last executing test programs: 40.083783823s ago: executing program 0 (id=521): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x90600, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x270, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0xff000000, 'veth1_to_bond\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x8, 0x3, 0x4a}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x614, 0x48, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x0, 0x1, 0x7, 0x5, 0x4], 0x1, 0x2}, {0x3, [0x2, 0x6, 0x3, 0x3, 0x2], 0x5, 0x2}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @empty, 0xff, 0xffffff00, 'ip6gre0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x20}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x7fff, 0xf7b]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x80, 0x4, [0x2, 0x9, 0x3d, 0x8, 0x32, 0x23, 0x7, 0x1b, 0x1b, 0x19, 0x31, 0x30, 0x16, 0x15, 0x35, 0x32], 0x1, 0x3ff, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @loopback, 0x0, 0xff, 'hsr0\x00', 'veth0_to_batadv\x00', {}, {}, 0x33, 0x1, 0x62}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1d4], 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8001, 0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) read$char_usb(r0, &(0x7f00000004c0)=""/4096, 0x1000) fadvise64(r0, 0x5e, 0xff, 0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000014c0)=0x2, 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000001500), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001900)={0x60, 0x0, &(0x7f0000001780)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000016c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/56, 0x38, 0x2, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f00000015c0)=""/254, 0xfe, 0x0, 0x1e}}, &(0x7f0000001740)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0xd5, 0x0, &(0x7f0000001800)="fbf7789e99ac894915b420ce36b398b0d8a56dc9769e9b8d9131e9b0fa5f2fcbbd2068ec0c3e7ed86eca45735075e696bce616cb59dc374e916be8b29245dedc9e434a461792e8de323daf45e4b137e51149aee4627daa41a086e5c917b5d4998c4c1ebe677f266c776828698f3529e2310b3ff70ec763193f6d7bdfc9d7c81a70acd2019f948d0c031db0c342920aed0b4e60bb677fe07137a7fc5459768d76c8853980855f491704e239862e2cb6cda7d222a0a3e71c9444e697b85d4724c337e6aad277d3b0ae6cea2bbb78339bd245b3e66526"}) ioctl$sock_proto_private(r2, 0x5, &(0x7f0000001940)="32d228d5c1e3fd58c19aca802940b3218cb9f42248ac55c1365de71eb25f887afb01b9347c8ddc58e1c03bef324e935d0770942ebb4e36e6bcbaeab68bea602203abe7d0f51211ac081522e0ae5dc7abc218fb58d7871aaee44af8717e1d903f3ca4a28312a7a943ec1cd24e8892") epoll_pwait(r0, &(0x7f00000019c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3bc2, &(0x7f0000001a40)={[0xfffffffffffffffc]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001b00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001ac0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000001b40)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000001a80)=0x2, r4, 0x0, 0x0, 0x1}}, 0x20) syz_usb_connect(0x3, 0x81, &(0x7f0000001b80)={{0x12, 0x1, 0x201, 0xe8, 0xef, 0xcc, 0xff, 0x1f4d, 0xa115, 0x8dd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x5, 0x5, 0x10, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x3, 0xef, 0x2c, 0x26, 0x2, [@uac_as], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x24, 0x5, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x99}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x3, 0x5, 0xf, [@generic={0x2d, 0xd, "5c979e463ffa5c1155a11ba21959c02c6c6ab9d69066b490dda5c3d49189f149c9d087850b1adfe7b07591"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xfb, 0x5}]}}]}}]}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x46ed67f802a19685, 0x7, 0x0, 0xfc, 0x40, 0xf3}, 0x24, &(0x7f0000001c80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x8, 0xf, 0x8, [0xff3f30, 0x6000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x5, 0xf, 0xb99, 0x46}]}, 0x3, [{0xb9, &(0x7f0000001cc0)=@string={0xb9, 0x3, "82bf236a6a902b530fe96b892756ff8509869a246384609758581751824e9878b2cb4db4c9c0ea54811adf3be19eb8e3980342ada150e18aef641c628a4d446bb8104c5cd9356680e31d75fbab2bfb4db08e8bcca3d8015ed34377b857cadbda3c4e8485efb770dda7abd1f827983248231537bf378f402c68e769a9ca117b86d8b10c5b82b649ff7a20f09a23081af24de91772cff803ee8520b4eac5b08a25a1815c376a713e0581cdb901786b1b930e5d1a61e2522e"}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x3409}}, {0x94, &(0x7f0000001dc0)=@string={0x94, 0x3, "05aeb8a27a9602ea4457b75d2c0608bff8fce78d58272a45bdffa5f216c010bf371a754bd8427a13ee73ceb2e42ee55e045055f3f73038da82f41680b00cec8eee553fd019aaba02877921302ea687051505cff0a4b99fefdf3f37bfe02e121d04e6873b808fac4180cbf1d7cf05c3cc00b111909f16b343feee55c654d3ef535fe4d7aae6deeeb80c7cd0de158b5b87a898"}}]}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000001ec0)={0x5, 0x4, 