink_rcv_msg+0x372/0xea0 [ 330.561149][T12263] ? find_held_lock+0x2d/0x110 [ 330.562806][T12263] ? __pfx___mutex_lock+0x10/0x10 [ 330.564524][T12263] ? __pfx_rtnl_dellink+0x10/0x10 [ 330.566197][T12263] rtnetlink_rcv_msg+0x3c7/0xea0 [ 330.567870][T12263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.569362][T12263] netlink_rcv_skb+0x16b/0x440 [ 330.570627][T12263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.572051][T12263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.573450][T12263] ? netlink_deliver_tap+0x1ae/0xd90 [ 330.574899][T12263] netlink_unicast+0x53c/0x7f0 [ 330.576555][T12263] ? __pfx_netlink_unicast+0x10/0x10 [ 330.578374][T12263] netlink_sendmsg+0x8b8/0xd70 [ 330.579933][T12263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.581751][T12263] ? __import_iovec+0x1fd/0x6e0 [ 330.583428][T12263] ____sys_sendmsg+0xaaf/0xc90 [ 330.585071][T12263] ? copy_msghdr_from_user+0x10b/0x160 [ 330.586547][T12263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.587934][T12263] ? __pfx___lock_acquire+0x10/0x10 [ 330.589728][T12263] ___sys_sendmsg+0x135/0x1e0 [ 330.591232][T12263] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.592924][T12263] ? lock_acquire+0x2f/0xb0 [ 330.594490][T12263] ? __fget_files+0x40/0x3f0 [ 330.596084][T12263] ? fdget+0x176/0x210 [ 330.597501][T12263] __sys_sendmsg+0x117/0x1f0 [ 330.599078][T12263] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.600817][T12263] ? __fget_files+0x244/0x3f0 [ 330.602262][T12263] do_syscall_64+0xcd/0x250 [ 330.603447][T12263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.604999][T12263] RIP: 0033:0x7f6e1e17dff9 [ 330.606179][T12263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.611173][T12263] RSP: 002b:00007f6e1ef1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.613317][T12263] RAX: ffffffffffffffda RBX: 00007f6e1e335f80 RCX: 00007f6e1e17dff9 [ 330.615603][T12263] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 330.618372][T12263] RBP: 00007f6e1ef1c090 R08: 0000000000000000 R09: 0000000000000000 [ 330.621118][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.623858][T12263] R13: 0000000000000000 R14: 00007f6e1e335f80 R15: 00007ffd1267be08 [ 330.626607][T12263] [ 330.629012][T12263] bond4 (unregistering): (slave veth13): Releasing active interface [ 330.635971][T12263] bond4 (unregistering): Released all slaves [ 330.647743][T12267] team_slave_0: entered promiscuous mode [ 330.654455][T12267] team_slave_0: left promiscuous mode [ 331.067225][ T5341] Bluetooth: hci4: command 0x1003 tx timeout [ 331.071048][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 331.118347][ T39] audit: type=1400 audit(1729712077.051:985): avc: denied { unlink } for pid=5337 comm="syz-executor" name="file0" dev="tmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.348494][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.384974][ T39] audit: type=1400 audit(1729712077.321:986): avc: denied { ioctl } for pid=12283 comm="syz.2.1944" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.413977][T12288] macsec0: left promiscuous mode [ 331.416132][T12288] wireguard0: left promiscuous mode [ 331.417129][ T39] audit: type=1326 audit(1729712077.351:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.3.1945" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29ba97dff9 code=0x0 [ 331.420002][T12288] wireguard1: left promiscuous mode [ 331.427701][T12288] wireguard2: left promiscuous mode [ 331.429363][T12288] wireguard3: left promiscuous mode [ 331.430944][T12288] wireguard4: left promiscuous mode [ 331.432508][T12288] wireguard5: left promiscuous mode [ 331.477386][ T39] audit: type=1400 audit(1729712077.421:988): avc: denied { getopt } for pid=12286 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.881269][ T39] audit: type=1400 audit(1729712077.821:989): avc: denied { unmount } for pid=5335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 332.178316][ T39] audit: type=1400 audit(1729712078.121:990): avc: denied { read } for pid=12301 comm="syz.1.1949" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.494544][T12318] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 332.558305][T12313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 332.560600][T12313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 332.576639][T12313] vhci_hcd vhci_hcd.0: Device attached [ 332.627969][T12328] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 332.650905][T12328] bond4: entered promiscuous mode [ 332.693582][T12328] bond4: (slave veth15): Enslaving as an active interface with a down link [ 332.699436][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 332.706261][T12328] bond4 (unregistering): (slave veth15): Releasing active interface [ 332.715604][T12328] bond4 (unregistering): Released all slaves [ 332.777289][ T9] vhci_hcd: vhci_device speed not set [ 332.837199][ T9] usb 15-1: new full-speed USB device number 20 using vhci_hcd [ 332.859891][T12334] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1957'. [ 332.862859][T12334] netlink: zone id is out of range [ 332.865339][T12334] netlink: zone id is out of range [ 332.868381][T12334] netlink: zone id is out of range [ 332.870941][T12334] netlink: zone id is out of range [ 332.873089][T12334] netlink: zone id is out of range [ 332.874801][T12334] netlink: zone id is out of range [ 332.876231][T12334] netlink: zone id is out of range [ 332.880700][T12334] netlink: zone id is out of range [ 332.883234][T12334] netlink: zone id is out of range [ 332.884997][T12334] netlink: zone id is out of range [ 333.021417][T12341] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 333.023316][T12341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 333.025606][T12341] vhci_hcd vhci_hcd.0: Device