last executing test programs: 3.728055925s ago: executing program 3 (id=682): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, &(0x7f00000006c0)}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.727238498s ago: executing program 3 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.65998842s ago: executing program 3 (id=685): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x3f, 0x8b}, 0x0) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0) (async) splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0) fcntl$setpipe(r4, 0x408, 0x0) dup3(r2, r3, 0x0) (async) dup3(r2, r3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x15}, 0x15, 0x0, 'lblcr\x00', 0x0, 0x0, 0x4000000}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1c) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) io_setup(0x6, &(0x7f0000000680)) (async) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r6, 0x0, 0x3}]) (async) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r6, 0x0, 0x3}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x7, "c03ea8963b9c67"}}}, 0x0) (async) syz_emit_ethernet(0x15, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x7, "c03ea8963b9c67"}}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x3, 0x3, 0x1, 0x1}}, 0x26) 3.259833678s ago: executing program 3 (id=686): r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x45ec, 0x56700) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000012, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.148842738s ago: executing program 3 (id=689): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x241, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='target PCI:0:', @ANYBLOB='7'], 0x13) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) unshare(0x6040600) io_uring_setup(0x410f, &(0x7f0000000340)={0x0, 0x0, 0x100}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000060000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r4}, 0x18) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd2(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0xb, &(0x7f0000000400)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @exit, @call={0x85, 0x0, 0x0, 0x11}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc9, &(0x7f00000006c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1f, r0, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x0, 0xe, 0x1}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) pwrite64(r6, &(0x7f0000000080)='3', 0x1, 0x0) 2.60975079s ago: executing program 0 (id=696): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r1, 0x0, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0018ae2ccd000000000000000000"], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300"/47, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.489951194s ago: executing program 0 (id=698): r0 = msgget(0x3, 0x200) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000008c0)=""/102386) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000440)=""/135) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x7e38, 0x8}, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000000)={0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0x9}, @hyper, 0x0, 0x4, 0x140000000000000, 0x3, 0x9, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f00000001c0)=0x1, 0x3e67) 1.898746766s ago: executing program 0 (id=699): r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x45ec, 0x56700) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000012, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.775343523s ago: executing program 0 (id=700): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) mq_open(0x0, 0x80, 0xa5, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="182010d1d606fa0000000000000000000000000000000095007d0000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() r4 = syz_open_dev$sg(&(0x7f0000000300), 0x100000000003ff, 0x3) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000380)=0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x891d, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r6, &(0x7f0000000100)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8001, {}, {0x1}, @addr={0x5, 0x9}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x15}, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x38) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000180)={0x2, 0x7, 0xd1, &(0x7f0000000340)=""/209}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r7, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r7) 1.499817434s ago: executing program 2 (id=703): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xf, 0x6f8b542b, 0x0, 0xc10c, 0x4009a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000400)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000440)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="ffbf06bddc32170f55adfe89b13b54c8a8cdc94229b9f78040d1e05e31cb7b77b639d8e54c80077cb87bbfdfd284e99943aa0789ef4eedbeb0089ad3d61bc45a955b0fee5c740ff81ff7807e588e634d8ba07f4708b28d448f730df5d1050c5434f7d8bf869d2a874db5fb3cd1ef9a8be78fcde9c5931f0032e29239523f409186224f9953dcb7ff503b220b010435b93cd148eaa67638ca3975a62602ef412a8f270264d119c5cec2d952a53fe421e4104166ed49da758db9c1147e8b640d5e23a6bb1dbf6f610b0484bbde41676a9cb883005d471187f9ac4c4470f0bdf402572e0684617d1d6ec7991a698bd19a2f57e37aa3", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff95) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000300)) 1.21950515s ago: executing program 2 (id=705): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.219110517s ago: executing program 2 (id=706): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r1, 0x0, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0018ae2ccd000000000000000000"], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300"/47, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 995.12809ms ago: executing program 2 (id=707): r0 = msgget(0x3, 0x200) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000008c0)=""/102386) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000440)=""/135) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x7e38, 0x8}, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000000)={0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x74}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0x9}, @hyper, 0x0, 0x4, 0x140000000000000, 0x3, 0x9, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f00000001c0)=0x1, 0x3e67) 939.502479ms ago: executing program 0 (id=708): r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x45ec, 0x56700) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000012, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 799.662286ms ago: executing program 0 (id=709): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffa2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x7, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x50}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="4f5a620fbf514ab8c537c467acf01e405279b8569cc850afee18f4f0f58a8c046fdf9357aa3fd74dc2bec4909b296bb82cefeaf0fd573f10dfc3ac3b3ae39bc2531e47e512f9547a88a857b691a3acddd759bd529ee1e4f35cddec2b13d6fc644b10db58cb96abdb20c5590b1717256517fb2aaffd1724f99e5f3ac69f4a636d301715964a5c6805a32154c603f389b3c1d8403c60a73cf48011486d90932e4a64d60823606baf920f8d4df9d242e2dd41ae3321990611dbc9216f31491a0789a51a44b2e79dee7bef", @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x29, &(0x7f0000000500)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x471}}, @func, @btf_id={0x18, 0xd, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x12, 0x3, 0x0, 0x3}, @cb_func], &(0x7f00000006c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x6, &(0x7f0000000880)=[r4, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x3, 0x0, 0x7}, {0x0, 0x4, 0xa, 0xb}, {0x1, 0x3, 0x9}, {0x3, 0x5, 0x6}, {0x5, 0x3, 0x20, 0x1}, {0x3, 0x4, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x23, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000001fc0)) socket(0x2a, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20040, 0x0) sendmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f0000000300)="82a457f503e1b42ab5e52206d27093ab0a53b584a2bd153331667e256d3c42a85318a4a8f8a3e66619a8dba555a85fce54363c389ea76c4d8326a79376ac24af0baeeae6f24c5603378515c9c86af25bb85cee22b384414d3707dd61365d046ced5a5751c17a1fedb9f8e565631fea91aeec29e3e04c29bf1446a68c05fab8cca22b68453fb7eb276698a098c344c14182300b69e72b93b82c8cd63598f63f21e42fb97e6925c60509c2713b0af31e33d164ba51bbd8c781c344928fbbed6ae5170530cce887", 0xc6}], 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="e000000000000000150100000b000000d72ac790ff4bfc002987b2feb0c7d84c2f7b095a4cc348b16ed88f4915b073d053be7080849a0670a3a9f8d77c5aa7adb6b1794a59c66baeb968122adc2c197d34f298aa4cc952f8fa9d4c642f78a351af466a51debfdace7f8bab20769297cb0217d9b5a8c8636f072fb3c2afb4fd474b7413f3606f26c7d98f6269afcc39bee514e660cbbfe3ebd756bde697f642da499a101a5be23348fd211438cda99e67cac16301467629b941413720d161200893548380f971aa0d859d3613676e06515bc2f3fb7d88f8a55d4603364400000000880000000000000006000000ca09000067ca6416b0c15e465c4b707b8d222c65a799850bd315ed56e686a85c1c28964045155578ae0fae4f3ac8bdda79e90aa18debce1e5c4a97b875355b0d5a2c4cbbb0ff7437a9dce1017ead588938322736543fe53238bad60752bafcf726343d7f7879db69c13906f12feb37a868a52c544171124ca300000028000000000000001901000007000000949bff0248b26537943979dae3da71f577a6e4470ab9000010000000"], 0x1a0}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)="30d6dead0dbd1394c368ec203eac6b2c2d346116e163e2717d9ab865fad5b5d268559ebeaa4b23bef7380587de50e4010b90a6506c6da0dfb9f3a0cfa3e60b401f93942b515b07b8f937ee118258cb974d8cb2139f", 0x55}, {&(0x7f00000004c0)="a9a75149d4944b3e7fbb852f1a25a1740bb71a7beb4f7fb7d3109853dde1bfcd24d0b7e7274af9485c151949257e520db2fbdceae8b2722487a5eb7637057a3ad7e058cec1af38ce06c4de3b01258718723153120a4305b851b1ac7e113610ee5d64eb82187e3f7980cf1f7cd32009e7d0ae1dd73dccf36e676b5e35e3", 0x7d}, {&(0x7f00000005c0)="46d05d71b0e27770909dd2f590a5c43521c07bbf774028b7b0fc018d490d87cf79945710f2366507dd5f9787dd552ffdd23b10ba5e2949216a68a3884c74", 0x3e}, {&(0x7f00000006c0)="f58dc4cd4cdb6768de73f369b44953e438ebf658b700980f5c0819f9a590d1a8116f926802b2336085dac52e3ce50f8ee03405cdac98e9a6f851d19548408079bd373febb6b3f23b6d6f1badda28f5b07f55a3981a5fbff09a6f776f690b8f43979a6515f2dc00c2cb19507a07db3f2d92095916ee50fed19c560e1c", 0x7c}, {&(0x7f0000000ac0)="e38104299558b9ce94954b155562529b5ac37ea48db8f5b1ed8b88d3950ba7557f96ac3656b686aebeb2d54ee2c55db7b74fdcf46608a898efe0021862906b6c7fa852af6d9a28a59c4f7ff4e617e566c1999c8732b76f2dfc380bbdd2bafbcec0794b8b2e29fdf4e1eff30a2f1a2bfd9f843030b7a2518091dd2b807a9f29e8cee5bcfffbb6d910fd159af81af86b2766f3a01792383d58f410aa2d3bc58ed08387abbad76e592773af12e87573a58558e96c8a76316071971b99b7be065ef630e67a177b7d885384cab64281088aa3855692315a18cb5db2371ef619828f46092c1633ba59602a6b1e459e6869", 0xee}, {&(0x7f0000000540)="9a18d7c5d7dc", 0x6}, {&(0x7f0000000bc0)="e8693b27e29019660f0f4dec586fbd82c438bbf6c41b76c1d734276794ca89f2be9536bfcaf523a6370679867da5143883777ff9d1e8b7cd8a7787cd867c2917a9298cadd3109c79306c81c389eaddf1d9ed9bbfd9728b457c8ab36403dda5b14fb170a3c49b2652929114f685bb0964a1ea31c623b018145e84772481b5f47afe50124814d08d702c41a04a0a5332c53db05b3fcd66cddd739d34008386a8e7bb924aec8eb468e66d5e4fd223f30be74c189c577368f978382a107a07748633a0ad58ede30f90e72d04", 0xca}, {&(0x7f0000000cc0)="1872d623f4556d4e5ddfff8fdeec49c9adac89fe4e8d1bc5b27f0f865e9b0af8d707e35ced77e2ec9d1685d9b8d51ff32f32b6ee0aa8c0894cf43fff478c9d341f5167428e1c8c9dd8b91f9313c722e549974780ea073a305c4f010adb5bca5d40932d3df5236a9c210f1b39f11324f7a33199701978b1a4f1521eaebdf4906f12e36d339772f1c7a513c23e1e5ea4f720490aa77347923736f6d91ba346c44ab43afdd33f68cac8e11570ffcc206964924a48e2fa3434dda041c6ac4d0f208ce1375da620d528dba2a92f524f4e046e9f15be00202c17a51fd29825", 0xdc}, {&(0x7f00000007c0)="0466530d6fe8637a3dcfc784ea8293c118e5a6765cd82f79185704faf74f4b8d7010c3f9e4918b3e7cb64c04b68b4d66626f50af2e1804ff9b8a236ecf13669703a11b06", 0x44}, {&(0x7f0000000dc0)="a0043b262595de4808946f086755f3081199aba4747c099e4f376facbb0a73d55f030b557ee3849e1ece8f381dc4f5c53a83b75a48659d40dd56a0a3f772eb084dd998c5c555117573a122176f4f6ddb0cd3d749f1ac53582234458f89092e9b3ce960e81639247ecbc4967a7737bc8a3186fe65deb861c496ab71a7c7b0bbabca09b72fc7c2d371d03cd282c17afd5711f3548ee9819c4551d6e655d433c0eb0d2279601b3837928cab40453b3a4bd225d94c456ecb78a1e09683959b7a0a85cd02d6e5f6483d4841c87b8bd5c3636262ca5017dc5478f2c003b82fb1ca8f9e6d2a7397d260c42dbf2ba410477f8d7847d0c6a3dab81e71bac5", 0xfa}, {&(0x7f0000002040)="0da2b06fed9eba37de749951e09cf457cb09a9911362cc14c526dcbc660b511b9fa24230f307830755263fd736a36b63f98019e8cf640fe5c05df6970a1d29af4f65ae9e5740ce662bdb04057b5dc732517c89c617ec7281dbea4ae6743e1a61a883e7c40f9c0f1acddfd251913f1e5d1ea289cf80171e97ddee7f0e49b45cbadf05524a26a618e1f1cd94e1c35cad5cf6f2f737ad", 0x95}], 0xb}}, {{&(0x7f0000000f80)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001000)="6ab926da4e7ab35c57433f31aef772b29b9a7ad8a9ce7a3741655b111a62149862b6ea2652e6098b0329a1450007ceff59a84c24f01b6d4aa906735dc650c8a9e95d22a981734b5267fb7e94b1ee2588dd9fe75dc6c2b3ea16fdbd055348280a3f1df8f28084aae042b827b1b8f6db2758b83aa21d9d", 0x76}, {&(0x7f0000001080)="00c0b69e67f3320370c8da94c13df4077fc6edab7190ff74970ed82cc8029e8eae79d3ad3c99cbed0f848c2a1d9901e08d3d0ec19cbc03f8b0019a8e0293f503795f152b2e2b43e0c117a875e157524d0112acfec47c0e6c3a43206fe5baa06201b76855b554e97af6f5290623df59db704294cf52a470ead007cab90d900516218a0bdeb1e26d15e1128cc9e7de5ab230a728ea1da43e7b64b07526dceac3205028d0bdec7329fea05105251031ea87f193741619fd9fbbd086fd8de9eaaba709d91343a00c09267e3e2b6df8b0dc", 0xcf}, {&(0x7f0000001180)="6766d7e9734e5dda2c48d1aabbfe2205f26a11f130dd5c826bfce591422334c2b2cb8ecbdf64878396325ddb4a83392b13ba05cf74ed1e0d4b17903ff1283f4f2d92aa3acb7cf51c1c32b7f582849189f488e75af0e78bd13357f88c", 0x5c}, {&(0x7f0000000640)="e6355ddec397", 0x6}, {&(0x7f0000001200)="e651c0c80aa8a73df9b98ca57433c072d40b5f3e6678c5f35c6c3d227fd2c943b3eec6b83da82134d2980ce6f56e87727bb3fc90fbe69d3c023a7b8fa02fe8c16ecbe7ba62ef76ea4c1a9c547b56e1184513fad60c90ebe5ee6e407b3384f1368a7f89ea968a64fa37c6574818d64ec575a3e5078ed468cfb64904bd3accd8587077e0d5e22cfc94ce736731358151a74f8a2cabfdc6ca8410b8e1ed693230b464f1e2046a27a2cb00f34c4e542d743828a6fc2e01fe3e53b4e9dcc38dca57352b", 0xc1}, {&(0x7f0000000180)="df262e964faed57c3ce9de73247f2b1b8905291d3a", 0x15}, {&(0x7f0000001340)="85dbe8f79c9c167d5b5424289f9e9d907e095c7e02253be2ad6f3890cfe897f50ae3a396d60b3a7e85e802b529be476afba00ac3d059f5f094b4fe2d6d639072d9700e67387c91c35f7025ef9b", 0x4d}, {&(0x7f00000013c0)="467dafb375eb8b64e99af02d84ace8d6a04d2c587ba648a7f0da85ef00111d99845bf49b9aac6cd7dc38979c10f9fb4266b4521a6e355b5d8669908bd0256c9dee3831c1025f94573ab0536e91642018d81c06891b615d1b31c11f51d662c19b4e024b45bc7d4bd03db79acfcbb51d988ac9b9deea5e0490c04e52270f10a15d05c22d1b5d5a3b6b60a4c33bf35cf6137ee1ff1c4d3bbe66e790e84d38c3cc27932ba75b65b0f617622ff9540402ee67cea28203cbe76e3a39087f84f48f4cd4dd4d95123ae47d864d06d75988d6c949644d8a38", 