last executing test programs: 2.32052216s ago: executing program 3 (id=866): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f00000004c0)={{}, 0x92}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x7, 0x34343452, 0x27e, 0x10000, 0x0, @discrete={0x0, 0x9}}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) 2.313920585s ago: executing program 3 (id=867): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x1) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = socket(0x10, 0x3, 0x0) listen(r4, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{}, @l2cap_disconn_rsp={{0x7, 0xfb}, {0x0, 0x4}}}}, 0x11) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) socket$isdn_base(0x22, 0x3, 0x0) 2.246183318s ago: executing program 3 (id=870): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400003f000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.148951732s ago: executing program 3 (id=873): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf7f, 0x401}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) syz_emit_ethernet(0xdf, &(0x7f00000000c0)=ANY=[@ANYBLOB="a1127b5f7273c66248027419aec7b01a7ac57aafde8a39677b9490bf46684950b8865b4a54450c41d89987fbe80015c2476823984f5c7954bc", @ANYBLOB="537d973c4f4d34333a9cb24650f316e1069303348ed39388218660430ae323e14a8b20b112c26455a3718f", @ANYRES64, @ANYRES8=r0, @ANYRESDEC=r2], 0x0) 2.147601902s ago: executing program 3 (id=876): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4048000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x4b7901da, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) r9 = io_uring_setup(0x6f19, &(0x7f0000000440)={0x0, 0x18bd, 0x2000, 0x2, 0xea, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000ac0)=""/173, 0xad}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.128919768s ago: executing program 2 (id=888): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x1) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r6 = socket(0x10, 0x3, 0x0) listen(r4, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{}, @l2cap_disconn_rsp={{0x7, 0xfb}, {0x0, 0x4}}}}, 0x11) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) socket$isdn_base(0x22, 0x3, 0x0) 1.060590746s ago: executing program 2 (id=889): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65367000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x438240, 0x90) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=';', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="1b3d4afaf32b0ee30719a28e3aaa6efa9ee8787e08f70df27064e8b764c3654eb9ce1d05ba6ef122fed2ab968dc4448b776cbe773a53ddd9a3b355ddc622bf82ece9f62bf4d35eddcae08f89c1942e8630ce7ed80df52c940cbcd20becb9c27994", 0x61}, {&(0x7f0000000240)="693ba76cb3d23bfb727a931588f60d971c845b8bc96744c644df9743f12d342ed00e80b956aa6e1683c8415031d99a08ecf4a8f51289a15227126c93455aefa1e6ffc911b74079dc3184de9a91d37f38a9ab59e3d11f14a609f8e6f5e4888638d6193211010659ee62f7a932a45c8d4254947503f0d485ca0d5ee4af15844bd9ff4a7ccc27742ada018d86ea3bd6a427423a39a476d874139439a99550a60ac514b41af7d6673bdc44b4f6b9ea9b345ac57415edf921f254b5f94334c6b4b88c74631b4e691ba940122239436c804ef4381e5b4c13628125788d199f813bb5913a64ab2183f945c7d952b97b59d01f06b32dcfb56cc6980f", 0xf8}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6e}}], 0x38}}], 0x2, 0x4008440) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 883.244012ms ago: executing program 3 (id=893): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, 0x0, 0x0) (async) bind$netrom(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r4, 0x836f3000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x5, 0x8, 0x6}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x5, 0x8, 0x6}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200050008000100"], 0x2c}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000080)={0x73, 0x0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 882.912025ms ago: executing program 2 (id=894): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, 0x0, &(0x7f0000001540)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) dup(r4) (async) getsockname$packet(r5, 0x0, &(0x7f0000001540)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x20000000) (async) 779.269335ms ago: executing program 2 (id=897): syz_emit_ethernet(0x14e, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x118, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x2, 0x1f, "6e74a37c0e39a2bc849068f613e3b51bc485e2146f275f5f82c7e276de80765f18f983a2bd1dc871d2159d114a2a5000b36614dc0f0c5dcf76e21de9246c45006a039cee4a22bfaff199122b917da50e95b8a42f826fc33bb5b4a519445591801207e49a7f9afc20035460e6b999fac0454d499823998b41b7c9b217749aab54b5bddfa00942a50d4fefa54e77e3fe8ae6fb399b2bfebcd48a06896758ccc7f5ed7ba0a2a807861926557148242828dffae503d6333f93c328833aa445c657c9e866192e815063d9e1b00a65fbeba2bd34ade570ed26a8d6a98e8e5c0f3c99cf623ed8b71c26867a1a85a2ac1e5ae4eeb0ced66c769e5dd19f"}, {0x1, 0x1, "f3a687a0dfb402"}]}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 730.623467ms ago: executing program 2 (id=899): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000ff000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 729.869389ms ago: executing program 0 (id=900): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x28, 0x0, &(0x7f0000000240)) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000000, 0xe0) 728.769112ms ago: executing program 0 (id=901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r5, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$CDROMVOLCTRL(r3, 0x5392, &(0x7f0000000340)={0x7, 0xff, 0x3, 0x7}) 650.403153ms ago: executing program 2 (id=902): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x1, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x71d}]}}]}, 0x68}}, 0x0) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x20000020, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r5, 0x100000000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) eventfd2(0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r7, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x0, 0x101}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x242b], [0x0, 0x1, 0x74e2, 0x0, 0x6, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 650.035251ms ago: executing program 0 (id=903): syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000ff4f0423b340000102030109022d00010101200e0904000e020301020a09210700054122b20b0905810310040701ff090502034000ba0a01"], &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x8, 0xf8, 0x80, 0x20, 0x6}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x1, 0x0, 0x7, [0xffcf, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x0, 0xd}]}, 0x8, [{0x100, &(0x7f00000001c0)=@string={0x100, 0x3, "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"}}, {0x3e, &(0x7f00000002c0)=@string={0x3e, 0x3, "209250513dfc4cf7546f394126fcc28ee2e35d8e7a72d39e1e52739549dca7d9ed274011ecdce75cfc3fd14b9b68f4286b469f764f67d8bd9291f586"}}, {0x101, &(0x7f0000000300)=@string={0x101, 0x3, "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"}}, {0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "a1ad02fa34f23fd01bebc8e67678bf360466c1440f2597febb65cb7326fdbb01af133b87f4abb5702c46302350b4549f082f32ff4a45dc2bd0b4d559ff4516b3ec89544a7a49a424"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x5c5108d7ad1e4a43}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000640)={0x20, 0x1, 0x43, {0x43, 0x2, "566be88892fc3b8ab12163ee0b00514d84bcb78deec5a06f8f0fe79efcf7defcf6d3bb37ff9fa976879073d84d17c296f9cdd6dcf56597be7a73d367c23fd413b5"}}, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003160000001603768c6470c322704fdbdc949ff42521e7eac35227686f56498218c1f5aa5ff926f808e8d17313cc4db443f2b59f"], &(0x7f0000000700)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7518808d"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc9, 0x7, 0x1, {0x22, 0x728}}}}, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x40, 0x0, 0xb5, "318efe505de20e38ef3545aa387f133699b08ffccb0cff19df1b3dbf6949a5967cd7ba2822157b060609c9107301b3b8987e5ed925b8285a55095b497b21e6daa6461e4bba08ed091178f5658ce5168ffc8a1727c638a8fdc545e58c02536212dc0b3f2be81373932c546c6b892073bcd8462ea9a7d7f24ea80681f081ced71100a76a1080fbeae4722006fb995498d57ab450b0ec1addb9bb70b12a10cd5bbeda62e0741d781f8049153c801e760b59615572bd4e"}, &(0x7f0000000880)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x1, 0x25, "a6b95d778e20b7e11926ba5b7cd6f658c10002af27cc830b2b2929372815bb6c75ad7efe41"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0xa}}) futex_waitv(&(0x7f0000002dc0)=[{0xe, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x200, 0x0}, {0x10, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7fff, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x57e6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xfff, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x7, &(0x7f0000002140)=0x8, 0x2}, {0x80, &(0x7f0000002180), 0x2}, {0x9, &(0x7f00000021c0)=0xe, 0x2}, {0x3, &(0x7f0000002200)=0x7cd1de08, 0x82}, {0xb8, &(0x7f0000002240)=0x7, 0x2}, {0x9, &(0x7f0000002280)=0x9ff, 0x82}, {0x7fffffffffffffff, 0x0, 0x82}, {0xfffffffffffffffd, 0x0, 0x86}, {0x769, &(0x7f0000002380)=0xffffffffffffffff, 0x2}, {0x1, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x82}, {0x2, &(0x7f0000000b40)=0x4, 0x2}, {0x5, &(0x7f0000002600)=0x4, 0x2}, {0x6c558f26, &(0x7f0000002680)=0x10001, 0x2}, {0x7, &(0x7f0000002700)=0x4, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x8, &(0x7f0000002840)=0xffff, 0x2}, {0x768d, 0x0, 0x2}, {0x265, 0x0, 0x2}, {0x7fffffff, &(0x7f0000002900)=0xa, 0x82}, {0x84, &(0x7f0000002940)=0xa60, 0x82}, {0x9, 0x0, 0xec5aba831a7e1e25}, {0x9, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0xdef, &(0x7f0000002b00)=0x3, 0x80}, {0x6f, &(0x7f0000002b40)=0x3}, {0x2, &(0x7f0000002b80)=0x5, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x1, &(0x7f0000002c40)=0x200, 0x2}, {0x6, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000003680), 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2814\x00', [0x6f04, 0x80008000, 0x9, 0x2, 0x1000000, 0x1f, 0x7, 0x3, 0x1, 0xe, 0x7, 0x1, 0x1004, 0x28000000, 0xeb0, 0xa, 0xfdffffa7, 0x40000009, 0x400006, 0x4, 0x5, 0x10000, 0x8382, 0xe2df, 0x2, 0xa6, 0x1, 0x3, 0x7, 0x5, 0x2]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) clock_settime(0x5, &(0x7f00000006c0)) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r4, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) r5 = dup(r3) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206030000000000fffff0000000000012000300686173683a6e65742c706f7274000000050004000000000005000500020000000900020073797a300000000005000100070000000c00078008000640000008055c8e1a15b1e43f085ccdc50bff000000bba9f33b0883212f6e9e537d6707392b734ddaa563919c197aaf5f4dabfeda0bef08b267aef170de62a088d310c1962848c2b9eb69950904735badb5deba85a2c9794367516010377cb1d43c639768151be88e2abe0712b8363e1900e8dcbd683141be57b5fd605dcc37ab27c1348727d708217b8b003d92f4c66ba79d5373c9b23b90643f1fc851fa"], 0x58}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f00000009c0)) 240.438012ms ago: executing program 1 (id=910): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640007ff000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 170.580715ms ago: executing program 1 (id=911): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x10}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x7, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x1, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x20000000, 0x34e, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 169.102409ms ago: executing program 1 (id=912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 99.367791ms ago: executing program 1 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0202000000800000140012800900010076657468000000000400028008000300000000000500110002"], 0x44}}, 0x8000) 99.04624ms ago: executing program 0 (id=914): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x103041) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) fsopen(&(0x7f0000000040)='jffs2\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x2}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 98.182413ms ago: executing program 0 (id=915): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') chdir(&(0x7f0000000080)='./file0\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x3d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001) recvfrom$inet6(r4, &(0x7f0000000680)=""/254, 0xfe, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 548.188µs ago: executing program 1 (id=916): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}], 0x400000000000237, 0x4004080) 91.972µs ago: executing program 0 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8, 0x37f59198}}, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000025c0)=[{{&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xcf, 0x1, 0x2, [{@remote, 0x5}, {@empty, 0x5}, {@loopback, 0x8}, {@remote, 0x1}, {@broadcast, 0x400}]}, @lsrr={0x83, 0xf, 0x74, [@remote, @rand_addr=0x64010101, @empty]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x11, "bafce384dbb353c6d8b7ea28ff28e0"}, {0x5, 0xf, "ce77d10e589ca46fb17d7db5fc"}, {0x6, 0x12, "2f08d2247d0e0c624da92738f12eb1d1"}, {0x5, 0xb, "a04e20af07e7ce8e62"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0xa0, 0x0, 0x0, [0x8, 0x1, 0x127c, 0x3]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x17, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @remote]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x118}}, {{&(0x7f0000000440)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000480)="a001cdbb8d9af323523becd54636b76838105824f055a2a2c0ac4a543816a9c32fbd948b79ff44229e82f6bf8b4a11f9ccb01ceaad965bf29ba91c711b21fb77288bef3dd0582bb71e59fc43091a8827a266127e00e1ea599a73137bffcc28e7eb0326451f2904df59a1edc71736e54aaae39511927c168e7e6d29ca28852b556d34a7fd17a58a21ddd8d9bb3efc5ff54f070c14b2e6f51b3374e19d169b132285ca87d3fbedf5bb993977b13f2bdabc6c68be9b55e0d3e96141ef167c2cefbe18e9a9e0d5415e4168e687b41632c3aebfb118b3ecd0ddf6bb3dd22b126bc3659bda4803b8dbdb8f795c82a8f4bb", 0xee}, {&(0x7f0000000700)="b3bd423d5ff9d31765d1a090c1dccaa2f9e20a1026e7e138daefa6fbc7c13c479397599df03c88e36ee92ac296691314443db043ac428af783e8897e6cc2bc74a4bab8b3080c39552ff6f5a7e69f803f494dfb008b7cd0d2d3cd3def54d078417af21a8be4ff000968f9773360208ffedc550a784d026520d122c506346814d024dca24cf6ccb9b2d3d43582a6d27a129f7fe2f613fc1cbf6e2202b53735f252c8b822cc251b70bb0738661e355d6df3c5bfc711966bd1ce863bba5401c4124b66f6cead3c2fda2a68b148bf97c77e2b1ee63b51512397d3bfdf4c64ab34c1e395f7b54323eb867a5a143885976b4eeeb06b89543af18d", 0xf7}, {&(0x7f0000000580)="618d2852626af825b4e652", 0xb}], 0x3, &(0x7f0000000800)=[@ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x41, 0x3, [{0x6, 0xa, "7d7f1f61e436ce19"}, {0x2, 0x6, "1a80b174"}, {0x2, 0x5, "2b23e8"}, {0x2, 0x5, "21bdd1"}, {0x1, 0x11, "fe62910ceebff817e94748682c5fc8"}, {0x1, 0x10, "a81a5ddaef8c8832af5e363f4271"}]}, @ssrr={0x89, 0x7, 0x59, [@multicast2]}, @lsrr={0x83, 0x3, 0x8}, @noop, @ssrr={0x89, 0x13, 0x56, [@dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast1, @remote]}]}}}], 0x70}}, {{&(0x7f0000000880)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="23b1af5d7e4205897af7dc39cab74b4180a65cffd30543bfa8fcf00644e1023a867ce9af1571ab16f7b11c887b182fc87fa5e27162c02f78b768e0a104", 0x3d}, {&(0x7f0000000900)="d29001a2f58b93", 0x7}], 0x2, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @local}}}], 0x50}}, {{&(0x7f0000000a00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000a40)="355b731d4dbe8ec160b3ef9b038ee86d969b8ed4f5e602a24f6171ffa0280007658baca408180f106217f4c686d74f63e988b5e5236dbe614367bfad1531d5c6b75cdfa7b389bfab013576e31b60cdfd00597570f021ef6ac4b94144bb286677d9aa26f77c89051268d370f107eac0252100d617fedd9cdc0744f2a3a5e746f9f4a4c79e6d6c3c8c1d635eaeca6e9b329e3b472013dee8772a8bb7f521d86a9218ce91f329f1d7705d906d7af7e6a2c32f7ea2a0355bdc2910bb0cab61", 0xbd}, {&(0x7f0000000b00)="a7096fee90bad3f114f80dc46bce5c504eb16e5120f410e1a3258cb3849f0f26fe403f0782546aaead5f33763e00d096ba34889251807f14c1d6b4db1b23ab3d9a9423c1b3953e22c0785dd1b6389ac305f5f33a9c78dc74fcb2051233d64ec8b9fa47c395d8", 0x66}, {&(0x7f0000000b80)="92845d861a831540eb2317f2f6c87b99b752e553857a5ac476b007478e65e4152aba57855bb6f10efaed30cdb64d1ebbc94fa48b98dfec5ee58f4389e98f7b9a6517015e3bd9dbf1b9047e557338313550638c0397a8366f", 0x58}, {&(0x7f0000000c00)="fb171d4cc0d9cbab1ce9f6ae1df20758ab5b2b34a407aba616f7ce64e53261c6169b9890928765a782a90b1af14f0ed365a4000def120f75cc33dce004dd686bf9d5b3dd6f71d6fc6d727cfdc083b96786631f8347b68a252fa677efb1cf450ef04a239b0d1c76934b4a7aef6421f1ef6500976f37285610b008b81bd83adae5922586c3d36ad3a4e25f05ae7720110d70c907ea39b82a795a3251c98b849ad5acfe390becb41ae5", 0xa8}, {&(0x7f0000000cc0)="d8d08c8b49658a640f08b260c926e56e996875cfb0d247f18e980901a70a5565ba7cc117fadf73803105b806c8899718ec4c82173bef5b77aed2ab65523273057688edb9842a8c8bdedd0c65b8295f423f679e5d0c9665849b482a16e96452fa92be2428e215ba7861b37f86e1ddf1b0ad0bfc9abae16b062d6a1beac607e3f4cfbd5ba351e806055c49d4cb20cfe821e4c417468a5d6ab668e05f0416608d59fde0daf5674896b2ba2162147ce3b46c70a2872126d4c3f03ce6a6645594cbd8152af8ef58edd8c24d26c511986cb6dc93bef5", 