attached [ 333.038557][T12341] overlayfs: failed to resolve './file1': -2 [ 333.227147][ T5379] vhci_hcd: vhci_device speed not set [ 333.670126][T12316] vhci_hcd: connection reset by peer [ 333.672369][T11331] vhci_hcd: stop threads [ 333.673899][T11331] vhci_hcd: release socket [ 333.675515][T11331] vhci_hcd: disconnect device [ 333.678493][T12342] vhci_hcd: connection closed [ 333.678986][T11331] vhci_hcd: stop threads [ 333.681953][T11331] vhci_hcd: release socket [ 333.684391][T11331] vhci_hcd: disconnect device [ 333.771024][T12353] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 334.251968][T12366] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 334.270577][T12366] bond3: entered promiscuous mode [ 334.293672][T12366] bond3: (slave veth17): Enslaving as an active interface with a down link [ 334.334491][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 334.349191][T12366] bond3 (unregistering): (slave veth17): Releasing active interface [ 334.358133][T12366] bond3 (unregistering): Released all slaves [ 335.181674][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 335.187209][T12390] netlink: 'syz.0.1973': attribute type 2 has an invalid length. [ 335.232188][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 335.232199][ T39] audit: type=1400 audit(1729712081.171:994): avc: denied { read write } for pid=12391 comm="syz.3.1975" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.259204][ T39] audit: type=1400 audit(1729712081.181:995): avc: denied { open } for pid=12391 comm="syz.3.1975" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.277192][ T39] audit: type=1400 audit(1729712081.181:996): avc: denied { map } for pid=12391 comm="syz.3.1975" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.287327][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 335.307374][ T39] audit: type=1400 audit(1729712081.181:997): avc: denied { execute } for pid=12391 comm="syz.3.1975" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.421641][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1982'. [ 335.607819][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 335.874478][T12415] bridge0: entered allmulticast mode [ 336.329466][T12409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.132023][T12443] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 337.196641][T12443] bond3: entered promiscuous mode [ 337.216779][ T39] audit: type=1400 audit(1729712083.151:998): avc: denied { ioctl } for pid=12438 comm="syz.3.1991" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 337.272007][T12445] bond3: (slave veth19): Enslaving as an active interface with a down link [ 337.295110][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 337.301648][T12450] program syz.3.1996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.336876][T12443] bond3 (unregistering): (slave veth19): Releasing active interface [ 337.342848][T12443] FAULT_INJECTION: forcing a failure. [ 337.342848][T12443] name failslab, interval 1, probability 0, space 0, times 0 [ 337.346728][T12443] CPU: 0 UID: 0 PID: 12443 Comm: syz.1.1993 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 337.349853][T12443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 337.352757][T12443] Call Trace: [ 337.353715][T12443] [ 337.354501][T12443] dump_stack_lvl+0x16c/0x1f0 [ 337.355752][T12443] should_fail_ex+0x497/0x5b0 [ 337.356990][T12443] ? fs_reclaim_acquire+0xae/0x150 [ 337.358346][T12443] should_failslab+0xc2/0x120 [ 337.359739][T12443] __kmalloc_cache_noprof+0x6b/0x300 [ 337.361260][T12443] ? netdevice_event+0x367/0x9d0 [ 337.362612][T12443] netdevice_event+0x367/0x9d0 [ 337.363911][T12443] ? __pfx_netdevice_event+0x10/0x10 [ 337.365337][T12443] ? __pfx_del_netdev_ips+0x10/0x10 [ 337.366692][T12443] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 337.368362][T12443] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 337.370007][T12443] notifier_call_chain+0xb9/0x410 [ 337.371333][T12443] ? __pfx_netdevice_event+0x10/0x10 [ 337.372668][T12443] call_netdevice_notifiers_info+0xbe/0x140 [ 337.374204][T12443] call_netdevice_notifiers+0x7d/0xb0 [ 337.375601][T12443] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 337.377186][T12443] __bond_release_one+0x12c7/0x1830 [ 337.378562][T12443] ? lock_acquire+0x2f/0xb0 [ 337.379752][T12443] ? __pfx___bond_release_one+0x10/0x10 [ 337.381184][T12443] ? ib_device_get_by_netdev+0x1c3/0x520 [ 337.382662][T12443] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 337.384225][T12443] ? __pfx_bond_netpoll_cleanup+0x10/0x10 [ 337.385674][T12443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.387228][T12443] bond_uninit+0x125/0x320 [ 337.388405][T12443] ? __pfx_bond_uninit+0x10/0x10 [ 337.389731][T12443] ? __pfx_bond_uninit+0x10/0x10 [ 337.391036][T12443] unregister_netdevice_many_notify+0xf77/0x1e50 [ 337.392693][T12443] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.394436][T12443] ? __pfx___nla_validate_parse+0x10/0x10 [ 337.395909][T12443] ? mark_lock+0xb5/0xc60 [ 337.397044][T12443] ? unregister_netdevice_queue+0x22f/0x3f0 [ 337.398682][T12443] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.400453][T12443] ? __nla_parse+0x40/0x60 [ 337.401643][T12443] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.403195][T12443] rtnl_dellink+0x3c9/0xae0 [ 337.404390][T12443] ? trace_lock_acquire+0x14a/0x1d0 [ 337.405768][T12443] ? __pfx_rtnl_dellink+0x10/0x10 [ 337.407037][T12443] ? __lock_acquire+0x163e/0x3ce0 [ 337.408362][T12443] ? do_raw_spin_unlock+0x172/0x230 [ 337.409693][T12443] ? _raw_spin_unlock+0x28/0x50 [ 337.410882][T12443] ? __mutex_lock+0x1a6/0x9c0 [ 337.412033][T12443] ? rtnetlink_rcv_msg+0x372/0xea0 [ 337.413269][T12443] ? __pfx___mutex_lock+0x10/0x10 [ 337.414538][T12443] ? __pfx_rtnl_dellink+0x10/0x10 [ 337.415800][T12443] rtnetlink_rcv_msg+0x3c7/0xea0 [ 337.417041][T12443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.418481][T12443] netlink_rcv_skb+0x16b/0x440 [ 337.419736][T12443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.421160][T12443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.422581][T12443] ? netlink_deliver_tap+0x1ae/0xd90 [ 337.424019][T12443] netlink_unicast+0x53c/0x7f0 [ 337.425341][T12443] ? __pfx_netlink_unicast+0x10/0x10 [ 337.426735][T12443] netlink_sendmsg+0x8b8/0xd70 [ 337.427961][T12443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.429329][T12443] ? __import_iovec+0x1fd/0x6e0 [ 337.430550][T12443] ____sys_sendmsg+0xaaf/0xc90 [ 337.431725][T12443] ? copy_msghdr_from_user+0x10b/0x160 [ 337.433022][T12443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.434297][T12443] ? __lock_task_sighand+0xc2/0x340 [ 337.435556][T12443] ? __pfx___lock_acquire+0x10/0x10 [ 337.436850][T12443] ___sys_sendmsg+0x135/0x1e0 [ 337.438046][T12443] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.439368][T12443] ? lock_acquire+0x2f/0xb0 [ 337.440811][T12443] ? __fget_files+0x40/0x3f0 [ 337.442500][T12443] ? fdget+0x176/0x210 [ 337.443970][T12443] __sys_sendmsg+0x117/0x1f0 [ 337.445636][T12443] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.447441][T12443] ? bpf_trace_run2+0x2a6/0x590 [ 337.449137][T12443] ? rcu_is_watching+0x12/0xc0 [ 337.450828][T12443] do_syscall_64+0xcd/0x250 [ 337.452463][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.454617][T12443] RIP: 0033:0x7fb118d7dff9 [ 337.456339][T12443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.462937][T12443] RSP: 002b:00007fb119c09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.465683][T12443] RAX: ffffffffffffffda RBX: 00007fb118f35f80 RCX: 00007fb118d7dff9 [ 337.468383][T12443] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 337.471117][T12443] RBP: 00007fb119c09090 R08: 0000000000000000 R09: 0000000000000000 [ 337.473960][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.476716][T12443] R13: 0000000000000000 R14: 00007fb118f35f80 R15: 00007ffc34c50ce8 [ 337.478932][T12443] [ 337.481782][T12443] bond3 (unregistering): Released all slaves [ 337.606729][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'. [ 337.641504][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 337.662096][T12463] netlink: 'syz.3.2000': attribute type 2 has an invalid length. [ 337.745575][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 338.072251][ T9] vhci_hcd: vhci_device speed not set [ 338.227127][ T56] vhci_hcd: vhci_device speed not set [ 338.480350][T12465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.028877][ T39] audit: type=1400 audit(1729712084.971:999): avc: denied { append } for pid=12495 comm="syz.2.2011" name="mice" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 339.091943][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 339.152223][ T39] audit: type=1400 audit(1729712085.091:1000): avc: denied { bind } for pid=12488 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 339.169000][ T39] audit: type=1400 audit(1729712085.111:1001): avc: denied { listen } for pid=12488 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 339.687095][ T39] audit: type=1400 audit(1729712085.621:1002): avc: denied { create } for pid=12504 comm="syz.0.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 339.796231][T12522] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 339.820563][T12522] bond0: entered promiscuous mode [ 339.858834][T12525] ip6t_srh: unknown srh match flags 4000 [ 339.889656][T12522] bond0: (slave veth17): Enslaving as an active interface with a down link [ 339.916280][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 339.943402][T12529] bond0 (unregistering): (slave veth17): Releasing active interface [ 339.952877][T12529] bond0 (unregistering): Released all slaves [ 340.140128][T12547] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 340.141883][T12547] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 340.144073][T12547] vhci_hcd vhci_hcd.0: Device attached [ 340.229904][T12547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.997154][T12548] vhci_hcd: connection closed [ 340.997769][T11326] vhci_hcd: stop threads [ 341.001593][T11326] vhci_hcd: release socket [ 341.002766][T11326] vhci_hcd: disconnect device [ 341.390319][T12562] can: request_module (can-proto-0) failed. [ 341.684671][ T39] audit: type=1400 audit(1729712087.621:1003): avc: denied { write } for pid=12569 comm="syz.2.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 342.147128][ T6060] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 342.277130][ T6060] usb 6-1: device descriptor read/64, error -71 [ 342.465761][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 342.547159][ T6060] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 342.555891][T12585] netlink: 'syz.0.2039': attribute type 4 has an invalid length. [ 342.561756][T12585] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2039'. [ 342.687165][ T6060] usb 6-1: device descriptor read/64, error -71 [ 342.797536][ T6060] usb usb6-port1: attempt power cycle [ 343.143575][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 343.145975][T12591] netlink: 'syz.1.2041': attribute type 2 has an invalid length. [ 343.239149][T12578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.228713][T12609] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 347.754817][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 347.778868][T12661] netlink: 'syz.2.2061': attribute type 2 has an invalid length. [ 349.461600][T12683] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 349.463336][T12683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 