last executing test programs: 11.207034398s ago: executing program 3 (id=1564): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x61) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x0, @multicast1}, @in6={0xa, 0x10, 0x0, @empty, 0x1ff}, @in6={0xa, 0x0, 0x0, @empty, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x58) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x14) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756c200000000000000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='rxrpc_propose_ack\x00', r1, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffef2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5414, 0x20200007) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000644000/0x2000)=nil, 0x2000, 0x14) 10.032561805s ago: executing program 3 (id=1567): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6afb805000000b2bbca184ac3f68d48f23d7e42c1003d596d7acda6bfbe4722ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) bind$l2tp(r2, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="90797374656d5f753a6f626a6563745f723a640200000000000000733020737461663d75d611"], 0x26) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="f3d2d4ba2000b070eeb800078ee8f020beb400b800088ee8bad004b090eef30fc73226660f1c86d28e440f20c0663508000000440f22c0f2a6"}], 0xaaaaaaaaaaaadcf, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000042006bab9e3fe3d86e17aa31026b876c1d0000007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000319000/0x2000)=nil, 0x2000, 0x0, 0x28011, r3, 0x4000) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) write$selinux_user(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7379739799e9b574656d5f753a6f626a6563745f723a6b6d73675f6465766963655f743a733020757365725f7500"], 0x2a) 8.512930748s ago: executing program 3 (id=1569): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r4, 0x0, 0x8001, 0xf00, &(0x7f0000001680)="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", 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.213523863s ago: executing program 3 (id=1570): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x0, 0x18) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000840)=""/134, 0x86}], 0x86}}], 0x2, 0x0, 0x0) 8.117223803s ago: executing program 0 (id=1571): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c"], 0x48}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x66, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) io_uring_setup(0x62be, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0x2, 0x220}) socket$xdp(0x2c, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@datasec={0x5, 0x0, 0x0, 0xf, 0x3, [], "d7998c"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'G'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x1b2731650ef38596]}}, &(0x7f0000000640)=""/207, 0x3c, 0xcf, 0x1, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000040000000000080000000000002c8890f2b86c02d2877adedbbbba4edfa693be654905f94e9cd12dbc23d03813c841469ad8d6f9a247cde1b4c25618a3827dd7fd976d15315de4e8b90da9e37329e28792d3bcea7479337d316ec59059c054bf00464e5d359eab0dd484c53fd1bc44266c1b255556f4be055cff87fffc852b101d771acaf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x502}]}, 0x34}}, 0x0) 7.796693787s ago: executing program 0 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x0, 0x68747541}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x0, 0x68747541}]}) (async) 4.736530111s ago: executing program 1 (id=1578): r0 = fanotify_init(0x20, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x301000, 0x89) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x48) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROMMULTISESSION(r3, 0x5310, &(0x7f0000000100)={@msf={0x8, 0xf, 0x6}, 0x1, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x3, 0x0, [{0x0, 0x61, &(0x7f0000000140)=""/97}, {0x6000, 0x84, &(0x7f00000001c0)=""/132}, {0x4c5f8006, 0x0, &(0x7f0000000280)}]}) r4 = socket(0x1f, 0x0, 0x9) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000023c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000024c0)=0xe8) r9 = getgid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000002500)={0xb8, 0xffffffffffffffda, r6, [{{0x0, 0x3, 0x0, 0x3, 0x9, 0x8, {0x5, 0x1000, 0x80, 0xfffffffffffffffb, 0x32000000000000, 0x7fff, 0x2, 0x3, 0x8, 0x6000, 0xd4e, r8, r9, 0x6}}, {0x5, 0x7fffffff, 0xb, 0xb9, '/dev/hwrng\x00'}}]}, 0xb8) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000025c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002600)={0x0, 0x3}, &(0x7f0000002640)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000002680)={r10, 0x400}, &(0x7f00000026c0)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002a40)={0x80, 0x0, &(0x7f0000002900)=[@register_looper, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002840)={@ptr={0x70742a85, 0x1, &(0x7f0000002700)=""/19, 0x13, 0x1, 0x38}, @fda={0x66646185, 0xa, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/206, 0xce, 0x2, 0x35}}, &(0x7f00000028c0)={0x0, 0x28, 0x48}}}, @acquire={0x40046305, 0x1}], 0xae, 0x0, &(0x7f0000002980)="ebc22306db2f136af4a7a4854b16aa5172c06c9b32c70d04c1e8b7ea2525d547ebd49c119a2d896a260e878eef649ab9e4c6b02d30d99346945f9d0fcbe38d8b01da758cf46e7460f64fade0110187383e29e4a432258849e60364aac27f4421fd9789263f6582bdf766f78273159168175619b87647d00940203f765005ae89b446e7d90f5429c5ba339663137b00ce15c93724358dcc57a4573e00536130df03de688e72df902f089813de08e2"}) write$P9_RRENAME(r3, &(0x7f0000002a80)={0x7, 0x15, 0x1}, 0x7) getsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003b40)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b84000/0x4000)=nil, &(0x7f0000e82000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002b40)="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", 0x1000, r3}, 0x68) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000003bc0)={r11, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0xe, 0xd1f, 0x1, 0xfffffbc9, 0xee, 0x682, 0x1}, 0x9c) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000003c80), 0x33380, 0x0) write$FUSE_STATFS(r12, &(0x7f0000003cc0)={0x60, 0x0, r6, {{0x1, 0x7, 0x1, 0x16, 0xffffffffffffffff, 0x8, 0x7fbe0bd8, 0x1}}}, 0x60) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000003d40)) sendfile(r5, r0, &(0x7f0000003d80)=0xc3, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000003dc0)={0x33, 0x6, 0x0, {0x0, 0x1, 0xa, 0x0, '/dev/null\x00'}}, 0x33) write$FUSE_LK(r5, &(0x7f0000003e00)={0x28, 0x0, r6, {{0xc, 0x9, 0x1, r7}}}, 0x28) setsockopt$RDS_GET_MR_FOR_DEST(r12, 0x114, 0x7, &(0x7f0000003f00)={@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa2}}, {&(0x7f0000003e40)=""/99, 0x63}, &(0x7f0000003ec0), 0x45}, 0xa0) statx(r12, &(0x7f0000003fc0)='./file0\x00', 0x6000, 0x40, &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000004100)={0x78, 0x0, r6, {0x8, 0x200000, 0x0, {0x3, 0x1, 0x10000, 0x8, 0x8, 0x0, 0x9de, 0x2, 0x20, 0xc000, 0xfffffffc, r8, r13, 0x5, 0x7}}}, 0x78) 4.616709558s ago: executing program 1 (id=1579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xffff, 0x1000}, {0x0, 0xfffb, 0x1800}], 0x2) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x66}], 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket(0x18, 0x6, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000200)=0x6, 0x4) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r6 = openat$dir(0xffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0xd) symlinkat(&(0x7f0000000440)='./file0\x00', r6, &(0x7f0000000480)='./file0\x00') 3.683179781s ago: executing program 1 (id=1580): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r4, 0x0, 0x8001, 0xf00, &(0x7f0000001680)="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", 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.682766083s ago: executing program 3 (id=1581): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c"], 0x48}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x66, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) io_uring_setup(0x62be, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0x2, 0x220}) socket$xdp(0x2c, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@datasec={0x5, 0x0, 0x0, 0xf, 0x3, [], "d7998c"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'G'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x1b2731650ef38596]}}, &(0x7f0000000640)=""/207, 0x3c, 0xcf, 0x1, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000040000000000080000000000002c8890f2b86c02d2877adedbbbba4edfa693be654905f94e9cd12dbc23d03813c841469ad8d6f9a247cde1b4c25618a3827dd7fd976d15315de4e8b90da9e37329e28792d3bcea7479337d316ec59059c054bf00464e5d359eab0dd484c53fd1bc44266c1b255556f4be055cff87fffc852b101d771acaf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x502}]}, 0x34}}, 0x0) 3.485790348s ago: executing program 3 (id=1582): r0 = creat(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x10c045f55bed3d0e, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/68, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b4000000000600004802c0001800c000100636f756e746572001c0002800c00014000000000000000000c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000b30c00018007000100727400000900010073797a30"], 0xfc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="5aee41dea43e63a3f75e64fb7ff20700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 3.484457992s ago: executing program 1 (id=1583): r0 = getpid() socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x80000000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0, r6}) r7 = inotify_init1(0x80000) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r8) process_vm_readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/225, 0xe1}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/177, 0x81}], 0x1, 0x0) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001100)="b2", 0x7fffefff}, {&(0x7f0000001140)='K', 0x1}], 0x2}}], 0x1, 0x0) 3.086419093s ago: executing program 0 (id=1585): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x40a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f00000002c0)=0xfffffffc, 0x26) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) r9 = dup(r3) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r10) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x34, r12, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a80000007f71f0100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c003f42398bf76bd660bb74cf1ac6842874f74a88ac04167fa0ece1d612fadb3c5dd9c8c65c0b6980c969af99af841ba87ce594b266fab8094a5045a10d64d6cf09bb60be2033576aaa88c2f07d68c6bd8a748ac8932c6924381cde21cc08a10a3e4903dcea6211c2911da806e6614274f1b1b2e6d1a23a855a78e0a6f10e2f05e6dd556180c9a6f11a884847f693b00b8ebb0bdffa7c20544b9918911717f107b49066db538d74f13d38a3c41785189e08a214acb85e59087900937a767f31adc0864639e76cf7739dbabdf87e9031e11143714e7ea7a9ebcba1e4d29bb3b44497a3cab2859649eb6cf42d"], 0xec}}, 0x0) 2.653182442s ago: executing program 0 (id=1586): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r4, 0x0, 0x8001, 0xfc0, &(0x7f0000001680)="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", 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.526620186s ago: executing program 0 (id=1587): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 2.265789304s ago: executing program 0 (id=1588): r0 = creat(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x10c045f55bed3d0e, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/68, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000018000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b4000000000600004802c0001800c000100636f756e746572001c0002800c00014000000000000000000c0002400000000000000076240001800b0001007470726f7879000014000280080002400000000008000140000000b30c00018007000100727400000900010073797a30"], 0xfc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="5aee41dea43e63a3f75e64fb7ff20700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 2.260833963s ago: executing program 2 (id=1589): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6afb805000000b2bbca184ac3f68d48f23d7e42c1003d596d7acda6bfbe4722ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) bind$l2tp(r2, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="90797374656d5f753a6f626a6563745f723a640200000000000000733020737461663d75d611"], 0x26) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="f3d2d4ba2000b070eeb800078ee8f020beb400b800088ee8bad004b090eef30fc73226660f1c86d28e440f20c0663508000000440f22c0f2a6"}], 0xaaaaaaaaaaaadcf, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.401114698s ago: executing program 2 (id=1590): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xffff, 0x1000}, {0x0, 0xfffb, 0x1800}], 0x2) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x66}], 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket(0x18, 0x6, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000200)=0x6, 0x4) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) openat$dir(0xffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0xd) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 332.84032ms ago: executing program 2 (id=1591): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c"], 0x48}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x66, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) io_uring_setup(0x62be, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0x2, 0x220}) socket$xdp(0x2c, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@datasec={0x5, 0x0, 0x0, 0xf, 0x3, [], "d7998c"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'G'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x1b2731650ef38596]}}, &(0x7f0000000640)=""/207, 0x3c, 0xcf, 0x1, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000040000000000080000000000002c8890f2b86c02d2877adedbbbba4edfa693be654905f94e9cd12dbc23d03813c841469ad8d6f9a247cde1b4c25618a3827dd7fd976d15315de4e8b90da9e37329e28792d3bcea7479337d316ec59059c054bf00464e5d359eab0dd484c53fd1bc44266c1b255556f4be055cff87fffc852b101d771acaf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x502}]}, 0x34}}, 0x0) 215.202832ms ago: executing program 2 (id=1592): munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x50201, 0x0) write$binfmt_aout(r1, &(0x7f0000001600)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYBLOB="49582727c76dd14cecfd8d19ea99042f3ccd18e42da83f80762ace884efe995dd4230ea7e25ad0f185ebf1263e24ab2614dd8b1ce6c4ae56d9229642665086145fd5ae492e93f03c2396a913ae2a5754ddccc6559342e80ebad9ead134940a68b7c83f4a44c524692f14a23f7ceade192b60c1efd15870979c068fa8f83ca7079f60d72739375505223307c5d7acca83eb1afafc2af02dc7b0e6a92e365c83e2c06287e68e1c0b4f220d2b47c1ca6a1b89208f89fda7bff9fffce044ac6f32a170e91cba9b09e15063b5ee991d81edda7c13422588138dcfa9261f849dd1a0d132273777734304f40c0a8ed4371950e4c1c09a0a457e65d22e711a1a993342ff7b2c4fee9a60a309700f4e356e6a0ffa2685534d99c985515dcf10cbf73340d7ed8e1207e728e8bbb87d7e07cd068c5d62368d34fc3e8ea7269184ccca143a66381f25c24e4b0b304c580d05934d3a4c3c0554ae44baa9b9deb1ccdc4a7d995cd287acca4227b4e7dc2a7b4da9cfa626fd217c903e1fb18a83e497c4f7b6294a4a275c1af66af9d6291b82a14a58ba7c95b9732051f3d48065d30b967e93bb08bfd14d0b7f884f6a6152b6ac4646191c43dafcacd50dc98e370dcd3e18c55d3882f80bed8d71bdc531d0f110a3f58683944d1f737a528d839addfcae85ce9051bc154c20b42d2a3ceea8a73a42717ae9f9898288bce313aca688ca801a11ffbeacbcd19d5203b600b3ff69cc6fde67b3a7ff0ce0360ee053d136620a57e4445a584affd3ac5a0c05d9a38857954ec0e3d14317c77cc51a9a83360db8976402c0bc5508230e0a7bda6017cbdd4595f2b3052822da49c3c712a36a3645ee621d83a5642d1b1b150795b76bcbb6754eacd529eb6bda7282a72a12abb3c94c422c7a490bc85feb0f113675740bd6e9a2dd3d27d54442dea4c1d2f8c05ee9f2d06c19514302a1b4422ff8170fe7b9c0d5e899d58526e04e679609434b24ea4150afd1e483254072fa76f9a3d94c4a28f6df899943e8dc46fd085accc178ea4d4bfc26e46c7458abcf58afb7a1a3d35b50527c6bb6127711e1f5db2397d6de96c5543b4b816f10a4c73335b9d1cf8c4a852c88de3b45ce4411fcb5fd9344163ca17fd89dc3baa8ea185e4308c0cf7f8c45bfc16e9a6f88e7392ab62bf82725293620f20a09bb8a0a81ba26a4120a44d2e749c38057604da173dca94b7b32641188956ee05516bc3bedcc3822f19fa4affe5c4409f8b1c7e4a1676564c737c2e9b5269a633cf352025b3d60a890b280d0d8a08fb0d740c59e7ab637c8fa41d5ea2309155d4d98938dead50d2b05c5f1362d1da91fa5f2475c5efb0ea9e3eb31365932ba20824f6907024f7333be99ceb9e777acf2611463602384fade3a9e4300514129b1f55ede473fd332764f63c24207c792df578dc54b8050be82c23821661758114db8c291ff604b562dd9441c24afe19815482d451d6d566a438710e852a8beaf81e928d23f02d62e86efa4e70bc3251425bc3734fb779cf921056f554e1c967bd6bbbb24b61176185ed3326a97a320197b8d91786e1e2d60ae6f922556d1a5f58052f4b251587490a9b548a142793c3c6eed364dcb1b419e6e84fcf789f358b58e08cc5d21f1a64008ed1fcd10a998f7dd7a0370181cf5c196b5494ae5d2995de5b9fa4ecf1955174e93d8866bddd70f3d7f28e15655fd7877624ab45454b1c20d4cc10e5d63f3b27a74996080e32f5ca68c5cc2ebaf2d611ee688e511e662c0b7bbc1ff73715afa6fe91187e6dd8f69fff5373c820912cbf2d4385693af2119d5e2f941087b7867cd697cf9f64eb02e96749810f9966a8fa252c4856dd380c61b3a889f409466f9448fd138df313257f269c66ed0485da3efffdaf23308e909809915e2045326539ac4d9caa5a1990132e832cc05abec9ab035b1c830ebdf6c9beb9e353fa153e7327efbddab83598430c62038c34e0e7224edcb8443c252d90028952066295e4a5e3e04893c48b4c74ffd90b3974ba8d23830124804309ca30098050ef1d2439ad4a1fa1b312e951ab445069cc2acc2a09380f8ea0f014bb864533c63cf238d