0xd3}, {&(0x7f0000000dc0)="3c71f400a4a24ef752cce8997bdb10416e4e967ee01534b5bac6acb7e60fa2c743ba1be3467c9548b682a07bfad6bac9bddfdc3079679f84c35ed11810930d9dd038116e3c289ecaf67c29cdf1082130515bb3654de51dcbb692ff4fa082cb901e9641aa6389bc01235b1ee13fbcb3b3cbcf7461d7bd9829803cbf71d0b04e5da686e3716269ecd3ac74822b8ab54f035fe01d529b0f696edeadbf086e2c70707b9e8e8b6ed60c3d93e2bfa8f92d67702f89c2f7babf765fe6d053b44c9f2d3a77829fc261d62a5ca9c4139dc8959cfe959becb943ec07ae08c3c8409f82f17e", 0xe0}, {&(0x7f0000000ec0)="94ed0d3065da628963a9e0cd8100f89443914d7a4c622fbe488cbf06f3866955d58b6c934277d0cee3ccc97bbee149600710196f82d333d0c602e6d4e6f44bbd0755dd83a731b8862f704e9505e6c602d26d6cac3cbfa6336fc009c705ed58edf8a70cb2e9ffb2c2f309fff80e35406f39c5", 0x72}], 0x7, &(0x7f0000000fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xaaf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @remote}}}], 0x88}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001080)="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", 0xfc}, {&(0x7f0000001180)="71f368e27a36de2691c90736901b41352ece721cdf09b7e612d224cbbf70f6874e6b13cd001c6bd9f2a853c60d700ed051d3e8cb03ecfa2a7a325707d04e3882ff74626efe73e8e7935d3f332bf536722624cd29f1bd2d703fa9c7c21613edacfe2214b6674ad98ae3a0837f26399c2f0767a4f119d9f2134a855304c7270b7e04d43067b365d4f2c24a251d6fa4b63b2f94e638b919171f8e98a5", 0x9b}, {&(0x7f0000001240)="08e44078f95d7bc654bd8161036ead13d582c0a412b32eace8954d0a445a2d4c379b9a9d0404ee1e1823518a673ef5b10f63a7d41d5deb650c7c0a1d10091e9c82f03994763d8284e3c17fe031512e4b96185e4431aeb7149f0d545255e8eeb714d83bc9ac8b3ec5085bfd51865a8323a7e541a56329eb413bcc7e7ec1af43430441e8f1c27b1cd817ec27820cea1898187999a3cfbba49b6322ee22c68bb8d5eddf345af34978f68093344b2c2be4b43d8b6fe617de836724d5be5086bbf09dc633cc3270ca430796ee27", 0xcb}, {&(0x7f0000001340)="eea6e52ff1da1a0ff1efe1ce785cc7d6c341f870c832e8c45b25bde3c0eecce63b27cb61ff3316ef9ccf29bcd01eb8812b618e1c9788d4540982d2dd75ee45cc2f0055a7cd6d29f433a7c8d7ee6678d39cfd6d7e1d42927b34c658df5de3fc5f29186e4d2309230268b156a151b43a969649104f9493ee093a9272055fbd48b1b55919e74ccd7aa093aa6a580ba9a13d79a84872e972efec18", 0x99}, {&(0x7f0000001400)="bdc17371baafef287a96d7fd22611efe7fabfabd1d849bbcba12d1c342e2e10407fc30cbefbcaccad55aaacba0fd0d97166896e8fe5dc3", 0x37}, {&(0x7f0000001440)="740e74bda4f8708133faf85f58305c4f4a234ced2ecf472162a3960a4fae7fd8c89114628db69ec68616d632d3f5013e4f50d3fbeea8c14c99ff0ae52d339b05a81b2b5dc8", 0x45}, {&(0x7f00000014c0)="23d547d1114a43b1fdebb05550381617f69c3474aacad561a1146384b7bc191051e37761d4b44165b2c61137f312873db05be01dac53c9e123913f0c32ab7771e69f0d382d75e5c133ab5426daa365b1e8c486359772215371d7683ca319eb76d2aa3b4d853fe37acca72252b1019e04d3497dbe3e595f452bf566e867ebba0e184e504e2b0917fb261e99007ccc42021ca1bef14a8ac67f9ac61b3b857088e6e9f06e2ce74291d76fbd284f5fec2118064e6872ade55e4b972c5083be8c7748bac534957522d016f32b2213cbf84bc56a21b20d3793f908db88e855492b21cd7ce5c63def9154e201b3d3502e0b346075ca5ada73bce7c3ba6c28ebe7162acd36b297225fc7d76ac04db78e7fb7f73c57dcaa34b046a437fa76e231e884834343da5171ff19b1ed3f257c885a750c9fcc42803d95a0e7b22ff6cea8261ae0c7d79f02c54d9e2ee4f1148021daaa083f48a9e006a8f5a8ce868ed1110a9b92319724ec519696a538430da691f97437a4f8fd0cc9691cc8b8cfd62af43027efe3d10349d2650cc7883a5e9c2fbf555133e2b44bbecc484ba9765ae4f1e0d9b03f6145ba2c3e6d94ea82037772dcd624c37c803a7e7c7cd57fe1aa4f9b55bea96ac9bba88159f9b3d9ec2bd6badcca361885336d7d075e95c0020c12a14b89b9be3625d1a236b22ad105fee90753c8d71c8b9a6961f9a9a325a54496b5543608642c658607a54816918f5a693582fe7fc1b6340f5bae440c4b78350a5b87ef382b37503b03640c96ef5a4763100130a5e5e6d9e4a1207ef2797f54880a3ef93c93b6a274543397df370203f1bd51e7667ac6e1852ff8e8a3d6001c7149f651762c148f7af250eca6a5ba37e4214a20b288cecc98961c6cf7474da6925d4d13858987705fe17eaa827b7fe10d1e06b765a03fb120f6262feeea1a7a6acedb36c737d3efed7834b20a7f55cb81bf94458b9903e87b519f60c005c1ea3f1a8bc84df66db7cdbfbe60f7a22703fd019cf4c37cb3467ae7dbb93fdece53133ea697d84e66d68298861e5abbde9c0d8e6e8d8bd55ff4171b2dfd31c59720396e77dcaec00cf9c651a38a8113e2ce94f5a1764e0eb395d833ec0494adbedfde28c2fa463986ebc9847e7e5a00779a48d653d2b5a34de95d73975e157177439dad3c22fd21cbac16d3327461f42d52a4b715725ab15d117de7101a5a99a32aefd9d37cb59d2c5e04e4f7d0526423b7abf100ee8ecd08bec42b38f423a11b9d68cda5cd63f662203e98b0cd5a366dc92eecd35ab351cb08aef482665cb2714d8a3338e77f3c3f41776e955413dfff9a9c4579e4760fe0b3f5956edc81910e26dd8b5a267723bdef3a12e845980413687b398fc26c46f37a8137dc8719c67851f82d288bd89580fd19dff3a2417a3c6b82d394f8caba03b2954fe1d2c8d016c38ded681fccec1b19215689c1e7b4c80e9215459c9f2b40477843cd790a62be3269e9b44ae118ca5c16322d9fdd81d9959abaf2f813cc6cf368d1e3133f5d0c893c945f0d90ebc91e8c9425c12f1a70614af075143f88bb350e107dd69a0738c307f9ed1ed68617e418223027abeaf30d6071d7523d6cd23bb9b229031bcb9a2e1233e13919c51d44c22938cee37ee97fae6afd4ab34acf47c15f17a246d98af5d36ce50fee6af43f5ce18b619d5fb6630adb1b9f61451ec4717056392b14fc71e39396ef108a9f5ba6468215823bc9f34727ac0daf46ef5686567edf8ce6aaa5c6c94c144bf3b6525bffe15f0298a8856fffe58e2c1746a0f43f0fe18d5bf5a73a5d0a5b309eaaf02bc902eb521d9c97822233f4b8d0d5966bc0b649c6a99e08291edd93920de20e0637a4c41c3166bb3306dd77c7955e4443f2eb6c7eacd4ecd34152cb477aa2ef8ceef03dcf1df91a17aa21eae3f0e0e039b9915786c73ba9d0c2cd24d44c828286b19bfeea7dd6ccb8a8703c2c8a1bf0180426c5d469cad136226c1e8bc3579bc0383184049266e304660596dd66af7bb759884d405bc1862deb8dfb6c7ef7e61bf4d37996742b2face9df40c14c7b71276dfbe6fa418aa53cdd57d03c8ea422a96840a99d4fcba762e38125bd19496387de3ba6b79ed831c0edf5100311662eee3623d916f9afd9929924006517fc6447dd653e1274e532b9a8e665cb6b59be0e899423c08cf691ecb442806b1151a0869aa6837d61437923dd49ab1776c00fa853064f4ed9111941b9e049d986876445e2bebd8b94835ee95c91b50c4892772436942de6ba1856c067391d864b2d383e6dc1b80ee6e1870780caeed7fe0a0236c37a790b4fd6cebf165e6c4f1593fbc6532ba560a9af40b66df35154f7e6322245a40446adff648c291b7feaf8b7bf6da34c70e1111ba27764739682a6853c0fdd1ab868b0bd0c77a3ffcc8428b305f698cb6d80cf3833299907b6c6d93093945894a7d0ee4eea171430953d0eca5dd5d26c5b75387ddeda441d9bebda5d0b8dc0ad1e24a01d869cbe37a85ad259288d06d86ab2a1ee824678a9126a59575946d23e039dc8d7f00ed44848aaea30cb2e65c2bf37bcfdda2583a3520b0b6cf7e608af29be46548ba1cfeaf8f107cd466527339235f87fd7e38ecd2c3d90d9e3632741c156331af25ecfeabecd53e886b734182189db6152b4cbc369bb313b5902405913d6aa7d63aa3b7482bfac9575c3ed0d4122aa5700ec9da9f17a322499326a1847d7c665e34694e4bbe6b23b29240db222b01a9ad2a5def562fa8ce843ae5ee01b8ddb2b334d984e56866286bef5a135a17fa45a8dce44c7d31807aa3ab79297b6eb569cf1db9ad53440e2c94998bb1e69119abf850d8332bb5894aa8a95065671eedb1b8244e0dafa029a561564150dee7ae6264b7129b9a42651b9741c607f6fdfded19a6c25b86b5fe5cb7ec642b83944276d14ce65a585d64f0cda346e0f600e036460bda7a8616c546ff4d621af66c79678147896e0ed0a5735bb7d8900498ce5d11171078e334439f520c0c96554363c66d39b4435b6292612f70f4b57d8ae7f6d4e06f64c2f7a0cd1c2f3a8c4d6741924a141f4e68bf980bb3dc9c93c5b1b33c499b9cde783780296697cf127a3dc5a254f40d849f103792a6060b83a98ddc8715b3adffb7bad27c526b17016ee016e6333b3178726559165bd81701a41f0567219a32db117e9ac02708de238f85f9a96525ecfec2a2b2615eb8e3dbf651710fe4cae28031cb41053182de27638820a7e92e7b7765ca087d665f37fcd769e37f29dee70f53dccda57b00de8ceff3f1711fb3474db7f448f7960d75bea892793128528fefae294a0ace2aca0ca84988ce13fa4da42943cca5ffcb48340d307e51c14d2b03e3ac0647fc3c255f4b3eb7b6817891a1af98d9b923bf3ffcd031c0e2c74a8e38de0a05af1405dd20a8f95ab5992d2aa49573ae704b8cba3d2821dc9a5c5702bedd792c6c62165fc5b72539a0ba72787fa241351e5fa90beb37dd7f64c831e2b961745ec00e29479dac4743f1b2626fe48b6ade980c7670a84ed997fd20d6e279a47d2ea0728aa8fb13ceb48565fb64d1e2b4a0d4535daa62a0fbfc57edce7438bd3dd675039f9405f7080b2e3a42aa38bfea99c5402760efd0314ae3dcb2b350efdbf2746cc0628214c1af9c5c0e2b5440e4477140e42a49fb956db08ed950aa81c610dd9111bf5c5fb23e7181f095ab953773e2b42e80311b860b30f25207fd4452e92dfc411c271bbb92d308e3d8c54658c79d89c2441c5d391bd16d43d418579df5819597eac39112b8a22fada4d68642fad3425af6d321992fa0c17397b0bb6abaadbdad97a0a991995de1d5c5118f82ec88243aa6646e85725ac7cafb6ba3e5e0872a6c4f612e9b93dcae8c853e1c03d57e40f2dec528843e28d221c722dc3c37eab74702be1f906bd21130254b394c78d28d0f1e7eacd70afe1102d9dd0962de177c22602490669e414beb530348f4c07c8b1f234d93d39f10d1d83251f39256ec305728dfdff7277e1f1e3b25b638e24e4c83c216a11a38d1369ee93cd2eba47e8a2f17a9cfe54ec2e67bc8134d44376f9674edb5adc0c2233c6480d776e64cb5758245e3c94c2de45f6dd96db75cd05f8d344df3810f2accb1efe33c92140e429e684f24105eba2b84b4818c0ca0959b8f0b5683560a43e0f4bf8d430fc04db8fe1c67af1caa6733ab1f27c0f48800ba6905e1a4d117f36aab0ce9b8bd95cae8b44999e193263bf3c3597c9b047d9f04465a691fa2ff7e5b172cb5533811a2f9842e2387be7349d745fcc66c968abc736771842aefec2ac82913eef2b465a8eaf8dcd4d5a3d677b57089727c2e3e713dc0781d98020fcb66833e94b477a7c4ce95d2acdf84e7c5517341bccdccc22a6352b10f67a967f45854f187efa2e4e954d8f57ee5d555af9edc9b60cbe183b007cc3481b895bc4d2c915aa4855123c93b0f2a8ae4cda8eefc75d6ad30b200bb8cdce672262504200aa702ceb949b9c13d2fffb652c5309b86dadd443410e9955f36b8a23ac97e1f38f4d55f13422d7e26bd4e67a645947bd5e18a6b228a73b2f1e78e5d832517eb6985a30c7c23eda60d0b852d0d5073fafc4e83d23001852354aaf855f72aaef7a9479771d438fa0f34ac312dfa326b91ae08bc034b9622f4e5547af14520de241b5aedbd81c751287a210f123dcc794a0c9dee257e75a0eddd259f31436b16213f806bf526620ec5ab9a0fe93c3395ec69e3087ca0b85d1605c17497c553c300a7734a649909f4bce1ba557f1ef8153a05887a3cc12c1bc76663e7741bbcd053b091a6787a2ecf9b3c2a2c59222f340d8917e46ded7a1190545a22782ec85cc9c0d4b83890c318fcebd405b6422d5c823f18e23884f22bf81dc0e206577cfe11c215b40a271fb5582f8e4e627220184105a4ccf8ac67799d04ab9af4056717c7b84a6251d208c72928843d6216df530c3ac76f10c3c8f43d33314978be1c7b30bcec31b074441fd7c1bcfa2c7645d4ca7c5dd9238e74de858e4ff2b483f4864c865d860f130be3ebe301cc1a1dff8811cf2a72bea209d80b917012a3f355bfd3f51977a6e3144089a216cf80d4699719f498fd06f9a3f1131c05f32f9c2bb1f0f396986ba4c25b569a33f50c5648adaa56a449b70b13b67824533e805f0b22dd6329777cf126d4f6b04338cd17f23495c43a1412a6b8affd5bb437c45b31ea9a80b7aca8e5854ee0362706f1fd168dae4d0281860562fd7c4f9cd37d6faa21a4d730a0c1db69eb80c1033fd7ebbd1c8cee6d867ffbaadfcd14540006f82e6d44e260594259c020b49c3f368fb1be56043d8ee7a313e2b444060f0663972aff6da34d96285a8d9a216d22f79c4dfeb8021b9a2065d15de96f0e8a6f34f5e4651dcf51acec75bbe30532cca7990a18706c2e10c8a89986cee5d3615f4f4f25dae1a77236fed28fbfd507269d1ff46740bc1278ebb7a878379524aa7cc6bb735130619c1ad14ff3a335cf4d23fd61f7cd5ff9bf99d401d7b740ab15253a2d347cb8f54451db8e6c4c30a933656c4cc8552f7b515ef5f29214a22c4f847c283e136416202f4a84b57e5b976b9d7407f11e547d89245d5142ab44b1bacedc55c027352187771a8ffa2fdf36a50bf27584e4273d516d61fde72151f4b8775b84cc00cd2e94e600aecb360be740bd32262c2bf65cd6ce36cc6b60751ecea765481e7816d8f5c788662cdfa0280bc54880e3ad3e7695761b2a8685a7f25f394f193c008a17cfa4477596b608ed4cecd1551e356ac28c5a5943ef48f7b", 0x1000}], 0x7, &(0x7f0000002540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x17}}}}], 0x68}}], 0x5, 0xc) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x18}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 0s ago: executing program 1 (id=918): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x88) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): onnection handle 200 [ 67.047225][ T6819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.133588][ T6819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.240638][ T6819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.275352][ T6832] __nla_validate_parse: 43 callbacks suppressed [ 67.275364][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 67.312489][ T6819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.322601][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 67.375008][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 67.375020][ T40] audit: type=1400 audit(1753277778.559:336): avc: denied { mount } for pid=6833 comm="syz.3.224" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.389825][ T40] audit: type=1400 audit(1753277778.579:337): avc: denied { listen } for pid=6835 comm="syz.1.225" lport=50223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.399600][ T40] audit: type=1400 audit(1753277778.589:338): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.404876][ T6819] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.419123][ T6819] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.428865][ T6819] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.437677][ T6819] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.438195][ T6845] NILFS (nbd3): device size too small [ 67.442033][ T40] audit: type=1400 audit(1753277778.629:339): avc: denied { accept } for pid=6835 comm="syz.1.225" lport=50223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.446731][ T6845] fuse: Unknown parameter 'user_i00000000000000000000' [ 67.475597][ T6845] syz.3.226 (6845): drop_caches: 2 [ 67.482326][ T6851] netlink: 344 bytes leftover after parsing attributes in process `syz.0.227'. [ 67.538836][ T6864] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 67.539850][ T40] audit: type=1400 audit(1753277778.729:340): avc: denied { mount } for pid=6853 comm="syz.2.228" name="/" dev="overlay" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.599350][ T6869] evm: overlay not supported [ 67.603598][ T40] audit: type=1400 audit(1753277778.789:341): avc: denied { link } for pid=6868 comm="syz.1.233" name="#5" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.609254][ T6869] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 67.610917][ T40] audit: type=1400 audit(1753277778.789:342): avc: denied { rename } for pid=6868 comm="syz.1.233" name="#6" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.676694][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.728544][ T6879] FAULT_INJECTION: forcing a failure. [ 67.728544][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 67.732842][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.0.236 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 67.732856][ T6879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.732863][ T6879] Call Trace: [ 67.732867][ T6879] [ 67.732871][ T6879] dump_stack_lvl+0x16c/0x1f0 [ 67.732892][ T6879] should_fail_ex+0x512/0x640 [ 67.732909][ T6879] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 67.732927][ T6879] should_failslab+0xc2/0x120 [ 67.732938][ T6879] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 67.732953][ T6879] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 67.732969][ T6879] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 67.732982][ T6879] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.733010][ T6879] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.733032][ T6879] mmu_topup_memory_caches+0x25/0x170 [ 67.733047][ T6879] kvm_mmu_load+0xd9/0x22a0 [ 67.733060][ T6879] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 67.733071][ T6879] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 67.733082][ T6879] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 67.733096][ T6879] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 67.733107][ T6879] ? __pfx_kvm_mmu_load+0x10/0x10 [ 67.733120][ T6879] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 67.733136][ T6879] ? kvm_check_and_inject_events+0x71c/0x1310 [ 67.733152][ T6879] vcpu_run+0x34eb/0x5500 [ 67.733162][ T6879] ? kvm_mmu_post_init_vm+0x269/0x370 [ 67.733182][ T6879] ? __lock_acquire+0xb8a/0x1c90 [ 67.733196][ T6879] ? __pfx_vcpu_run+0x10/0x10 [ 67.733211][ T6879] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 67.733223][ T6879] ? __local_bh_enable_ip+0xa4/0x120 [ 67.733239][ T6879] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 67.733252][ T6879] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 67.733269][ T6879] kvm_vcpu_ioctl+0x5eb/0x1690 [ 67.733284][ T6879] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.733301][ T6879] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 67.733314][ T6879] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.733329][ T6879] ? hook_file_ioctl_common+0x145/0x410 [ 67.733346][ T6879] ? selinux_file_ioctl+0x180/0x270 [ 67.733355][ T6879] ? selinux_file_ioctl+0xb4/0x270 [ 67.733365][ T6879] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.733379][ T6879] __x64_sys_ioctl+0x18e/0x210 [ 67.733395][ T6879] do_syscall_64+0xcd/0x4c0 [ 67.733407][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.733417][ T6879] RIP: 0033:0x7f3e5378e9a9 [ 67.733427][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.733437][ T6879] RSP: 002b:00007f3e54560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.733447][ T6879] RAX: ffffffffffffffda RBX: 00007f3e539b5fa0 RCX: 00007f3e5378e9a9 [ 67.733453][ T6879] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.733459][ T6879] RBP: 00007f3e54560090 R08: 0000000000000000 R09: 0000000000000000 [ 67.733465][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.733471][ T6879] R13: 0000000000000000 R14: 00007f3e539b5fa0 R15: 00007ffe22018f68 [ 67.733484][ T6879] [ 67.738502][ T40] audit: type=1400 audit(1753277778.919:343): avc: denied { setopt } for pid=6881 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.766852][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.766851][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.813911][ T6889] NILFS (nbd1): device size too small [ 67.859313][ T6889] fuse: Unknown parameter 'user_id00000000000000000000' [ 67.865730][ T6889] syz.1.239 (6889): drop_caches: 2 [ 67.913401][ T40] audit: type=1400 audit(1753277779.099:344): avc: denied { append } for pid=6892 comm="syz.0.241" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.967566][ T1111] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 67.970222][ T1111] ata1: failed to read log page 10h (errno=-5) [ 67.972336][ T1111] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 67.972341][ T6895] input: syz1 as /devices/virtual/input/input5 [ 67.975133][ T1111] ata1.00: irq_stat 0x40000000 [ 67.979082][ T1111] ata1.00: failed command: WRITE FPDMA QUEUED [ 67.981150][ T1111] ata1.00: cmd 61/10:f0:36:f1:07/00:00:00:00:00/40 tag 30 ncq dma 8192 out [ 67.981150][ T1111] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 67.987352][ T40] audit: type=1400 audit(1753277779.169:345): avc: denied { read } for pid=5344 comm="acpid" name="event4" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.993805][ T6895] overlayfs: conflicting options: userxattr,metacopy=on [ 67.999697][ T1111] ata1.00: status: { DRDY } [ 68.001228][ T1111] ata1.00: error: { ABRT } [ 68.006081][ T1111] ata1.00: configured for UDMA/100 [ 68.008803][ T1111] ata1: EH complete [ 68.188922][ T6907] nfs: Unknown parameter 'nofsc ' [ 68.506803][ T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.565850][ T6924] NILFS (nbd3): device size too small [ 68.571498][ T6924] fuse: Unknown parameter 'user_id00000000000000000000' [ 68.579440][ T6924] syz.3.249 (6924): drop_caches: 2 [ 68.649243][ T6928] fuse: Unknown parameter 'groY_id' [ 68.666706][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 68.670092][ T60] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 68.673646][ T60] usb 5-1: config 0 has no interface number 0 [ 68.676956][ T60] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.681477][ T60] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 68.686077][ T60] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.690965][ T60] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.696302][ T60] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 68.700338][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.707676][ T60] usb 5-1: config 0 descriptor?? [ 68.713789][ T60] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 68.717827][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.818701][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 68.886719][ T837] usb 7-1: Using ep0 maxpacket: 32 [ 68.890747][ T837] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 68.893165][ T6933] geneve2: entered promiscuous mode [ 68.895401][ T837] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.895553][ T6933] geneve2: entered allmulticast mode [ 68.900191][ T837] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.902764][ T837] usb 7-1: Product: syz [ 68.904104][ T6933] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 68.904152][ T837] usb 7-1: Manufacturer: syz [ 68.908925][ T837] usb 7-1: SerialNumber: syz [ 68.911643][ T837] usb 7-1: config 0 descriptor?? [ 68.914563][ T6922] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 68.917756][ T837] hub 7-1:0.0: bad descriptor, ignoring hub [ 68.919650][ T837] hub 7-1:0.0: probe with driver hub failed with error -5 [ 68.920377][ T6013] usb 5-1: USB disconnect, device number 4 [ 68.928925][ T6013] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 69.035104][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 69.038079][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.087974][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 69.090136][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 69.149416][ T6954] syz.1.259: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 69.154232][ T6954] CPU: 2 UID: 0 PID: 6954 Comm: syz.1.259 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 69.154247][ T6954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.154254][ T6954] Call Trace: [ 69.154259][ T6954] [ 69.154263][ T6954] dump_stack_lvl+0x16c/0x1f0 [ 69.154297][ T6954] warn_alloc+0x248/0x3a0 [ 69.154317][ T6954] ? __pfx_warn_alloc+0x10/0x10 [ 69.154333][ T6954] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.154350][ T6954] ? stack_depot_save_flags+0x3e0/0xa40 [ 69.154375][ T6954] ? kasan_save_stack+0x42/0x60 [ 69.154390][ T6954] ? kasan_save_stack+0x33/0x60 [ 69.154405][ T6954] ? kasan_save_track+0x14/0x30 [ 69.154420][ T6954] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 69.154436][ T6954] ? __vb2_queue_alloc+0x8c9/0x1280 [ 69.154454][ T6954] ? vb2_core_create_bufs+0x559/0xab0 [ 69.154475][ T6954] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 69.154497][ T6954] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 69.154527][ T6954] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 69.154560][ T6954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 69.154588][ T6954] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 69.154603][ T6954] vmalloc_user_noprof+0x9e/0xe0 [ 69.154618][ T6954] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 69.154633][ T6954] vb2_vmalloc_alloc+0x135/0x3f0 [ 69.154647][ T6954] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 69.154690][ T6954] __vb2_queue_alloc+0x8c9/0x1280 [ 69.154711][ T6954] vb2_core_create_bufs+0x559/0xab0 [ 69.154726][ T6954] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 69.154749][ T6954] vb2_create_bufs+0x5e8/0x840 [ 69.154764][ T6954] ? __pfx_vb2_create_bufs+0x10/0x10 [ 69.154777][ T6954] ? v4l_sanitize_colorspace+0x213/0x400 [ 69.154798][ T6954] vb2_ioctl_create_bufs+0x244/0x3e0 [ 69.154810][ T6954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.154825][ T6954] vidioc_create_bufs+0x7d/0xf0 [ 69.154837][ T6954] v4l_create_bufs+0x156/0x270 [ 69.154853][ T6954] __video_do_ioctl+0xb3d/0xfc0 [ 69.154875][ T6954] ? __might_fault+0xe3/0x190 [ 69.154891][ T6954] ? __pfx___video_do_ioctl+0x10/0x10 [ 69.154912][ T6954] video_usercopy+0x4cd/0x1720 [ 69.154931][ T6954] ? __pfx___video_do_ioctl+0x10/0x10 [ 69.154947][ T6954] ? selinux_kernel_read_file+0xf0/0x130 [ 69.154960][ T6954] ? __pfx_video_usercopy+0x10/0x10 [ 69.154987][ T6954] v4l2_ioctl+0x1bd/0x250 [ 69.155002][ T6954] ? __pfx_v4l2_ioctl+0x10/0x10 [ 69.155019][ T6954] __x64_sys_ioctl+0x18e/0x210 [ 69.155035][ T6954] do_syscall_64+0xcd/0x4c0 [ 69.155047][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.155058][ T6954] RIP: 0033:0x7f1fbb78e9a9 [ 69.155067][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.155078][ T6954] RSP: 002b:00007f1fbc6d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.155088][ T6954] RAX: ffffffffffffffda RBX: 00007f1fbb9b5fa0 RCX: 00007f1fbb78e9a9 [ 69.155095][ T6954] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003 [ 69.155102][ T6954] RBP: 00007f1fbb810d69 R08: 0000000000000000 R09: 0000000000000000 [ 69.155108][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.155114][ T6954] R13: 0000000000000000 R14: 00007f1fbb9b5fa0 R15: 00007ffc2f445248 [ 69.155128][ T6954] [ 69.155132][ T6954] Mem-Info: [ 69.263530][ T6954] active_anon:17901 inactive_anon:0 isolated_anon:0 [ 69.263530][ T6954] active_file:12876 inactive_file:40600 isolated_file:0 [ 69.263530][ T6954] unevictable:1784 dirty:1822 writeback:0 [ 69.263530][ T6954] slab_reclaimable:6753 slab_unreclaimable:67274 [ 69.263530][ T6954] mapped:27222 shmem:11570 pagetables:1302 [ 69.263530][ T6954] sec_pagetables:300 bounce:0 [ 69.263530][ T6954] kernel_misc_reclaimable:0 [ 69.263530][ T6954] free:453528 free_pcp:19997 free_cma:0 [ 69.278887][ T6954] Node 0 active_anon:68256kB inactive_anon:0kB active_file:51388kB inactive_file:162196kB unevictable:3600kB isolated(anon):0kB isolated(file):0kB mapped:98852kB dirty:7284kB writeback:0kB shmem:39272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13392kB pagetables:4992kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 69.289633][ T6954] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 69.302127][ T6954] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.311535][ T6954] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 69.313362][ T6954] Node 0 DMA32 free:201476kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55112kB inactive_anon:0kB active_file:51388kB inactive_file:162196kB unevictable:3600kB writepending:7284kB present:2080628kB managed:1264292kB mlocked:64kB bounce:0kB free_pcp:70928kB local_pcp:24592kB free_cma:0kB [ 69.323318][ T6954] lowmem_reserve[]: 0 0 0 0 0 [ 69.324831][ T6954] Node 1 Normal free:1604956kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:204kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:18112kB local_pcp:6564kB free_cma:0kB [ 69.335534][ T6954] lowmem_reserve[]: 0 0 0 0 0 [ 69.337208][ T6954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.341279][ T6954] Node 0 DMA32: 1276*4kB (UME) 773*8kB (UME) 237*16kB (UME) 452*32kB (UME) 333*64kB (UME) 75*128kB (UME) 34*256kB (UME) 26*512kB (UME) 12*1024kB (UM) 12*2048kB (UM) 22*4096kB (UME) = 209448kB [ 69.347458][ T6954] Node 1 Normal: 5*4kB (UE) 9*8kB (UME) 10*16kB (E) 25*32kB (UE) 25*64kB (UME) 10*128kB (UME) 2*256kB (U) 6*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 389*4096kB (M) = 1604956kB [ 69.353127][ T6954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.356368][ T6954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.360143][ T6954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.363341][ T6954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.366262][ T6954] 56468 total pagecache pages [ 69.367843][ T6954] 0 pages in swap cache [ 69.369131][ T6954] Free swap = 124996kB [ 69.370421][ T6954] Total swap = 124996kB [ 69.371766][ T6954] 1048443 pages RAM [ 69.373031][ T6954] 0 pages HighMem/MovableOnly [ 69.374485][ T6954] 283041 pages reserved [ 69.375923][ T6954] 0 pages cma reserved [ 69.449442][ T6970] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 69.451970][ T6970] netlink: 244 bytes leftover after parsing attributes in process `syz.0.265'. [ 69.455565][ T6970] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 69.603284][ T6989] NILFS (nbd3): device size too small [ 69.611809][ T6989] fuse: Bad value for 'fd' [ 69.619620][ T6989] syz.3.269 (6989): drop_caches: 2 [ 69.756878][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.837751][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.840071][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.036848][ T837] usb 7-1: USB disconnect, device number 4 [ 70.556717][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.709787][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 70.722241][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 70.725461][ T10] usb 6-1: config 0 has no interface number 0 [ 70.731481][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.736166][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 70.741435][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.745363][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.751686][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 70.754743][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.760128][ T10] usb 6-1: config 0 descriptor?? [ 70.770056][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 70.817086][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 70.823786][ T7029] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.826886][ T7029] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.829550][ T7029] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.832259][ T7029] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.838135][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 70.842677][ T7031] NILFS (nbd2): device size too small [ 70.849617][ T7031] fuse: Unknown parameter '0x0000000000000003' [ 70.856164][ T7031] syz.2.284 (7031): drop_caches: 2 [ 70.938965][ T7033] netlink: 348 bytes leftover after parsing attributes in process `syz.3.285'. [ 70.969076][ T10] usb 6-1: USB disconnect, device number 4 [ 70.973881][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 70.996016][ T7043] netlink: zone id is out of range [ 70.997960][ T7043] netlink: del zone limit has 4 unknown bytes [ 71.116748][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.144836][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.292'. [ 71.188090][ T7058] FAULT_INJECTION: forcing a failure. [ 71.188090][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 71.192705][ T7058] CPU: 1 UID: 0 PID: 7058 Comm: syz.2.294 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 71.192720][ T7058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.192726][ T7058] Call Trace: [ 71.192730][ T7058] [ 71.192735][ T7058] dump_stack_lvl+0x16c/0x1f0 [ 71.192755][ T7058] should_fail_ex+0x512/0x640 [ 71.192772][ T7058] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 71.192790][ T7058] should_failslab+0xc2/0x120 [ 71.192801][ T7058] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 71.192816][ T7058] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 71.192832][ T7058] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 71.192846][ T7058] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 71.192863][ T7058] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 71.192883][ T7058] mmu_topup_memory_caches+0x25/0x170 [ 71.192897][ T7058] kvm_mmu_load+0xd9/0x22a0 [ 71.192910][ T7058] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 71.192926][ T7058] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 71.192937][ T7058] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 71.192951][ T7058] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 71.192962][ T7058] ? __pfx_kvm_mmu_load+0x10/0x10 [ 71.192974][ T7058] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 71.192990][ T7058] ? kvm_check_and_inject_events+0x71c/0x1310 [ 71.193006][ T7058] vcpu_run+0x34eb/0x5500 [ 71.193020][ T7058] ? __lock_acquire+0xb8a/0x1c90 [ 71.193034][ T7058] ? __pfx_vcpu_run+0x10/0x10 [ 71.193048][ T7058] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 71.193061][ T7058] ? __local_bh_enable_ip+0xa4/0x120 [ 71.193077][ T7058] ? kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 71.193090][ T7058] kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 [ 71.193107][ T7058] kvm_vcpu_ioctl+0x5eb/0x1690 [ 71.193122][ T7058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.193139][ T7058] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 71.193151][ T7058] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.193166][ T7058] ? hook_file_ioctl_common+0x145/0x410 [ 71.193183][ T7058] ? selinux_file_ioctl+0x180/0x270 [ 71.193193][ T7058] ? selinux_file_ioctl+0xb4/0x270 [ 71.193203][ T7058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.193217][ T7058] __x64_sys_ioctl+0x18e/0x210 [ 71.193233][ T7058] do_syscall_64+0xcd/0x4c0 [ 71.193244][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.193255][ T7058] RIP: 0033:0x7f56c478e9a9 [ 71.193264][ T7058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.193274][ T7058] RSP: 002b:00007f56c55bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.193284][ T7058] RAX: ffffffffffffffda RBX: 00007f56c49b5fa0 RCX: 00007f56c478e9a9 [ 71.193291][ T7058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.193296][ T7058] RBP: 00007f56c55bd090 R08: 0000000000000000 R09: 0000000000000000 [ 71.193302][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.193308][ T7058] R13: 0000000000000000 R14: 00007f56c49b5fa0 R15: 00007ffdf5e3fb88 [ 71.193321][ T7058] [ 71.211949][ T837] libceph: connect (1)[c::]:6789 error -22 [ 71.309901][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 71.506247][ T7080] syz.1.300 uses obsolete (PF_INET,SOCK_PACKET) [ 71.510049][ T7080] ======================================================= [ 71.510049][ T7080] WARNING: The mand mount option has been deprecated and [ 71.510049][ T7080] and is ignored by this kernel. Remove the mand [ 71.510049][ T7080] option from the mount to silence this warning. [ 71.510049][ T7080] ======================================================= [ 71.525406][ T7082] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 71.568461][ T837] libceph: connect (1)[c::]:6789 error -22 [ 71.570412][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 71.590014][ T53] hid (null): unknown global tag 0x43 [ 71.592075][ T53] hid (null): report_id 10745 is invalid [ 71.593927][ T53] hid (null): invalid report_count -1853002608 [ 71.595853][ T53] hid (null): invalid report_count 135224583 [ 71.600042][ T53] hid-generic 1000:0200:8001.0003: unexpected long global item [ 71.603193][ T53] hid-generic 1000:0200:8001.0003: probe with driver hid-generic failed with error -22 [ 71.631894][ T7091] warning: `syz.2.306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.692193][ T7099] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 71.706786][ T7099] bond2: entered promiscuous mode [ 71.708542][ T7099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.916727][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.046710][ T7109] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 72.078064][ T837] libceph: connect (1)[c::]:6789 error -22 [ 72.079024][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 72.080704][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 