349.466801][T12683] vhci_hcd vhci_hcd.0: Device attached [ 349.494129][T12683] overlayfs: failed to resolve './file1': -2 [ 350.069097][ T9] vhci_hcd: vhci_device speed not set [ 350.122747][T12684] vhci_hcd: connection closed [ 350.266295][ T9] usb 13-1: new full-speed USB device number 23 using vhci_hcd [ 350.273070][T12685] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 350.369206][ T8010] vhci_hcd: stop threads [ 350.370469][ T8010] vhci_hcd: release socket [ 350.372147][ T8010] vhci_hcd: disconnect device [ 351.230138][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 351.391252][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.446921][T12720] netlink: 'syz.3.2077': attribute type 3 has an invalid length. [ 352.943791][ T39] audit: type=1400 audit(1729712098.871:1004): avc: denied { validate_trans } for pid=12723 comm="syz.2.2080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 354.966132][T12725] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 354.967744][T12727] overlayfs: failed to resolve './file1': -2 [ 354.968574][T12725] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 354.973096][T12725] vhci_hcd vhci_hcd.0: Device attached [ 355.292176][T12744] syzkaller0: entered promiscuous mode [ 355.297083][T12744] syzkaller0: entered allmulticast mode [ 357.500355][T12750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 357.502187][T12750] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 357.504688][T12750] vhci_hcd vhci_hcd.0: Device attached [ 357.707749][ T9043] vhci_hcd: vhci_device speed not set [ 357.717847][T12737] vhci_hcd: connection reset by peer [ 357.720947][ T8010] vhci_hcd: stop threads [ 357.722473][ T8010] vhci_hcd: release socket [ 357.737433][ T8010] vhci_hcd: disconnect device [ 357.767218][ T9043] usb 17-1: new full-speed USB device number 21 using vhci_hcd [ 357.788585][ T9] vhci_hcd: vhci_device speed not set [ 357.801403][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 357.804972][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 357.810993][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 357.821000][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 357.834903][ T8] usb 5-1: ath9k_htc: Firmware htc_9271.fw requested [ 357.839398][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=379 [ 357.842764][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=379 [ 357.884321][ T5380] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=379 [ 357.888595][ T5380] usb 5-1: loading /lib/firmware/htc_9271.fw failed with error -5 [ 357.891605][ T5380] usb 5-1: Direct firmware load for htc_9271.fw failed with error -5 [ 357.894063][ T5380] usb 5-1: Falling back to sysfs fallback for: htc_9271.fw [ 358.284779][T12751] vhci_hcd: connection reset by peer [ 358.334708][ T8010] vhci_hcd: stop threads [ 358.337250][ T8010] vhci_hcd: release socket [ 358.339904][ T8010] vhci_hcd: disconnect device [ 358.734538][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2087'. [ 359.022373][T12765] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 359.049881][T12765] bond4: entered promiscuous mode [ 359.065825][T12761] bond4: (slave veth17): Enslaving as an active interface with a down link [ 359.069281][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2087'. [ 359.261961][T12764] bond4 (unregistering): (slave veth17): Releasing active interface [ 359.299090][T12764] bond4 (unregistering): Released all slaves [ 360.084535][T12782] syzkaller0: entered promiscuous mode [ 360.086057][T12782] syzkaller0: entered allmulticast mode [ 361.715527][T12791] FAULT_INJECTION: forcing a failure. [ 361.715527][T12791] name failslab, interval 1, probability 0, space 0, times 0 [ 361.728732][T12791] CPU: 2 UID: 0 PID: 12791 Comm: syz.1.2096 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 361.731541][T12791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.734354][T12791] Call Trace: [ 361.735238][T12791] [ 361.736017][T12791] dump_stack_lvl+0x16c/0x1f0 [ 361.737305][T12791] should_fail_ex+0x497/0x5b0 [ 361.738787][T12791] ? fs_reclaim_acquire+0xae/0x150 [ 361.740653][T12791] should_failslab+0xc2/0x120 [ 361.742368][T12791] kmem_cache_alloc_node_noprof+0x71/0x310 [ 361.744467][T12791] ? __alloc_skb+0x2b1/0x380 [ 361.746164][T12791] __alloc_skb+0x2b1/0x380 [ 361.747802][T12791] ? __pfx___alloc_skb+0x10/0x10 [ 361.749629][T12791] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 361.751779][T12791] netlink_alloc_large_skb+0x69/0x130 [ 361.753731][T12791] netlink_sendmsg+0x689/0xd70 [ 361.755493][T12791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.757392][T12791] ? __import_iovec+0x1fd/0x6e0 [ 361.758976][T12791] ____sys_sendmsg+0xaaf/0xc90 [ 361.760347][T12791] ? copy_msghdr_from_user+0x10b/0x160 [ 361.761781][T12791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.763164][T12791] ? __lock_task_sighand+0xc2/0x340 [ 361.764485][T12791] ? __pfx___lock_acquire+0x10/0x10 [ 361.765822][T12791] ___sys_sendmsg+0x135/0x1e0 [ 361.767046][T12791] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.768473][T12791] ? lock_acquire+0x2f/0xb0 [ 361.769804][T12791] ? __fget_files+0x40/0x3f0 [ 361.771147][T12791] ? fdget+0x176/0x210 [ 361.772295][T12791] __sys_sendmsg+0x117/0x1f0 [ 361.773569][T12791] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.774984][T12791] ? bpf_trace_run2+0x2a6/0x590 [ 361.776273][T12791] ? rcu_is_watching+0x12/0xc0 [ 361.777666][T12791] do_syscall_64+0xcd/0x250 [ 361.778891][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.780419][T12791] RIP: 0033:0x7fb118d7dff9 [ 361.781597][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.786718][T12791] RSP: 002b:00007fb119be8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.789726][T12791] RAX: ffffffffffffffda