1f6a1706f9b2b198bababe13a6afc4c8587ab2378316a77d92989ade5e1e290fd5f1d06758bdb1761398f7805f792aa822f4b0bffbabeff3ecb69789c52758163ed1b8c66f83b05840bfc72a559f038a224ab99bb2532909d1b0e6dda01248099d4e3b217e6de48073282f9ee8c3c58e4434e2d3d18a205ae34d51470daea47bd3f252c11df9fa9ac9610e5f60625511a915d3e53fe2feb2e7b9f47a312d51021a73f452d6781283f5b4c831bca2960c976e42664d866932da6e5999603a9a7c9462c8d5d74869d77796375d919702227f4fce9353a6d3c48b820b2147c50e6407a66b9ba9ec244a18319110732c1e33f20966c651ecd723166ca9f757f4373c6b56dc223b634b3ebaa59aa1077f10c1fba4670e90ed0b6626c2871c34975505d1459a80472daf9e5b0d9c0af77b13eaa68b3b1a4c2b560f5bcc93454f78ce41f7b6cd372bd882ff306bdf79e01a24d08ea01b6d1bc33472658c80d587b993b60596e41a1c958285b05d0da8c94f40aa2784d6203264cfa5372ee92f12591ec0fe2e4569baaf19895ad9848dca16c06f6ea72ba855cc1a1370ac5a4f67dcdbbcde1391ccdc8e922c495b520474c897e0a46d387ac0aaf8d89f303c687150099050273f7b457eb8c1254334c869a8973e6c933dba08e031725810ab1a61e4be56bd44289939f43fd5f674b4d827f2b2a8143d5733cb95cb90e503cfc6501580066570044471d4465c54dc8ce1bba502a96159226166feb5243fe23bbb0731de5b203aa8f04bd8a1d2b624533bb48040283e0258e38478ca539ff313abfccabeaebf4786564c7ac170c4a0d22f07fc3a6fd578afb7462d243a6384a7434803a7443ba5a71520cc5cee2d249f26854c82ec31b7ce6830c313151e4a3c6bc6f35f159cf8ec2fdee4dbe33e2fae48a83c0241b4aeee4115aaa20640f1634ab5222dfe40276e9b2c05255bd238d6b0ef6b66fd0798ae441f059864dd2f39f317bdd1352edf8eb6e7a52a6c00cfce252c37df4ec432fa110566d99c0e768b42760d246b31be555ab4027bfad466700b7db6f5676c9129687b37a6268feaeee60579f4cd1c098f2eabdd18c044ae358b69e7211774a7d752cbdb0720caae75ec1c5522960c2a2ef9a9cfd52dba7740cc530a535eaaefcdfc961f9c2d55c1469b01c2e447cea99d01cfa9c3e284310486d71bfdb0b7250ed742249ed7dd6d982a243e39a6c6b19beb1a916bdee0fe25afc259c5a3e8a2b437022b3383b1b441d4beda525432cc371696e0626e22ba5533e6dadd05a1d713385a35f336afd175fec1777ef9f882e6191997a9d3711f6a4364daf3bb9f5c94895f60788ae7530e5e6a83226b94ecb2cbdaa28a48c1ead702435767f8ba0500c11bb74a629aeafee17f4bf7dd7c0a9cb5c01ff0337693045558377d92125c67aa26cf16eca72fb5d7e85873d47afe5d06f70e64ef81e1ef63ae9d59983b548450d9a4b6b8f08117a7db7277713eb3221dd1839c2d64fe76df95b4938e2a49e536dada422d3e6591a1b1116011a2d38806f0d6f493a109996e8db36af98426dd68969b39a8e553f8559c58216221bc6a7fac8980f3b3694f54d027e89affe81301e9d0b6aac11cb92de0a1b4e5dd91930010a4feeaa805f0f555fe0390568aafbc8e60330162356551fda5889d4d272d5fb31ca6b7d782017cfafce75371a7392d473ed20d571962b3460c1e2e614671b456bc4fa5af877a93aaec6f54236255e38fedb7a893fe569ef5a26d03f1a635dea6f69a89914932a71d818cac8c6b4bb15f63253024d9ddba778635beb981f894b04b2ae9247ddfa5434e557b6d29427d0b8f72411fbbd407207fd38878ca0b6cf50310b687bfa743debbc13ca439c52884aa20aba4ef40ececb91fc44d7fa4993955d51793ae710f58a778cca2cc3b043e97fc837d90ef9fe78281870214548846af5c7e571bdf613cbd70950af80e355bb3a94aa129556ba9f2bef5c42de2bcd1bffd702201e80c3734ff5fd5ab8d291fadd153abeea0f1b73946d13af48b7e665242b83366bc3d6cfb5540c35bfe708452f3832570ac25bb34a2ad050d9354bfb21cb20b7dc8250d0cb006d0167d74e08a3f015af05c396efd40a1205b78ebc3f15bd963e9313d79d3a80eda04df9013992d4a5a0647f41f9b7b842e738565490836974f8f1c42946a41d41b4d0a57f428d6123c32db492865bae9671ff41d1f96d8342cf7bd185e87788d8e788b26234066aba185a0268ed6993d4740ee854774de963fa84499236a4b3221b529ca694f427c4649855967cb7cf3ca00d23212a2877e656df39e3d411bbddb86642e2dfc684c006ec2bad4b42fae492d16dfb9f8e10d491708ea203d81e83fa964bc9714ed3bd6b3a39a1e9745a2325db27eff1440725d455c2ea52233caf7175c22199ffb280c2bbc58968d5e76fc2ddbaaf90445a7ec74c47d4ca4cea295180e7c25755ddecfc5aba8c6c2f28e9863168e18de74e7064ae6b138718d972bcf18074bf7f3be0ec93a2fe20170f535086492acb95104cc5b8342f006efed2c68a0cca31b168db0b243634eb299a31b8c02601444cd8699b6c6863697b9dd4bbc02840ad63e6b328295b3bacc8b6934c357321dbec9f7f4d42dbea81b8225a992f24ee86ca4026f1d63bc1f592805b31a49da16943866fa25efc9a8bd46e91c0d7dddc284e4a6393a74131e10ca9387e7f25a323eb3ef0ca7b2a07695f0d3e80e569a8ad9a485fd8904f5a44002cf67e3439d126c2b81ea48c2fb419764e86e6e61f015fc97be024de544b127aa35de4ca0a2d1751e5243eb8cf9160622696f0a63365ea34fe6d142e06e700a9a92cf77d4e03c22e67fe0b8d2e2dcc521c739258d363bea3220d6a73b9deb7e43c78bb74e7e598eb02624cb07a62b384233513479e8e49f3c767579803f7692b4f4fabfbd5f7fc0ce220b79d7506ffeb86ab99901e2ea53452877f5ef34837739da39c3a8c67566b0a25464c00e8763db666e13536acb4a0924fe3cc84c5a23a0b1982ef83b571f03f4928c5ff727612e4352be723e02eda67599d66f172e63a7ae08112a9d739ab9109df752d39b969d580c130d169a98e95475adcd41770fd33714d7949d0e6870e32e4123275fef73248491aeaded54e971cb70a22ac6bd8a2ee940a174939c7afc2bf6eb2285cce485bc437bcd9f39c21fc105a661ad45b56b9686ea1c2e3fb098fdd92d00acf1f2d93c34346bf5295ebc338352f17a22675424eba38d4a7b5c8f6632d6e1c01e483bdee8da681e54b7bc51e1239d3489af3e612cde72ec294729eb39f6cde44534490d093ce2d4dd9f9de7b6219d12618d50ced0271ac05f3a4b725da727a6110f65aa51caf4be6924be6b8f94a210f859106ed2a600241d4fd57f817fb8524910cc1938fa9c576dacb4a6d5efaea9c00549d0541f8682cf74402b605da6afe840f26b0a953574b206eb9332ab0ca02600d21c63452bd56490de28af6c755cf9357cca06257d0ab26bdf0091fe438188f4273fcd6bc54126bbe497ba394ae80da6a73b671e63f87742b437a00909324f606b6daf9dad0c5229cfc673a61cf79e199d7aec2074f6d2c5ad2202ced141aec05abd80d247d820aa4805f67e9388df0bd6c386dcb98ae23a5fdc4b7687086a5427887e8bacde3ca6faa7deda3aa357f21f49c4623d153c10186b"], 0xff2e) 214.888341ms ago: executing program 2 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x34, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 144.622422ms ago: executing program 2 (id=1594): creat(&(0x7f0000000000)='./file0\x00', 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x550, 0x3c0, 0x210, 0x3c0, 0x3c0, 0x0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x3a010000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@remote, 0x3b, 0x11}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x18, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0016000000"], 0x7) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000280)={0x4000000}) io_setup(0x5, &(0x7f0000000000)=0x0) r8 = inotify_init() io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='net_prio.prioidx\x00', 0x275a, 0x0) 125.253723ms ago: executing program 1 (id=1595): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r4, 0x0, 0x8001, 0xfc0, &(0x7f0000001680)="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", 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=1596): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x61) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x0, @multicast1}, @in6={0xa, 0x10, 0x0, @empty, 0x1ff}, @in6={0xa, 0x0, 0x0, @empty, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x58) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x14) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756c200000000000000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='rxrpc_propose_ack\x00', r1, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffef2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5414, 0x20200007) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000644000/0x2000)=nil, 0x2000, 0x14) kernel console output (not intermixed with test programs): 0173] Can't find ip_set type hash:neT,port,net [ 255.859392][T10182] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 255.868979][T10183] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 255.881602][T10185] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 255.896555][T10186] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 256.300573][T10191] lo speed is unknown, defaulting to 1000 [ 256.387755][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.637683][ T39] audit: type=1400 audit(1729670178.381:667): avc: denied { unmount } for pid=5911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 256.809822][ T39] audit: type=1400 audit(1729670178.571:668): avc: denied { module_request } for pid=10202 comm="syz.3.1213" kmod="crypto-cryptd(__cbc-serpent-sse2)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 256.990200][T10207] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 257.018086][T10209] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 257.427786][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.943921][T10226] lo speed is unknown, defaulting to 1000 [ 258.477921][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.512475][T10236] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 258.518122][T10235] Can't find ip_set type hash:neT,port,net [ 258.722728][T10240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.742399][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 258.965573][T10246] lo speed is unknown, defaulting to 1000 [ 259.518005][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.803731][T10253] lo speed is unknown, defaulting to 1000 [ 260.548140][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.324131][ T69] libceph: connect (1)[c::]:6789 error -101 [ 261.326026][ T69] libceph: mon0 (1)[c::]:6789 connect error [ 261.378879][T10269] ceph: No mds server is up or the cluster is laggy [ 261.438008][T10275] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 261.469237][T10274] Can't find ip_set type hash:neT,port,net [ 261.588282][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.713114][ T39] audit: type=1400 audit(1729670183.460:669): avc: denied { mount } for pid=10268 comm="syz.3.1231" name="/" dev="hugetlbfs" ino=34984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 262.034157][ T39] audit: type=1400 audit(1729670183.790:670): avc: denied { unmount } for pid=5344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 262.112392][T10285] netlink: 'syz.3.1235': attribute type 5 has an invalid length. [ 262.159960][T10284] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1234: bg 0: bad block bitmap checksum [ 262.264993][T10290] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 262.275839][T10291] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 262.628395][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.678516][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.451857][ T830] IPVS: starting estimator thread 0... [ 264.538650][T10313] IPVS: using max 33 ests per chain, 79200 per kthread [ 264.708650][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.709737][ T5397] libceph: connect (1)[c::]:6789 error -101 [ 264.712113][ T5397] libceph: mon0 (1)[c::]:6789 connect error [ 264.719218][T10317] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1243'. [ 264.737117][T10319] ceph: No mds server is up or the cluster is laggy [ 264.787543][T10323] FAULT_INJECTION: forcing a failure. [ 264.787543][T10323] name failslab, interval 1, probability 0, space 0, times 0 [ 264.807614][T10323] CPU: 3 UID: 0 PID: 10323 Comm: syz.2.1244 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 264.810414][T10323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.813153][T10323] Call Trace: [ 264.814029][T10323] [ 264.814797][T10323] dump_stack_lvl+0x16c/0x1f0 [ 264.816028][T10323] should_fail_ex+0x497/0x5b0 [ 264.817274][T10323] ? fs_reclaim_acquire+0xae/0x150 [ 264.818611][T10323] should_failslab+0xc2/0x120 [ 264.819836][T10323] __kmalloc_noprof+0xcb/0x400 [ 264.821078][T10323] ? d_absolute_path+0x137/0x1b0 [ 264.822376][T10323] tomoyo_encode2+0x100/0x3e0 [ 264.823602][T10323] tomoyo_encode+0x29/0x50 [ 264.824763][T10323] tomoyo_realpath_from_path+0x19d/0x720 [ 264.826220][T10323] tomoyo_path_number_perm+0x245/0x590 [ 264.827634][T10323] ? tomoyo_path_number_perm+0x232/0x590 [ 264.829084][T10323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.830650][T10323] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.831990][T10323] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.833525][T10323] ? trace_lock_acquire+0x14a/0x1d0 [ 264.834863][T10323] ? bpf_send_signal_common+0x2b5/0x3a0 [ 264.836297][T10323] ? lock_acquire+0x2f/0xb0 [ 264.837495][T10323] ? __fget_files+0x40/0x3f0 [ 264.838728][T10323] ? __fget_files+0x244/0x3f0 [ 264.839978][T10323] security_file_ioctl+0x9b/0x240 [ 264.841293][T10323] __x64_sys_ioctl+0xbb/0x220 [ 264.842553][T10323] do_syscall_64+0xcd/0x250 [ 264.843756][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.845301][T10323] RIP: 0033:0x7fedba57dff9 [ 264.846644][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.851623][T10323] RSP: 002b:00007fedbb413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.853787][T10323] RAX: ffffffffffffffda RBX: 00007fedba735f80 RCX: 00007fedba57dff9 [ 264.855829][T10323] RDX: 0000000020000240 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 264.857895][T10323] RBP: 00007fedbb413090 R08: 0000000000000000 R09: 0000000000000000 [ 264.859945][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.862003][T10323] R13: 0000000000000000 R14: 00007fedba735f80 R15: 00007ffded047d08 [ 264.864058][T10323] [ 264.868857][T10323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.239560][T10336] FAULT_INJECTION: forcing a failure. [ 265.239560][T10336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.243379][T10336] CPU: 2 UID: 0 PID: 10336 Comm: syz.2.1247 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 265.246596][T10336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.249643][T10336] Call Trace: [ 265.250641][T10336] [ 265.251513][T10336] dump_stack_lvl+0x16c/0x1f0 [ 265.252875][T10336] should_fail_ex+0x497/0x5b0 [ 265.254133][T10336] strncpy_from_user+0x3b/0x2a0 [ 265.255395][T10336] getname_flags.part.0+0x8f/0x550 [ 265.256731][T10336] getname+0x8d/0xe0 [ 265.257789][T10336] do_sys_openat2+0x104/0x1e0 [ 265.259019][T10336] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.260377][T10336] __x64_sys_openat+0x175/0x210 [ 265.261657][T10336] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.263064][T10336] ? rcu_is_watching+0x12/0xc0 [ 265.264312][T10336] do_syscall_64+0xcd/0x250 [ 265.265557][T10336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.267076][T10336] RIP: 0033:0x7fedba57dff9 [ 265.268231][T10336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.273276][T10336] RSP: 002b:00007fedbb413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.275479][T10336] RAX: ffffffffffffffda RBX: 00007fedba735f80 RCX: 00007fedba57dff9 [ 265.277587][T10336] RDX: 000000000000275a RSI: 0000000020000000 RDI: 0000000000000004 [ 265.279639][T10336] RBP: 00007fedbb413090 R08: 0000000000000000 R09: 0000000000000000 [ 265.281727][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.283831][T10336] R13: 0000000000000000 R14: 00007fedba735f80 R15: 00007ffded047d08 [ 265.286011][T10336] [ 265.582265][T10317] syzkaller0: entered promiscuous mode [ 265.591858][T10317] syzkaller0: entered allmulticast mode [ 265.716754][T10346] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 265.732738][T10347] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 265.748846][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.798902][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.007467][T10357] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 267.014097][T10358] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 267.839003][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.879123][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.980794][T10338] lo speed is unknown, defaulting to 1000 [ 269.071607][T10364] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 269.109749][T10366] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 269.919271][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.460329][T10377] lo speed is unknown, defaulting to 1000 [ 270.867003][T10394] lo speed is unknown, defaulting to 1000 [ 270.911853][T10397] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 270.917355][T10398] FAULT_INJECTION: forcing a failure. [ 270.917355][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.923977][T10398] CPU: 3 UID: 0 PID: 10398 Comm: syz.2.1258 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 270.926817][T10398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.929615][T10398] Call Trace: [ 270.930501][T10398] [ 270.931286][T10398] dump_stack_lvl+0x16c/0x1f0 [ 270.932546][T10398] should_fail_ex+0x497/0x5b0 [ 270.933802][T10398] _copy_from_user+0x30/0xf0 [ 270.935032][T10398] kstrtouint_from_user+0xd7/0x1c0 [ 270.936380][T10398] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 270.937993][T10398] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 270.939474][T10398] proc_fail_nth_write+0x84/0x250 [ 270.940781][T10398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 270.942393][T10398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 270.943869][T10398] vfs_write+0x28e/0x1140 [ 270.945090][T10398] ? __fget_files+0x23a/0x3f0 [ 270.946355][T10398] ? fdget_pos+0x24c/0x360 [ 270.947523][T10398] ? __pfx_lock_release+0x10/0x10 [ 270.948902][T10398] ? trace_lock_acquire+0x14a/0x1d0 [ 270.950348][T10398] ? __pfx_vfs_write+0x10/0x10 [ 270.951621][T10398] ? __pfx___mutex_lock+0x10/0x10 [ 270.952950][T10398] ? __fget_files+0x244/0x3f0 [ 270.954200][T10398] ksys_write+0x12f/0x260 [ 270.955332][T10398] ? __pfx_ksys_write+0x10/0x10 [ 270.956725][T10398] ? rcu_is_watching+0x12/0xc0 [ 270.958096][T10398] do_syscall_64+0xcd/0x250 [ 270.959336][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.960909][T10398] RIP: 0033:0x7fedba57cadf [ 270.962128][T10398] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 270.967184][T10398] RSP: 002b:00007fedbb3d1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 270.969332][T10398] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedba57cadf [ 270.971381][T10398] RDX: 0000000000000001 RSI: 00007fedbb3d10a0 RDI: 0000000000000005 [ 270.973403][T10398] RBP: 00007fedbb3d1090 R08: 0000000000000000 R09: 0000000000000000 [ 270.975416][T10398] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 270.977466][T10398] R13: 0000000000000000 R14: 00007fedba736130 R15: 00007ffded047d08 [ 270.979509][T10398] [ 270.980502][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.020344][T10401] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 271.155533][T10410] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 271.166680][T10408] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 271.187144][T10411] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 271.203580][T10412] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 271.999501][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.053624][T10435] EXT4-fs error: 5 callbacks suppressed [ 272.053635][T10435] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 272.483792][T10442] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 272.492509][ T39] audit: type=1400 audit(1729670194.239:671): avc: denied { setopt } for pid=10440 comm="syz.3.