0x2}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) syz_usb_connect$cdc_ecm(0x2, 0xb4, &(0x7f0000001f00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x1, 0x1, 0x7, 0x10, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "a4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x8, 0x100, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x8001, 0xfb3}, @ncm={0x6, 0x24, 0x1a, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x10, [0x8]}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x77, 0xa, 0x1, 0xff, 0x5}, @acm={0x4, 0x24, 0x2, 0x6}, @mdlm_detail={0x38, 0x24, 0x13, 0x4, "fb704cfc442275be857266d6a13b9e03be3f7a1ee5f82076415543c24c423380bce75e4d542631644a295f974b7ef213290098ef"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4a, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x31, 0x3}}}}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x200, 0x7, 0xf, 0x2, 0xff, 0x7a}, 0x30, &(0x7f0000002000)={0x5, 0xf, 0x30, 0x1, [@generic={0x2b, 0x10, 0xa, "796c250c332d96c8fdca7aea29ad9f346076994244aa623d737a0ac7b3d72b785e37056ca179dff0"}]}, 0x2, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x2801}}, {0x63, &(0x7f0000002080)=@string={0x63, 0x3, "84d3c2a18811a131841036672c5b8c28e7e12f2143e3564629ace203ebecc3112f1e78e54baaffb96d6b5439614e647eee313545d3b3c6103295437169a14b35a58bf3f6b670b3f967ec37f7f2612f503b977350d6921850dba0529578cfe69d60"}}]}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000002140)={0x0, {0x6}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000021c0)={0x10, 0x30, 0xfa00, {&(0x7f0000002180), 0x2, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, r4}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000002200)={0x4, 0x8, 0xfa00, {r4, 0x2}}, 0x10) fcntl$dupfd(r1, 0x406, r1) lseek(r2, 0x0, 0x2) ioctl$int_in(r1, 0x73, &(0x7f0000002240)=0x84e) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000002280)='addrtype\x00') ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000022c0)) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000002340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x5}}, 0x14) 37.022073713s ago: executing program 0 (id=570): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)="a69544b6ae6e3a") ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", "000100", "0200", "be4d22a4", ["c3d452871700", "51f3ffcb3a1000", "e100"]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r3, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9, 0x5b, "1925d69d21"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x250, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x10}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1000}, @NL80211_ATTR_IE={0x208, 0x2a, [@dsss={0x3, 0x1, 0x64}, @measure_req={0x26, 0xeb, {0x4, 0xfa, 0x5, "1450ef6eb3a7d4f0a931bb2cfe5d3c024701545a5fd93bde33b23f72dccddc9b99399611e4bca9008128c3a3e3fe431d6e70be78bc5da4dc350c139f2dc70c65af2a23e4483309f566df42ac892c4c859dade4a6aa2a14b298e3425288338fe0a534acf4a8f93cac1034ac04a308fee6dbc9881a7110cc89b89dfcaedf2178182eeeeeb4ea34c05b3c18173f558ffeb03d32e827bb96eec1000d03f54b21b18b80228031a91d6a2fffa712a1fa9af7e15c92e99f10ab13703da6d6923004408d28df668a801f7c3e268a1344aba9263744f9068008f8a3408cc26e17757b221d25758350c1cec7d2"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @preq={0x82, 0x20, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x80, 0x5, @device_b, 0x7, @value, 0xffffff01, 0x4}}, @peer_mgmt={0x75, 0x14, {0x1, 0x10, @void, @void, @val="c1df76a0258a8e6ce9a0c9f6581c6954"}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x4, 0x6, 0x0, 0x24, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xfd, 0xad, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0xa4, "126acbe98513bae28a151e2e18fc3d12cbdafc183bda29e51ecc170861f3273b5674cd3a93c57b07abf5c90c5e218c400ecb7a963209bb277fbe65c3662871254912d22e28f72d2ccf757e4be4316fb14a44610c44c7cddcb39d7c4950a372cb64670d4b554f31faf09fefc13db7274e1fbfb69d0ef80ee0a9bfa4a95dba82759280a243382026b297b9484699a27164cd64e98d2478361db6dbddc91dac2b82d8cca32b"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0xf, 0x49}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x250}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)="a69544b6ae6e3a") (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", "000100", "0200", "be4d22a4", ["c3d452871700", "51f3ffcb3a1000", "e100"]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r3, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9, 0x5b, "1925d69d21"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x30}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x250, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x10}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1000}, @NL80211_ATTR_IE={0x208, 0x2a, [@dsss={0x3, 0x1, 0x64}, @measure_req={0x26, 0xeb, {0x4, 0xfa, 