72.087766][ T53] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 72.090158][ T53] usb 6-1: config 0 has no interface number 0 [ 72.091933][ T53] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 72.094985][ T53] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 72.099085][ T53] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.099184][ T7061] ceph: No mds server is up or the cluster is laggy [ 72.102958][ T53] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.102986][ T53] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 72.113851][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.130132][ T53] usb 6-1: config 0 descriptor?? [ 72.137033][ T53] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 72.182149][ T7122] NILFS (nbd3): device size too small [ 72.211610][ T7122] fuse: Unknown parameter '0x0000000000000003' [ 72.219234][ T7122] syz.3.320 (7122): drop_caches: 2 [ 72.252453][ T7125] xt_bpf: check failed: parse error [ 72.339083][ T60] usb 6-1: USB disconnect, device number 5 [ 72.346375][ T60] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 72.409081][ T7137] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 72.420438][ T7123] __nla_validate_parse: 3 callbacks suppressed [ 72.420455][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 72.428047][ T7123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7123 comm=syz.0.319 [ 72.524117][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 72.524128][ T40] audit: type=1400 audit(1753277783.709:377): avc: denied { ioctl } for pid=7145 comm="syz.0.328" path="socket:[14246]" dev="sockfs" ino=14246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.536139][ T40] audit: type=1400 audit(1753277783.719:378): avc: denied { map } for pid=7145 comm="syz.0.328" path="socket:[14246]" dev="sockfs" ino=14246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.570050][ T837] IPVS: starting estimator thread 0... [ 72.573202][ T40] audit: type=1400 audit(1753277783.759:379): avc: denied { watch_mount } for pid=7149 comm="syz.0.329" path="/101" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.579408][ T7150] openvswitch: netlink: Multiple metadata blocks provided [ 72.586942][ T40] audit: type=1400 audit(1753277783.759:380): avc: denied { connect } for pid=7149 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.661555][ T7155] libceph: resolve '40' (ret=-3): failed [ 72.676921][ T7151] IPVS: using max 41 ests per chain, 98400 per kthread [ 72.732881][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'. [ 72.738982][ T40] audit: type=1400 audit(1753277783.929:381): avc: denied { execute } for pid=7161 comm="syz.0.334" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 72.788059][ T7170] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 72.791853][ T7167] dvmrp1: entered allmulticast mode [ 72.877417][ T40] audit: type=1400 audit(1753277784.059:382): avc: denied { mount } for pid=7177 comm="syz.3.340" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.894453][ T40] audit: type=1400 audit(1753277784.079:383): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.913099][ T40] audit: type=1800 audit(1753277784.099:384): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.341" name="memory.events" dev="tmpfs" ino=586 res=0 errno=0 [ 73.059897][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 73.144771][ T7201] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 73.148299][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.346'. [ 73.152955][ T7191] pim6reg: entered allmulticast mode [ 73.153673][ T7203] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 73.235854][ T40] audit: type=1400 audit(1753277784.419:385): avc: denied { write } for pid=7210 comm="syz.3.349" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.457478][ T6167] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 73.471683][ T7224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7224 comm=syz.3.352 [ 73.476659][ T7224] hfsplus: Unknown parameter 'barrierer0' [ 73.606706][ T6167] usb 6-1: Using ep0 maxpacket: 8 [ 73.609660][ T6167] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 73.612218][ T6167] usb 6-1: config 0 has no interface number 0 [ 73.614245][ T6167] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.617827][ T6167] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 73.621371][ T6167] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.624880][ T6167] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.629115][ T6167] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 73.632094][ T6167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.636975][ T6167] usb 6-1: config 0 descriptor?? [ 73.645768][ T6167] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 73.800983][ T40] audit: type=1400 audit(1753277784.989:386): avc: denied { create } for pid=7229 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.843586][ T29] usb 6-1: USB disconnect, device number 6 [ 73.848481][ T29] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 73.917105][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 73.920529][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 73.923430][ T7239] netlink: 1 bytes leftover after parsing attributes in process `syz.2.356'. [ 73.951063][ T7245] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 73.958164][ T7248] fuse: Unknown parameter 'fd0x0000000000000003' [ 73.984748][ T7251] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 73.990191][ T7251] program syz.3.360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.107664][ T7269] netlink: 'syz.0.367': attribute type 21 has an invalid length. [ 74.110139][ T7269] netlink: 156 bytes leftover after parsing attributes in process `syz.0.367'. [ 74.150866][ T1462] cfg80211: failed to load regulatory.db [ 74.170351][ T7276] NILFS (nbd3): device size too small [ 74.180161][ T7276] fuse: Unknown parameter 'fd0x0000000000000003' [ 74.192715][ T7276] syz.3.369 (7276): drop_caches: 2 [ 74.235334][ T7280] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 74.272941][ T7284] nbd: must specify an index to disconnect [ 74.316374][ T7289] netlink: 'syz.3.374': attribute type 3 has an invalid length. [ 74.319094][ T7289] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 74.321693][ T7289] netlink: 192 bytes leftover after parsing attributes in process `syz.3.374'. [ 74.324377][ T7289] NCSI netlink: No device for ifindex 0 [ 74.437545][ T7305] loop2: detected capacity change from 0 to 7 [ 74.443323][ T5955] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.446723][ T5955] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.448733][ T5955] Dev loop2: unable to read RDB block 7 [ 74.450416][ T5955] loop2: AHDI p2 p3 [ 74.451656][ T5955] loop2: partition table partially beyond EOD, truncated [ 74.454835][ T5955] loop2: p3 start 335544320 is beyond EOD, truncated [ 74.460671][ T7305] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.463790][ T7305] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.465980][ T7305] Dev loop2: unable to read RDB block 7 [ 74.469216][ T7305] loop2: AHDI p2 p3 [ 74.470441][ T7305] loop2: partition table partially beyond EOD, truncated [ 74.473278][ T7305] loop2: p3 start 335544320 is beyond EOD, truncated [ 74.513540][ T7310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.382'. [ 74.533876][ T5359] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.538628][ T5359] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.541248][ T5359] Dev loop2: unable to read RDB block 7 [ 74.543557][ T5359] loop2: AHDI p2 p3 [ 74.544774][ T5359] loop2: partition table partially beyond EOD, truncated [ 74.547761][ T5359] loop2: p3 start 335544320 is beyond EOD, truncated [ 74.548186][ T7313] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 74.611806][ T5359] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.615147][ T5359] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.617783][ T5359] Dev loop2: unable to read RDB block 7 [ 74.620523][ T5359] loop2: AHDI p2 p3 [ 74.621838][ T5359] loop2: partition table partially beyond EOD, truncated [ 74.624161][ T5359] loop2: p3 start 335544320 is beyond EOD, truncated [ 74.670565][ T5359] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.673732][ T5359] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.675695][ T5359] Dev loop2: unable to read RDB block 7 [ 74.678212][ T5359] loop2: AHDI p2 p3 [ 74.679560][ T5359] loop2: partition table partially beyond EOD, truncated [ 74.681867][ T5359] loop2: p3 start 335544320 is beyond EOD, truncated [ 74.709421][ T7342] futex_wake_op: syz.1.391 tries to shift op by -1; fix this program [ 74.743486][ T7345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7345 comm=syz.1.392 [ 74.851427][ T7351] openvswitch: netlink: Message has 5 unknown bytes. [ 74.947826][ T7353] Bluetooth: MGMT ver 1.23 [ 75.022224][ T7356] kvm: MWAIT instruction emulated as NOP! [ 75.343531][ T7382] openvswitch: netlink: Message has 5 unknown bytes. [ 75.486047][ T7408] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 75.637289][ T6167] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.765483][ T7447] 8021q: adding VLAN 0 to HW filter on device bond7 [ 75.769329][ T7447] bond6: (slave bond7): making interface the new active one [ 75.772034][ T7447] bond6: (slave bond7): Enslaving as an active interface with an up link [ 75.780479][ T7448] xt_CT: No such helper "snmp" [ 75.798367][ T6167] usb 6-1: Using ep0 maxpacket: 8 [ 75.801856][ T6167] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 75.804413][ T6167] usb 6-1: config 0 has no interface number 0 [ 75.806366][ T6167] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.807996][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.814034][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.814130][ T6167] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 75.821581][ T6167] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.825677][ T6167] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.828234][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.832076][ T6167] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 75.833968][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.837865][ T6167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.845907][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.850882][ T6167] usb 6-1: config 0 descriptor?? [ 75.853666][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.858373][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.862170][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.870185][ T6167] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 76.060712][ T67] usb 6-1: USB disconnect, device number 7 [ 76.064134][ T67] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 76.243581][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.246231][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.363717][ T7473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 76.366687][ T7473] bond8: (slave bond9): making interface the new active one [ 76.369626][ T7473] bond8: (slave bond9): Enslaving as an active interface with an up link [ 76.942943][ T7507] fuse: Bad value for 'user_id' [ 76.945194][ T7507] fuse: Bad value for 'user_id' [ 77.023133][ T7509] 8021q: adding VLAN 0 to HW filter on device bond11 [ 77.027166][ T7509] bond10: (slave bond11): making interface the new active one [ 77.030469][ T7509] bond10: (slave bond11): Enslaving as an active interface with an up link [ 77.061684][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.129262][ T7521] bond1: (slave batadv1): Opening slave failed [ 77.379868][ T7551] xt_hashlimit: size too large, truncated to 1048576 [ 77.432382][ T7556] __nla_validate_parse: 40 callbacks suppressed [ 77.432394][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 77.571425][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 77.574479][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 77.593842][ T7571] pimreg: entered allmulticast mode [ 77.630640][ T7581] NILFS (nbd1): device size too small [ 77.646215][ T7581] syz.1.470 (7581): drop_caches: 2 [ 77.650652][ T5950] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 77.796794][ T7591] delete_channel: no stack [ 77.867473][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 77.867484][ T40] audit: type=1400 audit(1753277789.053:402): avc: denied { read } for pid=7605 comm="syz.3.478" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 77.877027][ T40] audit: type=1400 audit(1753277789.053:403): avc: denied { open } for pid=7605 comm="syz.3.478" path="/126/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 77.883986][ T40] audit: type=1400 audit(1753277789.063:404): avc: denied { ioctl } for pid=7605 comm="syz.3.478" path="/126/file0/file0" dev="fuse" ino=1 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 77.982096][ T7613] validate_nla: 5 callbacks suppressed [ 77.982110][ T7613] netlink: 'syz.3.479': attribute type 8 has an invalid length. [ 77.987598][ T7613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.479'. [ 78.081400][ T40] audit: type=1326 audit(1753277789.263:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.088403][ T40] audit: type=1326 audit(1753277789.263:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.096015][ T40] audit: type=1326 audit(1753277789.263:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.104094][ T40] audit: type=1326 audit(1753277789.263:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.111031][ T40] audit: type=1326 audit(1753277789.263:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.118029][ T40] audit: type=1326 audit(1753277789.263:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.124737][ T40] audit: type=1326 audit(1753277789.263:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f8e9a9 code=0x50000 [ 78.820925][ T7648] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 78.836545][ T7651] NILFS (nbd2): device size too small [ 78.862289][ T7645] netlink: 10 bytes leftover after parsing attributes in process `syz.1.489'. [ 78.971848][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 79.189872][ T7675] x_tables: duplicate underflow at hook 2 [ 79.282880][ T7681] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 79.309512][ T7681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 79.314432][ T7681] bond5: (slave bond6): making interface the new active one [ 79.319579][ T7681] bond5: (slave bond6): Enslaving as an active interface with an up link [ 79.392588][ T7688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 79.443350][ T7690] trusted_key: encrypted_key: insufficient parameters specified [ 79.535625][ T7694] xt_hashlimit: size too large, truncated to 1048576 [ 80.491515][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 80.505330][ T7728] capability: warning: `syz.1.519' uses 32-bit capabilities (legacy support in use) [ 80.776196][ T7755] NILFS (nbd1): device size too small [ 80.787321][ T7755] NILFS (nbd1): device size too small [ 80.817133][ T7755] NILFS (nbd1): device size too small [ 80.823539][ T7755] NILFS (nbd1): device size too small [ 80.825789][ T7755] NILFS (nbd1): device size too small [ 80.835509][ T7755] NILFS (nbd1): device size too small [ 80.838677][ T7755] NILFS (nbd1): device size too small [ 80.841063][ T7755] NILFS (nbd1): device size too small [ 80.843552][ T7755] NILFS (nbd1): device size too small [ 80.857562][ T7755] NILFS (nbd1): device size too small [ 80.865268][ T7755] NILFS (nbd1): device size too small [ 80.886536][ T7762] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 80.887038][ T7755] NILFS (nbd1): device size too small [ 80.892078][ T7755] NILFS (nbd1): device size too small [ 80.898627][ T7755] NILFS (nbd1): device size too small [ 80.912395][ T7755] NILFS (nbd1): device size too small [ 80.915170][ T7755] NILFS (nbd1): device size too small [ 80.918826][ T7755] NILFS (nbd1): device size too small [ 80.922924][ T7755] NILFS (nbd1): device size too small [ 80.927220][ T7755] NILFS (nbd1): device size too small [ 80.935932][ T7755] NILFS (nbd1): device size too small [ 80.946061][ T7755] NILFS (nbd1): device size too small [ 80.956982][ T7755] NILFS (nbd1): device size too small [ 80.959085][ T7755] NILFS (nbd1): device size too small [ 80.961461][ T7755] NILFS (nbd1): device size too small [ 80.965785][ T7772] netlink: 'syz.2.532': attribute type 25 has an invalid length. [ 80.974955][ T7755] NILFS (nbd1): device size too small [ 80.998345][ T7755] NILFS (nbd1): device size too small [ 81.000530][ T7755] NILFS (nbd1): device size too small [ 81.002653][ T7755] NILFS (nbd1): device size too small [ 81.006982][ T7755] NILFS (nbd1): device size too small [ 81.009164][ T7755] NILFS (nbd1): device size too small [ 81.016980][ T7755] NILFS (nbd1): device size too small [ 81.019421][ T7755] NILFS (nbd1): device size too small [ 81.027264][ T7755] NILFS (nbd1): device size too small [ 81.098494][ T7784] input: syz1 as /devices/virtual/input/input6 [ 81.128649][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 81.245364][ T7804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38829 