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.500843][T10441] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 272.583356][T10448] lo speed is unknown, defaulting to 1000 [ 273.029632][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.465130][T10469] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 273.496743][T10470] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 273.532069][T10465] lo speed is unknown, defaulting to 1000 [ 273.908071][T10474] FAULT_INJECTION: forcing a failure. [ 273.908071][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.911686][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.0.1277 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 273.914448][T10474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.917238][T10474] Call Trace: [ 273.918121][T10474] [ 273.918895][T10474] dump_stack_lvl+0x16c/0x1f0 [ 273.920129][T10474] should_fail_ex+0x497/0x5b0 [ 273.921376][T10474] strncpy_from_user+0x3b/0x2a0 [ 273.922711][T10474] getname_flags.part.0+0x8f/0x550 [ 273.924134][T10474] getname_flags+0x93/0xf0 [ 273.925343][T10474] user_path_at+0x24/0x60 [ 273.926493][T10474] __x64_sys_chroot+0xbf/0x340 [ 273.927746][T10474] ? __pfx___x64_sys_chroot+0x10/0x10 [ 273.929148][T10474] ? syscall_user_dispatch+0x7a/0x130 [ 273.930558][T10474] ? rcu_is_watching+0x12/0xc0 [ 273.931828][T10474] do_syscall_64+0xcd/0x250 [ 273.933033][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.934585][T10474] RIP: 0033:0x7f2af617dff9 [ 273.935750][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.940833][T10474] RSP: 002b:00007f2af7056038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 273.943036][T10474] RAX: ffffffffffffffda RBX: 00007f2af6335f80 RCX: 00007f2af617dff9 [ 273.945104][T10474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.947161][T10474] RBP: 00007f2af7056090 R08: 0000000000000000 R09: 0000000000000000 [ 273.949207][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.951272][T10474] R13: 0000000000000000 R14: 00007f2af6335f80 R15: 00007ffd77b7fb38 [ 273.953333][T10474] [ 274.069830][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.811656][T10487] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 274.825534][T10494] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 274.874068][T10497] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 274.889364][T10496] netlink: 'syz.1.1281': attribute type 4 has an invalid length. [ 274.911704][T10498] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 275.048744][T10496] syz.1.1281 (10496) used greatest stack depth: 21200 bytes left [ 275.104812][T10506] lo speed is unknown, defaulting to 1000 [ 275.109865][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.479289][T10514] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 275.513876][T10514] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.660249][T10519] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 275.690807][T10522] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 276.160022][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.858498][ T39] audit: type=1326 audit(1729670198.599:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.0.1294" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2af617dff9 code=0x0 [ 277.190125][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.662719][T10556] lo speed is unknown, defaulting to 1000 [ 277.790687][T10565] FAULT_INJECTION: forcing a failure. [ 277.790687][T10565] name failslab, interval 1, probability 0, space 0, times 0 [ 277.794728][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.0.1298 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 277.798083][T10565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.800904][T10565] Call Trace: [ 277.801817][T10565] [ 277.802569][T10565] dump_stack_lvl+0x16c/0x1f0 [ 277.803757][T10565] should_fail_ex+0x497/0x5b0 [ 277.804921][T10565] ? fs_reclaim_acquire+0xae/0x150 [ 277.806169][T10565] should_failslab+0xc2/0x120 [ 277.807326][T10565] kmem_cache_alloc_node_noprof+0x71/0x310 [ 277.808771][T10565] ? __alloc_skb+0x2b1/0x380 [ 277.809905][T10565] __alloc_skb+0x2b1/0x380 [ 277.810998][T10565] ? __pfx___alloc_skb+0x10/0x10 [ 277.812213][T10565] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 277.813708][T10565] netlink_alloc_large_skb+0x69/0x130 [ 277.815070][T10565] netlink_sendmsg+0x689/0xd70 [ 277.816244][T10565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.817553][T10565] ? __import_iovec+0x1fd/0x6e0 [ 277.818784][T10565] ____sys_sendmsg+0xaaf/0xc90 [ 277.820013][T10565] ? copy_msghdr_from_user+0x10b/0x160 [ 277.821352][T10565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.822711][T10565] ? __lock_task_sighand+0xc2/0x340 [ 277.824027][T10565] ? __pfx___lock_acquire+0x10/0x10 [ 277.825323][T10565] ___sys_sendmsg+0x135/0x1e0 [ 277.826521][T10565] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.827802][T10565] ? lock_acquire+0x2f/0xb0 [ 277.828930][T10565] ? __fget_files+0x40/0x3f0 [ 277.830122][T10565] ? fdget+0x176/0x210 [ 277.831145][T10565] __sys_sendmsg+0x117/0x1f0 [ 277.832273][T10565] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.833572][T10565] ? bpf_trace_run2+0x2a6/0x590 [ 277.834766][T10565] ? rcu_is_watching+0x12/0xc0 [ 277.836098][T10565] do_syscall_64+0xcd/0x250 [ 277.837313][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.838765][T10565] RIP: 0033:0x7f2af617dff9 [ 277.839871][T10565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.844723][T10565] RSP: 002b:00007f2af7056038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.846891][T10565] RAX: ffffffffffffffda RBX: 00007f2af6335f80 RCX: 00007f2af617dff9 [ 277.848926][T10565] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 277.850976][T10565] RBP: 00007f2af7056090 R08: 0000000000000000 R09: 0000000000000000 [ 277.852997][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.855036][T10565] R13: 0000000000000000 R14: 00007f2af6335f80 R15: 00007ffd77b7fb38 [ 277.857129][T10565] [ 277.890415][T10561] EXT4-fs error: 6 callbacks suppressed [ 277.890425][T10561] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 277.920764][T10567] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 278.168342][T10573] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 278.230255][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.702091][ T39] audit: type=1400 audit(1729670200.458:673): avc: denied { read } for pid=10582 comm="syz.1.1303" name="btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 278.716013][ T39] audit: type=1400 audit(1729670200.468:674): avc: denied { open } for pid=10582 comm="syz.1.1303" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 278.908871][T10591] FAULT_INJECTION: forcing a failure. [ 278.908871][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.920317][T10591] CPU: 3 UID: 0 PID: 10591 Comm: syz.3.1305 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 278.923078][T10591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.925834][T10591] Call Trace: [ 278.926702][T10591] [ 278.927479][T10591] dump_stack_lvl+0x16c/0x1f0 [ 278.928835][T10591] should_fail_ex+0x497/0x5b0 [ 278.930101][T10591] strncpy_from_user+0x3b/0x2a0 [ 278.931370][T10591] getname_flags.part.0+0x8f/0x550 [ 278.932700][T10591] getname_flags+0x93/0xf0 [ 278.933870][T10591] user_path_at+0x24/0x60 [ 278.935092][T10591] __x64_sys_truncate+0xf7/0x1e0 [ 278.936400][T10591] ? __pfx___x64_sys_truncate+0x10/0x10 [ 278.937875][T10591] ? rcu_is_watching+0x12/0xc0 [ 278.939575][T10591] do_syscall_64+0xcd/0x250 [ 278.941272][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.943186][T10591] RIP: 0033:0x7feea9f7dff9 [ 278.944365][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.949442][T10591] RSP: 002b:00007feeaadd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 278.951577][T10591] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7dff9 [ 278.953612][T10591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 278.955646][T10591] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 278.958215][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.960645][T10591] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 278.963154][T10591] [ 279.061521][T10597] FAULT_INJECTION: forcing a failure. [ 279.061521][T10597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.065824][T10597] CPU: 0 UID: 0 PID: 10597 Comm: syz.2.1307 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 279.069400][T10597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.073005][T10597] Call Trace: [ 279.074160][T10597] [ 279.075033][T10597] dump_stack_lvl+0x16c/0x1f0 [ 279.076275][T10597] should_fail_ex+0x497/0x5b0 [ 279.077557][T10597] _copy_from_user+0x30/0xf0 [ 279.078773][T10597] kstrtouint_from_user+0xd7/0x1c0 [ 279.080116][T10597] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 279.081624][T10597] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 279.083049][T10597] proc_fail_nth_write+0x84/0x250 [ 279.084565][T10597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.086554][T10597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.088380][T10597] vfs_write+0x28e/0x1140 [ 279.089551][T10597] ? __fget_files+0x23a/0x3f0 [ 279.090994][T10597] ? fdget_pos+0x24c/0x360 [ 279.092269][T10597] ? __pfx_lock_release+0x10/0x10 [ 279.093600][T10597] ? trace_lock_acquire+0x14a/0x1d0 [ 279.094950][T10597] ? __pfx_vfs_write+0x10/0x10 [ 279.096199][T10597] ? __pfx___mutex_lock+0x10/0x10 [ 279.097750][T10597] ? __fget_files+0x244/0x3f0 [ 279.099387][T10597] ksys_write+0x12f/0x260 [ 279.100642][T10597] ? __pfx_ksys_write+0x10/0x10 [ 279.102338][T10597] ? rcu_is_watching+0x12/0xc0 [ 279.104001][T10597] do_syscall_64+0xcd/0x250 [ 279.105592][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.107260][T10597] RIP: 0033:0x7fedba57cadf [ 279.108669][T10597] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 279.114268][T10597] RSP: 002b:00007fedbb3f2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 279.116513][T10597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedba57cadf [ 279.118651][T10597] RDX: 0000000000000001 RSI: 00007fedbb3f20a0 RDI: 0000000000000005 [ 279.120692][T10597] RBP: 00007fedbb3f2090 R08: 0000000000000000 R09: 0000000000000000 [ 279.122748][T10597] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 279.124987][T10597] R13: 0000000000000000 R14: 00007fedba736058 R15: 00007ffded047d08 [ 279.127720][T10597] [ 279.128758][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.270391][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.646038][T10614] FAULT_INJECTION: forcing a failure. [ 279.646038][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.656089][T10614] CPU: 2 UID: 0 PID: 10614 Comm: syz.2.1312 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 279.658904][T10614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.661648][T10614] Call Trace: [ 279.662548][T10614] [ 279.663327][T10614] dump_stack_lvl+0x16c/0x1f0 [ 279.664562][T10614] should_fail_ex+0x497/0x5b0 [ 279.665801][T10614] _copy_from_user+0x30/0xf0 [ 279.667018][T10614] kstrtouint_from_user+0xd7/0x1c0 [ 279.668360][T10614] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 279.669841][T10614] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 279.671337][T10614] proc_fail_nth_write+0x84/0x250 [ 279.672696][T10614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.674166][T10614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.675625][T10614] vfs_write+0x28e/0x1140 [ 279.676802][T10614] ? __fget_files+0x23a/0x3f0 [ 279.678053][T10614] ? fdget_pos+0x24c/0x360 [ 279.679210][T10614] ? __pfx_lock_release+0x10/0x10 [ 279.680514][T10614] ? trace_lock_acquire+0x14a/0x1d0 [ 279.681875][T10614] ? __pfx_vfs_write+0x10/0x10 [ 279.683136][T10614] ? __pfx___mutex_lock+0x10/0x10 [ 279.684454][T10614] ? __fget_files+0x244/0x3f0 [ 279.685687][T10614] ksys_write+0x12f/0x260 [ 279.686829][T10614] ? __pfx_ksys_write+0x10/0x10 [ 279.688085][T10614] ? rcu_is_watching+0x12/0xc0 [ 279.689348][T10614] do_syscall_64+0xcd/0x250 [ 279.690553][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.692090][T10614] RIP: 0033:0x7fedba57cadf [ 279.693310][T10614] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 279.698260][T10614] RSP: 002b:00007fedbb413030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 279.700433][T10614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedba57cadf [ 279.702488][T10614] RDX: 0000000000000001 RSI: 00007fedbb4130a0 RDI: 0000000000000006 [ 279.704533][T10614] RBP: 00007fedbb413090 R08: 0000000000000000 R09: 0000000000000000 [ 279.706586][T10614] R10: 0000000000000074 R11: 0000000000000293 R12: 0000000000000001 [ 279.708622][T10614] R13: 0000000000000000 R14: 00007fedba735f80 R15: 00007ffded047d08 [ 279.710672][T10614] [ 279.821133][T10616] lo speed is unknown, defaulting to 1000 [ 280.320507][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.924387][T10629] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 281.043138][T10637] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 281.058943][T10638] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 281.350622][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.361250][T10643] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 281.377705][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 281.379874][T10646] bond0: option arp_interval: invalid value (18446744073709551615) [ 281.388193][T10646] bond0: option arp_interval: allowed values 0 - 2147483647 [ 281.721684][T10645] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 282.390798][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.475710][T10663] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 282.496109][T10664] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 282.970812][ T39] audit: type=1400 audit(1729670204.638:675): avc: denied { connect } for pid=10671 comm="syz.3.