0x5, "1450ef6eb3a7d4f0a931bb2cfe5d3c024701545a5fd93bde33b23f72dccddc9b99399611e4bca9008128c3a3e3fe431d6e70be78bc5da4dc350c139f2dc70c65af2a23e4483309f566df42ac892c4c859dade4a6aa2a14b298e3425288338fe0a534acf4a8f93cac1034ac04a308fee6dbc9881a7110cc89b89dfcaedf2178182eeeeeb4ea34c05b3c18173f558ffeb03d32e827bb96eec1000d03f54b21b18b80228031a91d6a2fffa712a1fa9af7e15c92e99f10ab13703da6d6923004408d28df668a801f7c3e268a1344aba9263744f9068008f8a3408cc26e17757b221d25758350c1cec7d2"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @preq={0x82, 0x20, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x80, 0x5, @device_b, 0x7, @value, 0xffffff01, 0x4}}, @peer_mgmt={0x75, 0x14, {0x1, 0x10, @void, @void, @val="c1df76a0258a8e6ce9a0c9f6581c6954"}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x4, 0x6, 0x0, 0x24, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xfd, 0xad, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0xa4, "126acbe98513bae28a151e2e18fc3d12cbdafc183bda29e51ecc170861f3273b5674cd3a93c57b07abf5c90c5e218c400ecb7a963209bb277fbe65c3662871254912d22e28f72d2ccf757e4be4316fb14a44610c44c7cddcb39d7c4950a372cb64670d4b554f31faf09fefc13db7274e1fbfb69d0ef80ee0a9bfa4a95dba82759280a243382026b297b9484699a27164cd64e98d2478361db6dbddc91dac2b82d8cca32b"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0xf, 0x49}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x250}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) 36.863021234s ago: executing program 0 (id=577): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0xffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 36.803162864s ago: executing program 0 (id=578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1800013, &(0x7f0000000680)={'trans=virtio,', {[{@cache_readahead}]}}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6001, 0x0) ftruncate(r0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x200000000000000, 0x0) epoll_create1(0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000200)={0x9, 0x0, 0x80000000}) tkill(r3, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x10, 0x2, 0x142, 0x0}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 35.942593933s ago: executing program 0 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f000000000000000000000000000000000014002000000000003f0000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) 35.62326475s ago: executing program 0 (id=598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'gre0\x00', 0xffffeb60}) 35.574563405s ago: executing program 32 (id=598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'gre0\x00', 0xffffeb60}) 22.662233848s ago: executing program 3 (id=762): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, r2, 0x1, 0x7, 0x1, 0x1, "8a0c76d8122b2be5dc4dd89078d83e8dd560134c9756b67fca74e87c4d7dfa226c37b46e09c7302226092262aeefb9d0a76223066678a0f9faa5425f3973a5", 0x3}, 0x60) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 22.569035917s ago: executing program 3 (id=765): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x95, 0x80}}, @void, @void, @void, @void}, 0x3c) 22.042385222s ago: executing program 3 (id=773): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xf2ff000000000000) 22.041883528s ago: executing program 3 (id=774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="050000000000fcdbdf252e00000008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x400) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00b8aef01b0000"], 0x8) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = getpgid(r3) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20c400, 0x11d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0xfffffff8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0xe, 0x2}) 21.892767639s ago: executing program 3 (id=775): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x80000000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) connect$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x80000000) (async) 21.573024809s ago: executing program 3 (id=776): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x80000000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4, 0x4}, 0xc) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21.544552035s ago: executing program 33 (id=776): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x80000000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4, 0x4}, 0xc) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.162690336s ago: executing program 1 (id=1131): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x801, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '\\&\\'}, {}], 0xa, "582f938f29d261ae0bc6a14785af322b560a22398f7d7b2d14e2640ae6b035109afebd9dcf460be745c8bcb4aa4770b40daaa3fb58e66ceffd71750cd006b4defd75c9c696752de17937cdd5c81cbc752f5cbdba6832"}, 0x66) fcntl$setsig(r2, 0xa, 0x12) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) ppoll(&(0x7f0000000100)=[{r3, 