sclass=netlink_route_socket pid=7804 comm=syz.0.542 [ 81.338735][ T67] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.408742][ T7808] 8021q: adding VLAN 0 to HW filter on device bond8 [ 81.486740][ T67] usb 7-1: Using ep0 maxpacket: 8 [ 81.490847][ T67] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.494717][ T67] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.498580][ T67] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.502487][ T67] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.507787][ T67] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.511564][ T67] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.720772][ T67] usb 7-1: GET_CAPABILITIES returned 0 [ 81.722502][ T67] usbtmc 7-1:16.0: can't read capabilities [ 81.936952][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.969116][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 82.053287][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 82.100862][ T7821] xt_NFQUEUE: number of total queues is 0 [ 82.192724][ T5950] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 82.457386][ T7849] __nla_validate_parse: 3 callbacks suppressed [ 82.457403][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 82.607955][ T7860] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.612501][ T7860] SET target dimension over the limit! [ 82.617078][ T7863] SET target dimension over the limit! [ 82.656489][ T7867] netlink: 192 bytes leftover after parsing attributes in process `syz.3.563'. [ 82.735872][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 82.935546][ T7901] netlink: 'syz.3.575': attribute type 6 has an invalid length. [ 82.940933][ T7901] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.575'. [ 82.962194][ T40] kauditd_printk_skb: 27787 callbacks suppressed [ 82.962206][ T40] audit: type=1400 audit(1753277794.143:28199): avc: denied { mounton } for pid=7900 comm="syz.3.575" path="/proc/405/cgroup" dev="proc" ino=19531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 82.974892][ T40] audit: type=1400 audit(1753277794.153:28200): avc: denied { ioctl } for pid=7896 comm="syz.0.574" path="socket:[18796]" dev="sockfs" ino=18796 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.049940][ T7915] netlink: 92 bytes leftover after parsing attributes in process `syz.0.579'. [ 83.065487][ T40] audit: type=1400 audit(1753277794.243:28201): avc: denied { write } for pid=7916 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.076730][ T40] audit: type=1400 audit(1753277794.253:28202): avc: denied { write } for pid=7916 comm="syz.1.580" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.110497][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 83.121126][ T40] audit: type=1400 audit(1753277794.303:28203): avc: denied { compute_member } for pid=7919 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.131332][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 83.139370][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 83.191459][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191504][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191541][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191578][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191614][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191651][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191687][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191722][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191758][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191793][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191835][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191871][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191906][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191942][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.191979][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192016][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192052][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192089][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192124][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192159][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192196][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192232][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192267][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192302][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192337][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192372][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192407][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192443][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192478][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192513][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192549][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192584][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192619][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192655][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192690][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192726][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192761][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192796][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192835][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192871][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192906][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192941][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.192977][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193013][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193048][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193083][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193118][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193153][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193188][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193224][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193260][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193297][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193332][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193367][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193403][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.193438][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.194272][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.196743][ T7928] syz.0.584 (7928) used greatest stack depth: 17768 bytes left [ 83.269238][ T7949] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 83.272247][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.276202][ T7950] vlan2: entered allmulticast mode [ 83.277567][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.277609][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.277646][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.277681][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.277717][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.277754][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.277790][ T5950] Bluetooth: hci3: unexpected event for opcode 0x203c [ 83.354592][ T7950] batadv0: entered allmulticast mode [ 83.384881][ T40] audit: type=1400 audit(1753277794.563:28204): avc: denied { mount } for pid=7957 comm="syz.0.592" name="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.386441][ T40] audit: type=1400 audit(1753277794.563:28205): avc: denied { search } for pid=7957 comm="syz.0.592" name="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.387038][ T7949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.404632][ T40] audit: type=1400 audit(1753277794.563:28206): avc: denied { search } for pid=7957 comm="syz.0.592" name="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.404676][ T40] audit: type=1400 audit(1753277794.563:28207): avc: denied { watch watch_reads } for pid=7957 comm="syz.0.592" path="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.404716][ T40] audit: type=1400 audit(1753277794.573:28208): avc: denied { search } for pid=7957 comm="syz.0.592" name="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.483615][ T7963] tc_dump_action: action bad kind [ 83.595159][ T7973] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 83.632158][ T7973] 8021q: adding VLAN 0 to HW filter on device bond10 [ 83.633579][ T7973] bond9: (slave bond10): making interface the new active one [ 83.633822][ T7973] bond9: (slave bond10): Enslaving as an active interface with an up link [ 83.711221][ T7986] xt_CT: No such helper "pptp" [ 83.737460][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.737870][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.749195][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.749309][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.749417][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.767512][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.767630][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.767768][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.767873][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792329][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792442][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792548][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792655][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792770][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792879][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.792989][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.793095][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.793201][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.845665][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.845878][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.846074][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.846268][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.846466][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.875887][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.875998][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.876107][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.876218][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.876329][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.906828][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.906953][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907058][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907185][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907288][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907405][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907509][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907628][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907734][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907864][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.907970][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.908108][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.908213][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.908328][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.990129][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.990275][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.990385][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 83.990504][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.012359][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.012487][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.012597][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.029149][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.029263][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.029383][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.029487][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.029604][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.030127][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.030238][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.030345][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.030449][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.030588][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.030698][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.086721][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.086852][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.086961][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.087071][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.087178][ T7995] hugetlbfs: Unknown parameter 'VNDڼ[lKFlBRi<$Y u-r7a'ȠhVN)&kvjA8Fa1Tm[P An+uΤ̑UYz&WGK#ޥ' [ 84.107226][ T6167] usb 7-1: USB disconnect, device number 5 [ 84.162483][ T7999] overlayfs: failed to clone upperpath [ 84.246925][ T8012] lo: entered allmulticast mode [ 84.357051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.443895][ T8035] overlayfs: failed to clone upperpath [ 84.573744][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 84.631775][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 84.703750][ T8059] net_ratelimit: 59 callbacks suppressed [ 84.703770][ T8059] openvswitch: netlink: Missing valid actions attribute. [ 84.710583][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.800711][ T8067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8067 comm=syz.0.629 [ 84.809084][ T8067] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 84.975011][ T8075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.631'. [ 85.114985][ T8086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=8086 comm=syz.0.636 [ 85.241946][ T8098] pim6reg1: entered promiscuous mode [ 85.243740][ T8098] pim6reg1: entered allmulticast mode [ 85.423355][ T8139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8139 comm=syz.0.655 [ 85.444764][ T8136] xt_CT: No such helper "pptp" [ 85.460344][ T8143] GUP no longer grows the stack in syz.0.657 (8143): 200000007000-20000000a000 (200000004000) [ 85.464869][ T8143] CPU: 3 UID: 0 PID: 8143 Comm: syz.0.657 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 85.464894][ T8143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.464906][ T8143] Call Trace: [ 85.464913][ T8143] [ 85.464921][ T8143] dump_stack_lvl+0x16c/0x1f0 [ 85.464974][ T8143] gup_vma_lookup+0x1d2/0x220 [ 85.464998][ T8143] __get_user_pages+0x271/0x3b80 [ 85.465024][ T8143] ? kasan_save_stack+0x42/0x60 [ 85.465048][ T8143] ? kasan_save_stack+0x33/0x60 [ 85.465071][ T8143] ? kasan_save_track+0x14/0x30 [ 85.465097][ T8143] ? __kasan_kmalloc+0xaa/0xb0 [ 85.465120][ T8143] ? __kvmalloc_node_noprof+0x27b/0x620 [ 85.465146][ T8143] ? __pfx___get_user_pages+0x10/0x10 [ 85.465165][ T8143] ? __sys_setsockopt+0x1a0/0x230 [ 85.465192][ T8143] ? do_syscall_64+0xcd/0x4c0 [ 85.465207][ T8143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.465234][ T8143] __gup_longterm_locked+0x5e7/0x1840 [ 85.465264][ T8143] ? __pfx___gup_longterm_locked+0x10/0x10 [ 85.465300][ T8143] pin_user_pages+0x13c/0x160 [ 85.465322][ T8143] ? __pfx_pin_user_pages+0x10/0x10 [ 85.465347][ T8143] ? xdp_umem_create+0x652/0x1270 [ 85.465379][ T8143] xdp_umem_create+0x73c/0x1270 [ 85.465413][ T8143] xsk_setsockopt+0x5b2/0x840 [ 85.465438][ T8143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.465463][ T8143] ? find_held_lock+0x2b/0x80 [ 85.465490][ T8143] ? selinux_socket_setsockopt+0x6a/0x80 [ 85.465527][ T8143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.465554][ T8143] do_sock_setsockopt+0xf3/0x1d0 [ 85.465580][ T8143] __sys_setsockopt+0x1a0/0x230 [ 85.465611][ T8143] __x64_sys_setsockopt+0xbd/0x160 [ 85.465637][ T8143] ? do_syscall_64+0x91/0x4c0 [ 85.465652][ T8143] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.465680][ T8143] do_syscall_64+0xcd/0x4c0 [ 85.465699][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.465718][ T8143] RIP: 0033:0x7f3e5378e9a9 [ 85.465733][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.465751][ T8143] RSP: 002b:00007f3e54560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.465768][ T8143] RAX: ffffffffffffffda RBX: 00007f3e539b5fa0 RCX: 00007f3e5378e9a9 [ 85.465780][ T8143] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 85.465797][ T8143] RBP: 00007f3e53810d69 R08: 0000000000000020 R09: 0000000000000000 [ 85.465809][ T8143] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 85.465820][ T8143] R13: 0000000000000000 R14: 00007f3e539b5fa0 R15: 00007ffe22018f68 [ 85.465848][ T8143] [ 85.516760][ T8147] xt_SECMARK: invalid mode: 0 [ 85.521544][ T8149] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 85.527262][ T8147] netlink: 'syz.1.658': attribute type 27 has an invalid length. [ 85.720271][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.727825][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.809222][ T8147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.812332][ T8147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.815169][ T8147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.838298][ T8147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.884079][ T8150] 8021q: adding VLAN 0 to HW filter on device  [ 85.888379][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.894395][ T8150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.963019][ T8159] 8021q: adding VLAN 0 to HW filter on device bond12 [ 86.001851][ T8162] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 86.026001][ T8162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.030205][ T8162] bond3: (slave bond4): making interface the new active one [ 86.032718][ T8162] bond3: (slave bond4): Enslaving as an active interface with an up link [ 86.062246][ T8167] program syz.1.