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.199611][T10682] lo speed is unknown, defaulting to 1000 [ 283.362325][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 283.365001][T10691] bond0: option arp_interval: invalid value (18446744073709551615) [ 283.370938][T10691] bond0: option arp_interval: allowed values 0 - 2147483647 [ 283.411344][T10688] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 283.427772][T10692] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 283.431960][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 283.667114][T10699] FAULT_INJECTION: forcing a failure. [ 283.667114][T10699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.671173][T10699] CPU: 3 UID: 0 PID: 10699 Comm: syz.3.1337 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 283.674488][T10699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.677268][T10699] Call Trace: [ 283.678146][T10699] [ 283.678942][T10699] dump_stack_lvl+0x16c/0x1f0 [ 283.680315][T10699] should_fail_ex+0x497/0x5b0 [ 283.681683][T10699] _copy_from_user+0x30/0xf0 [ 283.682913][T10699] move_addr_to_kernel+0x68/0x160 [ 283.684315][T10699] __sys_sendto+0x169/0x4d0 [ 283.685543][T10699] ? __pfx___sys_sendto+0x10/0x10 [ 283.686862][T10699] ? find_held_lock+0x2d/0x110 [ 283.688124][T10699] ? bpf_send_signal_common+0x2b5/0x3a0 [ 283.689630][T10699] __x64_sys_sendto+0xe0/0x1c0 [ 283.690885][T10699] ? syscall_trace_enter+0x1ce/0x240 [ 283.692268][T10699] do_syscall_64+0xcd/0x250 [ 283.693483][T10699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.695028][T10699] RIP: 0033:0x7feea9f7fe8c [ 283.696191][T10699] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 283.701846][T10699] RSP: 002b:00007feeaadd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 283.704021][T10699] RAX: ffffffffffffffda RBX: 00007feeaadd3fc0 RCX: 00007feea9f7fe8c [ 283.706069][T10699] RDX: 0000000000000020 RSI: 00007feeaadd4010 RDI: 0000000000000004 [ 283.708105][T10699] RBP: 0000000000000000 R08: 00007feeaadd3f14 R09: 000000000000000c [ 283.710186][T10699] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 283.712213][T10699] R13: 00007feeaadd3f68 R14: 00007feeaadd4010 R15: 0000000000000000 [ 283.714257][T10699] [ 283.792960][T10696] lo speed is unknown, defaulting to 1000 [ 284.480997][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.571507][ T39] audit: type=1400 audit(1729670206.328:676): avc: denied { associate } for pid=10703 comm="syz.1.1338" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 284.663920][ T39] audit: type=1400 audit(1729670206.418:677): avc: denied { write } for pid=10703 comm="syz.1.1338" name="cpu.stat" dev="9p" ino=36573927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.685166][T10714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10714 comm=syz.3.1341 [ 284.710356][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 284.720330][T10720] bond0: option arp_interval: invalid value (18446744073709551615) [ 284.740589][T10720] bond0: option arp_interval: allowed values 0 - 2147483647 [ 285.485929][T10726] lo speed is unknown, defaulting to 1000 [ 285.511153][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.204437][T10731] netlink: 'syz.3.1346': attribute type 12 has an invalid length. [ 286.294575][T10731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10731 comm=syz.3.1346 [ 286.551240][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.123031][T10748] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 287.123451][T10749] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 287.178040][T10752] vxcan1: tx address claim with different name [ 287.298592][T10759] FAULT_INJECTION: forcing a failure. [ 287.298592][T10759] name failslab, interval 1, probability 0, space 0, times 0 [ 287.308513][T10759] CPU: 3 UID: 0 PID: 10759 Comm: syz.3.1355 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 287.312232][T10759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.315918][T10759] Call Trace: [ 287.316832][T10759] [ 287.317886][T10759] dump_stack_lvl+0x16c/0x1f0 [ 287.319167][T10759] should_fail_ex+0x497/0x5b0 [ 287.320432][T10759] ? fs_reclaim_acquire+0xae/0x150 [ 287.322209][T10759] should_failslab+0xc2/0x120 [ 287.323849][T10759] __kmalloc_noprof+0xcb/0x400 [ 287.325539][T10759] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 287.327480][T10759] tomoyo_realpath_from_path+0xb9/0x720 [ 287.329392][T10759] ? tomoyo_path_number_perm+0x232/0x590 [ 287.331336][T10759] tomoyo_path_number_perm+0x245/0x590 [ 287.333222][T10759] ? tomoyo_path_number_perm+0x232/0x590 [ 287.335166][T10759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.337264][T10759] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.339074][T10759] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 287.340634][T10759] ? trace_lock_acquire+0x14a/0x1d0 [ 287.342435][T10759] ? bpf_send_signal_common+0x2b5/0x3a0 [ 287.344354][T10759] ? lock_acquire+0x2f/0xb0 [ 287.345945][T10759] ? __fget_files+0x40/0x3f0 [ 287.347552][T10759] ? __fget_files+0x244/0x3f0 [ 287.349202][T10759] security_file_ioctl+0x9b/0x240 [ 287.350943][T10759] __x64_sys_ioctl+0xbb/0x220 [ 287.352580][T10759] do_syscall_64+0xcd/0x250 [ 287.354172][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.356216][T10759] RIP: 0033:0x7feea9f7dff9 [ 287.357777][T10759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.364388][T10759] RSP: 002b:00007feeaadd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.367275][T10759] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7dff9 [ 287.369937][T10759] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003 [ 287.372077][T10759] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 287.374205][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.376322][T10759] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 287.378468][T10759] [ 287.461347][T10759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.586957][T10761] lo speed is unknown, defaulting to 1000 [ 287.591368][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.028765][ T39] audit: type=1400 audit(1729670209.777:678): avc: denied { nlmsg_write } for pid=10763 comm="syz.0.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 288.631494][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.294386][T10773] netlink: 'syz.0.1366': attribute type 2 has an invalid length. [ 289.296421][T10773] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 289.298421][T10773] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1366'. [ 289.441059][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 289.671608][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.013671][T10779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1360'. [ 290.059144][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 290.270824][T10781] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 290.277531][T10781] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.280234][T10781] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.721770][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.999465][T10792] FAULT_INJECTION: forcing a failure. [ 290.999465][T10792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.012850][T10792] CPU: 2 UID: 0 PID: 10792 Comm: syz.1.1364 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 291.015509][T10792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.018157][T10792] Call Trace: [ 291.019007][T10792] [ 291.019780][T10792] dump_stack_lvl+0x16c/0x1f0 [ 291.021016][T10792] should_fail_ex+0x497/0x5b0 [ 291.022251][T10792] _copy_to_user+0x30/0xc0 [ 291.023415][T10792] simple_read_from_buffer+0xd0/0x160 [ 291.024805][T10792] proc_fail_nth_read+0x198/0x270 [ 291.026128][T10792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.027565][T10792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.029007][T10792] vfs_read+0x1ce/0xbd0 [ 291.030109][T10792] ? __fget_files+0x23a/0x3f0 [ 291.031338][T10792] ? fdget_pos+0x24c/0x360 [ 291.032507][T10792] ? __pfx_lock_release+0x10/0x10 [ 291.033821][T10792] ? trace_lock_acquire+0x14a/0x1d0 [ 291.035175][T10792] ? __pfx_vfs_read+0x10/0x10 [ 291.036404][T10792] ? __pfx___mutex_lock+0x10/0x10 [ 291.037728][T10792] ? __fget_files+0x244/0x3f0 [ 291.038969][T10792] ksys_read+0x12f/0x260 [ 291.040075][T10792] ? __pfx_ksys_read+0x10/0x10 [ 291.041331][T10792] ? rcu_is_watching+0x12/0xc0 [ 291.042572][T10792] do_syscall_64+0xcd/0x250 [ 291.043758][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.045302][T10792] RIP: 0033:0x7f5c59b7ca3c [ 291.046471][T10792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 291.051406][T10792] RSP: 002b:00007f5c5aa5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.053484][T10792] RAX: ffffffffffffffda RBX: 00007f5c59d35f80 RCX: 00007f5c59b7ca3c [ 291.055373][T10792] RDX: 000000000000000f RSI: 00007f5c5aa5d0a0 RDI: 0000000000000003 [ 291.057360][T10792] RBP: 00007f5c5aa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 291.059382][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.061312][T10792] R13: 0000000000000001 R14: 00007f5c59d35f80 R15: 00007fff6b8317f8 [ 291.063293][T10792] [ 291.512489][ T5347] Bluetooth: hci4: command 0x1003 tx timeout [ 291.516770][ T5338] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 291.761860][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.059197][T10804] lo speed is unknown, defaulting to 1000 [ 292.309018][T10807] FAULT_INJECTION: forcing a failure. [ 292.309018][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 292.312244][T10807] CPU: 1 UID: 0 PID: 10807 Comm: syz.1.1371 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 292.315000][T10807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.317767][T10807] Call Trace: [ 292.318646][T10807] [ 292.319428][T10807] dump_stack_lvl+0x16c/0x1f0 [ 292.320670][T10807] should_fail_ex+0x497/0x5b0 [ 292.321918][T10807] ? fs_reclaim_acquire+0xae/0x150 [ 292.323279][T10807] should_failslab+0xc2/0x120 [ 292.324512][T10807] __kmalloc_node_noprof+0xd1/0x430 [ 292.325881][T10807] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 292.327298][T10807] __kvmalloc_node_noprof+0xad/0x1a0 [ 292.328675][T10807] __do_sys_add_key+0x1f8/0x460 [ 292.329966][T10807] ? __pfx___do_sys_add_key+0x10/0x10 [ 292.331381][T10807] ? rcu_is_watching+0x12/0xc0 [ 292.332640][T10807] do_syscall_64+0xcd/0x250 [ 292.333852][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.335394][T10807] RIP: 0033:0x7f5c59b7dff9 [ 292.336569][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.341526][T10807] RSP: 002b:00007f5c5aa5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 292.343688][T10807] RAX: ffffffffffffffda RBX: 00007f5c59d35f80 RCX: 00007f5c59b7dff9 [ 292.345750][T10807] RDX: 0000000020000580 RSI: 0000000000000000 RDI: 0000000020000000 [ 292.347798][T10807] RBP: 00007f5c5aa5d090 R08: 000000001ad8838f R09: 0000000000000000 [ 292.349847][T10807] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 292.351891][T10807] R13: 0000000000000000 R14: 00007f5c59d35f80 R15: 00007fff6b8317f8 [ 292.353951][T10807] [ 292.388890][ T39] audit: type=1804 audit(1729670214.107:679): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1371" name="/newroot/314/file0/bus" dev="ramfs" ino=37474 res=1 errno=0 [ 292.791995][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.159498][T10820] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1372'. [ 293.163031][T10820] netlink: zone id is out of range [ 293.165229][T10820] netlink: del zone limit has 8 unknown bytes [ 293.169494][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 293.456234][T10822] FAULT_INJECTION: forcing a failure. [ 293.456234][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 293.459931][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.2.1375 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 293.463523][T10822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.466329][T10822] Call Trace: [ 293.467219][T10822] [ 293.468013][T10822] dump_stack_lvl+0x16c/0x1f0 [ 293.469285][T10822] should_fail_ex+0x497/0x5b0 [ 293.470526][T10822] ? fs_reclaim_acquire+0xae/0x150 [ 293.471929][T10822] should_failslab+0xc2/0x120 [ 293.473373][T10822] __kmalloc_noprof+0xcb/0x400 [ 293.474636][T10822] io_rsrc_data_alloc+0x99/0x460 [ 293.475947][T10822] io_sqe_buffers_register+0x129/0x9e0 [ 293.477402][T10822] ? __mutex_trylock_common+0xea/0x250 [ 293.478834][T10822] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 293.480411][T10822] ? rcu_is_watching+0x12/0xc0 [ 293.481680][T10822] ? __mutex_lock+0x1a6/0x9c0 [ 293.482935][T10822] __io_uring_register+0x1e7d/0x1f00 [ 293.484321][T10822] ? __pfx___io_uring_register+0x10/0x10 [ 293.485782][T10822] ? __fget_files+0x244/0x3f0 [ 293.487021][T10822] __x64_sys_io_uring_register+0x153/0x270 [ 293.489047][T10822] do_syscall_64+0xcd/0x250 [ 293.490248][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.491743][T10822] RIP: 0033:0x7fedba57dff9 [ 293.492944][T10822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.497918][T10822] RSP: 002b:00007fedbb413038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 293.500089][T10822] RAX: ffffffffffffffda RBX: 00007fedba735f80 RCX: 00007fedba57dff9 [ 293.502159][T10822] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 293.504227][T10822] RBP: 00007fedbb413090 R08: 0000000000000000 R09: 0000000000000000 [ 293.506302][T10822] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 293.508359][T10822] R13: 0000000000000000 R14: 00007fedba735f80 R15: 00007ffded047d08 [ 293.510447][T10822] [ 293.633694][T10831] netlink: 'syz.2.1378': attribute type 2 has an invalid length. [ 293.635698][T10831] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 293.662499][T10831] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1378'. [ 293.842100][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.398697][T10846] FAULT_INJECTION: forcing a failure. [ 294.398697][T10846] name failslab, interval 1, probability 0, space 0, times 0 [ 294.402250][T10846] CPU: 1 UID: 0 PID: 10846 Comm: syz.3.1381 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 294.404983][T10846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.407761][T10846] Call Trace: [ 294.408689][T10846] [ 294.409483][T10846] dump_stack_lvl+0x16c/0x1f0 [ 294.410775][T10846] should_fail_ex+0x497/0x5b0 [ 294.412038][T10846] should_failslab+0xc2/0x120 [ 294.413368][T10846] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 294.414830][T10846] ? __inet_hash_connect+0x55d/0x18f0 [ 294.416138][T10846] ? __inet_hash_connect+0x7d6/0x18f0 [ 294.417460][T10846] __inet_hash_connect+0x7d6/0x18f0 [ 294.418816][T10846] ? __pfx___inet6_check_established+0x10/0x10 [ 294.420427][T10846] ? __pfx___inet_hash_connect+0x10/0x10 [ 294.421899][T10846] tcp_v6_connect+0x12d0/0x20e0 [ 294.423180][T10846] ? __pfx_register_lock_class+0x10/0x10 [ 294.424668][T10846] ? __pfx_tcp_v6_connect+0x10/0x10 [ 294.426356][T10846] ? __pfx_mark_lock+0x10/0x10 [ 294.427993][T10846] ? __inet_stream_connect+0x3c7/0x1020 [ 294.429907][T10846] __inet_stream_connect+0x3c7/0x1020 [ 294.431482][T10846] ? find_held_lock+0x2d/0x110 [ 294.432757][T10846] ? __pfx___inet_stream_connect+0x10/0x10 [ 294.434440][T10846] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.435879][T10846] ? mark_held_locks+0x9f/0xe0 [ 294.437191][T10846] ? inet_stream_connect+0x43/0xa0 [ 294.438564][T10846] ? __local_bh_enable_ip+0xa4/0x120 [ 294.440005][T10846] inet_stream_connect+0x57/0xa0 [ 294.441342][T10846] kernel_connect+0x105/0x180 [ 294.442609][T10846] ? __pfx_kernel_connect+0x10/0x10 [ 294.443992][T10846] ? mark_held_locks+0x9f/0xe0 [ 294.445279][T10846] ? smc_connect+0xd5/0x760 [ 294.446487][T10846] ? __local_bh_enable_ip+0xa4/0x120 [ 294.447894][T10846] smc_connect+0x4c7/0x760 [ 294.449110][T10846] ? __pfx_smc_connect+0x10/0x10 [ 294.450470][T10846] __sys_connect_file+0x14d/0x190 [ 294.452188][T10846] __sys_connect+0x147/0x180 [ 294.453561][T10846] ? __pfx___sys_connect+0x10/0x10 [ 294.455046][T10846] ? __pfx_ksys_write+0x10/0x10 [ 294.456450][T10846] __x64_sys_connect+0x72/0xb0 [ 294.457832][T10846] do_syscall_64+0xcd/0x250 [ 294.459047][T10846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.460579][T10846] RIP: 0033:0x7feea9f7dff9 [ 294.461750][T10846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.466672][T10846] RSP: 002b:00007feeaadd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 294.468818][T10846] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7dff9 [ 294.470879][T10846] RDX: 000000000000001c RSI: 00000000200001c0 RDI: 0000000000000008 [ 294.472951][T10846] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 294.475093][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.477142][T10846] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 294.479181][T10846] [ 294.501207][T10846] syzkaller0: entered promiscuous mode [ 294.504221][T10846] syzkaller0: entered allmulticast mode [ 294.882231][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.973884][T10849] FAULT_INJECTION: forcing a failure. [ 294.973884][T10849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.977289][T10849] CPU: 2 UID: 0 PID: 10849 Comm: syz.0.1382 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 294.980074][T10849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.982872][T10849] Call Trace: [ 294.983758][T10849] [ 294.984548][T10849] dump_stack_lvl+0x16c/0x1f0 [ 294.985800][T10849] should_fail_ex+0x497/0x5b0 [ 294.987042][T10849] _copy_to_user+0x30/0xc0 [ 294.988219][T10849] simple_read_from_buffer+0xd0/0x160 [ 294.989628][T10849] proc_fail_nth_read+0x198/0x270 [ 294.990950][T10849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.992390][T10849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.993834][T10849] vfs_read+0x1ce/0xbd0 [ 294.994926][T10849] ? __fget_files+0x23a/0x3f0 [ 294.996164][T10849] ? fdget_pos+0x24c/0x360 [ 294.997358][T10849] ? __pfx_lock_release+0x10/0x10 [ 294.998698][T10849] ? trace_lock_acquire+0x14a/0x1d0 [ 295.000058][T10849] ? __pfx_vfs_read+0x10/0x10 [ 295.001432][T10849] ? __pfx___mutex_lock+0x10/0x10 [ 295.002764][T10849] ? __fget_files+0x244/0x3f0 [ 295.004024][T10849] ksys_read+0x12f/0x260 [ 295.005161][T10849] ? __pfx_ksys_read+0x10/0x10 [ 295.006425][T10849] ? rcu_is_watching+0x12/0xc0 [ 295.007696][T10849] do_syscall_64+0xcd/0x250 [ 295.008878][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.010402][T10849] RIP: 0033:0x7f2af617ca3c [ 295.011569][T10849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 295.016591][T10849] RSP: 002b:00007f2af7056030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.018768][T10849] RAX: ffffffffffffffda RBX: 00007f2af6335f80 RCX: 00007f2af617ca3c [ 295.020810][T10849] RDX: 000000000000000f RSI: 00007f2af70560a0 RDI: 0000000000000004 [ 295.022859][T10849] RBP: 00007f2af7056090 R08: 0000000000000000 R09: 0000000000000000 [ 295.024900][T10849] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 295.026954][T10849] R13: 0000000000000000 R14: 00007f2af6335f80 R15: 00007ffd77b7fb38 [ 295.029042][T10849] [ 295.637065][T10853] syzkaller0: entered promiscuous mode [ 295.638546][T10853] syzkaller0: entered allmulticast mode [ 295.752386][ T5338] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 295.752614][ T5347] Bluetooth: hci4: command 0x1003 tx timeout [ 295.912352][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.190831][T10867] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 296.228394][ T39] audit: type=1400 audit(1729670217.976:680): avc: denied { create } for pid=10865 comm="syz.3.1388" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.236979][ T39] audit: type=1400 audit(1729670217.986:681): avc: denied { mounton } for pid=10865 comm="syz.3.1388" path="/317/file0" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.252435][T10870] Malformed UNC in devname [ 296.252435][T10870] [ 296.254514][T10870] CIFS: VFS: Malformed UNC in devname [ 296.782533][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 296.785516][T10882] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 296.800165][T10881] Can't find ip_set type hash:neT,port,ne [ 296.962474][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.756579][T10888] netlink: 'syz.1.1394': attribute type 2 has an invalid length. [ 297.758677][T10888] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 297.772918][T10888] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1394'. [ 297.828140][T10892] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 297.856238][T10890] lo speed is unknown, defaulting to 1000 [ 298.002614][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.846487][T10901] FAULT_INJECTION: forcing a failure. [ 298.846487][T10901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.859785][T10901] CPU: 2 UID: 0 PID: 10901 Comm: syz.3.1396 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 298.862525][T10901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.865269][T10901] Call Trace: [ 298.866132][T10901] [ 298.866901][T10901] dump_stack_lvl+0x16c/0x1f0 [ 298.868127][T10901] should_fail_ex+0x497/0x5b0 [ 298.869352][T10901] _copy_to_user+0x30/0xc0 [ 298.870508][T10901] simple_read_from_buffer+0xd0/0x160 [ 298.871893][T10901] proc_fail_nth_read+0x198/0x270 [ 298.873205][T10901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.874622][T10901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.876038][T10901] vfs_read+0x1ce/0xbd0 [ 298.877110][T10901] ? __fget_files+0x23a/0x3f0 [ 298.878323][T10901] ? fdget_pos+0x24c/0x360 [ 298.879490][T10901] ? __pfx_lock_release+0x10/0x10 [ 298.880795][T10901] ? trace_lock_acquire+0x14a/0x1d0 [ 298.882182][T10901] ? __pfx_vfs_read+0x10/0x10 [ 298.883432][T10901] ? __pfx___mutex_lock+0x10/0x10 [ 298.884746][T10901] ? __fget_files+0x244/0x3f0 [ 298.885990][T10901] ksys_read+0x12f/0x260 [ 298.887101][T10901] ? __pfx_ksys_read+0x10/0x10 [ 298.888354][T10901] ? rcu_is_watching+0x12/0xc0 [ 298.889609][T10901] do_syscall_64+0xcd/0x250 [ 298.890798][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.892335][T10901] RIP: 0033:0x7feea9f7ca3c [ 298.893501][T10901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 298.898419][T10901] RSP: 002b:00007feeaadd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.900563][T10901] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7ca3c [ 298.902608][T10901] RDX: 000000000000000f RSI: 00007feeaadd50a0 RDI: 0000000000000003 [ 298.904679][T10901] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 298.906714][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.908752][T10901] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 298.910804][T10901] [ 299.042721][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.202829][ T39] audit: type=1400 audit(1729670220.536:682): avc: denied { read } for pid=10896 comm="syz.3.1395" path="socket:[38086]" dev="sockfs" ino=38086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.209268][ T39] audit: type=1400 audit(1729670220.536:683): avc: denied { shutdown } for pid=10896 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.231377][T10903] FAULT_INJECTION: forcing a failure. [ 299.231377][T10903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.234955][T10903] CPU: 2 UID: 0 PID: 10903 Comm: syz.3.1397 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 299.237745][T10903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.240495][T10903] Call Trace: [ 299.241385][T10903] [ 299.242161][T10903] dump_stack_lvl+0x16c/0x1f0 [ 299.243402][T10903] should_fail_ex+0x497/0x5b0 [ 299.244632][T10903] _copy_to_user+0x30/0xc0 [ 299.245805][T10903] simple_read_from_buffer+0xd0/0x160 [ 299.247200][T10903] proc_fail_nth_read+0x198/0x270 [ 299.248508][T10903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.249960][T10903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.251354][T10903] vfs_read+0x1ce/0xbd0 [ 299.252459][T10903] ? __fget_files+0x23a/0x3f0 [ 299.253703][T10903] ? fdget_pos+0x24c/0x360 [ 299.254879][T10903] ? __pfx_lock_release+0x10/0x10 [ 299.256192][T10903] ? trace_lock_acquire+0x14a/0x1d0 [ 299.257567][T10903] ? __pfx_vfs_read+0x10/0x10 [ 299.258803][T10903] ? __pfx___mutex_lock+0x10/0x10 [ 299.260131][T10903] ? __fget_files+0x244/0x3f0 [ 299.261378][T10903] ksys_read+0x12f/0x260 [ 299.262498][T10903] ? __pfx_ksys_read+0x10/0x10 [ 299.263753][T10903] ? rcu_is_watching+0x12/0xc0 [ 299.265020][T10903] do_syscall_64+0xcd/0x250 [ 299.266206][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.267741][T10903] RIP: 0033:0x7feea9f7ca3c [ 299.268914][T10903] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 299.273861][T10903] RSP: 002b:00007feeaadd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.276004][T10903] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7ca3c [ 299.278286][T10903] RDX: 000000000000000f RSI: 00007feeaadd50a0 RDI: 0000000000000004 [ 299.280330][T10903] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 299.282372][T10903] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 299.284421][T10903] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 299.286465][T10903] [ 299.814830][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 299.818347][T10914] FAULT_INJECTION: forcing a failure. [ 299.818347][T10914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.821728][T10914] CPU: 2 UID: 0 PID: 10914 Comm: syz.3.1400 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 299.824644][T10914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.827695][T10914] Call Trace: [ 299.828582][T10914] [ 299.829378][T10914] dump_stack_lvl+0x16c/0x1f0 [ 299.830622][T10914] should_fail_ex+0x497/0x5b0 [ 299.831866][T10914] _copy_from_user+0x30/0xf0 [ 299.833102][T10914] kstrtouint_from_user+0xd7/0x1c0 [ 299.834464][T10914] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 299.835975][T10914] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 299.837489][T10914] proc_fail_nth_write+0x84/0x250 [ 299.838831][T10914] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.840312][T10914] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.841794][T10914] vfs_write+0x28e/0x1140 [ 299.842945][T10914] ? __fget_files+0x23a/0x3f0 [ 299.844191][T10914] ? fdget_pos+0x24c/0x360 [ 299.845385][T10914] ? __pfx_lock_release+0x10/0x10 [ 299.846715][T10914] ? trace_lock_acquire+0x14a/0x1d0 [ 299.848088][T10914] ? __pfx_vfs_write+0x10/0x10 [ 299.849346][T10914] ? __pfx___mutex_lock+0x10/0x10 [ 299.850677][T10914] ? __fget_files+0x244/0x3f0 [ 299.851927][T10914] ksys_write+0x12f/0x260 [ 299.853090][T10914] ? __pfx_ksys_write+0x10/0x10 [ 299.854386][T10914] ? rcu_is_watching+0x12/0xc0 [ 299.855658][T10914] do_syscall_64+0xcd/0x250 [ 299.856889][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.858450][T10914] RIP: 0033:0x7feea9f7cadf [ 299.859626][T10914] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 299.864619][T10914] RSP: 002b:00007feeaadb4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 299.866796][T10914] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feea9f7cadf [ 299.868851][T10914] RDX: 0000000000000001 RSI: 00007feeaadb40a0 RDI: 0000000000000003 [ 299.870929][T10914] RBP: 00007feeaadb4090 R08: 0000000000000000 R09: 0000000000000000 [ 299.872991][T10914] R10: 0000000000000020 R11: 0000000000000293 R12: 0000000000000001 [ 299.875099][T10914] R13: 0000000000000000 R14: 00007feeaa136058 R15: 00007ffd1799c2b8 [ 299.877187][T10914] [ 299.878624][ T5338] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 300.072852][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.115858][T10920] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 300.130631][T10913] Can't find ip_set type hash:neT,p [ 300.470525][T10925] FAULT_INJECTION: forcing a failure. [ 300.470525][T10925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.483137][T10925] CPU: 3 UID: 0 PID: 10925 Comm: syz.3.1406 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 300.486218][T10925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.489531][T10925] Call Trace: [ 300.490554][T10925] [ 300.491477][T10925] dump_stack_lvl+0x16c/0x1f0 [ 300.493108][T10925] should_fail_ex+0x497/0x5b0 [ 300.494540][T10925] _copy_from_user+0x30/0xf0 [ 300.495913][T10925] ucma_set_option+0xa6/0x530 [ 300.497319][T10925] ? __pfx_ucma_set_option+0x10/0x10 [ 300.498922][T10925] ? __pfx_ucma_set_option+0x10/0x10 [ 300.500379][T10925] ucma_write+0x1f9/0x330 [ 300.501595][T10925] ? __pfx_ucma_write+0x10/0x10 [ 300.502966][T10925] ? bpf_lsm_file_permission+0x9/0x10 [ 300.504458][T10925] ? security_file_permission+0x71/0x210 [ 300.505997][T10925] ? __pfx_ucma_write+0x10/0x10 [ 300.507314][T10925] vfs_write+0x28e/0x1140 [ 300.508747][T10925] ? __fget_files+0x23a/0x3f0 [ 300.510407][T10925] ? __pfx_lock_release+0x10/0x10 [ 300.512176][T10925] ? trace_lock_acquire+0x14a/0x1d0 [ 300.513874][T10925] ? __pfx_vfs_write+0x10/0x10 [ 300.515160][T10925] ? lock_acquire+0x2f/0xb0 [ 300.516418][T10925] ? __fget_files+0x40/0x3f0 [ 300.517704][T10925] ? __fget_files+0x244/0x3f0 [ 300.518988][T10925] ksys_write+0x1fa/0x260 [ 300.520157][T10925] ? __pfx_ksys_write+0x10/0x10 [ 300.521479][T10925] ? rcu_is_watching+0x12/0xc0 [ 300.522765][T10925] do_syscall_64+0xcd/0x250 [ 300.523977][T10925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.525548][T10925] RIP: 0033:0x7feea9f7dff9 [ 300.526812][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.532088][T10925] RSP: 002b:00007feeaadd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.534262][T10925] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7dff9 [ 300.536318][T10925] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000003 [ 300.538358][T10925] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 300.540415][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.542485][T10925] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 300.544532][T10925] [ 300.795654][T10934] FAULT_INJECTION: forcing a failure. [ 300.795654][T10934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.799114][T10934] CPU: 2 UID: 0 PID: 10934 Comm: syz.3.1410 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 300.801820][T10934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.804540][T10934] Call Trace: [ 300.805416][T10934] [ 300.806174][T10934] dump_stack_lvl+0x16c/0x1f0 [ 300.807372][T10934] should_fail_ex+0x497/0x5b0 [ 300.808562][T10934] _copy_from_user+0x30/0xf0 [ 300.809765][T10934] ucma_create_id+0xcb/0x380 [ 300.810941][T10934] ? __pfx_ucma_create_id+0x10/0x10 [ 300.812265][T10934] ? lock_acquire+0x2f/0xb0 [ 300.813421][T10934] ? __might_fault+0xe3/0x190 [ 300.814623][T10934] ? __pfx_ucma_create_id+0x10/0x10 [ 300.815950][T10934] ucma_write+0x1f9/0x330 [ 300.817077][T10934] ? __pfx_ucma_write+0x10/0x10 [ 300.818322][T10934] ? bpf_lsm_file_permission+0x9/0x10 [ 300.819673][T10934] ? security_file_permission+0x71/0x210 [ 300.821107][T10934] ? __pfx_ucma_write+0x10/0x10 [ 300.822383][T10934] vfs_write+0x28e/0x1140 [ 300.823522][T10934] ? __fget_files+0x23a/0x3f0 [ 300.824762][T10934] ? __pfx_lock_release+0x10/0x10 [ 300.826087][T10934] ? trace_lock_acquire+0x14a/0x1d0 [ 300.827453][T10934] ? __pfx_vfs_write+0x10/0x10 [ 300.828711][T10934] ? lock_acquire+0x2f/0xb0 [ 300.829908][T10934] ? __fget_files+0x40/0x3f0 [ 300.831130][T10934] ? __fget_files+0x244/0x3f0 [ 300.832400][T10934] ksys_write+0x1fa/0x260 [ 300.833558][T10934] ? __pfx_ksys_write+0x10/0x10 [ 300.834838][T10934] ? rcu_is_watching+0x12/0xc0 [ 300.836108][T10934] do_syscall_64+0xcd/0x250 [ 300.837324][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.838873][T10934] RIP: 0033:0x7feea9f7dff9 [ 300.840043][T10934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.845038][T10934] RSP: 002b:00007feeaadd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.847207][T10934] RAX: ffffffffffffffda RBX: 00007feeaa135f80 RCX: 00007feea9f7dff9 [ 300.849272][T10934] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003 [ 300.851329][T10934] RBP: 00007feeaadd5090 R08: 0000000000000000 R09: 0000000000000000 [ 300.853392][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.855482][T10934] R13: 0000000000000000 R14: 00007feeaa135f80 R15: 00007ffd1799c2b8 [ 300.857560][T10934] [ 301.074295][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 301.093465][T10945] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 301.103753][T10944] Can't find ip_set type hash:ne [ 301.122981][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.657475][T10958] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 301.660153][T10958] audit: out of memory in audit_log_start [ 301.945009][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 301.948289][T10977] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 301.962810][T10976] Can't find ip_set type hash:n [ 302.153239][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.473316][ T69] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.633616][ T69] usb 6-1: Using ep0 maxpacket: 8 [ 302.640905][ T69] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 302.643960][ T69] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 302.646828][ T69] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 302.651501][ T69] usb 6-1: config 250 has no interface number 0 [ 302.659837][ T69] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 302.676351][ T69] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 302.680384][ T69] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 302.693507][ T69] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 302.707584][ T69] usb 6-1: config 250 interface 228 has no altsetting 0 [ 302.712767][ T69] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 302.715508][ T69] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 302.717896][ T69] usb 6-1: Product: syz [ 302.719310][ T69] usb 6-1: SerialNumber: syz [ 302.739904][ T69] hub 6-1:250.228: bad descriptor, ignoring hub [ 302.741579][ T69] hub 6-1:250.228: probe with driver hub failed with error -5 [ 302.853191][ T5398] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 302.942653][ T69] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 303.003229][ T5398] usb 7-1: Using ep0 maxpacket: 8 [ 303.006197][ T5398] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 303.008350][ T5398] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 303.012134][ T5398] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 303.015942][ T5398] usb 7-1: config 250 has no interface number 0 [ 303.018085][ T5398] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 303.032098][ T5398] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 303.037089][ T5398] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 303.040524][ T5398] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 303.053223][ T5398] usb 7-1: config 250 interface 228 has no altsetting 0 [ 303.056372][ T5398] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 303.059161][ T5398] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 303.061435][ T5398] usb 7-1: Product: syz [ 303.062497][ T5398] usb 7-1: SerialNumber: syz [ 303.066460][ T5398] hub 7-1:250.228: bad descriptor, ignoring hub [ 303.068166][ T5398] hub 7-1:250.228: probe with driver hub failed with error -5 [ 303.139966][ T39] audit: type=1400 audit(1729670224.885:684): avc: denied { read write } for pid=10988 comm="syz.1.1429" name="lp0" dev="devtmpfs" ino=2613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 303.193225][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.206395][ T39] audit: type=1400 audit(1729670224.885:685): avc: denied { open } for pid=10988 comm="syz.1.1429" path="/dev/usb/lp0" dev="devtmpfs" ino=2613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 303.220622][ C0] usblp0: nonzero read bulk status received: -71 [ 303.242219][T11002] vivid-000: disconnect [ 303.244165][T11002] vivid-000: reconnect [ 303.279858][ T5398] usblp 7-1:250.228: usblp1: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 303.395149][T10989] usblp0: error -71 reading from printer [ 303.398886][T10989] FAULT_INJECTION: forcing a failure. [ 303.398886][T10989] name failslab, interval 1, probability 0, space 0, times 0 [ 303.405443][T10989] CPU: 0 UID: 0 PID: 10989 Comm: syz.1.1429 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 