0x200e}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0xc0045401, &(0x7f0000001280)) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r4, 0x0) 2.712070801s ago: executing program 5 (id=1148): socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)=0x803, 0x0) 2.708415095s ago: executing program 5 (id=1150): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="cd3e00000000020000000100000014000500fc020000000000000000000000000001ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040000006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28773bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e852830000140006002001000000000000000000000000000108000200030000000800040003000000"], 0x11c}}, 0x8800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000000)={0x0, 0x7, 0x9, 0x0, 0x1}) prctl$PR_CAPBSET_DROP(0x2f, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100020000008c00048005000300800000000800020003000000"], 0x30}}, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) 2.642745499s ago: executing program 5 (id=1152): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 64) mknodat$loop(r0, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) (async) linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000410000/0x1000)=nil, 0x1000}, 0x2}) (rerun: 32) 2.641291784s ago: executing program 5 (id=1155): r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0xcd, 0x12bd02) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0x8}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000180)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x4}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7f, 0x8, 0x1}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x9}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0x97435c75f18570f}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2.562272419s ago: executing program 5 (id=1156): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r0, &(0x7f0000000180)=""/174, 0xae) (async) write$binfmt_elf32(r0, 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x15) (async) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r4 = socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) (async) msgget$private(0x0, 0x0) (async) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) (async) msgctl$IPC_RMID(0x0, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, 0x0, &(0x7f0000000080)) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x4, 0x0, 0x3, &(0x7f00000002c0)={0x22, "7ea08680448ae1cd0313388152f6a5dcd36f82a305070600000000000000d18a42"}}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000810527bd0000fbdbdf25000000005be0b7cc144dedd9952cb6eb81ef1e00f5bc1dde58152aa52e4b896bce91e14abc23bf97b5c053ace8f8ffffffffffffff98e20d2afecb5df056cd840fdcfa30a1dc59252eb100"/105, @ANYRES32=0x0, @ANYBLOB="02200000000401001800128008000100677470000c00028008000100", @ANYRES32=r8, @ANYBLOB="0b1ae8ffaaf966ad85364c32f2700e4ae553c4479f83f59cf6489624d706a461bf48dd3ba8692d7e003d202b8fda3f12c7e1479edfe9c3258f7020bda974f58c91cfdd2a1c4355cc6dee7c9d8cbd6a1a62143ba5d1dcbb52d6b87c837afa3b05fc79de8c9712f69e29ae7fa90f356e0288abd3520ada424e17ce83fe8081502740336a8dfcdbdb3cb33d10c6e39c6e5041c9094b0367cbc60b01abfb3b7991856f8d2e24651b5d5352d7391002a0414663d633f682387aa6aac760f4b921fa747bbf3e50173dd5eada6d80e0a1b0cc76516b22a26dabd47d13f9536171971e5b6469870aaa3fa07fc311aea7767496cf2e95d4d7b27558fd56df9fe8e1be80fdefc84f23404cd40e4d8de25be41cdcc2aba3190438316031"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000894) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000280)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) 2.512342127s ago: executing program 5 (id=1160): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x15, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f00000083c0)={{r4}, "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"}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r6, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r8, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 358.667789ms ago: executing program 4 (id=1171): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0xd5}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x628, 0xc88d, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000540)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, {0x6}, 0x16, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'veth1_macvtap\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000000)) socket$isdn_base(0x22, 0x3, 0x0) 261.116996ms ago: executing program 2 (id=1172): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) fadvise64(r2, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) 201.530609ms ago: executing program 2 (id=1173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 201.006659ms ago: executing program 2 