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.071153][ T8167] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 86.075253][ T8167] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 86.543049][ T8189] autofs: Unknown parameter './binderfs/custom1' [ 86.719298][ T5950] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 86.719491][ T8204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8204 comm=syz.0.676 [ 86.744659][ T8207] FAULT_INJECTION: forcing a failure. [ 86.744659][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 86.749899][ T8207] CPU: 1 UID: 0 PID: 8207 Comm: syz.1.677 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 86.749922][ T8207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.749933][ T8207] Call Trace: [ 86.749939][ T8207] [ 86.749948][ T8207] dump_stack_lvl+0x16c/0x1f0 [ 86.749997][ T8207] should_fail_ex+0x512/0x640 [ 86.750030][ T8207] ? fs_reclaim_acquire+0xae/0x150 [ 86.750054][ T8207] ? tomoyo_encode2+0x100/0x3e0 [ 86.750070][ T8207] should_failslab+0xc2/0x120 [ 86.750090][ T8207] __kmalloc_noprof+0xd2/0x510 [ 86.750121][ T8207] tomoyo_encode2+0x100/0x3e0 [ 86.750143][ T8207] tomoyo_encode+0x29/0x50 [ 86.750160][ T8207] tomoyo_realpath_from_path+0x18f/0x6e0 [ 86.750179][ T8207] ? tomoyo_profile+0x47/0x60 [ 86.750202][ T8207] tomoyo_path_number_perm+0x245/0x580 [ 86.750226][ T8207] ? tomoyo_path_number_perm+0x237/0x580 [ 86.750253][ T8207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.750281][ T8207] ? find_held_lock+0x2b/0x80 [ 86.750325][ T8207] ? find_held_lock+0x2b/0x80 [ 86.750347][ T8207] ? hook_file_ioctl_common+0x145/0x410 [ 86.750374][ T8207] ? __fget_files+0x20e/0x3c0 [ 86.750395][ T8207] security_file_ioctl+0x9b/0x240 [ 86.750415][ T8207] __x64_sys_ioctl+0xb7/0x210 [ 86.750439][ T8207] do_syscall_64+0xcd/0x4c0 [ 86.750460][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.750479][ T8207] RIP: 0033:0x7f1fbb78e9a9 [ 86.750510][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.750528][ T8207] RSP: 002b:00007f1fbc6d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.750546][ T8207] RAX: ffffffffffffffda RBX: 00007f1fbb9b5fa0 RCX: 00007f1fbb78e9a9 [ 86.750557][ T8207] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 86.750567][ T8207] RBP: 00007f1fbc6d1090 R08: 0000000000000000 R09: 0000000000000000 [ 86.750578][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.750587][ T8207] R13: 0000000000000000 R14: 00007f1fbb9b5fa0 R15: 00007ffc2f445248 [ 86.750614][ T8207] [ 86.750631][ T8207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.811816][ T8210] lo speed is unknown, defaulting to 1000 [ 86.843469][ T8210] lo speed is unknown, defaulting to 1000 [ 86.848292][ T8210] lo speed is unknown, defaulting to 1000 [ 86.852642][ T8210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.862361][ T8210] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.889726][ T8210] lo speed is unknown, defaulting to 1000 [ 86.893903][ T8210] lo speed is unknown, defaulting to 1000 [ 86.897793][ T8210] lo speed is unknown, defaulting to 1000 [ 86.902910][ T8210] lo speed is unknown, defaulting to 1000 [ 87.026258][ T8223] netlink: 'syz.0.683': attribute type 29 has an invalid length. [ 87.132482][ T8237] overlay: ./file0 is not a directory [ 87.169926][ T8241] x_tables: duplicate underflow at hook 3 [ 87.253936][ T8255] FAULT_INJECTION: forcing a failure. [ 87.253936][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 87.259991][ T8255] CPU: 3 UID: 0 PID: 8255 Comm: syz.2.692 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 87.260007][ T8255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.260014][ T8255] Call Trace: [ 87.260018][ T8255] [ 87.260022][ T8255] dump_stack_lvl+0x16c/0x1f0 [ 87.260055][ T8255] should_fail_ex+0x512/0x640 [ 87.260076][ T8255] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 87.260093][ T8255] should_failslab+0xc2/0x120 [ 87.260103][ T8255] __kmalloc_cache_noprof+0x6a/0x3e0 [ 87.260117][ T8255] ? __pfx___might_resched+0x10/0x10 [ 87.260132][ T8255] ? vhost_task_create+0xe5/0x2e0 [ 87.260143][ T8255] ? rcu_is_watching+0x12/0xc0 [ 87.260157][ T8255] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 87.260174][ T8255] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 87.260187][ T8255] vhost_task_create+0xe5/0x2e0 [ 87.260201][ T8255] ? __pfx_vhost_task_create+0x10/0x10 [ 87.260219][ T8255] ? __pfx_vhost_task_fn+0x10/0x10 [ 87.260236][ T8255] kvm_mmu_post_init_vm+0x1b7/0x370 [ 87.260251][ T8255] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 87.260265][ T8255] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 87.260281][ T8255] kvm_vcpu_ioctl+0x5eb/0x1690 [ 87.260296][ T8255] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 87.260313][ T8255] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 87.260326][ T8255] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.260341][ T8255] ? hook_file_ioctl_common+0x145/0x410 [ 87.260358][ T8255] ? selinux_file_ioctl+0x180/0x270 [ 87.260367][ T8255] ? selinux_file_ioctl+0xb4/0x270 [ 87.260378][ T8255] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 87.260392][ T8255] __x64_sys_ioctl+0x18e/0x210 [ 87.260408][ T8255] do_syscall_64+0xcd/0x4c0 [ 87.260440][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.260452][ T8255] RIP: 0033:0x7f56c478e9a9 [ 87.260461][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.260472][ T8255] RSP: 002b:00007f56c55bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.260483][ T8255] RAX: ffffffffffffffda RBX: 00007f56c49b5fa0 RCX: 00007f56c478e9a9 [ 87.260490][ T8255] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 87.260496][ T8255] RBP: 00007f56c55bd090 R08: 0000000000000000 R09: 0000000000000000 [ 87.260502][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.260508][ T8255] R13: 0000000000000000 R14: 00007f56c49b5fa0 R15: 00007ffdf5e3fb88 [ 87.260522][ T8255] [ 87.445308][ T8268] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 87.456393][ T8268] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 87.511491][ T8277] __nla_validate_parse: 8 callbacks suppressed [ 87.511507][ T8277] netlink: 76 bytes leftover after parsing attributes in process `syz.2.700'. [ 87.610821][ T8285] netlink: 128 bytes leftover after parsing attributes in process `syz.2.704'. [ 87.613809][ T8285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.704'. [ 87.627920][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 87.693455][ T8295] FAULT_INJECTION: forcing a failure. [ 87.693455][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 87.698637][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.2.706 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 87.698653][ T8295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.698661][ T8295] Call Trace: [ 87.698665][ T8295] [ 87.698669][ T8295] dump_stack_lvl+0x16c/0x1f0 [ 87.698690][ T8295] should_fail_ex+0x512/0x640 [ 87.698708][ T8295] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 87.698727][ T8295] should_failslab+0xc2/0x120 [ 87.698738][ T8295] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 87.698760][ T8295] ? copy_process+0x4b6/0x7650 [ 87.698778][ T8295] copy_process+0x4b6/0x7650 [ 87.698798][ T8295] ? __pfx_copy_process+0x10/0x10 [ 87.698814][ T8295] ? lockdep_init_map_type+0x5c/0x280 [ 87.698827][ T8295] ? lockdep_init_map_type+0x5c/0x280 [ 87.698837][ T8295] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 87.698854][ T8295] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 87.698867][ T8295] vhost_task_create+0x1d2/0x2e0 [ 87.698878][ T8295] ? __pfx_vhost_task_create+0x10/0x10 [ 87.698893][ T8295] ? __pfx_vhost_task_fn+0x10/0x10 [ 87.698911][ T8295] kvm_mmu_post_init_vm+0x1b7/0x370 [ 87.698926][ T8295] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 87.698940][ T8295] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 87.698957][ T8295] kvm_vcpu_ioctl+0x5eb/0x1690 [ 87.698971][ T8295] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 87.698989][ T8295] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 87.699004][ T8295] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.699019][ T8295] ? hook_file_ioctl_common+0x145/0x410 [ 87.699037][ T8295] ? selinux_file_ioctl+0x180/0x270 [ 87.699046][ T8295] ? selinux_file_ioctl+0xb4/0x270 [ 87.699056][ T8295] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 87.699070][ T8295] __x64_sys_ioctl+0x18e/0x210 [ 87.699086][ T8295] do_syscall_64+0xcd/0x4c0 [ 87.699098][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.699109][ T8295] RIP: 0033:0x7f56c478e9a9 [ 87.699118][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.699129][ T8295] RSP: 002b:00007f56c55bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.699139][ T8295] RAX: ffffffffffffffda RBX: 00007f56c49b5fa0 RCX: 00007f56c478e9a9 [ 87.699146][ T8295] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 87.699152][ T8295] RBP: 00007f56c55bd090 R08: 0000000000000000 R09: 0000000000000000 [ 87.699158][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.699165][ T8295] R13: 0000000000000000 R14: 00007f56c49b5fa0 R15: 00007ffdf5e3fb88 [ 87.699178][ T8295] [ 88.136639][ T67] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 88.173602][ T8349] overlay: filesystem on ./bus not supported as upperdir [ 88.288329][ T67] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.292395][ T67] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.299828][ T67] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.303461][ T67] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.305971][ T67] usb 8-1: Product: syz [ 88.307552][ T67] usb 8-1: Manufacturer: syz [ 88.309170][ T67] usb 8-1: SerialNumber: syz [ 88.312074][ T67] usb 8-1: config 0 descriptor?? [ 88.403991][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 88.404006][ T40] audit: type=1400 audit(1753277799.583:28231): avc: denied { write } for pid=8368 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.450460][ T40] audit: type=1400 audit(1753277799.633:28232): avc: denied { create } for pid=8375 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.463916][ T40] audit: type=1400 audit(1753277799.643:28233): avc: denied { sys_admin } for pid=8375 comm="syz.2.714" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.472749][ T40] audit: type=1400 audit(1753277799.643:28234): avc: denied { create } for pid=8377 comm="syz.2.714" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 88.473166][ T40] audit: type=1400 audit(1753277799.653:28235): avc: denied { associate } for pid=8377 comm="syz.2.714" name="core" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 88.512787][ T40] audit: type=1400 audit(1753277799.653:28236): avc: denied { write open } for pid=8377 comm="syz.2.714" path="/core" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 88.552173][ T40] audit: type=1400 audit(1753277799.653:28237): avc: denied { create } for pid=8375 comm="syz.2.714" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 88.667855][ T8391] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 88.738077][ T8393] 8021q: adding VLAN 0 to HW filter on device bond14 [ 88.742179][ T8393] bond13: (slave bond14): making interface the new active one [ 88.745010][ T8393] bond13: (slave bond14): Enslaving as an active interface with an up link [ 88.992784][ T8404] bridge0: port 3(dummy0) entered disabled state [ 89.120430][ T8412] qrtr: Invalid version 0 [ 89.396893][ T67] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.577699][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 89.581334][ T67] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.587949][ T67] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.590920][ T67] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.593452][ T67] usb 6-1: Product: syz [ 89.594773][ T67] usb 6-1: Manufacturer: syz [ 89.596237][ T67] usb 6-1: SerialNumber: syz [ 89.600147][ T67] usb 6-1: config 0 descriptor?? [ 89.602964][ T8416] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.606900][ T67] hub 6-1:0.0: bad descriptor, ignoring hub [ 89.609057][ T67] hub 6-1:0.0: probe with driver hub failed with error -5 [ 89.733467][ T40] audit: type=1400 audit(1753277800.913:28238): avc: denied { ioctl } for pid=8417 comm="syz.2.727" path="socket:[20358]" dev="sockfs" ino=20358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.839176][ T8420] NILFS (nbd2): device size too small [ 90.134861][ T8424] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 90.176278][ T8424] 8021q: adding VLAN 0 to HW filter on device bond71 [ 90.181188][ T8424] bond70: (slave bond71): making interface the new active one [ 90.184519][ T8424] bond70: (slave bond71): Enslaving as an active interface with an up link [ 90.276532][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 90.279704][ T8430] bridge: RTM_NEWNEIGH with invalid state 0x5 [ 90.403088][ T40] audit: type=1400 audit(1753277801.583:28239): avc: denied { getopt } for pid=8439 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.439643][ T8442] batadv_slave_1: entered promiscuous mode [ 90.530490][ T8443] netlink: 84 bytes leftover after parsing attributes in process `syz.0.735'. [ 90.637975][ T53] raw-gadget.1 gadget.1: failed to queue suspend event [ 90.661702][ T8421] raw-gadget.1 gadget.1: failed to queue disconnect event [ 90.829043][ T837] usb 8-1: USB disconnect, device number 6 [ 90.885557][ T8461] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 90.916184][ T8461] 8021q: adding VLAN 0 to HW filter on device bond16 [ 90.920730][ T8461] bond15: (slave bond16): making interface the new active one [ 90.924387][ T8461] bond15: (slave bond16): Enslaving as an active interface with an up link [ 91.130119][ T8472] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 91.152305][ T8472] 8021q: adding VLAN 0 to HW filter on device bond17 [ 91.165246][ T8472] bond17: (slave geneve2): making interface the new active one [ 91.169875][ T8472] bond17: (slave geneve2): Enslaving as an active interface with an up link [ 91.182281][ T8472] bond17: entered promiscuous mode [ 91.184013][ T8472] geneve2: entered promiscuous mode [ 91.228978][ T5950] Bluetooth: hci3: unexpected event for opcode 0x200b [ 91.243812][ T40] audit: type=1400 audit(1753277802.423:28240): avc: denied { map } for pid=8485 comm="syz.2.746" path="/dev/sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.271710][ T8441] batadv_slave_1: left promiscuous mode [ 91.303152][ T8494] netlink: 64 bytes leftover after parsing attributes in process `syz.3.749'. [ 91.313991][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 91.338350][ T8499] netlink: 'syz.0.750': attribute type 21 has an invalid length. [ 91.340849][ T8499] netlink: 156 bytes leftover after parsing attributes in process `syz.0.750'. [ 91.357976][ T8501] comedi: valid board names for 8255 driver are: [ 91.360247][ T8501] 8255 [ 91.361226][ T8501] comedi: valid board names for vmk80xx driver are: [ 91.363262][ T8501] vmk80xx [ 91.364203][ T8501] comedi: valid board names for usbduxsigma driver are: [ 91.366234][ T8501] usbduxsigma [ 91.373201][ T8501] comedi: valid board names for usbduxfast driver are: [ 91.375386][ T8501] usbduxfast [ 91.376430][ T8501] comedi: valid board names for usbdux driver are: [ 91.379603][ T8501] usbdux [ 91.380745][ T8501] comedi: valid board names for ni6501 driver are: [ 91.382805][ T8501] ni6501 [ 91.384099][ T8501] comedi: valid board names for dt9812 driver are: [ 91.386290][ T8501] dt9812 [ 91.387565][ T8501] comedi: valid board names for ni_labpc_cs driver are: [ 91.389732][ T8501] ni_labpc_cs [ 91.391202][ T8501] comedi: valid board names for ni_daq_700 driver are: [ 91.393496][ T8501] ni_daq_700 [ 91.394639][ T8501] comedi: valid board names for labpc_pci driver are: [ 91.397560][ T8501] labpc_pci [ 91.398643][ T8501] comedi: valid board names for adl_pci9118 driver are: [ 91.400848][ T8501] pci9118dg [ 91.402064][ T8501] pci9118hg [ 91.403115][ T8501] pci9118hr [ 91.404154][ T8501] comedi: valid board names for 8255_pci driver are: [ 91.406278][ T8501] 8255_pci [ 91.407696][ T8501] comedi: valid board names for s526 driver are: [ 91.411197][ T8501] s526 [ 91.412192][ T8501] comedi: valid board names for multiq3 driver are: [ 91.414232][ T8501] multiq3 [ 91.415227][ T8501] comedi: valid board names for pcmuio driver are: [ 91.417526][ T8501] pcmuio48 [ 91.418654][ T8501] pcmuio96 [ 91.419696][ T8501] comedi: valid board names for pcmmio driver are: [ 91.421744][ T8501] pcmmio [ 91.422704][ T8501] comedi: valid board names for pcmda12 driver are: [ 91.424727][ T8501] pcmda12 [ 91.425702][ T8501] comedi: valid board names for pcmad driver are: [ 91.427971][ T8501] pcmad12 [ 