303.408996][T10989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.412609][T10989] Call Trace: [ 303.413802][T10989] [ 303.414849][T10989] dump_stack_lvl+0x16c/0x1f0 [ 303.416670][T10989] should_fail_ex+0x497/0x5b0 [ 303.418548][T10989] ? fs_reclaim_acquire+0xae/0x150 [ 303.420389][T10989] should_failslab+0xc2/0x120 [ 303.422054][T10989] __kmalloc_cache_noprof+0x6b/0x300 [ 303.423847][T10989] ? dummy_urb_enqueue+0x8d/0x8e0 [ 303.425588][T10989] dummy_urb_enqueue+0x8d/0x8e0 [ 303.427249][T10989] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 303.429188][T10989] usb_hcd_submit_urb+0x2d1/0x2090 [ 303.430934][T10989] ? __pfx___lock_acquire+0x10/0x10 [ 303.432694][T10989] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 303.434595][T10989] ? __pfx_mark_lock+0x10/0x10 [ 303.436220][T10989] ? lock_acquire.part.0+0x11b/0x380 [ 303.438049][T10989] ? lock_acquire.part.0+0x11b/0x380 [ 303.439863][T10989] ? find_held_lock+0x2d/0x110 [ 303.441529][T10989] ? usblp_submit_read+0x2db/0x500 [ 303.443307][T10989] usb_submit_urb+0x87c/0x1730 [ 303.445029][T10989] ? _raw_spin_unlock_irqrestore+0x51/0x80 [ 303.447228][T10989] usblp_submit_read+0x2e8/0x500 [ 303.449181][T10989] ? usblp_read+0x3b0/0x7f0 [ 303.450901][T10989] usblp_read+0x708/0x7f0 [ 303.452387][T10989] ? __pfx_usblp_read+0x10/0x10 [ 303.454082][T10989] ? avc_policy_seqno+0x9/0x20 [ 303.455710][T10989] ? __pfx_default_wake_function+0x10/0x10 [ 303.457705][T10989] ? bpf_lsm_file_permission+0x9/0x10 [ 303.459516][T10989] ? security_file_permission+0x71/0x210 [ 303.461414][T10989] ? __pfx_usblp_read+0x10/0x10 [ 303.463090][T10989] vfs_readv+0x6bf/0x890 [ 303.464543][T10989] ? trace_signal_generate+0x197/0x210 [ 303.466408][T10989] ? __pfx_vfs_readv+0x10/0x10 [ 303.468119][T10989] ? find_held_lock+0x2d/0x110 [ 303.469935][T10989] ? __pfx_lock_release+0x10/0x10 [ 303.471949][T10989] ? trace_lock_acquire+0x14a/0x1d0 [ 303.473944][T10989] ? __fget_files+0x244/0x3f0 [ 303.475751][T10989] ? __x64_sys_preadv+0x22d/0x310 [ 303.477481][T10989] __x64_sys_preadv+0x22d/0x310 [ 303.479132][T10989] ? __pfx___x64_sys_preadv+0x10/0x10 [ 303.480933][T10989] ? rcu_is_watching+0x12/0xc0 [ 303.482571][T10989] do_syscall_64+0xcd/0x250 [ 303.483772][T10989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.485769][T10989] RIP: 0033:0x7f5c59b7dff9 [ 303.487279][T10989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.493591][T10989] RSP: 002b:00007f5c5aa5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 303.496297][T10989] RAX: ffffffffffffffda RBX: 00007f5c59d35f80 RCX: 00007f5c59b7dff9 [ 303.498739][T10989] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000006 [ 303.501357][T10989] RBP: 00007f5c5aa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 303.503988][T10989] R10: 000000000000ffd7 R11: 0000000000000246 R12: 0000000000000001 [ 303.506627][T10989] R13: 0000000000000000 R14: 00007f5c59d35f80 R15: 00007fff6b8317f8 [ 303.509207][T10989] [ 303.545116][ T9] usb 6-1: USB disconnect, device number 8 [ 303.550274][ T9] usblp0: removed [ 303.573273][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 303.737151][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 303.793460][ T5398] usb 7-1: USB disconnect, device number 11 [ 303.795995][ T5398] usblp1: removed [ 304.193576][ T39] audit: type=1400 audit(1729670225.765:686): avc: denied { write } for pid=11006 comm="syz.3.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 304.201959][ T8] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 304.205146][ T8] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 304.208133][ T8] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 304.211351][ T8] usb 5-1: config 250 has no interface number 0 [ 304.214651][ T8] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 304.219175][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 304.227826][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 304.238314][ T8] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 304.243353][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.249193][ T8] usb 5-1: config 250 interface 228 has no altsetting 0 [ 304.259636][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 304.266407][ T8] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 304.324748][ T8] usb 5-1: Product: syz [ 304.334175][ T8] usb 5-1: SerialNumber: syz [ 304.389245][ T8] hub 5-1:250.228: bad descriptor, ignoring hub [ 304.397849][ T8] hub 5-1:250.228: probe with driver hub failed with error -5 [ 304.581948][ T8] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 304.921008][T11020] lo speed is unknown, defaulting to 1000 [ 305.273468][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.284451][ T39] audit: type=1400 audit(1729670227.035:687): avc: denied { read } for pid=4817 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 305.291840][ T39] audit: type=1400 audit(1729670227.035:688): avc: denied { search } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.303621][ T8] usb 5-1: USB disconnect, device number 6 [ 305.306954][ T8] usblp0: removed [ 305.322257][ T39] audit: type=1400 audit(1729670227.035:689): avc: denied { append } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.355778][T11035] syzkaller0: entered promiscuous mode [ 305.357620][T11035] syzkaller0: entered allmulticast mode [ 305.362750][ T39] audit: type=1400 audit(1729670227.035:690): avc: denied { open } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.403583][ T39] audit: type=1400 audit(1729670227.035:691): avc: denied { getattr } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.434109][ T39] audit: type=1400 audit(1729670227.075:692): avc: denied { read write } for pid=5911 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.442480][ T39] audit: type=1400 audit(1729670227.075:693): avc: denied { open } for pid=5911 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.469258][T11039] FAULT_INJECTION: forcing a failure. [ 305.469258][T11039] name failslab, interval 1, probability 0, space 0, times 0 [ 305.472401][T11039] CPU: 3 UID: 0 PID: 11039 Comm: syz.1.1446 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 305.475089][T11039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.477680][T11039] Call Trace: [ 305.478497][T11039] [ 305.479251][T11039] dump_stack_lvl+0x16c/0x1f0 [ 305.480431][T11039] should_fail_ex+0x497/0x5b0 [ 305.481622][T11039] ? fs_reclaim_acquire+0xae/0x150 [ 305.482904][T11039] should_failslab+0xc2/0x120 [ 305.484078][T11039] __kmalloc_noprof+0xcb/0x400 [ 305.484113][ T39] audit: type=1400 audit(1729670227.075:694): avc: denied { ioctl } for pid=5911 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.485281][T11039] ? d_absolute_path+0x137/0x1b0 [ 305.485301][T11039] tomoyo_encode2+0x100/0x3e0 [ 305.485315][T11039] tomoyo_encode+0x29/0x50 [ 305.485325][T11039] tomoyo_realpath_from_path+0x19d/0x720 [ 305.485340][T11039] tomoyo_path_number_perm+0x245/0x590 [ 305.501745][T11039] ? tomoyo_path_number_perm+0x232/0x590 [ 305.503143][T11039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.504730][T11039] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.506055][T11039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 305.507512][T11039] ? trace_lock_acquire+0x14a/0x1d0 [ 305.508864][T11039] ? bpf_send_signal_common+0x2b5/0x3a0 [ 305.510328][T11039] ? lock_acquire+0x2f/0xb0 [ 305.511517][T11039] ? __fget_files+0x40/0x3f0 [ 305.512735][T11039] ? __fget_files+0x244/0x3f0 [ 305.513519][ T39] audit: type=1400 audit(1729670227.105:695): avc: denied { map_create } for pid=11037 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.513975][T11039] security_file_ioctl+0x9b/0x240 [ 305.520448][ T39] audit: type=1400 audit(1729670227.105:696): avc: denied { prog_load } for pid=11037 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.521762][T11039] __x64_sys_ioctl+0xbb/0x220 [ 305.529297][T11039] do_syscall_64+0xcd/0x250 [ 305.530506][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.532064][T11039] RIP: 0033:0x7f5c59b7dff9 [ 305.533241][T11039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.538197][T11039] RSP: 002b:00007f5c5aa3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.540351][T11039] RAX: ffffffffffffffda RBX: 00007f5c59d36058 RCX: 00007f5c59b7dff9 [ 305.542399][T11039] RDX: 0000000020000100 RSI: 0000000000004b72 RDI: 0000000000000005 [ 305.544428][T11039] RBP: 00007f5c5aa3c090 R08: 0000000000000000 R09: 0000000000000000 [ 305.546483][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.548528][T11039] R13: 0000000000000000 R14: 00007f5c59d36058 R15: 00007fff6b8317f8 [ 305.550601][T11039] [ 305.552039][T11039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.144784][T11058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11058 comm=syz.0.1452 [ 306.313669][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.354241][T11066] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 306.494294][T11075] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 306.507333][T11076] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 306.526248][T11070] lo speed is unknown, defaulting to 1000 [ 306.675899][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 307.344747][T11093] FAULT_INJECTION: forcing a failure. [ 307.344747][T11093] name failslab, interval 1, probability 0, space 0, times 0 [ 307.356095][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.364055][T11093] CPU: 3 UID: 0 PID: 11093 Comm: syz.1.1463 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 307.366583][T11093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.369832][T11093] Call Trace: [ 307.370860][T11093] [ 307.371769][T11093] dump_stack_lvl+0x16c/0x1f0 [ 307.373224][T11093] should_fail_ex+0x497/0x5b0 [ 307.374738][T11093] ? fs_reclaim_acquire+0xae/0x150 [ 307.376292][T11093] should_failslab+0xc2/0x120 [ 307.377753][T11093] __kmalloc_noprof+0xcb/0x400 [ 307.379210][T11093] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 307.380928][T11093] tomoyo_realpath_from_path+0xb9/0x720 [ 307.382496][T11093] ? tomoyo_path_number_perm+0x232/0x590 [ 307.383822][T11093] tomoyo_path_number_perm+0x245/0x590 [ 307.385131][T11093] ? tomoyo_path_number_perm+0x232/0x590 [ 307.386467][T11093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.387895][T11093] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.389146][T11093] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.390530][T11093] ? trace_lock_acquire+0x14a/0x1d0 [ 307.391758][T11093] ? bpf_send_signal_common+0x2b5/0x3a0 [ 307.393077][T11093] ? lock_acquire+0x2f/0xb0 [ 307.394172][T11093] ? __fget_files+0x40/0x3f0 [ 307.395254][T11093] ? __fget_files+0x244/0x3f0 [ 307.396377][T11093] security_file_ioctl+0x9b/0x240 [ 307.397573][T11093] __x64_sys_ioctl+0xbb/0x220 [ 307.398696][T11093] do_syscall_64+0xcd/0x250 [ 307.399779][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.401178][T11093] RIP: 0033:0x7f5c59b7dff9 [ 307.402226][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.406694][T11093] RSP: 002b:00007f5c5aa5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.408625][T11093] RAX: ffffffffffffffda RBX: 00007f5c59d35f80 RCX: 00007f5c59b7dff9 [ 307.410471][T11093] RDX: 0000000020002d00 RSI: 0000000000005412 RDI: 0000000000000004 [ 307.412310][T11093] RBP: 00007f5c5aa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 307.414161][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.416006][T11093] R13: 0000000000000000 R14: 00007f5c59d35f80 R15: 00007fff6b8317f8 [ 307.417917][T11093] [ 307.444979][T11093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.554670][T11097] input: syz1 as /devices/virtual/input/input66 [ 307.567874][T11107] FAULT_INJECTION: forcing a failure. [ 307.567874][T11107] name failslab, interval 1, probability 0, space 0, times 0 [ 307.571162][T11107] CPU: 0 UID: 0 PID: 11107 Comm: syz.0.1467 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 307.573855][T11107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.576523][T11107] Call Trace: [ 307.577400][T11107] [ 307.578154][T11107] dump_stack_lvl+0x16c/0x1f0 [ 307.579513][T11107] should_fail_ex+0x497/0x5b0 [ 307.580654][T11107] ? fs_reclaim_acquire+0xae/0x150 [ 307.582003][T11107] should_failslab+0xc2/0x120 [ 307.583241][T11107] __kmalloc_noprof+0xcb/0x400 [ 307.584440][T11107] tomoyo_encode2+0x100/0x3e0 [ 307.585605][T11107] tomoyo_encode+0x29/0x50 [ 307.586698][T11107] tomoyo_realpath_from_path+0x19d/0x720 [ 307.588078][T11107] ? tomoyo_path_number_perm+0x232/0x590 [ 307.589573][T11107] tomoyo_path_number_perm+0x245/0x590 [ 307.591003][T11107] ? tomoyo_path_number_perm+0x232/0x590 [ 307.592478][T11107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.594073][T11107] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.595549][T11107] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.597081][T11107] ? trace_lock_acquire+0x14a/0x1d0 [ 307.598439][T11107] ? bpf_send_signal_common+0x2b5/0x3a0 [ 307.599900][T11107] ? lock_acquire+0x2f/0xb0 [ 307.601096][T11107] ? __fget_files+0x40/0x3f0 [ 307.602276][T11107] ? __fget_files+0x244/0x3f0 [ 307.603450][T11107] security_file_ioctl+0x9b/0x240 [ 307.604712][T11107] __x64_sys_ioctl+0xbb/0x220 [ 307.605911][T11107] do_syscall_64+0xcd/0x250 [ 307.607040][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.608573][T11107] RIP: 0033:0x7f2af617dff9 [ 307.609692][T11107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.614846][T11107] RSP: 002b:00007f2af7056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.617031][T11107] RAX: ffffffffffffffda RBX: 00007f2af6335f80 RCX: 00007f2af617dff9 [ 307.619098][T11107] RDX: 0000000020000040 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 307.621166][T11107] RBP: 00007f2af7056090 R08: 0000000000000000 R09: 0000000000000000 [ 307.623227][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.625300][T11107] R13: 0000000000000000 R14: 00007f2af6335f80 R15: 00007ffd77b7fb38 [ 307.627598][T11107] [ 307.653784][T11107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.881453][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 307.931088][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'. [ 308.019635][T11124] lo speed is unknown, defaulting to 1000 [ 308.130531][T11131] FAULT_INJECTION: forcing a failure. [ 308.130531][T11131] name failslab, interval 1, probability 0, space 0, times 0 [ 308.133686][T11131] CPU: 0 UID: 0 PID: 11131 Comm: syz.2.1475 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 308.136562][T11131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.139144][T11131] Call Trace: [ 308.139961][T11131] [ 308.140686][T11131] dump_stack_lvl+0x16c/0x1f0 [ 308.141855][T11131] should_fail_ex+0x497/0x5b0 [ 308.143009][T11131] ? fs_reclaim_acquire+0xae/0x150 [ 308.144294][T11131] should_failslab+0xc2/0x120 [ 308.145457][T11131] kmem_cache_alloc_node_noprof+0x71/0x310 [ 308.146850][T11131] ? __alloc_skb+0x2b1/0x380 [ 308.148465][T11131] __alloc_skb+0x2b1/0x380 [ 308.150129][T11131] ? __pfx___alloc_skb+0x10/0x10 [ 308.151940][T11131] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 308.154141][T11131] netlink_alloc_large_skb+0x69/0x130 [ 308.156085][T11131] netlink_sendmsg+0x689/0xd70 [ 308.157840][T11131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.159799][T11131] ? __import_iovec+0x1fd/0x6e0 [ 308.161595][T11131] ____sys_sendmsg+0xaaf/0xc90 [ 308.163343][T11131] ? copy_msghdr_from_user+0x10b/0x160 [ 308.165286][T11131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.167225][T11131] ? __lock_task_sighand+0xc2/0x340 [ 308.169134][T11131] ? __pfx___lock_acquire+0x10/0x10 [ 308.171038][T11131] ___sys_sendmsg+0x135/0x1e0 [ 308.172780][T11131] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.174593][T11131] ? lock_acquire+0x2f/0xb0 [ 308.175751][T11131] ? __fget_files+0x40/0x3f0 [ 308.176990][T11131] ? fdget+0x176/0x210 [ 308.178115][T11131] __sys_sendmsg+0x117/0x1f0 [ 308.179648][T11131] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.180976][T11131] ? bpf_trace_run2+0x2a6/0x590 [ 308.182554][T11131] ? rcu_is_watching+0x12/0xc0 [ 308.184270][T11131] do_syscall_64+0xcd/0x250 [ 308.185661][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.187159][T11131] RIP: 0033:0x7fedba57dff9 [ 308.188262][T11131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.193064][T11131] RSP: 002b:00007fedbb413038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.195211][T11131] RAX: ffffffffffffffda RBX: 00007fedba735f80 RCX: 00007fedba57dff9 [ 308.197271][T11131] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 308.199303][T11131] RBP: 00007fedbb413090 R08: 0000000000000000 R09: 0000000000000000 [ 308.201366][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.203402][T11131] R13: 0000000000000000 R14: 00007fedba735f80 R15: 00007ffded047d08 [ 308.205453][T11131] [ 308.403899][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.454112][T11126] syzkaller0: entered promiscuous mode [ 308.455585][T11126] syzkaller0: entered allmulticast mode [ 308.497487][T11141] FAULT_INJECTION: forcing a failure. [ 308.497487][T11141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.500851][T11141] CPU: 2 UID: 0 PID: 11141 Comm: syz.2.1479 