0xd4}, {&(0x7f00000014c0)="45452444eee414fbc009a21d3bb87a20b1ca994db7660e3cfe2aec1a0cb7d68f6bae3f52476397c69f19f3e65eb0b797d04eb3258f95cdc9026c77487799c6ac536e92422e263d398e4bd30e9e2c8606860d689f784b6d4e3f195625374f88722515855acc6fa805e138d43cc5952131eb586d07cd8e0aa0fb3e1d21f230cd474eba29263dbbab0174942efe1ece2f5b3427c2ad044044a33dced3f482d03c073667c81b94", 0xa5}, {&(0x7f0000001580)="66b060177e538d440b1f94b622", 0xd}], 0xa}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001700)="33a66cd7686a64ae5b6c5ef1a4b991c55b5cbf5792fa818ad2c454f84f3cbcfc17ba2b72e39d3c3846d238de6c1061a8a5ca3e755b9959f5851d359eb6ef77fb9d390d3c2c8f24b949c31aff9d00e926dc60391f00fc9ac235eacde46a9023538bb9a9475599c72c427882464536d7aac2cff6a6c17a73e58a30c91353b20521a006be04c14d5e31639b2416d2ee8d7841712e9e60779574a11b0a0fcdbf6508f1c90fc4b42ee6d2f469abb3d1113dc5519c64d9d6cc0a01cd78b7cddee778edd196debb3231e9ab57abeaa482a2c2c08779c516d64c0eacb1ae155dde", 0xdd}, {&(0x7f0000001800)="e5202c75c1a1fb31bd297f9c454f884f08c9f2992c83ff31cf208cf3bcdc0a18da0b27d0b21c5a9d7a7290d90575da01192f03a4eb8f6055e3d93b72d28ec402257ae1bc3d1d30797a2cb234d17617ea75cca2141f0c078187e626302b908141102f37622b93173aedbb4c3933a55757a118828fa147b03708ce1a23836cbcfdb4732d0f814a3e130792", 0x8a}, {&(0x7f00000018c0)="ec4f502b10e32b072a460ef8ac7f14a8a09e2f626d381a58017152eb0424230253fba925802f91624680d04b5ec1646a5c8a0fa1c32bd97ee92433cd76d05fb300cb9de3b5ae25fd1c649df77dbefbbe17a1622869c9cbd4d593e30d4857c810a7e59a43387c7daf91e8463320b8bbc46b2d6ee69fe8dfb6dcbe9e14cb", 0x7d}, {&(0x7f00000019c0)="9dc9679b24f36ec1ba663a464d20bf016c0bec19ec4ceaee46cdf9ec95d7314c3839bef0f538f78fb0b09c9e47a72a95c6f41aa815761d0a0a605b769933d56cffc8236f1ed76ed327c6fe94bb12c046b7418d526143335856ca2f0de92402ff6f880a83cbcf48fb5e337687a6a421d299f32ce97eb2a54505f4357d70d0be21f14e9a7f9d5e5791f693ca5a5f6161d452bc336e55b00cc60d889e9e539af61f343f8d1868c5b18efefa3f6204fcf345b5a3a8", 0xb3}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)}], 0x6, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0xe8}}], 0x4, 0x0) inotify_init() r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) read(r5, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000180)={0x2, 0xfa}, 0x2) 719.189166ms ago: executing program 2 (id=711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000ba000000bf91000000000000b702000000000000850000002e000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 718.927261ms ago: executing program 2 (id=712): syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x1}, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001e40)={r1, 0x3, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r3, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r5, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xee01, r6, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) openat$dsp(0xffffffffffffff9c, 0x0, 0x881, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000073e3ad1d76738aecb95e5bfa0578185949882dee5f54599b14d13c637e4a6e5b6c368a1bb7441b11ffada95b075af084171e376083d48299e1cf551a0b7fd581b4d827da2e8466e453b72f15a12621e46cc05ad3caba58874d869c1607a4630e29512d982393c99ce09f02488a952844ebedf3e13fdfd5bff015664fcaca8591e9d7d46c72ea0f2f8f6a299a6104d8b35a9942dfdfecb2f247235b14c5cc0c53", @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf25070000002800018008000300e000000114000400fe800000000000000000000000000000060001000a000000"], 0x3c}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x146, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 409.250545ms ago: executing program 1 (id=713): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000400)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000440)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="ffbf06bddc32170f55adfe89b13b54c8a8cdc94229b9f78040d1e05e31cb7b77b639d8e54c80077cb87bbfdfd284e99943aa0789ef4eedbeb0089ad3d61bc45a955b0fee5c740ff81ff7807e588e634d8ba07f4708b28d448f730df5d1050c5434f7d8bf869d2a874db5fb3cd1ef9a8be78fcde9c5931f0032e29239523f409186224f9953dcb7ff503b220b010435b93cd148eaa67638ca3975a62602ef412a8f270264d119c5cec2d952a53fe421e4104166ed49da758db9c1147e8b640d5e23a6bb1dbf6f610b0484bbde41676a9cb883005d471187f9ac4c4470f0bdf402572e0684617d1d6ec7991a698bd19a2f57e37aa3", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff95) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000300)) 289.825402ms ago: executing program 1 (id=714): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 289.030101ms ago: executing program 1 (id=715): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r1, 0x0, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0018ae2ccd000000000000000000"], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce6", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 229.899738ms ago: executing program 1 (id=716): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) 229.447832ms ago: executing program 1 (id=717): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) mq_open(0x0, 0x80, 0xa5, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="182010d1d606fa0000000000000000000000000000000095007d0000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() r4 = syz_open_dev$sg(&(0x7f0000000300), 0x100000000003ff, 0x3) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000380)=0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x891d, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r6, &(0x7f0000000100)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8001, {}, {0x1}, @addr={0x5, 0x9}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x15}, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x38) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000180)={0x2, 0x7, 0xd1, &(0x7f0000000340)=""/209}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r7, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r7) 0s ago: executing program 1 (id=718): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x241, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='target PCI:0:0:', @ANYBLOB='7'], 0x13) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) unshare(0x6040600) io_uring_setup(0x410f, &(0x7f0000000340)={0x0, 0x0, 0x100}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000060000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r4}, 0x18) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd2(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0xb, &(0x7f0000000400)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @exit, @call={0x85, 0x0, 0x0, 0x11}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc9, &(0x7f00000006c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1f, r0, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x0, 0xe, 0x1}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) pwrite64(r6, &(0x7f0000000080)='3', 0x1, 0x0) kernel console output (not intermixed with test programs): [ 31.134804][ T39] audit: type=1400 audit(1729727409.326:81): avc: denied { rlimitinh } for pid=5250 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.140103][ T39] audit: type=1400 audit(1729727409.326:82): avc: denied { siginh } for pid=5250 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.831674][ T39] audit: type=1400 audit(1729727410.036:83): avc: denied { read } for pid=4812 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.837790][ T39] audit: type=1400 audit(1729727410.036:84): avc: denied { append } for pid=4812 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.845917][ T39] audit: type=1400 audit(1729727410.036:85): avc: denied { open } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.854303][ T39] audit: type=1400 audit(1729727410.036:86): avc: denied { getattr } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:15554' (ED25519) to the list of known hosts. [ 32.037492][ T39] audit: type=1400 audit(1729727410.246:87): avc: denied { name_bind } for pid=5263 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.938890][ T5274] cgroup: Unknown subsys name 'net' [ 34.048078][ T5274] cgroup: Unknown subsys name 'cpuset' [ 34.052715][ T5274] cgroup: Unknown subsys name 'rlimit' [ 34.268258][ T5322] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.841170][ T5274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.308036][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 37.308047][ T39] audit: type=1400 audit(1729727415.516:105): avc: denied { execmem } for pid=5328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.765119][ T39] audit: type=1400 audit(1729727415.966:106): avc: denied { create } for pid=5332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.770407][ T39] audit: type=1400 audit(1729727415.966:107): avc: denied { read write } for pid=5332 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.778394][ T39] audit: type=1400 audit(1729727415.966:108): avc: denied { open } for pid=5332 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.784122][ T39] audit: type=1400 audit(1729727415.976:109): avc: denied { ioctl } for pid=5332 comm="syz-executor" path="socket:[6199]" dev="sockfs" ino=6199 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.809526][ T5341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.810936][ T5342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.812287][ T5341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.815694][ T5341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.817988][ T5341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.820340][ T5341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.822601][ T5341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.824440][ T5341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.827241][ T5341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.828699][ T5342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.829336][ T5347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.830188][ T5343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.831021][ T5343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.831344][ T5342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.831460][ T5342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.837799][ T39] audit: type=1400 audit(1729727416.036:110): avc: denied { read } for pid=5332 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.838007][ T4777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.838116][ T4777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.839169][ T5343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.840825][ T39] audit: type=1400 audit(1729727416.046:111): avc: denied { open } for pid=5332 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.843561][ T5341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.844421][ T5343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.844996][ T5343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.845231][ T5343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.858255][ T39] audit: type=1400 audit(1729727416.046:112): avc: denied { mounton } for pid=5332 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.862866][ T5341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.878035][ T5341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.959475][ T39] audit: type=1400 audit(1729727416.166:113): avc: denied { module_request } for pid=5332 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.990667][ T5332] chnl_net:caif_netlink_parms(): no params data found [ 38.004775][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 38.121608][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 38.156134][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.159537][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.163449][ T5332] bridge_slave_0: entered allmulticast mode [ 38.167578][ T5332] bridge_slave_0: entered promiscuous mode [ 38.179483][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.181945][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.184533][ T5337] bridge_slave_0: entered allmulticast mode [ 38.187809][ T5337] bridge_slave_0: entered promiscuous mode [ 38.192615][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.194617][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.196800][ T5337] bridge_slave_1: entered allmulticast mode [ 38.199805][ T5337] bridge_slave_1: entered promiscuous mode [ 38.203049][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.208284][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.210831][ T5332] bridge_slave_1: entered allmulticast mode [ 38.213650][ T5332] bridge_slave_1: entered promiscuous mode [ 38.272816][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 38.278046][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.281683][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.293986][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.306337][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.372530][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.375194][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.377694][ T5333] bridge_slave_0: entered allmulticast mode [ 38.380494][ T5333] bridge_slave_0: entered promiscuous mode [ 38.387318][ T5332] team0: Port device team_slave_0 added [ 38.404469][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.407004][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.408899][ T5333] bridge_slave_1: entered allmulticast mode [ 38.410889][ T5333] bridge_slave_1: entered promiscuous mode [ 38.423168][ T5332] team0: Port device team_slave_1 added [ 38.426357][ T5337] team0: Port device team_slave_0 added [ 38.428903][ T5337] team0: Port device team_slave_1 added [ 38.454216][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.474208][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.476222][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.478135][ T5345] bridge_slave_0: entered allmulticast mode [ 38.480747][ T5345] bridge_slave_0: entered promiscuous mode [ 38.484304][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.509829][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.511800][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.513729][ T5345] bridge_slave_1: entered allmulticast mode [ 38.515892][ T5345] bridge_slave_1: entered promiscuous mode [ 38.525815][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.527767][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.534551][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.538579][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.540459][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.547076][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.550401][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.552225][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.559025][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.586827][ T5333] team0: Port device team_slave_0 added [ 38.588806][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.591157][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.599978][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.613896][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.618074][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.621035][ T5333] team0: Port device team_slave_1 added [ 38.675005][ T5345] team0: Port device team_slave_0 added [ 38.678089][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.679982][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.686926][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.699576][ T5332] hsr_slave_0: entered promiscuous mode [ 38.701637][ T5332] hsr_slave_1: entered promiscuous mode [ 38.706434][ T5345] team0: Port device team_slave_1 added [ 38.717397][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.719834][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.728731][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.763635][ T5337] hsr_slave_0: entered promiscuous mode [ 38.765891][ T5337] hsr_slave_1: entered promiscuous mode [ 38.767737][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.769905][ T5337] Cannot create hsr debugfs directory [ 38.784521][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.787191][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.796777][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.800666][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.802703][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.811603][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.868189][ T5333] hsr_slave_0: entered promiscuous mode [ 38.870205][ T5333] hsr_slave_1: entered promiscuous mode [ 38.872009][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.874009][ T5333] Cannot create hsr debugfs directory [ 38.895794][ T5345] hsr_slave_0: entered promiscuous mode [ 38.897768][ T5345] hsr_slave_1: entered promiscuous mode [ 38.899497][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.901491][ T5345] Cannot create hsr debugfs directory [ 39.109907][ T5332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.116305][ T5332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.122460][ T5332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.127680][ T5332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.158788][ T5337] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.163499][ T5337] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.168530][ T5337] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.174209][ T5337] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.201252][ T5345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.207416][ T5345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.210634][ T5345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.213912][ T5345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.246277][ T5333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.251269][ T5333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.258520][ T5333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.261720][ T5333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.296893][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.315271][ T5332] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.323994][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.330584][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.332582][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.340953][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.342879][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.360462][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.371224][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.373058][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.384281][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.386223][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.394850][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.400068][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.407918][ T5332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.426628][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.430903][ T39] audit: type=1400 audit(1729727417.636:114): avc: denied { sys_module } for pid=5332 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.432211][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.441496][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.443318][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.453033][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.455081][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.466744][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.468814][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.482200][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.484072][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.527843][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.539249][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.561662][ T5332] veth0_vlan: entered promiscuous mode [ 39.573266][ T5332] veth1_vlan: entered promiscuous mode [ 39.587243][ T5337] veth0_vlan: entered promiscuous mode [ 39.598203][ T5337] veth1_vlan: entered promiscuous mode [ 39.604180][ T5332] veth0_macvtap: entered promiscuous mode [ 39.608299][ T5332] veth1_macvtap: entered promiscuous mode [ 39.617717][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.626944][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.630980][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.642418][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.648104][ T5337] veth0_macvtap: entered promiscuous mode [ 39.654545][ T5337] veth1_macvtap: entered promiscuous mode [ 39.659080][ T5332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.662154][ T5332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.665802][ T5332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668736][ T5332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.685793][ T5333] veth0_vlan: entered promiscuous mode [ 39.690290][ T5333] veth1_vlan: entered promiscuous mode [ 39.696131][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.699025][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.702349][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.705916][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.708662][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.711789][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.717610][ T5337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.719969][ T5337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722253][ T5337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.724591][ T5337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.747837][ T5345] veth0_vlan: entered promiscuous mode [ 39.758190][ T5345] veth1_vlan: entered promiscuous mode [ 39.772358][ T5333] veth0_macvtap: entered promiscuous mode [ 39.772477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.778015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.789987][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.792934][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.793316][ T5333] veth1_macvtap: entered promiscuous mode [ 39.805811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.808477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.815326][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.817710][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.820366][ T5345] veth0_macvtap: entered promiscuous mode [ 39.826213][ T5345] veth1_macvtap: entered promiscuous mode [ 39.829489][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.832210][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.834801][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.839001][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.842692][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.849767][ T5332] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.849809][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.858134][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.861453][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.865092][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.868403][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.871917][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.876678][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.879377][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.882164][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.884691][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.886782][ T5344] Bluetooth: hci2: command tx timeout [ 39.886786][ T5341] Bluetooth: hci1: command tx timeout [ 39.887661][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.893656][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.895050][ T5344] Bluetooth: hci0: command tx timeout [ 39.898140][ T5333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.900454][ T5333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.902713][ T5333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.905091][ T5333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.915497][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.919694][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.923082][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.926910][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.930242][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.933762][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.938034][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.943903][ T5345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946428][ T5345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.948796][ T5345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.951303][ T5345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.965646][ T5344] Bluetooth: hci3: command tx timeout [ 39.986784][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.988873][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.002411][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.005102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.008020][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.008140][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.012077][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.025095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.039092][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.041632][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.111577][ T5402] netlink: 'syz.3.4': attribute type 32 has an invalid length. [ 40.134253][ T5406] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 40.180471][ T5407] ebtables: ebtables: counters copy to user failed while replacing table [ 40.257005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.275068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.515006][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.675069][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 40.681270][ T8] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 40.687826][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.691646][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.693983][ T8] usb 7-1: Product: syz [ 40.695952][ T8] usb 7-1: Manufacturer: syz [ 40.697776][ T8] usb 7-1: SerialNumber: syz [ 40.711802][ T5413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.924348][ T8] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 41.124562][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.128757][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.198801][ C2] usblp0: nonzero write bulk status received: -71 [ 41.207245][ T2784] usb 7-1: USB disconnect, device number 2 [ 41.227483][ T2784] usblp0: removed [ 41.468912][ T5431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.648981][ T5433] veth0_vlan: left promiscuous mode [ 41.650949][ T5433] veth0_vlan: entered promiscuous mode [ 41.885675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.925177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.927670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.929928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.932201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.934495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.949287][ T5443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12'. [ 41.954729][ T5443] bridge_slave_1: left allmulticast mode [ 41.957146][ T5443] bridge_slave_1: left promiscuous mode [ 41.959802][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.970074][ T5344] Bluetooth: hci1: command tx timeout [ 41.975123][ T5344] Bluetooth: hci0: command tx timeout [ 41.977067][ T5341] Bluetooth: hci2: command tx timeout [ 41.986817][ T5443] bridge_slave_0: left allmulticast mode [ 41.988548][ T5443] bridge_slave_0: left promiscuous mode [ 41.995426][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.055040][ T5341] Bluetooth: hci3: command tx timeout [ 42.220554][ T5447] syzkaller0: entered promiscuous mode [ 42.222108][ T5447] syzkaller0: entered allmulticast mode [ 42.743768][ T39] kauditd_printk_skb: 88 callbacks suppressed [ 42.743779][ T39] audit: type=1400 audit(1729727420.946:203): avc: denied { create } for pid=5455 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 42.851702][ T5456] kvm: emulating exchange as write [ 42.907614][ T39] audit: type=1400 audit(1729727421.116:204): avc: denied { create } for pid=5455 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.922473][ T39] audit: type=1400 audit(1729727421.126:205): avc: denied { listen } for pid=5455 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.930239][ T39] audit: type=1400 audit(1729727421.126:206): avc: denied { connect } for pid=5455 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.936786][ T39] audit: type=1400 audit(1729727421.126:207): avc: denied { setopt } for pid=5455 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.084511][ T39] audit: type=1400 audit(1729727421.286:208): avc: denied { node_bind } for pid=5459 comm="syz.1.16" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.091945][ T39] audit: type=1400 audit(1729727421.296:209): avc: denied { read write } for pid=5459 comm="syz.1.16" name="video36" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 43.098648][ T39] audit: type=1400 audit(1729727421.296:210): avc: denied { open } for pid=5459 comm="syz.1.16" path="/dev/video36" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 43.104743][ T39] audit: type=1400 