RBX: 00007fb118f36058 RCX: 00007fb118d7dff9 [ 361.792514][T12791] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 361.795389][T12791] RBP: 00007fb119be8090 R08: 0000000000000000 R09: 0000000000000000 [ 361.798242][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.801047][T12791] R13: 0000000000000001 R14: 00007fb118f36058 R15: 00007ffc34c50ce8 [ 361.803901][T12791] [ 363.217494][ T9043] vhci_hcd: vhci_device speed not set [ 363.285350][T12797] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.560390][T12796] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 363.562157][T12796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 363.564290][T12796] vhci_hcd vhci_hcd.0: Device attached [ 363.578235][T12798] vhci_hcd: connection closed [ 363.578541][T11331] vhci_hcd: stop threads [ 363.580913][T11331] vhci_hcd: release socket [ 363.582068][T11331] vhci_hcd: disconnect device [ 364.078245][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 364.203183][T12806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 364.204857][T12806] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 364.206913][T12806] vhci_hcd vhci_hcd.0: Device attached [ 364.257679][T12806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 364.411468][ T9043] vhci_hcd: vhci_device speed not set [ 364.513847][ T9043] usb 19-1: new full-speed USB device number 25 using vhci_hcd [ 364.985126][T12807] vhci_hcd: connection reset by peer [ 364.987116][ T12] vhci_hcd: stop threads [ 364.988418][ T12] vhci_hcd: release socket [ 364.990711][ T12] vhci_hcd: disconnect device [ 365.029603][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 365.041836][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 366.079763][T12831] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 366.099070][T12831] bond0: entered promiscuous mode [ 366.190768][T12832] bond0: (slave veth19): Enslaving as an active interface with a down link [ 366.212583][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 366.245114][T12833] bond0 (unregistering): (slave veth19): Releasing active interface [ 366.302140][T12833] bond0 (unregistering): Released all slaves [ 366.318374][T12837] je: renamed from lo (while UP) [ 367.399753][T12851] wireguard3: entered promiscuous mode [ 367.401168][T12851] wireguard3: entered allmulticast mode [ 367.621194][T12858] netlink: 'syz.3.2114': attribute type 4 has an invalid length. [ 367.623221][T12858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2114'. [ 367.867195][ T5379] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 368.022996][ T5379] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 368.025881][ T5379] usb 8-1: config 0 has no interface number 0 [ 368.040709][ T5379] usb 8-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.046656][ T5379] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 368.057113][ T5379] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 368.060265][ T5379] usb 8-1: Product: syz [ 368.062015][ T5379] usb 8-1: Manufacturer: syz [ 368.063647][ T5379] usb 8-1: SerialNumber: syz [ 368.073820][ T5379] usb 8-1: config 0 descriptor?? [ 368.081080][ T5379] keyspan 8-1:0.107: Keyspan 4 port adapter converter detected [ 368.089069][ T5379] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 81 [ 368.091772][ T5379] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 88 [ 368.095120][ T5379] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 1 [ 368.099500][ T5379] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 368.102978][ T5379] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 2 [ 368.106572][ T5379] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 368.132875][ T5379] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 4 [ 368.147657][ T5379] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 368.151402][ T5379] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 6 [ 368.154830][ T5379] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 368.293077][ T5379] usb 8-1: USB disconnect, device number 42 [ 368.307454][ T5379] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 368.378800][ T5379] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 368.384067][ T5379] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 368.399008][ T5379] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 368.402659][ T5379] keyspan 8-1:0.107: device disconnected [ 368.798878][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2123'. [ 369.561269][T12898] wireguard5: entered promiscuous mode [ 369.562772][T12898] wireguard5: entered allmulticast mode [ 369.627143][ T9043] vhci_hcd: vhci_device speed not set [ 369.660602][T12900] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 369.676249][T12900] bond0: entered promiscuous mode [ 369.700763][T12900] bond0: (slave veth21): Enslaving as an active interface with a down link [ 369.712379][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 369.719531][T12900] bond0 (unregistering): (slave veth21): Releasing active interface [ 369.724969][T12900] bond0 (unregistering): Released all slaves [ 370.167194][ T5493] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 370.304092][ T39] audit: type=1400 audit(1729712116.241:1005): avc: denied { execute } for pid=12919 comm="syz.1.2136" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 370.327262][ T5493] usb 8-1: Using ep0 maxpacket: 16 [ 370.330852][ T5493] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 370.335331][ T5493] usb 8-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 370.345256][ T5493] usb 8-1: config 0 interface 0 has no altsetting 0 [ 370.392062][ T5493] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 370.398944][ T5493] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.404452][ T5493] usb 8-1: Product: syz [ 370.409967][ T5493] usb 8-1: Manufacturer: syz [ 370.413326][ T5493] usb 8-1: SerialNumber: syz [ 370.420605][ T5493] usb 8-1: config 0 descriptor?? [ 370.425570][ T5493] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input15 [ 370.878436][ T39] audit: type=1400 audit(1729712116.821:1006): avc: denied { ioctl } for pid=12911 comm="syz.3.2134" path="socket:[38718]" dev="sockfs" ino=38718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 370.987702][ T5379] usb 8-1: USB disconnect, device number 43 [ 371.057223][T12911] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 371.508929][T12946] 9pnet_fd: Insufficient options for proto=fd [ 371.660340][ T39] audit: type=1400 audit(1729712117.601:1007): avc: denied { read } for pid=12950 comm="syz.1.2145" path="socket:[39635]" dev="sockfs" ino=39635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 371.949703][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 371.988088][ T39] audit: type=1326 audit(1729712117.931:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12957 comm="syz.1.2148" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb118d7dff9 code=0x0 [ 372.178957][T12964] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 372.181366][T12964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.184753][T12964] vhci_hcd vhci_hcd.0: Device attached [ 372.239212][T12964] overlayfs: failed to resolve './file1': -2 [ 372.437528][ T9043] vhci_hcd: vhci_device speed not set [ 372.499897][ T9043] usb 19-1: new full-speed USB device number 26 using vhci_hcd [ 372.924304][T12965] vhci_hcd: connection reset by peer [ 372.953693][ T12] vhci_hcd: stop threads [ 372.954787][ T12] vhci_hcd: release socket [ 372.955893][ T12] vhci_hcd: disconnect device [ 374.139442][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 374.338878][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'. [ 375.056721][T12988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.849226][T13002] syz.0.2162[13002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.849283][T13002] syz.0.2162[13002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.873905][T13002] syz.0.2162[13002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.925485][ T39] audit: type=1326 audit(1729712121.861:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 375.947532][ T39] audit: type=1326 audit(1729712121.861:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 375.955703][ T39] audit: type=1326 audit(1729712121.861:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.037091][ T39] audit: type=1326 audit(1729712121.881:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.043081][ T39] audit: type=1326 audit(1729712121.881:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.087533][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 376.114698][ T39] audit: type=1326 audit(1729712121.881:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.130975][ T39] audit: type=1326 audit(1729712121.881:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.167469][ T39] audit: type=1326 audit(1729712121.881:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.173808][ T39] audit: type=1326 audit(1729712121.881:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.194945][ T39] audit: type=1326 audit(1729712121.881:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6e1e17dff9 code=0x7ffc0000 [ 376.918762][T12990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.617320][ T9043] vhci_hcd: vhci_device speed not set [ 377.950310][T13039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 378.277954][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.279624][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.587363][T13037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 378.589479][T13037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 378.592443][T13037] vhci_hcd vhci_hcd.0: Device attached [ 378.637154][T13038] vhci_hcd: connection closed [ 378.747291][T11331] vhci_hcd: stop threads [ 378.750642][T11331] vhci_hcd: release socket [ 378.752382][T11331] vhci_hcd: disconnect device [ 378.767178][ T5339] vhci_hcd: vhci_device speed not set [ 383.482389][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 384.497187][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 384.497200][ T39] audit: type=1400 audit(1729712130.411:1049): avc: denied { mount } for pid=13053 comm="syz.0.2178" name="/" dev="autofs" ino=41199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 385.004752][ T8010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 385.127146][ T39] audit: type=1400 audit(1729712131.051:1050): avc: denied { execute } for pid=13058 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 385.151058][ T8010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.217110][ T39] audit: type=1400 audit(1729712131.151:1051): avc: denied { unmount } for pid=5343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 385.331495][ T8010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.589341][ T8010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.800660][ T8010] bridge_slave_0: left allmulticast mode [ 385.803164][ T8010] bridge_slave_0: left promiscuous mode [ 385.807442][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.141023][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.145152][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.149513][ T8010] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 386.152366][ T8010] bond0 (unregistering): Released all slaves [ 386.158655][ T8010] bond1 (unregistering): Released all slaves [ 386.164982][ T8010] bond2 (unregistering): (slave veth5): Releasing active interface [ 386.169316][ T8010] bond2 (unregistering): Released all slaves [ 