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 308.503625][T11141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.506418][T11141] Call Trace: [ 308.507303][T11141] [ 308.508089][T11141] dump_stack_lvl+0x16c/0x1f0 [ 308.509352][T11141] should_fail_ex+0x497/0x5b0 [ 308.510594][T11141] _copy_to_user+0x30/0xc0 [ 308.511773][T11141] simple_read_from_buffer+0xd0/0x160 [ 308.513194][T11141] proc_fail_nth_read+0x198/0x270 [ 308.514519][T11141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.515967][T11141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.517430][T11141] vfs_read+0x1ce/0xbd0 [ 308.518537][T11141] ? __fget_files+0x23a/0x3f0 [ 308.519774][T11141] ? fdget_pos+0x24c/0x360 [ 308.520964][T11141] ? __pfx_lock_release+0x10/0x10 [ 308.522284][T11141] ? trace_lock_acquire+0x14a/0x1d0 [ 308.523645][T11141] ? __pfx_vfs_read+0x10/0x10 [ 308.524886][T11141] ? __pfx___mutex_lock+0x10/0x10 [ 308.526257][T11141] ? __fget_files+0x244/0x3f0 [ 308.527500][T11141] ksys_read+0x12f/0x260 [ 308.528671][T11141] ? __pfx_ksys_read+0x10/0x10 [ 308.529943][T11141] ? rcu_is_watching+0x12/0xc0 [ 308.531205][T11141] do_syscall_64+0xcd/0x250 [ 308.532406][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.533958][T11141] RIP: 0033:0x7fedba57ca3c [ 308.535130][T11141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 308.540131][T11141] RSP: 002b:00007fedbb413030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.542310][T11141] RAX: ffffffffffffffda RBX: 00007fedba735f80 RCX: 00007fedba57ca3c [ 308.544367][T11141] RDX: 000000000000000f RSI: 00007fedbb4130a0 RDI: 0000000000000004 [ 308.546428][T11141] RBP: 00007fedbb413090 R08: 0000000000000000 R09: 0000000000000000 [ 308.548485][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.550547][T11141] R13: 0000000000000000 R14: 00007fedba735f80 R15: 00007ffded047d08 [ 308.552608][T11141] [ 308.697209][T11149] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 308.702262][T11150] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 308.864060][ T5398] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 308.978149][T11162] lo speed is unknown, defaulting to 1000 [ 309.016144][ T5398] usb 5-1: not running at top speed; connect to a high speed hub [ 309.018993][ T5398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.022034][ T5398] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.031634][ T5398] usb 5-1: config 1 has no interface number 1 [ 309.033176][ T5398] usb 5-1: too many endpoints for config 1 interface 2 altsetting 9: 183, using maximum allowed: 30 [ 309.038489][ T5398] usb 5-1: config 1 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 309.041638][ T5398] usb 5-1: config 1 interface 2 has no altsetting 0 [ 309.051598][ T5398] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.053992][ T5398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.056314][ T5398] usb 5-1: Product: ␊ [ 309.057412][ T5398] usb 5-1: Manufacturer: ࠖ [ 309.058595][ T5398] usb 5-1: SerialNumber: ࠇ [ 309.283618][ T5398] usb 5-1: USB disconnect, device number 7 [ 309.357069][ T8627] udevd[8627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.444487][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.247968][T11192] input: syz0 as /devices/virtual/input/input67 [ 310.378674][ T39] kauditd_printk_skb: 204 callbacks suppressed [ 310.378687][ T39] audit: type=1400 audit(1729670232.125:901): avc: denied { execute } for pid=11186 comm="syz.1.1496" name="file2" dev="tmpfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.395413][ T39] audit: type=1400 audit(1729670232.145:902): avc: denied { execute_no_trans } for pid=11186 comm="syz.1.1496" path="/346/file2" dev="tmpfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.405433][T11197] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 310.474103][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.479572][ T39] audit: type=1400 audit(1729670232.215:903): avc: denied { bind } for pid=11186 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.490281][ T39] audit: type=1400 audit(1729670232.215:904): avc: denied { node_bind } for pid=11186 comm="syz.1.1496" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 310.583745][ T39] audit: type=1400 audit(1729670232.324:905): avc: denied { connect } for pid=11199 comm="syz.0.1497" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.598138][ T39] audit: type=1400 audit(1729670232.344:906): avc: denied { create } for pid=11199 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 310.615915][ T39] audit: type=1400 audit(1729670232.344:907): avc: denied { write } for pid=11199 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 310.628250][ T39] audit: type=1400 audit(1729670232.344:908): avc: denied { nlmsg_read } for pid=11199 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 310.668243][ T39] audit: type=1400 audit(1729670232.414:909): avc: denied { create } for pid=11199 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.673264][ T39] audit: type=1400 audit(1729670232.414:910): avc: denied { getopt } for pid=11199 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.494108][T11214] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 311.514361][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.516451][T11217] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 311.520851][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 312.564330][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.594467][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.644646][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.674703][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.724844][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.975306][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.754970][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.846143][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 317.846183][ T39] audit: type=1400 audit(1729670239.544:938): avc: denied { create } for pid=11253 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 317.854419][ T39] audit: type=1400 audit(1729670239.544:939): avc: denied { write } for pid=11253 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.563829][ T39] audit: type=1400 audit(1729670240.304:940): avc: denied { create } for pid=11258 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.756765][ T39] audit: type=1400 audit(1729670240.504:941): avc: denied { read write } for pid=11260 comm="syz.2.1515" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 318.762711][ T39] audit: type=1400 audit(1729670240.504:942): avc: denied { open } for pid=11260 comm="syz.2.1515" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 318.780790][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 318.782890][ T25] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max [ 318.789473][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.791854][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.794267][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.795076][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.845168][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.847135][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.849056][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.850931][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.852877][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.854805][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.876207][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.879041][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.881071][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.885531][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.895102][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.895110][ T39] audit: type=1400 audit(1729670240.634:943): avc: denied { read } for pid=11264 comm="syz.0.1516" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 318.897074][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.902708][ T39] audit: type=1400 audit(1729670240.634:944): avc: denied { open } for pid=11264 comm="syz.0.1516" path="/304/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 318.904631][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.935557][ T39] audit: type=1400 audit(1729670240.634:945): avc: denied { ioctl } for pid=11264 comm="syz.0.1516" path="/304/file0/file0" dev="fuse" ino=0 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 318.945833][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.948054][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.948123][T11265] md: invalid raid superblock magic on ram0 [ 318.950112][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.951694][T11265] md: ram0 does not have a valid v0.0 superblock, not importing! [ 318.954040][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 318.975163][ T39] audit: type=1400 audit(1729670240.694:946): avc: denied { getopt } for pid=11264 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.981372][T11265] md: md_import_device returned -22 [ 318.982826][ T39] audit: type=1400 audit(1729670240.724:947): avc: denied { create } for pid=11264 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.987899][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 319.011763][ T25] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 319.835196][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 319.923551][T11279] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 320.215279][ T5397] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 320.875382][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.805898][ T5397] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 321.808586][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.810905][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 321.813732][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 321.816940][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.819707][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.822886][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 321.827541][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 321.830377][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.839387][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.841709][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 321.844539][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 321.855444][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.871483][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.895474][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 321.915444][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 321.915532][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.918257][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.925091][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.935980][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 321.945831][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 321.953048][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.961765][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.975454][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 321.978372][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 321.998048][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.000597][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.002925][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 322.005942][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 322.008725][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.011699][ T5397] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.013971][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 322.016916][ T5397] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 322.021541][ T5397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.033124][ T5397] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.035501][ T5397] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.038021][ T5397] usb 5-1: Product: syz [ 322.039215][ T5397] usb 5-1: Manufacturer: syz [ 322.040529][ T5397] usb 5-1: SerialNumber: syz [ 322.056604][ T5397] usb 5-1: config 0 descriptor?? [ 322.060088][T11278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.071806][ T5397] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 322.190062][T11281] mmap: syz.1.1521 (11281): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 322.267168][T11285] syz.3.1523[11285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.267222][T11285] syz.3.1523[11285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.270318][T11285] syz.3.1523[11285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.380158][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 322.396690][ T830] usb 5-1: USB disconnect, device number 8 [ 322.399252][ T830] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 322.876703][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 322.876787][ T39] audit: type=1400 audit(1729670244.623:962): avc: denied { unmount } for pid=5335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 322.931661][ T39] audit: type=1400 audit(1729670244.673:963): avc: denied { bind } for pid=11292 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.937121][ T39] audit: type=1400 audit(1729670244.673:964): avc: denied { setopt } for pid=11292 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.955672][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.057891][T11293] lo speed is unknown, defaulting to 1000 [ 323.397899][ T39] audit: type=1400 audit(1729670245.143:965): avc: denied { name_bind } for pid=11301 comm="syz.3.1528" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 323.428653][ T39] audit: type=1400 audit(1729670245.143:966): avc: denied { node_bind } for pid=11301 comm="syz.3.1528" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 323.570743][ T39] audit: type=1400 audit(1729670245.313:967): avc: denied { ioctl } for pid=11305 comm="syz.2.1529" path="socket:[40997]" dev="sockfs" ino=40997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.571346][T11311] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 323.610248][T11312] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 323.621615][ T39] audit: type=1400 audit(1729670245.363:968): avc: denied { bind } for pid=11305 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.631428][T11310] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 323.637928][ T39] audit: type=1400 audit(1729670245.363:969): avc: denied { write } for pid=11305 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.653112][ T39] audit: type=1400 audit(1729670245.373:970): avc: denied { write } for pid=11305 comm="syz.2.1529" name="vbi1" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.045809][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.085941][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.126069][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.166208][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.219498][T11313] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 328.222251][T11313] bond0: (slave team0): Releasing backup interface [ 328.228935][T11313] bridge0: port 3(team0) entered blocking state [ 328.230607][T11313] bridge0: port 3(team0) entered disabled state [ 328.232276][T11313] team0: entered allmulticast mode [ 328.233547][T11313] team_slave_0: entered allmulticast mode [ 328.234979][T11313] team_slave_1: entered allmulticast mode [ 328.247137][T11313] team0: entered promiscuous mode [ 328.248514][T11313] team_slave_0: entered promiscuous mode [ 328.250138][T11313] team_slave_1: entered promiscuous mode [ 328.251955][T11298] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 328.343289][T11298] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 328.510347][ T39] audit: type=1400 audit(1729670250.252:971): avc: denied { write } for pid=11316 comm="syz.1.1530" path="socket:[41008]" dev="sockfs" ino=41008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.551261][ T39] audit: type=1400 audit(1729670250.282:972): avc: denied { setopt } for pid=11316 comm="syz.1.