audit(1729727421.296:211): avc: denied { ioctl } for pid=5459 comm="syz.1.16" path="/dev/video36" dev="devtmpfs" ino=988 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 43.144105][ T39] audit: type=1400 audit(1729727421.346:212): avc: denied { create } for pid=5459 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.045036][ T5341] Bluetooth: hci2: command tx timeout [ 44.046587][ T5341] Bluetooth: hci0: command tx timeout [ 44.055922][ T5341] Bluetooth: hci1: command tx timeout [ 44.101882][ T5504] usb usb9: usbfs: process 5504 (syz.1.19) did not claim interface 0 before use [ 44.112843][ T5504] loop7: detected capacity change from 0 to 16384 [ 44.125088][ T5344] Bluetooth: hci3: command tx timeout [ 44.186705][ T5504] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 44.189371][ T5504] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 44.244805][ T5509] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 44.247702][ T5509] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 44.250781][ T5509] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 44.253144][ T5509] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 44.255436][ T5509] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 44.257703][ T5509] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 44.260024][ T5509] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 44.262292][ T5509] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 44.264599][ T5509] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 44.267576][ T5509] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 44.806507][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 45.265735][ T5535] x_tables: duplicate underflow at hook 1 [ 46.043037][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 46.125296][ T5341] Bluetooth: hci0: command tx timeout [ 46.125818][ T5335] Bluetooth: hci2: command tx timeout [ 46.130103][ T5344] Bluetooth: hci1: command tx timeout [ 46.215443][ T5344] Bluetooth: hci3: command tx timeout [ 46.579782][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 47.193096][ T5552] tmpfs: Bad value for 'mpol' [ 47.318182][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 47.531579][ T5559] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 47.757421][ T39] kauditd_printk_skb: 104 callbacks suppressed [ 47.757486][ T39] audit: type=1400 audit(1729727425.966:317): avc: denied { mount } for pid=5565 comm="syz.0.32" name="/" dev="9p" ino=36573092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.765592][ T39] audit: type=1400 audit(1729727425.966:318): avc: denied { read } for pid=5565 comm="syz.0.32" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.771619][ T39] audit: type=1400 audit(1729727425.966:319): avc: denied { open } for pid=5565 comm="syz.0.32" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.778099][ T39] audit: type=1400 audit(1729727425.966:320): avc: denied { ioctl } for pid=5565 comm="syz.0.32" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.784011][ T39] audit: type=1400 audit(1729727425.966:321): avc: denied { set_context_mgr } for pid=5565 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.815863][ T39] audit: type=1400 audit(1729727426.026:322): avc: denied { map } for pid=5565 comm="syz.0.32" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.821690][ T5567] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.824835][ T39] audit: type=1400 audit(1729727426.026:323): avc: denied { create } for pid=5565 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.830528][ T39] audit: type=1400 audit(1729727426.026:324): avc: denied { create } for pid=5565 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.835581][ T39] audit: type=1400 audit(1729727426.026:325): avc: denied { ioctl } for pid=5565 comm="syz.0.32" path="socket:[6012]" dev="sockfs" ino=6012 ioctlcmd=0x8b2a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.083773][ T39] audit: type=1400 audit(1729727426.286:326): avc: denied { sys_module } for pid=5568 comm="syz.3.33" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.091790][ T5344] Bluetooth: hci0: unknown advertising packet type: 0x72 [ 48.091845][ T5344] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 48.094515][ T5344] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 48.096742][ T5344] Bluetooth: hci0: Malformed LE Event: 0x02 [ 48.728115][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 48.737292][ T5583] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.740363][ T5583] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.743268][ T5583] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.746293][ T5583] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.749292][ T5583] vxlan0: entered promiscuous mode [ 51.282904][ T5622] netlink: 'syz.1.46': attribute type 16 has an invalid length. [ 51.444963][ T5344] Bluetooth: hci2: unknown advertising packet type: 0x72 [ 51.445084][ T5344] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 51.447680][ T5344] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 51.449793][ T5344] Bluetooth: hci2: Malformed LE Event: 0x02 [ 52.167271][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 52.197459][ T5644] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.147976][ T39] kauditd_printk_skb: 218 callbacks suppressed [ 53.147990][ T39] audit: type=1400 audit(1729727431.356:545): avc: denied { read write } for pid=5333 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.172119][ T39] audit: type=1400 audit(1729727431.356:546): avc: denied { open } for pid=5345 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.179248][ T5659] sp0: Synchronizing with TNC [ 53.188516][ T5659] sp0: Found TNC [ 53.197695][ T39] audit: type=1400 audit(1729727431.356:547): avc: denied { ioctl } for pid=5345 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.209088][ T39] audit: type=1400 audit(1729727431.376:548): avc: denied { read write } for pid=5658 comm="syz.2.59" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.217186][ T39] audit: type=1400 audit(1729727431.376:550): avc: denied { read } for pid=4812 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.224863][ T39] audit: type=1400 audit(1729727431.376:549): avc: denied { open } for pid=5658 comm="syz.2.59" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.241584][ T39] audit: type=1400 audit(1729727431.376:551): avc: denied { search } for pid=4812 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.249278][ T39] audit: type=1400 audit(1729727431.376:552): avc: denied { open } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.257864][ T39] audit: type=1400 audit(1729727431.376:554): avc: denied { mounton } for pid=5658 comm="syz.2.59" path="/17/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.263679][ T39] audit: type=1400 audit(1729727431.376:553): avc: denied { getattr } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.488175][ T5672] sp0: Synchronizing with TNC [ 53.492217][ T5672] fuse: Unknown parameter '0xffffffffffffffff' [ 54.940605][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 54.994264][ T5718] netlink: 76 bytes leftover after parsing attributes in process `syz.3.74'. [ 55.467765][ T5740] hub 2-0:1.0: USB hub found [ 55.469737][ T5740] hub 2-0:1.0: 2 ports detected [ 55.578859][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 55.623398][ T5750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=5750 comm=syz.0.84 [ 56.011056][ T5766] dccp_invalid_packet: P.Data Offset(59) too large [ 56.202057][ T5774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.490975][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 56.513088][ T5785] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.317135][ T5800] pimreg: entered allmulticast mode [ 57.321260][ T5799] pimreg: left allmulticast mode [ 57.335091][ T829] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.360103][ T5798] block device autoloading is deprecated and will be removed. [ 57.504979][ T829] usb 8-1: Using ep0 maxpacket: 32 [ 57.509517][ T829] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.511819][ T829] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.514140][ T829] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.517121][ T829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.519744][ T829] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.522386][ T829] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.526047][ T829] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.528487][ T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.533510][ T829] usb 8-1: config 0 descriptor?? [ 57.747022][ T829] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.783388][ T5818] Invalid logical block size (65535) [ 57.968304][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 57.985936][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.032165][ T5796] bridge_slave_0 (unregistering): left allmulticast mode [ 58.034362][ T5796] bridge_slave_0 (unregistering): left promiscuous mode [ 58.041812][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.147027][ T5373] usb 8-1: USB disconnect, device number 2 [ 58.156464][ T5373] usblp0: removed [ 59.033604][ T39] kauditd_printk_skb: 157 callbacks suppressed [ 59.033615][ T39] audit: type=1400 audit(1729727437.236:712): avc: denied { write } for pid=5842 comm="syz.3.112" name="ip6_mr_cache" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.043056][ T39] audit: type=1400 audit(1729727437.246:713): avc: denied { write } for pid=5857 comm="syz.0.114" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 59.050380][ T39] audit: type=1400 audit(1729727437.246:714): avc: denied { open } for pid=5857 comm="syz.0.114" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 59.057161][ T39] audit: type=1400 audit(1729727437.256:715): avc: denied { ioctl } for pid=5857 comm="syz.0.114" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 59.065135][ T39] audit: type=1400 audit(1729727437.256:716): avc: denied { write } for pid=5857 comm="syz.0.114" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.073340][ T39] audit: type=1400 audit(1729727437.256:717): avc: denied { open } for pid=5857 comm="syz.0.114" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.080446][ T39] audit: type=1400 audit(1729727437.266:718): avc: denied { read } for pid=5857 comm="syz.0.114" name="event0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.086779][ T39] audit: type=1400 audit(1729727437.266:719): avc: denied { open } for pid=5857 comm="syz.0.114" path="/dev/input/event0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.110158][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.112'. [ 59.177060][ T39] audit: type=1400 audit(1729727437.386:720): avc: denied { prog_load } for pid=5842 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.187794][ T39] audit: type=1400 audit(1729727437.386:721): avc: denied { bpf } for pid=5842 comm="syz.3.112" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.380289][ T5865] syzkaller0: entered promiscuous mode [ 59.382386][ T5865] syzkaller0: entered allmulticast mode [ 59.786717][ T5869] /dev/sr0: Can't open blockdev [ 60.057445][ T5872] /dev/sr0: Can't open blockdev [ 61.110833][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 62.338354][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 62.424466][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 63.256476][ T5947] hub 2-0:1.0: USB hub found [ 63.258298][ T5947] hub 2-0:1.0: 2 ports detected [ 63.299101][ T5949] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.157066][ T5959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.385768][ T39] kauditd_printk_skb: 136 callbacks suppressed [ 64.385784][ T39] audit: type=1400 audit(1729727442.596:858): avc: denied { write } for pid=5973 comm="syz.3.150" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.393593][ T39] audit: type=1400 audit(1729727442.596:859): avc: denied { open } for pid=5973 comm="syz.3.150" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.401655][ T39] audit: type=1400 audit(1729727442.606:860): avc: denied { ioctl } for pid=5973 comm="syz.3.150" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.408481][ T39] audit: type=1400 audit(1729727442.606:861): avc: denied { write } for pid=5973 comm="syz.3.150" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.414471][ T39] audit: type=1400 audit(1729727442.606:862): avc: denied { open } for pid=5973 comm="syz.3.150" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.421651][ T39] audit: type=1326 audit(1729727442.606:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.3.150" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9157dff9 code=0x0 [ 64.530018][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.611132][ T39] audit: type=1400 audit(1729727442.816:864): avc: denied { connect } for pid=5977 comm="syz.2.143" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.616958][ T39] audit: type=1326 audit(1729727442.816:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.2.143" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355337dff9 code=0x7ffc0000 [ 64.625152][ T39] audit: type=1326 audit(1729727442.816:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.2.143" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355337dff9 code=0x7ffc0000 [ 64.633340][ T39] audit: type=1326 audit(1729727442.816:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.2.143" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f355337c990 code=0x7ffc0000 [ 65.466041][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 65.496157][ T6000] capability: warning: `syz.0.145' uses deprecated v2 capabilities in a way that may be insecure [ 66.075049][ T829] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.238742][ T829] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.241876][ T829] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.244675][ T829] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.247289][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.253591][ T6001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.260085][ T829] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.577258][ T25] usb 7-1: USB disconnect, device number 3 [ 66.613615][ T6009] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 66.617003][ T6009] PKCS7: Only support pkcs7_signedData type [ 67.534618][ T6026] dvmrp0: entered allmulticast mode [ 67.537843][ T6026] pimreg3: entered allmulticast mode [ 67.661913][ T6037] hub 2-0:1.0: USB hub found [ 67.663286][ T6037] hub 2-0:1.0: 2 ports detected [ 67.892725][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 69.087018][ C3] Dead loop on virtual device ipvlan1, fix it urgently! [ 69.510435][ T6105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.638805][ T39] kauditd_printk_skb: 151 callbacks suppressed [ 69.638820][ T39] audit: type=1400 audit(1729727447.846:1019): avc: denied { getopt } for pid=6112 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.647900][ T39] audit: type=1400 audit(1729727447.856:1020): avc: denied { read write } for pid=6112 comm="syz.2.179" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.655002][ T39] audit: type=1400 audit(1729727447.856:1021): avc: denied { open } for pid=6112 comm="syz.2.179" path="/dev/ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.661357][ T39] audit: type=1400 audit(1729727447.856:1022): avc: denied { ioctl } for pid=6112 comm="syz.2.179" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.667886][ T39] audit: type=1400 audit(1729727447.866:1023): avc: denied { create } for pid=6112 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.673631][ T39] audit: type=1400 audit(1729727447.866:1024): avc: denied { connect } for pid=6112 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.762563][ T39] audit: type=1400 audit(1729727447.966:1025): avc: denied { ioctl } for pid=6115 comm="syz.2.180" path="socket:[11854]" dev="sockfs" ino=11854 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.853590][ T39] audit: type=1400 audit(1729727448.056:1026): avc: denied { write } for pid=6117 comm="syz.1.181" name="snmp" dev="proc" ino=4026533060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.870163][ T39] audit: type=1400 audit(1729727448.076:1027): avc: denied { ioctl } for pid=6117 comm="syz.1.181" path="socket:[10100]" dev="sockfs" ino=10100 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.478045][ T39] audit: type=1400 audit(1729727448.676:1028): avc: denied { create } for pid=6133 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 70.915027][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.015841][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.017573][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.065115][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 71.068913][ T25] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.071033][ T25] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.073268][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.075986][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.078480][ T25] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.081094][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.084655][ T25] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.087339][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.094079][ T25] usb 7-1: config 0 descriptor?? [ 71.303999][ T25] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.323407][ T6165] bond1: entered allmulticast mode [ 71.554292][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 71.726369][ T5373] usb 7-1: USB disconnect, device number 4 [ 71.729970][ T5373] usblp0: removed [ 71.733013][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.198'. [ 73.455541][ T6254] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 73.918671][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'. [ 74.753064][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 74.753075][ T39] audit: type=1400 audit(1729727452.956:1074): avc: denied { unmount } for pid=5333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 74.862810][ T39] audit: type=1400 audit(1729727453.066:1075): avc: denied { connect } for pid=6297 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.979503][ T6306] overlayfs: missing 'lowerdir' [ 75.025272][ T39] audit: type=1400 audit(1729727453.226:1076): avc: denied { create } for pid=6301 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.048654][ T39] audit: type=1400 audit(1729727453.236:1077): avc: denied { connect } for pid=6301 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.102042][ T39] audit: type=1400 audit(1729727453.306:1078): avc: denied { ioctl } for pid=6301 comm="syz.3.228" path="socket:[12388]" dev="sockfs" ino=12388 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.132454][ T6310] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 75.134355][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.139357][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 75.165138][ T5341] Bluetooth: hci3: command 0x0405 tx timeout [ 75.266834][ C2] ata1: illegal qc_active transition (00000000->00200000) [ 75.315018][ T830] vhci_hcd: vhci_device speed not set [ 75.360310][ T39] audit: type=1400 audit(1729727453.566:1079): avc: denied { mounton } for pid=6318 comm="syz.1.230" path="/proc/173/task" dev="proc" ino=13485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 75.363516][ T6319] EXT4-fs (sda1): shut down requested (2) [ 75.366479][ T39] audit: type=1400 audit(1729727453.566:1080): avc: denied { mount } for pid=6318 comm="syz.1.230" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.368030][ T6319] Aborting journal on device sda1-8. [ 75.376287][ T830] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 75.590029][ T1070] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 75.595367][ T1070] ata1.00: configured for UDMA/100 [ 75.640371][ T39] audit: type=1400 audit(1729727453.846:1081): avc: denied { create } for pid=6326 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.647431][ T39] audit: type=1400 audit(1729727453.856:1082): avc: denied { bind } for pid=6326 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.771220][ T6313] vhci_hcd: connection reset by peer [ 75.786410][ T65] vhci_hcd: stop threads [ 75.788211][ T65] vhci_hcd: release socket [ 75.790409][ T65] vhci_hcd: disconnect device [ 75.834969][ T5373] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 75.997950][ T5373] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.000520][ T5373] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 76.003217][ T5373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.022864][ T5373] usb 7-1: config 0 descriptor?? [ 76.107581][ T39] audit: type=1400 audit(1729727454.316:1083): avc: denied { setopt } for pid=6332 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.184464][ T30] cfg80211: failed to load regulatory.db [ 76.233342][ T30] usb 7-1: USB disconnect, device number 5 [ 76.485832][ T6341] ======================================================= [ 76.485832][ T6341] WARNING: The mand mount option has been deprecated and [ 76.485832][ T6341] and is ignored by this kernel. Remove the mand [ 76.485832][ T6341] option from the mount to silence this warning. [ 76.485832][ T6341] ======================================================= [ 76.909683][ T6359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 76.912833][ T6359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 76.918248][ T6359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 76.920639][ T6359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 76.922996][ T6359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 76.926464][ T6359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=248 [ 76.929055][ T6359] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 76.931347][ T6359] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 77.590805][ T6375] Zero length message leads to an empty skb [ 77.805493][ T6391] process 'syz.0.251' launched './file0' with NULL argv: empty string added [ 77.813688][ T6391] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 77.839982][ T8] IPVS: starting estimator thread 0... [ 77.841718][ T6393] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 77.925256][ T6394] IPVS: using max 33 ests per chain, 79200 per kthread [ 78.055234][ T2784] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 78.149070][ T6410] random: crng reseeded on system resumption [ 78.325216][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.495073][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 78.506294][ T25] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 78.509065][ T25] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 78.511786][ T25] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 78.514800][ T25] usb 7-1: config 250 has no interface number 0 [ 78.520773][ T25] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 78.524338][ T25] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 78.527312][ T25] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 78.529990][ T25] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 78.533431][ T25] usb 7-1: config 250 interface 228 has no altsetting 0 [ 78.537569][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 78.540257][ T25] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 78.543048][ T25] usb 7-1: Product: syz [ 78.544512][ T25] usb 7-1: SerialNumber: syz [ 78.552305][ T25] hub 7-1:250.228: bad descriptor, ignoring hub [ 78.554802][ T25] hub 7-1:250.228: probe with driver hub failed with error -5 [ 78.761925][ T25] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 79.049190][ C0] usblp0: nonzero read bulk status received: -71 [ 79.095810][ T6405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.256'. [ 79.913524][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 79.913540][ T39] audit: type=1400 audit(1729727458.116:1116): avc: denied { read write } for pid=6471 comm="syz.0.273" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.921788][ T39] audit: type=1400 audit(1729727458.116:1117): avc: denied { open } for pid=6471 comm="syz.0.273" path="/dev/uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.019957][ T39] audit: type=1400 audit(1729727458.226:1118): avc: denied { ioctl } for pid=6471 comm="syz.0.273" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.039142][ T6472] ceph: No mds server is up or the cluster is laggy [ 80.048278][ T5376] libceph: connect (1)[c::]:6789 error -101 [ 80.057039][ T5376] libceph: mon0 (1)[c::]:6789 connect error [ 80.354407][ T39] audit: type=1400 audit(1729727458.556:1119): avc: denied { write } for pid=6479 comm="syz.0.274" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.361966][ T39] audit: type=1400 audit(1729727458.556:1120): avc: denied { open } for pid=6479 comm="syz.0.274" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.370757][ T39] audit: type=1400 audit(1729727458.566:1121): avc: denied { ioctl } for pid=6479 comm="syz.0.274" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.385369][ T39] audit: type=1400 audit(1729727458.566:1122): avc: denied { write } for pid=6479 comm="syz.0.274" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 80.394687][ T39] audit: type=1326 audit(1729727458.566:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.0.274" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cab17dff9 code=0x0 [ 80.525018][ T830] vhci_hcd: vhci_device speed not set [ 80.535424][ T39] audit: type=1400 audit(1729727458.746:1124): avc: denied { append } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.599572][ T39] audit: type=1400 audit(1729727458.806:1125): avc: denied { read write } for pid=5337 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.206999][ T5448] usb 7-1: USB disconnect, device number 6 [ 81.211042][ T5448] usblp0: removed [ 82.354247][ T5344] block nbd1: Receive control failed (result -104) [ 82.381652][ T6515] block nbd1: shutting down sockets [ 83.301510][ T5344] block nbd0: Receive control failed (result -32) [ 83.309675][ T6560] block nbd0: shutting down sockets [ 83.448547][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 83.508815][ T6573] syzkaller1: entered promiscuous mode [ 83.510348][ T6573] syzkaller1: entered allmulticast mode [ 83.815385][ T6589] FAULT_INJECTION: forcing a failure. [ 83.815385][ T6589] name failslab, interval 1, probability 0, space 0, times 1 [ 83.818710][ T6589] CPU: 3 UID: 0 PID: 6589 Comm: syz.3.302 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 83.822290][ T6589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.825474][ T6589] Call Trace: [ 83.826382][ T6589] [ 83.827194][ T6589] dump_stack_lvl+0x16c/0x1f0 [ 83.828496][ T6589] should_fail_ex+0x497/0x5b0 [ 83.830194][ T6589] ? fs_reclaim_acquire+0xae/0x150 [ 83.832022][ T6589] should_failslab+0xc2/0x120 [ 83.833330][ T6589] __kmalloc_noprof+0xcb/0x400 [ 83.834614][ T6589] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 83.836119][ T6589] tomoyo_realpath_from_path+0xb9/0x720 [ 83.837664][ T6589] ? tomoyo_path_number_perm+0x232/0x590 [ 83.839178][ T6589] tomoyo_path_number_perm+0x245/0x590 [ 83.840667][ T6589] ? tomoyo_path_number_perm+0x232/0x590 [ 83.842201][ T6589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.843790][ T6589] ? trace_lock_acquire+0x14a/0x1d0 [ 83.845225][ T6589] ? lock_acquire+0x2f/0xb0 [ 83.846439][ T6589] ? __fget_files+0x40/0x3f0 [ 83.847673][ T6589] ? __fget_files+0x244/0x3f0 [ 83.849085][ T6589] security_file_ioctl+0x9b/0x240 [ 83.850706][ T6589] __x64_sys_ioctl+0xbb/0x220 [ 83.852016][ T6589] do_syscall_64+0xcd/0x250 [ 83.853297][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.854938][ T6589] RIP: 0033:0x7f0d9157dff9 [ 83.856191][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.861374][ T6589] RSP: 002b:00007f0d923f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.863585][ T6589] RAX: ffffffffffffffda RBX: 00007f0d91735f80 RCX: 00007f0d9157dff9 [ 83.865731][ T6589] RDX: 00000000200001c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 83.867830][ T6589] RBP: 00007f0d923f0090 R08: 0000000000000000 R09: 0000000000000000 [ 83.870195][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.872399][ T6589] R13: 0000000000000000 R14: 00007f0d91735f80 R15: 00007ffd854cd338 [ 83.874502][ T6589] [ 83.885031][ T6589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.335340][ T6611] overlayfs: missing 'lowerdir' [ 84.464712][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 84.537309][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 84.547708][ T6611] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 84.549570][ T6611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.552469][ T6611] vhci_hcd vhci_hcd.0: Device attached [ 84.725104][ T5448] vhci_hcd: vhci_device speed not set [ 84.785063][ T5448] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 84.945799][ T39] kauditd_printk_skb: 136 callbacks suppressed [ 84.945810][ T39] audit: type=1400 audit(1729727463.146:1262): avc: denied { create } for pid=6621 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.952445][ T39] audit: type=1400 audit(1729727463.156:1263): avc: denied { read write } for pid=6623 comm="syz.3.308" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.972636][ T39] audit: type=1400 audit(1729727463.156:1264): avc: denied { open } for pid=6623 comm="syz.3.308" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.979012][ T39] audit: type=1400 audit(1729727463.166:1265): avc: denied { mount } for pid=6623 comm="syz.3.308" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.984817][ T39] audit: type=1400 audit(1729727463.176:1266): avc: denied { connect } for pid=6621 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.988623][ T6617] vhci_hcd: connection reset by peer [ 84.991300][ T39] audit: type=1400 audit(1729727463.176:1267): avc: denied { getopt } for pid=6621 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.997965][ T12] vhci_hcd: stop threads [ 84.999106][ T12] vhci_hcd: release socket [ 85.000955][ T12] vhci_hcd: disconnect device [ 85.075662][ T39] audit: type=1400 audit(1729727463.286:1268): avc: denied { create } for pid=6630 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.168721][ T39] audit: type=1400 audit(1729727463.376:1269): avc: denied { unmount } for pid=5332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.191994][ T39] audit: type=1400 audit(1729727463.396:1270): avc: denied { read } for pid=6630 comm="syz.2.309" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.207224][ T39] audit: type=1400 audit(1729727463.396:1271): avc: denied { open } for pid=6630 comm="syz.2.309" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.289672][ T6643] FAULT_INJECTION: forcing a failure. [ 85.289672][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 85.292995][ T6643] CPU: 3 UID: 0 PID: 6643 Comm: syz.3.312 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 85.296180][ T6643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.298954][ T6643] Call Trace: [ 85.299850][ T6643] [ 85.300641][ T6643] dump_stack_lvl+0x16c/0x1f0 [ 85.301892][ T6643] should_fail_ex+0x497/0x5b0 [ 85.303173][ T6643] ? fs_reclaim_acquire+0xae/0x150 [ 85.304521][ T6643] should_failslab+0xc2/0x120 [ 85.305769][ T6643] __kmalloc_noprof+0xcb/0x400 [ 85.307032][ T6643] ? d_absolute_path+0x137/0x1b0 [ 85.308349][ T6643] tomoyo_encode2+0x100/0x3e0 [ 85.309586][ T6643] tomoyo_encode+0x29/0x50 [ 85.310767][ T6643] tomoyo_realpath_from_path+0x19d/0x720 [ 85.312329][ T6643] tomoyo_path_number_perm+0x245/0x590 [ 85.313771][ T6643] ? tomoyo_path_number_perm+0x232/0x590 [ 85.315231][ T6643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.316817][ T6643] ? trace_lock_acquire+0x14a/0x1d0 [ 85.318179][ T6643] ? lock_acquire+0x2f/0xb0 [ 85.319373][ T6643] ? __fget_files+0x40/0x3f0 [ 85.320630][ T6643] ? __fget_files+0x244/0x3f0 [ 85.321985][ T6643] security_file_ioctl+0x9b/0x240 [ 85.323322][ T6643] __x64_sys_ioctl+0xbb/0x220 [ 85.324564][ T6643] do_syscall_64+0xcd/0x250 [ 85.325765][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.327309][ T6643] RIP: 0033:0x7f0d9157dff9 [ 85.328491][ T6643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.333486][ T6643] RSP: 002b:00007f0d923f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.335640][ T6643] RAX: ffffffffffffffda RBX: 00007f0d91735f80 RCX: 00007f0d9157dff9 [ 85.337692][ T6643] RDX: 00000000200001c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 85.339752][ T6643] RBP: 00007f0d923f0090 R08: 0000000000000000 R09: 0000000000000000 [ 85.341818][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.343904][ T6643] R13: 0000000000000000 R14: 00007f0d91735f80 R15: 00007ffd854cd338 [ 85.346044][ T6643] [ 85.354228][ T6643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.296651][ T5344] block nbd3: Receive control failed (result -104) [ 86.306236][ T6648] block nbd3: shutting down sockets [ 86.521986][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 86.653592][ T6705] overlayfs: missing 'lowerdir' [ 86.720497][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 86.792701][ T6713] FAULT_INJECTION: forcing a failure. [ 86.792701][ T6713] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.799691][ T6713] CPU: 2 UID: 0 PID: 6713 Comm: syz.3.326 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 86.803444][ T6713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.807182][ T6713] Call Trace: [ 86.808397][ T6713] [ 86.809474][ T6713] dump_stack_lvl+0x16c/0x1f0 [ 86.811208][ T6713] should_fail_ex+0x497/0x5b0 [ 86.812908][ T6713] _copy_from_user+0x30/0xf0 [ 86.814455][ T6713] __tun_chr_ioctl+0x2d2/0x4760 [ 86.816210][ T6713] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 86.818541][ T6713] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 86.820822][ T6713] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 86.822701][ T6713] ? selinux_file_ioctl+0x180/0x270 [ 86.824547][ T6713] ? selinux_file_ioctl+0xb4/0x270 [ 86.826394][ T6713] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 86.828233][ T6713] __x64_sys_ioctl+0x18f/0x220 [ 86.829914][ T6713] do_syscall_64+0xcd/0x250 [ 86.831677][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.833785][ T6713] RIP: 0033:0x7f0d9157dff9 [ 86.835329][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.842020][ T6713] RSP: 002b:00007f0d923f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.844969][ T6713] RAX: ffffffffffffffda RBX: 00007f0d91735f80 RCX: 00007f0d9157dff9 [ 86.847749][ T6713] RDX: 00000000200001c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 86.850487][ T6713] RBP: 00007f0d923f0090 R08: 0000000000000000 R09: 0000000000000000 [ 86.853244][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.856092][ T6713] R13: 0000000000000000 R14: 00007f0d91735f80 R15: 00007ffd854cd338 [ 86.858913][ T6713] [ 86.861083][ T6705] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 86.863121][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.867685][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 87.055057][ T35] vhci_hcd: vhci_device speed not set [ 87.125221][ T35] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 87.595206][ T6714] vhci_hcd: connection reset by peer [ 87.598131][ T99] vhci_hcd: stop threads [ 87.599669][ T99] vhci_hcd: release socket [ 87.601404][ T99] vhci_hcd: disconnect device [ 87.853432][ T25] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 88.346867][ T5344] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 88.667574][ T6767] FAULT_INJECTION: forcing a failure. [ 88.667574][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.671386][ T6767] CPU: 3 UID: 0 PID: 6767 Comm: syz.1.340 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 88.674179][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.676979][ T6767] Call Trace: [ 88.677878][ T6767] [ 88.678663][ T6767] dump_stack_lvl+0x16c/0x1f0 [ 88.679960][ T6767] should_fail_ex+0x497/0x5b0 [ 88.681225][ T6767] _copy_to_user+0x30/0xc0 [ 88.682409][ T6767] simple_read_from_buffer+0xd0/0x160 [ 88.683856][ T6767] proc_fail_nth_read+0x198/0x270 [ 88.685177][ T6767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.686587][ T6767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.688040][ T6767] vfs_read+0x1ce/0xbd0 [ 88.689149][ T6767] ? __fget_files+0x23a/0x3f0 [ 88.690399][ T6767] ? fdget_pos+0x24c/0x360 [ 88.691558][ T6767] ? __pfx_lock_release+0x10/0x10 [ 88.692853][ T6767] ? trace_lock_acquire+0x14a/0x1d0 [ 88.694243][ T6767] ? __pfx_vfs_read+0x10/0x10 [ 88.695529][ T6767] ? __pfx___mutex_lock+0x10/0x10 [ 88.696873][ T6767] ? __fget_files+0x244/0x3f0 [ 88.698120][ T6767] ksys_read+0x12f/0x260 [ 88.699263][ T6767] ? __pfx_ksys_read+0x10/0x10 [ 88.700561][ T6767] do_syscall_64+0xcd/0x250 [ 88.701765][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.703460][ T6767] RIP: 0033:0x7f0d4137ca3c [ 88.704675][ T6767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 88.709654][ T6767] RSP: 002b:00007f0d4223c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.711791][ T6767] RAX: ffffffffffffffda RBX: 00007f0d41535f80 RCX: 00007f0d4137ca3c [ 88.713998][ T6767] RDX: 000000000000000f RSI: 00007f0d4223c0a0 RDI: 0000000000000004 [ 88.716193][ T6767] RBP: 00007f0d4223c090 R08: 0000000000000000 R09: 0000000000000000 [ 88.718162][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.720181][ T6767] R13: 0000000000000000 R14: 00007f0d41535f80 R15: 00007ffca9342ab8 [ 88.722129][ T6767] [ 88.981565][ T6769] mmap: syz.2.341 (6769): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 89.053878][ T6778] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 89.083160][ T5344] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 89.575320][ T99] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 89.875142][ T5448] vhci_hcd: vhci_device speed not set [ 90.004347][ T39] kauditd_printk_skb: 140 callbacks suppressed [ 90.004360][ T39] audit: type=1400 audit(1729727468.206:1412): avc: denied { read write } for pid=5345 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.024033][ T39] audit: type=1400 audit(1729727468.206:1413): avc: denied { open } for pid=5345 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.040189][ T39] audit: type=1400 audit(1729727468.206:1414): avc: denied { ioctl } for pid=5345 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.103387][ T39] audit: type=1400 audit(1729727468.306:1415): avc: denied { name_bind } for pid=6815 comm="syz.2.354" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.110818][ T39] audit: type=1400 audit(1729727468.316:1416): avc: denied { create } for pid=6818 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.111646][ T6820] 9pnet_fd: Insufficient options for proto=fd [ 90.116277][ T39] audit: type=1400 audit(1729727468.316:1417): avc: denied { read } for pid=6818 comm="syz.3.353" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.124108][ T39] audit: type=1400 audit(1729727468.316:1418): avc: denied { open } for pid=6818 comm="syz.3.353" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.131344][ T39] audit: type=1400 audit(1729727468.316:1419): avc: denied { ioctl } for pid=6818 comm="syz.3.353" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.138009][ T39] audit: type=1400 audit(1729727468.316:1420): avc: denied { getopt } for pid=6818 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.143178][ T39] audit: type=1400 audit(1729727468.316:1421): avc: denied { mounton } for pid=6818 comm="syz.3.353" path="/84/file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.182360][ T6816] cdrom: dropping to single frame dma [ 90.843145][ T6852] evm: overlay not supported [ 91.305004][ T5448] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 91.467241][ T5448] usb 8-1: not running at top speed; connect to a high speed hub [ 91.472154][ T5448] usb 8-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 3748, setting to 64 [ 91.475562][ T5448] usb 8-1: config 1 interface 0 altsetting 16 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 91.478535][ T5448] usb 8-1: config 1 interface 0 has no altsetting 0 [ 91.482030][ T5448] usb 8-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40 [ 91.484778][ T5448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.488749][ T5448] usb 8-1: Product: syz [ 91.489971][ T5448] usb 8-1: Manufacturer: Ⰱ [ 91.491206][ T5448] usb 8-1: SerialNumber: syz [ 91.498536][ T6859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.500681][ T6859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.940611][ T5448] usbhid 8-1:1.0: can't add hid device: -71 [ 91.942619][ T5448] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 91.947690][ T5448] usb 8-1: USB disconnect, device number 3 [ 92.181697][ T6884] 9pnet_fd: Insufficient options for proto=fd [ 92.275064][ T35] vhci_hcd: vhci_device speed not set [ 92.399921][ T6895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6895 comm=syz.0.375 [ 92.417381][ T5344] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 92.617558][ T6905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.405134][ T5399] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 93.714306][ T6957] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.202337][ T39] kauditd_printk_skb: 267 callbacks suppressed [ 95.202348][ T39] audit: type=1400 audit(1729727473.406:1689): avc: denied { create } for pid=6990 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.209150][ T39] audit: type=1400 audit(1729727473.406:1690): avc: denied { setopt } for pid=6990 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.214136][ T39] audit: type=1400 audit(1729727473.406:1691): avc: denied { bind } for pid=6990 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.219063][ T39] audit: type=1400 audit(1729727473.406:1692): avc: denied { name_bind } for pid=6990 comm="syz.2.402" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.224598][ T39] audit: type=1400 audit(1729727473.406:1693): avc: denied { node_bind } for pid=6990 comm="syz.2.402" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 95.230085][ T39] audit: type=1400 audit(1729727473.416:1694): avc: denied { execmem } for pid=6990 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.265809][ T39] audit: type=1400 audit(1729727473.476:1695): avc: denied { write } for pid=6995 comm="syz.3.405" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.272045][ T39] audit: type=1400 audit(1729727473.476:1696): avc: denied { open } for pid=6995 comm="syz.3.405" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.278844][ T39] audit: type=1400 audit(1729727473.486:1697): avc: denied { ioctl } for pid=6995 comm="syz.3.405" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.285451][ T39] audit: type=1400 audit(1729727473.486:1698): avc: denied { write } for pid=6995 comm="syz.3.405" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.325977][ T99] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 97.393789][ T5344] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 97.608097][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 97.610599][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 97.624191][ T7050] erspan0: entered promiscuous mode [ 97.634150][ T7050] batadv_slave_1: entered promiscuous mode [ 97.652814][ T5376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 97.667516][ T5376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 97.696313][ T5376] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 97.841400][ T7050] sp0: Synchronizing with TNC [ 99.108390][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 99.114998][ T5448] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 99.235854][ T7119] IPv6: Can't replace route, no match found [ 99.295028][ T5448] usb 8-1: Using ep0 maxpacket: 8 [ 99.299199][ T5448] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 99.301421][ T5448] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 99.303599][ T5448] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 99.306507][ T5448] usb 8-1: config 250 has no interface number 0 [ 99.308288][ T5448] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 99.311429][ T5448] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 99.314232][ T5448] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 99.317122][ T5448] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 99.320830][ T5448] usb 8-1: config 250 interface 228 has no altsetting 0 [ 99.323800][ T5448] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 99.326795][ T5448] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 99.329690][ T5448] usb 8-1: Product: syz [ 99.330763][ T5448] usb 8-1: SerialNumber: syz [ 99.334221][ T5448] hub 8-1:250.228: bad descriptor, ignoring hub [ 99.337516][ T5448] hub 8-1:250.228: probe with driver hub failed with error -5 [ 99.538217][ T5448] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 99.809225][ C3] usblp0: nonzero read bulk status received: -71 [ 99.815273][ T5373] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 99.845562][ T7104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.434'. [ 99.948439][ T5344] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 100.056607][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 100.317142][ T39] kauditd_printk_skb: 177 callbacks suppressed [ 100.317154][ T39] audit: type=1400 audit(1729727478.526:1876): avc: denied { read write } for pid=7157 comm="syz.1.447" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.326175][ T39] audit: type=1400 audit(1729727478.526:1877): avc: denied { open } for pid=7157 comm="syz.1.447" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.332860][ T39] audit: type=1400 audit(1729727478.526:1878): avc: denied { ioctl } for pid=7157 comm="syz.1.447" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.342520][ T39] audit: type=1400 audit(1729727478.536:1879): avc: denied { append } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.352256][ T39] audit: type=1400 audit(1729727478.536:1880): avc: denied { prog_load } for pid=7157 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.360107][ T39] audit: type=1400 audit(1729727478.536:1881): avc: denied { bpf } for pid=7157 comm="syz.1.447" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.445754][ C3] Dead loop on virtual device ipvlan1, fix it urgently! [ 100.489156][ T39] audit: type=1400 audit(1729727478.696:1882): avc: denied { read write } for pid=5337 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.495668][ T39] audit: type=1400 audit(1729727478.696:1883): avc: denied { open } for pid=5337 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.503877][ T39] audit: type=1400 audit(1729727478.696:1884): avc: denied { ioctl } for pid=5337 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.513462][ T39] audit: type=1400 audit(1729727478.716:1885): avc: denied { create } for pid=7163 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.072672][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 101.085566][ T1101] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 101.815141][ T30] usb 8-1: USB disconnect, device number 4 [ 101.818153][ T30] usblp0: removed [ 102.103591][ T5344] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 102.157219][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 102.221563][ T7227] overlayfs: failed to resolve './file2': -2 [ 103.018056][ T25] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 103.303751][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 104.405633][ T5399] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 104.612202][ T5399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.615352][ T5399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.618087][ T5399] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.621996][ T5399] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.625239][ T5399] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.632143][ T5399] usb 7-1: config 0 descriptor?? [ 105.061249][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.065906][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.067992][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.070794][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.073033][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.075612][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.077727][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.079707][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.081691][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.083924][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.085906][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 105.087844][ T5399] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 13/15 [ 105.090393][ T5399] plantronics 0003:047F:FFFF.0003: parse failed [ 105.091513][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 105.092323][ T5399] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 105.260137][ T2784] usb 7-1: USB disconnect, device number 7 [ 105.418629][ T39] kauditd_printk_skb: 133 callbacks suppressed [ 105.418639][ T39] audit: type=1400 audit(1729727483.626:2019): avc: denied { read } for pid=7327 comm="syz.3.491" name="event0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.427553][ T39] audit: type=1400 audit(1729727483.636:2020): avc: denied { open } for pid=7327 comm="syz.3.491" path="/dev/input/event0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.437564][ T39] audit: type=1400 audit(1729727483.646:2021): avc: denied { read } for pid=7327 comm="syz.3.491" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.443670][ T39] audit: type=1400 audit(1729727483.646:2022): avc: denied { open } for pid=7327 comm="syz.3.491" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.533750][ T39] audit: type=1400 audit(1729727483.736:2023): avc: denied { read write } for pid=5337 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.540604][ T39] audit: type=1400 audit(1729727483.736:2024): avc: denied { open } for pid=5337 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.547237][ T39] audit: type=1400 audit(1729727483.736:2025): avc: denied { ioctl } for pid=5337 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.554042][ T39] audit: type=1400 audit(1729727483.756:2026): avc: denied { prog_load } for pid=7337 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.561748][ T39] audit: type=1400 audit(1729727483.756:2027): avc: denied { bpf } for pid=7337 comm="syz.1.494" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.575228][ T39] audit: type=1400 audit(1729727483.756:2028): avc: denied { perfmon } for pid=7337 comm="syz.1.494" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.219493][ T1101] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 106.935557][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 107.482167][ T7406] trusted_key: syz.0.514 sent an empty control message without MSG_MORE. [ 108.787088][ T1101] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 108.821858][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 109.107463][ T7473] overlayfs: missing 'workdir' [ 109.107536][ T7472] overlayfs: missing 'workdir' [ 109.359906][ T7482] lo speed is unknown, defaulting to 1000 [ 109.361515][ T7482] lo speed is unknown, defaulting to 1000 [ 109.363876][ T7482] lo speed is unknown, defaulting to 1000 [ 109.369060][ T7482] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.374646][ T7482] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.399950][ T7482] lo speed is unknown, defaulting to 1000 [ 109.404622][ T7482] lo speed is unknown, defaulting to 1000 [ 109.409293][ T7482] lo speed is unknown, defaulting to 1000 [ 109.412939][ T7482] lo speed is unknown, defaulting to 1000 [ 109.422851][ T5344] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 110.346642][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 110.701774][ T39] kauditd_printk_skb: 147 callbacks suppressed [ 110.701784][ T39] audit: type=1400 audit(1729727488.906:2176): avc: denied { read write } for pid=5332 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.738894][ T39] audit: type=1400 audit(1729727488.916:2177): avc: denied { open } for pid=5332 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.753781][ T39] audit: type=1400 audit(1729727488.916:2178): avc: denied { ioctl } for pid=5332 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.761888][ T39] audit: type=1400 audit(1729727488.926:2179): avc: denied { append } for pid=4812 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.778291][ T39] audit: type=1400 audit(1729727488.966:2180): avc: denied { map_create } for pid=7530 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.784530][ T39] audit: type=1400 audit(1729727488.966:2181): avc: denied { perfmon } for pid=7530 comm="syz.3.548" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.790917][ T39] audit: type=1400 audit(1729727488.966:2182): avc: denied { map_read map_write } for pid=7530 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.808660][ T39] audit: type=1400 audit(1729727488.986:2183): avc: denied { prog_load } for pid=7530 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.822667][ T39] audit: type=1400 audit(1729727488.986:2184): avc: denied { bpf } for pid=7530 comm="syz.3.548" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.830757][ T39] audit: type=1400 audit(1729727488.986:2185): avc: denied { prog_run } for pid=7530 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.965758][ T1107] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 112.387816][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 113.495857][ T5341] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.500433][ T5341] Bluetooth: hci3: Injecting HCI hardware error event [ 113.505163][ T5344] Bluetooth: hci3: hardware error 0x00 [ 114.286070][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 114.535264][ T1101] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 114.576248][ T7659] tc_dump_action: action bad kind [ 115.239775][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 115.496295][ T7693] bond1: entered promiscuous mode [ 115.497709][ T7693] bond1: entered allmulticast mode [ 115.499835][ T7693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.567328][ T5344] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 115.768826][ T39] kauditd_printk_skb: 174 callbacks suppressed [ 115.768836][ T39] audit: type=1400 audit(1729727749.975:2360): avc: denied { create } for pid=7704 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.776617][ T39] audit: type=1400 audit(1729727749.985:2361): avc: denied { ioctl } for pid=7704 comm="syz.2.601" path="socket:[19934]" dev="sockfs" ino=19934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.785350][ T39] audit: type=1400 audit(1729727749.985:2362): avc: denied { module_request } for pid=7704 comm="syz.2.601" kmod="netdev-vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 115.790915][ T39] audit: type=1400 audit(1729727749.985:2363): avc: denied { sys_module } for pid=7704 comm="syz.2.601" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.796362][ T39] audit: type=1400 audit(1729727750.005:2364): avc: denied { bind } for pid=7704 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.801461][ T39] audit: type=1400 audit(1729727750.005:2365): avc: denied { create } for pid=7704 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.216607][ T39] audit: type=1400 audit(1729727750.415:2366): avc: denied { write } for pid=7704 comm="syz.2.601" path="socket:[19934]" dev="sockfs" ino=19934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.311459][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 116.315436][ T39] audit: type=1400 audit(1729727750.525:2367): avc: denied { setopt } for pid=7704 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.398209][ T39] audit: type=1400 audit(1729727750.605:2368): avc: denied { create } for pid=7714 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.403764][ T39] audit: type=1400 audit(1729727750.605:2369): avc: denied { read } for pid=7714 comm="syz.0.602" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.833654][ T7747] ubi0: attaching mtd0 [ 116.836691][ T7747] ubi0: scanning is finished [ 116.842044][ T7747] ubi0: empty MTD device detected [ 116.950293][ T7747] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 116.953779][ T7747] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 116.956830][ T7747] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 116.959534][ T7747] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 116.969321][ T7747] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 116.972033][ T7747] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 116.975144][ T7747] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3168476604 [ 116.978587][ T7747] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 116.981846][ T7756] ubi0: background thread "ubi_bgt0d" started, PID 7756 [ 116.982254][ T7752] ubi0: detaching mtd0 [ 116.990020][ T7752] ubi0: mtd0 is detached [ 117.732242][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 117.788342][ T45] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 119.128949][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.135259][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.267707][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 119.375001][ T829] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.535669][ T829] usb 7-1: Using ep0 maxpacket: 8 [ 119.539452][ T829] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 119.541909][ T829] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 119.546671][ T829] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.549098][ T829] usb 7-1: config 250 has no interface number 0 [ 119.550898][ T829] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.553948][ T829] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.556919][ T829] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 119.559770][ T829] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.563243][ T829] usb 7-1: config 250 interface 228 has no altsetting 0 [ 119.568760][ T829] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 119.571183][ T829] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 119.573596][ T829] usb 7-1: Product: syz [ 119.574761][ T829] usb 7-1: SerialNumber: syz [ 119.589535][ T829] hub 7-1:250.228: bad descriptor, ignoring hub [ 119.593676][ T829] hub 7-1:250.228: probe with driver hub failed with error -5 [ 119.791272][ T829] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 119.815139][ T829] usb 7-1: USB disconnect, device number 8 [ 119.817817][ T829] usblp0: removed [ 120.287525][ T99] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 120.874173][ T39] kauditd_printk_skb: 158 callbacks suppressed [ 120.874184][ T39] audit: type=1400 audit(1729727755.075:2528): avc: denied { write } for pid=7884 