91.429099][ T8501] pcmad16 [ 91.440451][ T8501] comedi: valid board names for ni_labpc driver are: [ 91.442623][ T8501] lab-pc-1200 [ 91.443755][ T8501] lab-pc-1200ai [ 91.444941][ T8501] lab-pc+ [ 91.445912][ T8501] comedi: valid board names for atmio16 driver are: [ 91.448983][ T8501] atmio16 [ 91.450030][ T8501] atmio16d [ 91.451090][ T8501] comedi: valid board names for ni_at_ao driver are: [ 91.453130][ T8501] at-ao-6 [ 91.454123][ T8501] at-ao-10 [ 91.455155][ T8501] comedi: valid board names for ni_at_a2150 driver are: [ 91.457810][ T8501] ni_at_a2150 [ 91.458935][ T8501] comedi: valid board names for adq12b driver are: [ 91.461035][ T8501] adq12b [ 91.461974][ T8501] comedi: valid board names for mpc624 driver are: [ 91.464229][ T8501] mpc624 [ 91.465168][ T8501] comedi: valid board names for c6xdigio driver are: [ 91.468646][ T8501] c6xdigio [ 91.469689][ T8501] comedi: valid board names for aio_iiro_16 driver are: [ 91.471880][ T8501] aio_iiro_16 [ 91.474694][ T8501] comedi: valid board names for aio_aio12_8 driver are: [ 91.477779][ T8501] aio_aio12_8 [ 91.478969][ T8501] aio_ai12_8 [ 91.480099][ T8501] aio_ao12_4 [ 91.481296][ T8501] comedi: valid board names for fl512 driver are: [ 91.481774][ T8513] sctp: [Deprecated]: syz.2.755 (pid 8513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.481774][ T8513] Use struct sctp_sack_info instead [ 91.483364][ T8501] fl512 [ 91.489563][ T8501] comedi: valid board names for dmm32at driver are: [ 91.491703][ T8501] dmm32at [ 91.492684][ T8501] comedi: valid board names for dt282x driver are: [ 91.494702][ T8501] dt2821 [ 91.495646][ T8501] dt2821-f [ 91.497305][ T8501] dt2821-g [ 91.498359][ T8501] dt2823 [ 91.499425][ T8501] dt2824-pgh [ 91.500572][ T8501] dt2824-pgl [ 91.501650][ T8501] dt2825 [ 91.502619][ T8501] dt2827 [ 91.503586][ T8501] dt2828 [ 91.504585][ T8501] dt2829 [ 91.505534][ T8501] dt21-ez [ 91.506816][ T8501] dt23-ez [ 91.508420][ T8501] dt24-ez [ 91.509599][ T8501] dt24-ez-pgl [ 91.510796][ T8501] comedi: valid board names for dt2817 driver are: [ 91.513169][ T8501] dt2817 [ 91.514441][ T8501] comedi: valid board names for dt2815 driver are: [ 91.518218][ T8501] dt2815 [ 91.519204][ T8501] comedi: valid board names for dt2814 driver are: [ 91.521280][ T8501] dt2814 [ 91.522263][ T8501] comedi: valid board names for dt2811 driver are: [ 91.524384][ T8501] dt2811-pgh [ 91.525461][ T8501] dt2811-pgl [ 91.526555][ T8501] comedi: valid board names for dt2801 driver are: [ 91.529420][ T8501] dt2801 [ 91.530389][ T8501] comedi: valid board names for das6402 driver are: [ 91.532472][ T8501] das6402-12 [ 91.533901][ T8501] das6402-16 [ 91.536671][ T8501] comedi: valid board names for das1800 driver are: [ 91.540158][ T8501] das-1701st [ 91.541248][ T8501] das-1701st-da [ 91.542715][ T8501] das-1702st [ 91.543852][ T8501] das-1702st-da [ 91.545004][ T8501] das-1702hr [ 91.546066][ T8501] das-1702hr-da [ 91.548986][ T8501] das-1701ao [ 91.556963][ T8501] das-1702ao [ 91.558666][ T8501] das-1801st [ 91.560316][ T8501] das-1801st-da [ 91.562026][ T8501] das-1802st [ 91.563612][ T8501] das-1802st-da [ 91.565262][ T8501] das-1802hr [ 91.566911][ T8501] das-1802hr-da [ 91.568718][ T8501] das-1801hc [ 91.570255][ T8501] das-1802hc [ 91.571823][ T8501] das-1801ao [ 91.573558][ T8501] das-1802ao [ 91.575235][ T8501] comedi: valid board names for das800 driver are: [ 91.578658][ T8501] das-800 [ 91.580212][ T8501] cio-das800 [ 91.581760][ T8501] das-801 [ 91.583227][ T8501] cio-das801 [ 91.584805][ T8501] das-802 [ 91.586296][ T8501] cio-das802 [ 91.587873][ T8501] cio-das802/16 [ 91.589511][ T8501] comedi: valid board names for isa-das08 driver are: [ 91.592411][ T8501] isa-das08 [ 91.593919][ T8501] das08-pgm [ 91.595381][ T8501] das08-pgh [ 91.596986][ T8501] das08-pgl [ 91.598366][ T8501] das08-aoh [ 91.599907][ T8501] das08-aol [ 91.601420][ T8501] das08-aom [ 91.602939][ T8501] das08/jr-ao [ 91.604527][ T8501] das08jr-16-ao [ 91.606188][ T8501] pc104-das08 [ 91.608316][ T8501] das08jr/16 [ 91.609896][ T8501] comedi: valid board names for das16m1 driver are: [ 91.613156][ T8501] das16m1 [ 91.614685][ T8501] comedi: valid board names for dac02 driver are: [ 91.617651][ T8501] dac02 [ 91.619036][ T8501] comedi: valid board names for rti802 driver are: [ 91.621920][ T8501] rti802 [ 91.623308][ T8501] comedi: valid board names for rti800 driver are: [ 91.626142][ T8501] rti800 [ 91.627749][ T8501] rti815 [ 91.629098][ T8501] comedi: valid board names for pcm3724 driver are: [ 91.631963][ T8501] pcm3724 [ 91.633397][ T8501] comedi: valid board names for pcl818 driver are: [ 91.636244][ T8501] pcl818l [ 91.637670][ T8501] pcl818h [ 91.639148][ T8501] pcl818hd [ 91.640630][ T8501] pcl818hg [ 91.642103][ T8501] pcl818 [ 91.643493][ T8501] pcl718 [ 91.644872][ T8501] pcm3718 [ 91.646353][ T8501] comedi: valid board names for pcl816 driver are: [ 91.649337][ T8501] pcl816 [ 91.650789][ T8501] pcl814b [ 91.652275][ T8501] comedi: valid board names for pcl812 driver are: [ 91.655186][ T8501] pcl812 [ 91.656676][ T8501] pcl812pg [ 91.658165][ T8501] acl8112pg [ 91.659730][ T8501] acl8112dg [ 91.661205][ T8501] acl8112hg [ 91.662692][ T8501] a821pgl [ 91.664108][ T8501] a821pglnda [ 91.665582][ T8501] a821pgh [ 91.667162][ T8501] a822pgl [ 91.668607][ T8501] a822pgh [ 91.670011][ T8501] a823pgl [ 91.671298][ T8501] a823pgh [ 91.672625][ T8501] pcl813 [ 91.673900][ T8501] pcl813b [ 91.675234][ T8501] acl8113 [ 91.676555][ T8501] iso813 [ 91.678047][ T8501] acl8216 [ 91.679497][ T8501] a826pg [ 91.680899][ T8501] comedi: valid board names for pcl730 driver are: [ 91.683595][ T8501] pcl730 [ 91.684851][ T8501] iso730 [ 91.686067][ T8501] acl7130 [ 91.687479][ T8501] pcm3730 [ 91.688902][ T8501] pcl725 [ 91.690160][ T8501] p8r8dio [ 91.691571][ T8501] acl7225b [ 91.692911][ T8501] p16r16dio [ 91.694259][ T8501] pcl733 [ 91.695503][ T8501] pcl734 [ 91.696964][ T8501] opmm-1616-xt [ 91.698418][ T8501] pearl-mm-p [ 91.699896][ T8501] ir104-pbf [ 91.701277][ T8501] comedi: valid board names for pcl726 driver are: [ 91.703966][ T8501] pcl726 [ 91.705200][ T8501] pcl727 [ 91.706427][ T8501] pcl728 [ 91.707703][ T8501] acl6126 [ 91.708992][ T8501] acl6128 [ 91.710347][ T8501] comedi: valid board names for pcl724 driver are: [ 91.713301][ T8501] pcl724 [ 91.714574][ T8501] pcl722 [ 91.715520][ T8501] pcl731 [ 91.716455][ T8501] acl7122 [ 91.717486][ T8501] acl7124 [ 91.718424][ T8501] pet48dio [ 91.719458][ T8501] pcmio48 [ 91.720540][ T8501] onyx-mm-dio [ 91.721625][ T8501] comedi: valid board names for pcl711 driver are: [ 91.723618][ T8501] pcl711 [ 91.724553][ T8501] pcl711b [ 91.725522][ T8501] acl8112hg [ 91.726623][ T8501] acl8112dg [ 91.727754][ T8501] comedi: valid board names for amplc_pc263 driver are: [ 91.729955][ T8501] pc263 [ 91.730955][ T8501] comedi: valid board names for amplc_pc236 driver are: [ 91.733067][ T8501] pc36at [ 91.733994][ T8501] comedi: valid board names for amplc_dio200 driver are: [ 91.736137][ T8501] pc212e [ 91.739205][ T8501] pc214e [ 91.740179][ T8501] pc215e [ 91.741173][ T8501] pc218e [ 91.742112][ T8501] pc272e [ 91.743052][ T8501] comedi: valid board names for comedi_parport driver are: [ 91.745262][ T8501] comedi_parport [ 91.746419][ T8501] comedi: valid board names for comedi_test driver are: [ 91.748628][ T8501] comedi_test [ 91.749700][ T8501] comedi: valid board names for comedi_bond driver are: [ 91.751900][ T8501] comedi_bond [ 91.939946][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 92.354959][ T6551] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.358045][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 92.358227][ T6551] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.364531][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.400200][ T8543] bridge_slave_0 (unregistering): left allmulticast mode [ 92.402776][ T8543] bridge_slave_0 (unregistering): left promiscuous mode [ 92.405501][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.562425][ T8546] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 92.755129][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 93.043097][ T8574] tipc: Started in network mode [ 93.044944][ T8574] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.047871][ T8574] tipc: Enabled bearer , priority 10 [ 93.051198][ T8574] tipc: Enabled bearer , priority 0 [ 93.059172][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 93.165909][ T8582] netlink: 'syz.0.780': attribute type 2 has an invalid length. [ 93.171177][ T8582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.780'. [ 93.354686][ T8593] lo speed is unknown, defaulting to 1000 [ 93.616502][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.785'. [ 93.788586][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 93.788598][ T40] audit: type=1400 audit(1753277804.973:28251): avc: denied { call } for pid=8598 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.794852][ T8599] binder: 8598:8599 ioctl c01064c8 200000000280 returned -22 [ 93.802704][ T8599] binder: 8598:8599 ioctl c01064ab 2000000002c0 returned -22 [ 93.850835][ T40] audit: type=1400 audit(1753277805.033:28252): avc: denied { write } for pid=8600 comm="syz.2.787" name="/" dev="9p" ino=35913825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.069378][ T60] usb 6-1: USB disconnect, device number 8 [ 94.188780][ T6167] tipc: Node number set to 2886997162 [ 94.253688][ T40] audit: type=1400 audit(1753277805.433:28253): avc: denied { read append } for pid=8608 comm="syz.1.791" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.265759][ T40] audit: type=1400 audit(1753277805.443:28254): avc: denied { module_request } for pid=8610 comm="syz.0.790" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792DFCFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 94.276024][ T40] audit: type=1400 audit(1753277805.443:28255): avc: denied { setattr } for pid=8608 comm="syz.1.791" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.302666][ T5948] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 94.360803][ T8617] xt_policy: output policy not valid in PREROUTING and INPUT [ 94.396798][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 94.399169][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.414451][ T8623] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 94.422421][ T8625] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 94.428988][ T8623] syz_tun: refused to change device tx_queue_len [ 94.523293][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 94.529271][ T40] audit: type=1400 audit(1753277805.713:28256): avc: denied { getopt } for pid=8635 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.711364][ T40] audit: type=1400 audit(1753277805.893:28257): avc: denied { bind } for pid=8653 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.724968][ T8658] delete_channel: no stack [ 94.777341][ T40] audit: type=1400 audit(1753277805.963:28258): avc: denied { read } for pid=8661 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.832477][ T40] audit: type=1400 audit(1753277806.013:28259): avc: denied { read } for pid=8666 comm="syz.2.809" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.843048][ T40] audit: type=1400 audit(1753277806.013:28260): avc: denied { open } for pid=8666 comm="syz.2.809" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.875745][ T8671] netlink: 208 bytes leftover after parsing attributes in process `syz.0.812'. [ 95.870805][ T8691] efs: device does not support 512 byte blocks [ 95.873529][ T8691] device does not support 512 byte blocks [ 95.873529][ T8691] [ 96.096963][ T8704] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 96.111571][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 96.119079][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 97.048405][ T8768] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 97.108661][ T8776] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 97.137696][ T8776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.142899][ T8776] bond5: (slave bond6): making interface the new active one [ 97.146113][ T8776] bond5: (slave bond6): Enslaving as an active interface with an up link [ 97.198011][ T8782] hfs: can't find a HFS filesystem on dev sr0 [ 97.395807][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.532347][ T8803] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 97.560573][ T8803] 8021q: adding VLAN 0 to HW filter on device bond19 [ 97.565046][ T8803] bond18: (slave bond19): making interface the new active one [ 97.570657][ T8803] bond18: (slave bond19): Enslaving as an active interface with an up link [ 97.623721][ T8809] tipc: Started in network mode [ 97.625437][ T8809] tipc: Node identity 3ab6634b16f9, cluster identity 4711 [ 97.638354][ T8809] tipc: Enabled bearer , priority 0 [ 97.697866][ T8808] tipc: Disabling bearer [ 97.752063][ T8815] binder: 8814:8815 ioctl c0306201 200000000240 returned -14 [ 97.787707][ T8817] xt_CT: No such helper "pptp" [ 97.796730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.800894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.803517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.815837][ T8821] XFS (nbd1): no-recovery mounts must be read-only. [ 97.896760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.920488][ T8832] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 97.953189][ T8832] 8021q: adding VLAN 0 to HW filter on device bond8 [ 97.958149][ T8832] bond7: (slave bond8): making interface the new active one [ 97.960851][ T8832] bond7: (slave bond8): Enslaving as an active interface with an up link [ 98.008951][ T8845] netlink: 'syz.1.851': attribute type 2 has an invalid length. [ 98.011441][ T8845] netlink: 'syz.1.851': attribute type 8 has an invalid length. [ 98.013858][ T8845] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.851'. [ 98.276747][ T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 98.417504][ T8865] FAULT_INJECTION: forcing a failure. [ 98.417504][ T8865] name failslab, interval 1, probability 0, space 0, times 0 [ 98.421555][ T8865] CPU: 0 UID: 0 PID: 8865 Comm: syz.2.855 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 98.421570][ T8865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.421577][ T8865] Call Trace: [ 98.421581][ T8865] [ 98.421591][ T8865] dump_stack_lvl+0x16c/0x1f0 [ 98.421625][ T8865] should_fail_ex+0x512/0x640 [ 98.421645][ T8865] ? fs_reclaim_acquire+0xae/0x150 [ 98.421660][ T8865] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 98.421671][ T8865] should_failslab+0xc2/0x120 [ 98.421682][ T8865] __kmalloc_noprof+0xd2/0x510 [ 98.421701][ T8865] tomoyo_realpath_from_path+0xc2/0x6e0 [ 98.421714][ T8865] ? tomoyo_profile+0x47/0x60 [ 98.421727][ T8865] tomoyo_path_number_perm+0x245/0x580 [ 98.421742][ T8865] ? tomoyo_path_number_perm+0x237/0x580 [ 98.421759][ T8865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.421776][ T8865] ? find_held_lock+0x2b/0x80 [ 98.421802][ T8865] ? find_held_lock+0x2b/0x80 [ 98.421814][ T8865] ? hook_file_ioctl_common+0x145/0x410 [ 98.421830][ T8865] ? __fget_files+0x20e/0x3c0 [ 98.421843][ T8865] security_file_ioctl+0x9b/0x240 [ 98.421855][ T8865] __x64_sys_ioctl+0xb7/0x210 [ 98.421870][ T8865] do_syscall_64+0xcd/0x4c0 [ 98.421882][ T8865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.421893][ T8865] RIP: 0033:0x7f56c478e9a9 [ 98.421902][ T8865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.421913][ T8865] RSP: 002b:00007f56c55bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.421924][ T8865] RAX: ffffffffffffffda RBX: 00007f56c49b5fa0 RCX: 00007f56c478e9a9 [ 98.421931][ T8865] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 98.421937][ T8865] RBP: 00007f56c55bd090 R08: 0000000000000000 R09: 0000000000000000 [ 98.421943][ T8865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.421949][ T8865] R13: 0000000000000000 R14: 00007f56c49b5fa0 R15: 00007ffdf5e3fb88 [ 98.421963][ T8865] [ 98.421968][ T8865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.427144][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 98.499712][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 98.502117][ T60] usb 6-1: can't read configurations, error -61 [ 98.636964][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 98.797092][ T40] kauditd_printk_skb: 27181 callbacks suppressed [ 98.797105][ T40] audit: type=1326 audit(1753277809.973:55442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.797588][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 98.799155][ T40] audit: type=1326 audit(1753277809.983:55443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.810175][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 98.819533][ T40] audit: type=1326 audit(1753277809.983:55444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.819568][ T40] audit: type=1326 audit(1753277809.983:55445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.819592][ T40] audit: type=1326 audit(1753277809.983:55446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.819613][ T40] audit: type=1326 audit(1753277809.983:55447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.827161][ T60] usb 6-1: can't read configurations, error -61 [ 98.835565][ T8879] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 98.835915][ T40] audit: type=1326 audit(1753277809.983:55448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.835943][ T40] audit: type=1326 audit(1753277809.983:55449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.845021][ T60] usb usb6-port1: attempt power cycle [ 98.851890][ T40] audit: type=1326 audit(1753277809.983:55450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.864674][ T8879] 8021q: adding VLAN 0 to HW filter on device bond9 [ 98.871133][ T40] audit: type=1326 audit(1753277809.983:55451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.0.818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5378e9a9 code=0x7ff00000 [ 98.892254][ T8879] bond8: (slave bond9): making interface the new active one [ 98.894804][ T8879] bond8: (slave bond9): Enslaving as an active interface with an up link [ 98.904571][ T8883] netlink: 'syz.0.860': attribute type 10 has an invalid length. [ 98.927460][ T8883] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.931698][ T67] IPVS: starting estimator thread 0... [ 98.933125][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.984174][ T8890] ref_ctr going negative. vaddr: 0x200000ffc004, curr val: -29824, delta: 1 [ 98.987723][ T8890] ref_ctr increment failed for inode: 0x417 offset: 0x7 ref_ctr_offset: 0x4 of mm: 0xffff88803c28da00 [ 99.001238][ T8888] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.016743][ T8887] IPVS: using max 41 ests per chain, 98400 per kthread [ 99.187640][ T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 99.208182][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 99.212886][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 99.215939][ T60] usb 6-1: can't read configurations, error -61 [ 99.351570][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 99.356752][ T60] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 99.381856][ T8909] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 99.390253][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 99.399049][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 99.401458][ T60] usb 6-1: can't read configurations, error -61 [ 99.407428][ T60] usb usb6-port1: unable to enumerate USB device [ 99.423969][ T8909] 8021q: adding VLAN 0 to HW filter on device bond11 [ 99.427211][ T8909] bond10: (slave bond11): making interface the new active one [ 99.429804][ T8909] bond10: (slave bond11): Enslaving as an active interface with an up link [ 99.562487][ T5950] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 99.615147][ T8944] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 99.626823][ T60] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 99.642963][ T8944] 8021q: adding VLAN 0 to HW filter on device bond73 [ 99.647023][ T8944] bond72: (slave bond73): making interface the new active one [ 99.650398][ T8944] bond72: (slave bond73): Enslaving as an active interface with an up link [ 99.808350][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 99.812167][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 99.814801][ T60] usb 6-1: can't read configurations, error -61 [ 99.956656][ T60] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 100.107370][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 100.112355][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 100.114952][ T60] usb 6-1: can't read configurations, error -61 [ 100.117909][ T60] usb usb6-port1: attempt power cycle [ 100.466666][ T60] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 100.489129][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 100.497046][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 100.499958][ T60] usb 6-1: can't read configurations, error -61 [ 100.515013][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 100.586521][ T8984] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 100.623648][ T8984] 8021q: adding VLAN 0 to HW filter on device bond75 [ 100.628033][ T8984] bond74: (slave bond75): making interface the new active one [ 100.631166][ T8984] bond74: (slave bond75): Enslaving as an active interface with an up link [ 100.646759][ T60] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 100.664045][ T8988] overlayfs: failed to clone upperpath [ 100.669156][ T60] usb 6-1: too many configurations: 157, using maximum allowed: 8 [ 100.677949][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 100.680931][ T60] usb 6-1: can't read configurations, error -61 [ 100.683653][ T60] usb usb6-port1: unable to enumerate USB device [ 100.688950][ T8930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.693223][ T8930] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.696540][ T8930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.699508][ T8930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.701627][ T8930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.910331][ T9018] 8021q: adding VLAN 0 to HW filter on device bond21 [ 100.915224][ T9018] bond20: (slave bond21): making interface the new active one [ 100.918310][ T9018] bond20: (slave bond21): Enslaving as an active interface with an up link [ 100.951942][ T9026] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 101.057834][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 101.145235][ T9033] IPVS: Scheduler module ip_vs_sip not found [ 101.217713][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 101.220651][ T60] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.224389][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.228400][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 90, changing to 10 [ 101.231890][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2035, setting to 1024 [ 101.235333][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.238202][ T9040] overlayfs: empty lowerdir [ 101.241191][ T60] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.244739][ T60] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.247560][ T60] usb 8-1: Manufacturer: syz [ 101.254867][ T60] usb 8-1: config 0 descriptor?? [ 101.284584][ T9042] team0: Device hsr_slave_0 failed to register rx_handler [ 101.336502][ T9042] overlayfs: cannot append lower layer [ 101.400970][ T9046] 8021q: adding VLAN 0 to HW filter on device bond10 [ 101.405377][ T9046] bond9: (slave bond10): making interface the new active one [ 101.409383][ T9046] bond9: (slave bond10): Enslaving as an active interface with an up link [ 101.474432][ T9053] Unknown options in mask 5 [ 101.507710][ T60] rc_core: IR keymap rc-hauppauge not found [ 101.509607][ T60] Registered IR keymap rc-empty [ 101.512970][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.518794][ T9058] netlink: 152 bytes leftover after parsing attributes in process `syz.0.914'. [ 101.538780][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.559662][ T60] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 101.564230][ T60] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 101.575167][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.596848][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.597509][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.616927][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.639408][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.658085][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 101.665706][ T9076] ------------[ cut here ]------------ [ 101.667758][ T9076] WARNING: CPU: 2 PID: 9076 at arch/x86/kvm/x86.c:11649 kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 101.667893][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.671102][ T9076] Modules linked in: [ 101.676348][ T9076] CPU: 2 UID: 0 PID: 9076 Comm: syz.3.893 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 101.679865][ T9076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.683273][ T9076] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 101.685346][ T9076] Code: 0a 00 00 00 00 00 00 ff d5 0f 1f 00 31 ff 89 c5 89 c6 e8 27 5d 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 d5 61 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 c7 61 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 101.686919][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.691488][ T9076] RSP: 0018:ffffc90024aa7c38 EFLAGS: 00010293 [ 101.695480][ T9076] RAX: 0000000000000000 RBX: ffff888056ba0000 RCX: ffffffff81417737 [ 101.698043][ T9076] RDX: ffff888055492440 RSI: ffffffff8141869b RDI: 0000000000000007 [ 101.700574][ T9076] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 101.703109][ T9076] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880498c5000 [ 101.705586][ T9076] R13: ffff888056ba00d8 R14: 0000000000000000 R15: ffff8880498c5120 [ 101.707959][ T9076] FS: 00007fcda1d636c0(0000) GS:ffff8880d6920000(0000) knlGS:0000000000000000 [ 101.710826][ T9076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.712928][ T9076] CR2: 00007fcda1d62f98 CR3: 0000000021d21000 CR4: 0000000000352ef0 [ 101.715496][ T9076] Call Trace: [ 101.716659][ T9076] [ 101.717283][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.717611][ T9076] kvm_vcpu_ioctl+0x5eb/0x1690 [ 101.717634][ T9076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.717688][ T9076] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 101.725760][ T9076] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.728024][ T9076] ? hook_file_ioctl_common+0x145/0x410 [ 101.729787][ T9076] ? selinux_file_ioctl+0x180/0x270 [ 101.731490][ T9076] ? selinux_file_ioctl+0xb4/0x270 [ 101.733114][ T9076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.734843][ T9076] __x64_sys_ioctl+0x18e/0x210 [ 101.736398][ T9076] do_syscall_64+0xcd/0x4c0 [ 101.737917][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.739850][ T9076] RIP: 0033:0x7fcda0f8e9a9 [ 101.741307][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.746981][ T60] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 101.747488][ T9076] RSP: 002b:00007fcda1d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.747504][ T9076] RAX: ffffffffffffffda RBX: 00007fcda11b6160 RCX: 00007fcda0f8e9a9 [ 101.747511][ T9076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 101.758070][ T9076] RBP: 00007fcda1010d69 R08: 0000000000000000 R09: 0000000000000000 [ 101.760661][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.763218][ T9076] R13: 0000000000000001 R14: 00007fcda11b6160 R15: 00007ffc3eb89838 [ 101.765728][ T9076] [ 101.766840][ T9076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.769149][ T9076] CPU: 2 UID: 0 PID: 9076 Comm: syz.3.893 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 101.772363][ T9076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.775774][ T9076] Call Trace: [ 101.776859][ T9076] [ 101.777824][ T9076] dump_stack_lvl+0x3d/0x1f0 [ 101.779337][ T9076] panic+0x71c/0x800 [ 101.780650][ T9076] ? __pfx_panic+0x10/0x10 [ 101.782095][ T9076] ? show_trace_log_lvl+0x29b/0x3e0 [ 101.784001][ T9076] ? check_panic_on_warn+0x1f/0xb0 [ 101.786090][ T9076] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 101.788469][ T9076] check_panic_on_warn+0xab/0xb0 [ 101.790083][ T9076] __warn+0xf6/0x3c0 [ 101.791408][ T9076] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 101.793266][ T9076] report_bug+0x3c3/0x580 [ 101.794714][ T9076] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 101.796585][ T9076] handle_bug+0x184/0x210 [ 101.797981][ T9076] exc_invalid_op+0x17/0x50 [ 101.799476][ T9076] asm_exc_invalid_op+0x1a/0x20 [ 101.801052][ T9076] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 101.803107][ T9076] Code: 0a 00 00 00 00 00 00 ff d5 0f 1f 00 31 ff 89 c5 89 c6 e8 27 5d 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 d5 61 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 c7 61 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 101.809192][ T9076] RSP: 0018:ffffc90024aa7c38 EFLAGS: 00010293 [ 101.811161][ T9076] RAX: 0000000000000000 RBX: ffff888056ba0000 RCX: ffffffff81417737 [ 101.813700][ T9076] RDX: ffff888055492440 RSI: ffffffff8141869b RDI: 0000000000000007 [ 101.816226][ T9076] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 101.818750][ T9076] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880498c5000 [ 101.821266][ T9076] R13: ffff888056ba00d8 R14: 0000000000000000 R15: ffff8880498c5120 [ 101.823751][ T9076] ? kvm_arch_vcpu_ioctl_run+0x457/0x18c0 [ 101.825562][ T9076] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 101.827428][ T9076] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 101.829275][ T9076] kvm_vcpu_ioctl+0x5eb/0x1690 [ 101.830818][ T9076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.832452][ T9076] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 101.834549][ T9076] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.836651][ T9076] ? hook_file_ioctl_common+0x145/0x410 [ 101.838416][ T9076] ? selinux_file_ioctl+0x180/0x270 [ 101.840151][ T9076] ? selinux_file_ioctl+0xb4/0x270 [ 101.841799][ T9076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.843476][ T9076] __x64_sys_ioctl+0x18e/0x210 [ 101.845014][ T9076] do_syscall_64+0xcd/0x4c0 [ 101.846487][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.848362][ T9076] RIP: 0033:0x7fcda0f8e9a9 [ 101.849791][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.855836][ T9076] RSP: 002b:00007fcda1d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.858472][ T9076] RAX: ffffffffffffffda RBX: 00007fcda11b6160 RCX: 00007fcda0f8e9a9 [ 101.860961][ T9076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 101.863438][ T9076] RBP: 00007fcda1010d69 R08: 0000000000000000 R09: 0000000000000000 [ 101.865914][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.868409][ T9076] R13: 0000000000000001 R14: 00007fcda11b6160 R15: 00007ffc3eb89838 [ 101.870931][ T9076] [ 101.872621][ T9076] Kernel Offset: disabled [ 101.874007][ T9076] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:36:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000105f6b RBX=0000000000000000 RCX=ffffffff8b868c99 RDX=0000000000000000 RSI=ffffffff8de2ff1e RDI=ffffffff8c1573e0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a94050 R15=0000000000000000 RIP=ffffffff8b8677ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000521f3000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000006 DR2=0000000000000007 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe220192f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e53811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e53811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e53811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e53811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e53811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3e53811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000002818 RBX=ffffc90006822818 RCX=ffffffff86a7192b RDX=0000000000000000 RSI=ffffffff86a71939 RDI=ffff888029381a36 RBP=000000000000003c RSP=ffffc900006a09e0 R8 =0000000000000005 R9 =0000000000000000 R10=000000000000003d R11=0000000000000001 R12=000000000000003d R13=ffff888029381a00 R14=00000000ffb56f40 R15=0000000000000000 RIP=ffffffff86a719a2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6820000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=0000000052aa8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3eb89bc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcda1011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a56e5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90024aa7590 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0b9e20 R15=ffffffff855a5680 RIP=ffffffff855a570f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcda1d636c0 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcda1d62f98 CR3=0000000021d21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00317265646e6962 2f73667265646e69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56c4811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56c4811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56c4811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56c4811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56c4811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56c4811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000078d29173 RBX=0000000000000002 RCX=000000001eb05c1f RDX=0000000017e3b211 RSI=00000000117e3b21 RDI=000000000d3220fe RBP=ffff888055490000 RSP=ffffc90024a97678 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888055490af0 R13=ffff888055490b40 R14=00000000c0e47e3e R15=0000000000000001 RIP=ffffffff81986b0e RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fce5114bc80 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005639b13ee008 CR3=000000003ae21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010008000 Opmask01=0000000000000021 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce513e6300 00007fce513e6300 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce514b6b20 00007fce514b7050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d454d4f4800306e 616c77002d2d0071 2d0065626f727064 6f6d2f6e6962732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000