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.587744][ T39] audit: type=1400 audit(1729670250.292:973): avc: denied { listen } for pid=11320 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.638113][ T39] audit: type=1400 audit(1729670250.292:974): avc: denied { setopt } for pid=11320 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.899646][T11326] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u32:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 329.096745][T11324] EXT4-fs (sda1): shut down requested (0) [ 329.176981][ T39] audit: type=1400 audit(1729670250.922:975): avc: denied { read } for pid=11328 comm="syz.0.1533" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.183070][ T39] audit: type=1400 audit(1729670250.922:976): avc: denied { open } for pid=11328 comm="syz.0.1533" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.196353][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.870261][ T39] audit: type=1400 audit(1729670251.612:977): avc: denied { write } for pid=11328 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 329.878118][T11329] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 329.974762][ T39] audit: type=1400 audit(1729670251.712:978): avc: denied { write } for pid=11328 comm="syz.0.1533" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 330.016529][T11333] usb 2-1: USB disconnect, device number 2 [ 330.017226][T11340] fuse: Bad value for 'rootmode' [ 330.030182][ T39] audit: type=1400 audit(1729670251.762:979): avc: denied { ioctl } for pid=11339 comm="syz.3.1535" path="socket:[41019]" dev="sockfs" ino=41019 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.041789][T11336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1534'. [ 330.052023][ T39] audit: type=1400 audit(1729670251.772:980): avc: denied { mount } for pid=11334 comm="syz.1.1534" name="/" dev="rpc_pipefs" ino=39556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 330.069118][T11329] /dev/sr0: Can't open blockdev [ 330.236433][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.666887][T11329] binder: 11328:11329 ioctl 4018620d 0 returned -22 [ 330.674490][T11335] hub 2-0:1.0: USB hub found [ 330.682648][T11335] hub 2-0:1.0: 6 ports detected [ 330.856538][ T5558] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 330.977097][T11349] lo speed is unknown, defaulting to 1000 [ 331.035007][ T5558] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 331.046545][ T5558] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 331.048834][ T5558] usb 2-1: Product: QEMU USB Tablet [ 331.050217][ T5558] usb 2-1: Manufacturer: QEMU [ 331.051487][ T5558] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 331.087684][ T5558] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input70 [ 331.276549][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.282170][ T5558] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 331.633329][T11355] lo speed is unknown, defaulting to 1000 [ 331.783237][T11361] syz.2.1537[11361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.783292][T11361] syz.2.1537[11361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.786301][T11361] syz.2.1537[11361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.316876][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.517946][T11373] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 332.520173][T11373] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 332.521952][T11373] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 332.526245][T11373] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 332.695587][T11378] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1546'. [ 332.922295][T11384] kvm: pic: non byte write [ 333.176807][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 333.326831][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 333.329667][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.332412][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.339433][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.342150][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.350129][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.355905][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.359010][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.577189][ T35] usb 8-1: GET_CAPABILITIES returned 0 [ 333.578844][ T35] usbtmc 8-1:16.0: can't read capabilities [ 333.850745][T11398] lo speed is unknown, defaulting to 1000 [ 333.909819][ T35] usb 8-1: USB disconnect, device number 4 [ 334.123976][T11404] kvm: pic: non byte write [ 334.204153][T11408] syz.0.1555[11408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.204203][T11408] syz.0.1555[11408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.216973][T11408] syz.0.1555[11408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.289648][T11418] lo speed is unknown, defaulting to 1000 [ 335.437045][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 335.537454][T11416] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 335.799082][T11416] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 336.415415][T11434] lo speed is unknown, defaulting to 1000 [ 336.487198][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.527325][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.600914][T11452] kvm: pic: non byte write [ 338.557448][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.597533][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.637701][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.677851][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.668052][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 342.668063][ T39] audit: type=1400 audit(1729670264.411:986): avc: denied { read } for pid=11482 comm="syz.2.1576" name="ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.674420][ T45] bond0: (slave wlan1): link status definitely down, disabling slave [ 342.675525][ T39] audit: type=1400 audit(1729670264.411:987): avc: denied { open } for pid=11482 comm="syz.2.1576" path="/dev/ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.675548][ T39] audit: type=1400 audit(1729670264.411:988): avc: denied { ioctl } for pid=11482 comm="syz.2.1576" path="/dev/ptp0" dev="devtmpfs" ino=713 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.718212][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.768034][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.900353][ T39] audit: type=1400 audit(1729670265.651:989): avc: denied { write } for pid=11502 comm="syz.1.1583" name="packet" dev="proc" ino=4026533875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.164886][T11506] ptrace attach of "/syz-executor exec"[5911] was attempted by "/syz-executor exec"[11506] [ 344.377523][ T39] audit: type=1400 audit(1729670266.121:990): avc: denied { name_bind } for pid=11511 comm="syz.0.1585" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 344.561399][T11512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1585'. [ 344.564689][T11512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1585'. [ 344.638287][ T4773] Bluetooth: hci1: command 0x0406 tx timeout [ 345.266264][T11526] kvm: pic: non byte write [ 345.838288][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.888398][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.279617][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 347.282911][T11542] team0: left allmulticast mode [ 347.284705][T11542] team_slave_0: left allmulticast mode [ 347.286681][T11542] team_slave_1: left allmulticast mode [ 347.291669][T11542] team0: left promiscuous mode [ 347.293470][T11542] team_slave_0: left promiscuous mode [ 347.295478][T11542] team_slave_1: left promiscuous mode [ 347.297710][T11542] bridge0: port 3(team0) entered disabled state [ 347.311467][T11542] bridge_slave_1: left allmulticast mode [ 347.313678][T11542] bridge_slave_1: left promiscuous mode [ 347.315854][T11542] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.324164][T11542] bridge_slave_0: left allmulticast mode [ 347.326264][T11542] bridge_slave_0: left promiscuous mode [ 347.330125][T11542] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.349366][ T39] audit: type=1400 audit(1729670269.090:991): avc: denied { watch watch_reads } for pid=11541 comm="syz.2.1594" path="/425" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 347.918522][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.968725][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.998773][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.038896][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.079008][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.113559][T11501] sched: DL replenish lagged too much [ 353.129137][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.949201][ T39] audit: type=1400 audit(1729670275.689:992): avc: denied { execute } for pid=11552 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 353.954989][ T39] audit: type=1400 audit(1729670275.689:993): avc: denied { write } for pid=5260 comm="syz-executor" path="pipe:[5464]" dev="pipefs" ino=5464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 354.131709][T11548] lo speed is unknown, defaulting to 1000 [ 354.159355][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.317499][ T733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.430490][ T733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.661394][ T733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.734252][ T733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.814507][ T39] audit: type=1400 audit(1729670276.559:994): avc: denied { read } for pid=5055 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 354.849463][ T39] audit: type=1400 audit(1729670276.589:995): avc: denied { search } for pid=5055 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.854846][ T39] audit: type=1400 audit(1729670276.589:996): avc: denied { read } for pid=5055 comm="dhcpcd" name="n89" dev="tmpfs" ino=4223 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 354.860936][ T39] audit: type=1400 audit(1729670276.599:997): avc: denied { open } for pid=5055 comm="dhcpcd" path="/run/udev/data/n89" dev="tmpfs" ino=4223 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 354.866895][ T39] audit: type=1400 audit(1729670276.599:998): avc: denied { getattr } for pid=5055 comm="dhcpcd" path="/run/udev/data/n89" dev="tmpfs" ino=4223 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 355.116427][ T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.123733][ T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.127714][ T733] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 355.134448][ T733] bond0 (unregistering): Released all slaves [ 355.214836][ T733] tipc: Disabling bearer [ 355.217037][ T733] tipc: Left network mode [ 355.427607][ T39] audit: type=1400 audit(1729670277.169:999): avc: denied { sys_chroot } for pid=11576 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 355.433590][ T39] audit: type=1400 audit(1729670277.169:1000): avc: denied { setgid } for pid=11576 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 355.439825][ T39] audit: type=1400 audit(1729670277.169:1001): avc: denied { setuid } for pid=11576 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 355.497938][ T733] hsr_slave_0: left promiscuous mode [ 355.500334][ T733] hsr_slave_1: left promiscuous mode [ 355.514692][ T733] veth1_macvtap: left promiscuous mode [ 355.516247][ T733] veth0_macvtap: left promiscuous mode [ 355.518366][ T733] veth1_vlan: left promiscuous mode [ 355.521825][ T733] veth0_vlan: left promiscuous mode [ 356.189272][ T733] team0 (unregistering): Port device team_slave_1 removed [ 356.261226][ T733] team0 (unregistering): Port device team_slave_0 removed [ 356.817323][ T5397] lo speed is unknown, defaulting to 1000 [ 357.141317][ T733] IPVS: stop unused estimator thread 0... [ 357.228539][ T733] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.312140][ T733] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.396358][ T733] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.461770][ T733] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.595189][ T733] bridge_slave_1: left allmulticast mode [ 357.596821][ T733] bridge_slave_1: left promiscuous mode [ 357.598394][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.602200][ T733] bridge_slave_0: left allmulticast mode [ 357.603831][ T733] bridge_slave_0: left promiscuous mode [ 357.605519][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.897575][ T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.902825][ T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.907707][ T733] bond0 (unregistering): Released all slaves [ 358.176789][ T733] hsr_slave_0: left promiscuous mode [ 358.179123][ T733] hsr_slave_1: left promiscuous mode [ 358.182562][ T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.185161][ T733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.187928][ T733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.212876][ T733] veth1_macvtap: left promiscuous mode [ 358.214934][ T733] veth0_macvtap: left promiscuous mode [ 358.216754][ T733] veth1_vlan: left promiscuous mode [ 358.218614][ T733] veth0_vlan: left promiscuous mode [ 358.278677][ T733] pim6reg (unregistering): left allmulticast mode [ 358.877695][ T733] team0 (unregistering): Port device team_slave_1 removed [ 358.952215][ T733] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 07:57:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=ffff888020452440 RCX=1ffffffff2dd0bc9 RDX=0000000000000001 RSI=ffffffff8b6cd3c0 RDI=ffffffff81507a34 RBP=ffffffff8ae67a76 RSP=ffffc900009d7ae8 R8 =0000000000000001 R9 =fffffbfff2dc53a5 R10=ffffffff96e29d2f R11=0000000000000000 R12=ffffffff8ae67c50 R13=ffff8880329092c0 R14=0000000000000000 R15=ffff88805067cc40 RIP=ffffffff8b22528a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f22f9667d60 CR3=0000000043a1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc7e99ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002e1 0000000000000000 346d6d6f6366722f 7974742f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90aa1f1f30 00007f90aa1f1f30 0000000000000531 0000000000302e36 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 00005593ef9f58c0 00005593ef9f6c00 307761726469682f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88801d203d18 RCX=ffffffff81fafc83 RDX=ffffed1003a407a4 RSI=0000000000000004 RDI=ffff88801d203d18 RBP=ffff88801d203cd0 RSP=ffffc9000392f540 R8 =0000000000000001 R9 =ffffed1003a407a3 R10=ffff88801d203d1b R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81fafc83 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fce6cef6d00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdb16f7fd4 CR3=0000000030b24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=42ed007b42ed007b 42ed007b42ed007b 42ed007b42ed007b 42ed007b42ed007b 42ed007b42ed007b 42ed007b42ed007b 42ed007b42ed007b 42ed007b42ed007b ZMM22=b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 b34c2cc2b34c2cc2 ZMM23=2d4c9f522d4c9f52 2d4c9f522d4c9f52 2d4c9f522d4c9f52 2d4c9f522d4c9f52 2d4c9f522d4c9f52 2d4c9f522d4c9f52 2d4c9f522d4c9f52 2d4c9f522d4c9f52 ZMM24=3784a1723784a172 3784a1723784a172 3784a1723784a172 3784a1723784a172 3784a1723784a172 3784a1723784a172 3784a1723784a172 3784a1723784a172 ZMM25=79aca0e779aca0e7 79aca0e779aca0e7 79aca0e779aca0e7 79aca0e779aca0e7 79aca0e779aca0e7 79aca0e779aca0e7 79aca0e779aca0e7 79aca0e779aca0e7 ZMM26=3c76e41b3c76e41b 3c76e41b3c76e41b 3c76e41b3c76e41b 3c76e41b3c76e41b 3c76e41b3c76e41b 3c76e41b3c76e41b 3c76e41b3c76e41b 3c76e41b3c76e41b ZMM27=b8879cccb8879ccc b8879cccb8879ccc b8879cccb8879ccc b8879cccb8879ccc b8879cccb8879ccc b8879cccb8879ccc b8879cccb8879ccc b8879cccb8879ccc ZMM28=000001a00000019f 0000019e0000019d 0000019c0000019b 0000019a00000199 0000019800000197 0000019600000195 0000019400000193 0000019200000191 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d6180000d6180000 d6180000d6180000 d6180000d6180000 d6180000d6180000 d6180000d6180000 d6180000d6180000 d6180000d6180000 d6180000d6180000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00007f90aa116000 RCX=ffffffff8100a2d8 RDX=ffff888026bc2440 RSI=ffffffffff600000 RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc90005627660 R8 =0000000000000007 R9 =ffffffffff600000 R10=00007f90aa116000 R11=00000000000a4001 R12=0000000000000000 R13=ffffc90005627788 R14=0000000000000000 R15=ffff888026bc2440 RIP=ffffffff818d7fc2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f90aa49a280 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555562dd95c8 CR3=0000000028776000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc7e954a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000161 00000000302e7465 676461672d776172 2f73726576697264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e1772dccfe2d835 00000005593ef9f4 0000000000000221 0000000039003170 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90aa1f1c40 00005593ef9e7160 0000000000000151 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff90f0a04c RDX=ffffc90003d3f8d0 RSI=0000000000000001 RDI=ffffffff906f2c10 RBP=ffffc90003d3f8e0 RSP=ffffc90003d3f7d8 R8 =ffffffff90f0a052 R9 =ffffffff90f0a050 R10=ffffc90003d3f898 R11=0000000000003d74 R12=ffffc90003d3f8e8 R13=ffffc90003d3f898 R14=0000000000000005 R15=0000000000000000 RIP=ffffffff813d5380 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f90aa49a280 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fedbb3d0f98 CR3=00000000509ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc7e954a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff0f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f50bf85300dff 2f2f50bf85300dff ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f254eae 2f2f58495c43031b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d322f003030323a 316963682f316963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0037363a3331632f 6573756f6d2d746e 6576652d302e313a 313a302d6273752d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc7e98c78 6373797300313d65 a40037363a333163 2f6573756f6d2d74 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005593efa5ee40 00005593efa5ede0 00005593efa5ed60 00005593efa5ece0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020