comm="syz.2.652" path="socket:[20926]" dev="sockfs" ino=20926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.887511][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 120.891009][ T39] audit: type=1400 audit(1729727755.095:2529): avc: denied { setopt } for pid=7884 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.530389][ T39] audit: type=1400 audit(1729727755.735:2530): avc: denied { read write } for pid=7917 comm="syz.0.659" name="video8" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.545418][ T39] audit: type=1400 audit(1729727755.735:2531): avc: denied { open } for pid=7917 comm="syz.0.659" path="/dev/video8" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.552542][ T39] audit: type=1400 audit(1729727755.735:2532): avc: denied { ioctl } for pid=7917 comm="syz.0.659" path="/dev/video8" dev="devtmpfs" ino=897 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.560974][ T39] audit: type=1400 audit(1729727755.735:2533): avc: denied { create } for pid=7917 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.566694][ T39] audit: type=1400 audit(1729727755.735:2534): avc: denied { ioctl } for pid=7917 comm="syz.0.659" path="socket:[20963]" dev="sockfs" ino=20963 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.573443][ T39] audit: type=1400 audit(1729727755.735:2535): avc: denied { read write } for pid=7917 comm="syz.0.659" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.580139][ T39] audit: type=1400 audit(1729727755.735:2536): avc: denied { open } for pid=7917 comm="syz.0.659" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.586279][ T39] audit: type=1400 audit(1729727755.755:2537): avc: denied { create } for pid=7917 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.056456][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 122.855308][ T1143] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 122.922402][ T7975] netlink: 9 bytes leftover after parsing attributes in process `syz.1.672'. [ 122.937513][ T7975] gretap0: entered promiscuous mode [ 123.030394][ T7972] lo speed is unknown, defaulting to 1000 [ 123.057507][ T7972] veth1_macvtap: left promiscuous mode [ 123.146484][ T7972] veth1_macvtap: entered promiscuous mode [ 123.303853][ T1107] veth1_macvtap: left promiscuous mode [ 123.730250][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 125.405196][ T65] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 126.200167][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 126.200733][ T39] kauditd_printk_skb: 163 callbacks suppressed [ 126.200744][ T39] audit: type=1400 audit(1729727760.335:2701): avc: denied { write } for pid=8077 comm="syz.1.704" path="socket:[22696]" dev="sockfs" ino=22696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.236765][ T39] audit: type=1400 audit(1729727760.445:2702): avc: denied { setopt } for pid=8077 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.384765][ T39] audit: type=1400 audit(1729727760.585:2703): avc: denied { ioctl } for pid=8096 comm="syz.0.709" path="/dev/uinput" dev="devtmpfs" ino=864 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.458018][ T39] audit: type=1400 audit(1729727760.665:2704): avc: denied { ioctl } for pid=8102 comm="syz.2.712" path="socket:[20288]" dev="sockfs" ino=20288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.464655][ T8103] bond_slave_0: entered promiscuous mode [ 126.466405][ T8103] bond_slave_1: entered promiscuous mode [ 126.469762][ T39] audit: type=1400 audit(1729727760.665:2705): avc: denied { setopt } for pid=8102 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.474786][ T39] audit: type=1400 audit(1729727760.675:2706): avc: denied { read } for pid=8102 comm="syz.2.712" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.482091][ T39] audit: type=1400 audit(1729727760.675:2707): avc: denied { open } for pid=8102 comm="syz.2.712" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.489408][ T39] audit: type=1400 audit(1729727760.675:2708): avc: denied { map } for pid=8102 comm="syz.2.712" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.495783][ T39] audit: type=1400 audit(1729727760.675:2709): avc: denied { execute } for pid=8102 comm="syz.2.712" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.501965][ T39] audit: type=1400 audit(1729727760.685:2710): avc: denied { read } for pid=8102 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.558331][ T8104] netlink: 'syz.0.709': attribute type 2 has an invalid length. [ 127.177090][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 127.234234][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.378423][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.444832][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.577634][ T8102] bond_slave_0: left promiscuous mode [ 127.579284][ T8102] bond_slave_1: left promiscuous mode [ 127.634172][ T1143] bridge_slave_1: left allmulticast mode [ 127.635993][ T1143] bridge_slave_1: left promiscuous mode [ 127.639077][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.643695][ T1143] bridge_slave_0: left allmulticast mode [ 127.645524][ T1143] bridge_slave_0: left promiscuous mode [ 127.647049][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.739391][ T1143] dvmrp0 (unregistering): left allmulticast mode [ 127.892913][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.896817][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.900256][ T1143] bond0 (unregistering): Released all slaves [ 127.904522][ T1143] bond1 (unregistering): Released all slaves [ 128.217117][ T1143] hsr_slave_0: left promiscuous mode [ 128.219072][ T1143] hsr_slave_1: left promiscuous mode [ 128.220921][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.222871][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.225492][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.227448][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.243611][ T1143] veth0_macvtap: left promiscuous mode [ 128.245237][ T1143] veth1_vlan: left promiscuous mode [ 128.246653][ T1143] veth0_vlan: left promiscuous mode [ 128.288971][ T1143] pimreg3 (unregistering): left allmulticast mode [ 128.770448][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 128.833891][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 129.678014][ T1143] IPVS: stop unused estimator thread 0... [ 129.777662][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.780854][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.859412][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.862294][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.935555][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.938212][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.996734][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.999429][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.076714][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.127552][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.176518][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.230853][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.346624][ T1143] bridge_slave_1: left allmulticast mode [ 130.348426][ T1143] bridge_slave_1: left promiscuous mode [ 130.350339][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.509838][ T1143] erspan0 (unregistering): left promiscuous mode [ 130.733316][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.738679][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.743336][ T1143] bond0 (unregistering): Released all slaves [ 130.827208][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.830881][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.834255][ T1143] bond0 (unregistering): Released all slaves [ 130.906642][ T1143] bond1 (unregistering): Released all slaves [ 131.328504][ T1143] hsr_slave_0: left promiscuous mode [ 131.330936][ T1143] hsr_slave_1: left promiscuous mode [ 131.333313][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.335363][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.337665][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.339626][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.342834][ T1143] batadv_slave_1: left promiscuous mode [ 131.347118][ T1143] hsr_slave_0: left promiscuous mode [ 131.349449][ T1143] hsr_slave_1: left promiscuous mode [ 131.351934][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.353890][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.356263][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.358183][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.383498][ T1143] veth1_macvtap: left promiscuous mode [ 131.385142][ T1143] veth0_macvtap: left promiscuous mode [ 131.387553][ T1143] veth1_vlan: left promiscuous mode [ 131.388895][ T1143] veth0_vlan: left promiscuous mode [ 131.391364][ T1143] veth1_macvtap: left promiscuous mode [ 131.392835][ T1143] veth0_macvtap: left promiscuous mode [ 131.394417][ T1143] veth1_vlan: left promiscuous mode [ 131.396345][ T1143] veth0_vlan: left promiscuous mode [ 132.011375][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 132.082595][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 132.459655][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.461489][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.080073][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 133.148915][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 133.599737][ T8] lo speed is unknown, defaulting to 1000 VM DIAGNOSIS: 23:51:45 Registers: info registers vcpu 0 CPU#0 RAX=00000000004ff831 RBX=0000000000000000 RCX=ffffffff8b226579 RDX=0000000000000000 RSI=ffffffff8b6cd0c0 RDI=ffffffff8bd1aa80 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f4b48 R15=0000000000000000 RIP=ffffffff8b22795f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557691c808 CR3=00000000122ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006cf4c5 RBX=0000000000000001 RCX=ffffffff8b226579 RDX=0000000000000000 RSI=ffffffff8b6cd0c0 RDI=ffffffff8bd1aa80 RBP=ffffed1003b58910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f4b48 R15=0000000000000000 RIP=ffffffff8b22795f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562146acc8e8 CR3=0000000023c7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a1d2905891b2b7f 2473dee93c7cd5ae ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d915f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d915f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d915f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d915f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d915f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d915f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0038000000002fd0 04a87026cfbcd0fe 285c9ab9364dce54 3735492dfd2858c1 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e36777765ad0ae8d 8dc4fd2276253d86 4b3d000000030004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ace9cfa77d0f2af5 0e0500151cf2d50d f88db22a86862267 031c40c9af3a3dde ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a5eb0317bfbd1e0 3dd7cbd478deb837 3d97d0692c5d5510 297538bd47f0f30d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6aebea3e1f624552 89b536985eeae12f c9326540662a5eb0 317bfbd1e03dd7cb ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d478deb8373d97d0 692c5d5510297538 bd47f0f30dace9cf a77d0f2af50e0500 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 151cf2d50df88db2 2a86862267031c40 c9af3a3ddee36777 765ad0ae8d8dc4fd ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2276253d864b3d00 0000030000000100 0000000000003800 0000002fd004a870 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005cc92f RBX=0000000000000002 RCX=ffffffff8b226579 RDX=0000000000000000 RSI=ffffffff8b6cd0c0 RDI=ffffffff8bd1aa80 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f4b48 R15=0000000000000000 RIP=ffffffff8b22795f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ea8487ff8 CR3=0000000027742000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010002000c100000 010000000000d4b4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cab1f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cab1f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cab1f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cab1f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cab1f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cab1f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df41b45590ad4e66 87fdaf997a9bb6d7 d7a0110dafd49adb cd0d04201653bfda ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77a322448c65e8fa bf1c2092ae13a647 171fcf7fe3c30004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90449ce9723c0002 16abc1e71a96b87f 61bb42abdf41b455 90ad4e6687fdaf99 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef7bee9de7b2441a a589071a49316f21 c9db1106992133ae 41dde242d2f94d8d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f92af6b602308d6 644a2e93906d4811 80f43ca7603c40d8 c1b389f303c65421 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a305685c4a961517 306d634a9fc63a5f 9ef92417fdaf2afb 17652517170b59c5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20dbab96cb58db10 4b64fcd6132becdd 5cf3e4e19e52bd59 d7ddaca391b657a8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffffc900043bfcc8 RCX=ffffffff81da5f43 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000013 RBP=0000000000000001 RSP=ffffc900043bf840 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888044380000 R13=ffffc900043bfcec R14=ffff888044380000 R15=00000000000001fc RIP=ffffffff818d8140 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ea8467d60 CR3=0000000024bd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=24a090d824a090d8 24a090d824a090d8 24a090d824a090d8 24a090d824a090d8 24a090d824a090d8 24a090d824a090d8 24a090d824a090d8 24a090d824a090d8 ZMM22=da116b84da116b84 da116b84da116b84 da116b84da116b84 da116b84da116b84 da116b84da116b84 da116b84da116b84 da116b84da116b84 da116b84da116b84 ZMM23=4aeef0884aeef088 4aeef0884aeef088 4aeef0884aeef088 4aeef0884aeef088 4aeef0884aeef088 4aeef0884aeef088 4aeef0884aeef088 4aeef0884aeef088 ZMM24=0598455105984551 0598455105984551 0598455105984551 0598455105984551 0598455105984551 0598455105984551 0598455105984551 0598455105984551 ZMM25=1144eba41144eba4 1144eba41144eba4 1144eba41144eba4 1144eba41144eba4 1144eba41144eba4 1144eba41144eba4 1144eba41144eba4 1144eba41144eba4 ZMM26=3409a1df3409a1df 3409a1df3409a1df 3409a1df3409a1df 3409a1df3409a1df 3409a1df3409a1df 3409a1df3409a1df 3409a1df3409a1df 3409a1df3409a1df ZMM27=98056bfc98056bfc 98056bfc98056bfc 98056bfc98056bfc 98056bfc98056bfc 98056bfc98056bfc 98056bfc98056bfc 98056bfc98056bfc 98056bfc98056bfc ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c4050000c4050000 c4050000c4050000 c4050000c4050000 c4050000c4050000 c4050000c4050000 c4050000c4050000 c4050000c4050000 c4050000c4050000