386.175046][ T8010] bond3 (unregistering): (slave team_slave_1): Releasing active interface [ 386.177763][ T8010] team_slave_1: left promiscuous mode [ 386.181226][ T8010] bond3 (unregistering): Released all slaves [ 386.186842][ T8010] bond4 (unregistering): (slave veth13): Releasing active interface [ 386.191257][ T8010] bond4 (unregistering): Released all slaves [ 386.199313][ T8010] bond5 (unregistering): (slave veth15): Releasing active interface [ 386.204514][ T8010] bond5 (unregistering): Released all slaves [ 386.213318][ T8010] bond6 (unregistering): (slave veth17): Releasing active interface [ 386.219054][ T8010] bond6 (unregistering): Released all slaves [ 386.226464][ T8010] bond7 (unregistering): (slave veth19): Releasing active interface [ 386.233479][ T8010] bond7 (unregistering): Released all slaves [ 386.322817][ T8010] tipc: Left network mode [ 386.571199][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.573189][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.575485][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.577676][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.605582][ T8010] veth1_macvtap: left promiscuous mode [ 386.608319][ T8010] veth0_macvtap: left promiscuous mode [ 386.610367][ T8010] veth1_vlan: left promiscuous mode [ 386.612313][ T8010] veth0_vlan: left promiscuous mode [ 386.823407][ T39] audit: type=1400 audit(1729712132.761:1052): avc: denied { sys_chroot } for pid=13083 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 386.830378][ T39] audit: type=1400 audit(1729712132.761:1053): avc: denied { setgid } for pid=13083 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 386.836352][ T39] audit: type=1400 audit(1729712132.761:1054): avc: denied { setuid } for pid=13083 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 386.841859][ T39] audit: type=1400 audit(1729712132.761:1055): avc: denied { setrlimit } for pid=13083 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 387.949907][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 389.590463][ T8010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.660270][ T8010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.766240][ T8010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.854331][ T8010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.989183][ T8010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.056515][ T8010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.143354][ T8010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.217493][ T8010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.341984][ T8010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.433987][ T8010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.502120][ T8010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.561117][ T8010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.719603][ T8010] team0: left allmulticast mode [ 390.721434][ T8010] team_slave_0: left allmulticast mode [ 390.723522][ T8010] team_slave_1: left allmulticast mode [ 390.724987][ T8010] team0: left promiscuous mode [ 390.726234][ T8010] team_slave_0: left promiscuous mode [ 390.728086][ T8010] team_slave_1: left promiscuous mode [ 390.730521][ T8010] bridge0: port 3(team0) entered disabled state [ 390.735306][ T8010] bridge_slave_0: left allmulticast mode [ 390.736801][ T8010] bridge_slave_0: left promiscuous mode [ 390.738947][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.822882][ T8010] ip6gretap0 (unregistering): left promiscuous mode [ 391.308958][ T8010] bridge0 (unregistering): left allmulticast mode [ 391.503442][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.507353][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.512275][ T8010] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 391.515813][ T8010] bond0 (unregistering): Released all slaves [ 391.523036][ T8010] bond1 (unregistering): Released all slaves [ 391.530377][ T8010] bond2 (unregistering): (slave veth5): Releasing active interface [ 391.534184][ T8010] bond2 (unregistering): Released all slaves [ 391.540201][ T8010] bond3 (unregistering): (slave veth7): Releasing active interface [ 391.543334][ T8010] bond3 (unregistering): Released all slaves [ 391.628457][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.632291][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.635545][ T8010] bond0 (unregistering): Released all slaves [ 391.639972][ T8010] bond1 (unregistering): Released all slaves [ 391.644248][ T8010] bond2 (unregistering): Released all slaves [ 392.492161][ T8010] batadv_slave_1: left promiscuous mode [ 392.497966][ T8010] hsr_slave_0: left promiscuous mode [ 392.500509][ T8010] hsr_slave_1: left promiscuous mode [ 392.503056][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.505755][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.509278][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.511982][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.519689][ T8010] hsr_slave_0: left promiscuous mode [ 392.522208][ T8010] hsr_slave_1: left promiscuous mode [ 392.524817][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.528502][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.531876][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.534587][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.539817][ T8010] hsr_slave_0: left promiscuous mode [ 392.542360][ T8010] hsr_slave_1: left promiscuous mode [ 392.544928][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.547889][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.551228][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.553940][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.612179][ T8010] veth0_macvtap: left promiscuous mode [ 392.613690][ T8010] veth1_vlan: left promiscuous mode [ 392.615071][ T8010] veth0_vlan: left promiscuous mode [ 392.618600][ T8010] veth1_macvtap: left promiscuous mode [ 392.619967][ T8010] veth0_macvtap: left promiscuous mode [ 392.621366][ T8010] veth1_vlan: left promiscuous mode [ 392.622745][ T8010] veth0_vlan: left promiscuous mode [ 392.625014][ T8010] veth1_macvtap: left promiscuous mode [ 392.626471][ T8010] veth0_macvtap: left promiscuous mode [ 392.628318][ T8010] veth1_vlan: left promiscuous mode [ 392.629696][ T8010] veth0_vlan: left promiscuous mode [ 393.930394][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 394.028448][ T8010] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 19:35:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=ffff888026e40940 RCX=ffffffff816b1df3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff888026e40940 RBP=ffff888026e40948 RSP=ffffc90003887d00 R8 =0000000000000000 R9 =ffffed1004dc8128 R10=ffff888026e40943 R11=0000000000000000 R12=ffff888026e40950 R13=ffff88802ea68000 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff816b1ece RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3bd5d4b280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6e1eefb9c8 CR3=0000000026dea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=0200000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0e26ffb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000636e69002f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2d0e 2f2f2f2f2f2f2f2f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f1c5b5d40 5f02181f1e011f15 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562409ec5100 0000562409ecb740 0000562409ec4c70 0000562409eaeda0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562409ecc530 0000562409ecd290 0000562409eb0850 0000562409f02770 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562409eaff50 0000562409e9f8e0 0000562409ec39c0 0000562409ee1330 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562409f02130 0000562409ea9c20 0000562409f01680 0000562409e9b0a0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc90005b10000 RDX=ffffc90005b0fe01 RSI=ffffc90005b0feb0 RDI=ffffc90005b0feb0 RBP=ffffc90005b0feb0 RSP=ffffc90005b0f428 R8 =ffffc90005b0f4d4 R9 =ffffffff90f198b4 R10=ffffc90005b0f4a0 R11=0000000000004fe1 R12=ffffc90005b0f4f0 R13=ffffc90005b0f4a0 R14=ffffc90005b0fee0 R15=ffffc90005b0fed8 RIP=ffffffff813d43a0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e54f5418e8 CR3=0000000033958000 CR4=00352ef0 DR0=0000000000000010 DR1=0000000000000006 DR2=0000000000000006 DR3=0000000000000003 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2a3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e1f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e1f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e1f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e1f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e1f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e1f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff815232f3 ffffffff81523007 ffffffff813348e5 ffffffff813348b3 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1ee6d100 00007f6e1e30b440 00007f6e00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e1e30b498 00007f6e1e30b490 00007f6e1e30b488 00007f6e1e30b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff920008acf90 RCX=ffffc90004567cc0 RDX=1ffff110040ed15b RSI=ffffffff8e1b8380 RDI=ffff888020768b2a RBP=ffff888020768b08 RSP=ffffc90004567c70 R8 =0000000000000000 R9 =fffffbfff20be969 R10=ffffffff905f4b4f R11=0000000000000000 R12=0000000000000001 R13=0000000000000002 R14=ffff888020768ad8 R15=ffff888020768000 RIP=ffffffff816aa370 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3bd5d4b280 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000080 CR3=0000000030350000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0e270520 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373734103 1c1c1f5c0516175c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737352 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 5f796d6d75642f00 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000040 0000000000000000 0000562400306963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a506dad44b022ac4 000056216bacb7a8 0000000000000291 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 000056216bbebca2 0000562409eb1700 307761726469682f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff1100a5f25e8 RDX=1ffff1100a5f25eb RSI=0000000000000022 RDI=ffff888052f92f50 RBP=0000000000000000 RSP=ffffc900048af438 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000005 R11=0000000000000002 R12=ffffffff8e1b8380 R13=ffff888052f92f48 R14=0000000000000022 R15=ffff888052f92440 RIP=ffffffff816a61b1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3bd5d4b280 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3141cff8 CR3=000000005409c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=0200000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0e26bf00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 000000000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f0e 2f2f792f4a5c5a40 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 42021e0218014b1e 151f1f151f1f1f1f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a506dad44b022ac4 000056216bac9c4a 00000000000002c1 0000000000306963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a506dad44b022ac4 0000000562409f52 0000000000000071 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562409f3b6f0 0000562409f3b670 0000562409f3b5f0 0000562409f3b570 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562409f3b4f0 0000562409ed3d30 0000562409ed3cb0 0000562409f3cc10 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020