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaa0100aaffffffffffff86dd6000000000140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 200.520356ms ago: executing program 4 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000236342d9849b5ef300000000010000050900010073797a3000000000c2b3c5b58ff79a9e64c09a47d8cb47633d81c9c1e20e98bbec12162f1fda4cea55bd9340e5e8f656fce9200ff2f02b9ed40cf180130350407423c4a106399e37cc9df3e9a18b32c5107704ee148608f25887657ea803495fcf3a112afa8566d9fb78cbeda1a296cf23a303661f2a3f2bf4e8e5bde75f4b8c81f522c29f21f803504ad008d67a784a7127"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvfrom$inet6(r2, &(0x7f0000000680)=""/254, 0xfe, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0xf, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 132.906462ms ago: executing program 4 (id=1176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x6}, {0x8, 0x17, 0x0, 0x0, 0x762}, {0x8, 0x5, 0x0, 0x0, 0x7}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}]}, 0x58}}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x4000200) accept4(r3, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0x80, 0x80800) 132.595474ms ago: executing program 2 (id=1177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 132.350436ms ago: executing program 1 (id=1178): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x99) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) (async) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) sendto$inet6(r1, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) (async) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) 132.130426ms ago: executing program 4 (id=1179): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfbfffffa}]}}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000802, &(0x7f0000000280)={[{@userxattr}, {@redirect_dir_follow}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000802, &(0x7f0000000280)={[{@userxattr}, {@redirect_dir_follow}]}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff807000000b8000000000000", 0x1b) 72.835114ms ago: executing program 1 (id=1180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = io_uring_setup(0x177f, &(0x7f0000000140)) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), 0x4) (async) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r3, 0x0, &(0x7f0000ade000/0x3000)=nil, 0x3000, 0x40001}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, &(0x7f0000c5c000/0x2000)=nil, 0x2000, 0x8}) 8.57564ms ago: executing program 2 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4082, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x80}, 0xc044) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000340)={0x1, 0x8}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="010600000000000000000f00000008002c000000000008000300", @ANYRES32=r9, @ANYBLOB="876e112a1e5cdea35a16c6b815970965d1f3a588c99f76bdcd21657c0a250cf1fa9a358b0857329878969f7513a487cdec1a39355a927902df60c3ecb8f58503ef0ec6546a79959a6cfd39097ea944da550abb32732a419e2bca467d62928e1ac8d29b01fd69b0d743a48e8c40d7e7ae012497c1142dede99c4f65aa9e88c3305e76902e2ec394e08d7e099d9570bb15b2"], 0x24}}, 0x0) 8.346183ms ago: executing program 4 (id=1182): r0 = socket$inet(0x2, 0x1, 0x0) (async, rerun: 32) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) (async) r2 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async, rerun: 32) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) (async, rerun: 32) r5 = syz_io_uring_setup(0x32f7, &(0x7f0000000080)={0x0, 0x7e6c, 0x10000, 0x1, 0x201, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r5, 0x100e, 0xb8e4, 0x0, 0x0, 0x0) 8.041165ms ago: executing program 1 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.705982ms ago: executing program 4 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="36de878762fc79e223f881caf586112b98", 0x11}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x21ae52c8f9e5e4c6}], 0x18, 0x1}, 0x20000810) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) sendmsg$nl_route(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) 7.467309ms ago: executing program 1 (id=1185): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000180)={'wlan1\x00', @ifru_ivalue=0x50000000}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/132, 0x84, 0x401) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000000a14918d"], 0x10}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 176.92µs ago: executing program 1 (id=1186): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x3525}}]}}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x37, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffd2af000cec5ebdef01a5c9a4dc200aeed53ee167c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af300"}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') connect(r1, &(0x7f0000000100)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 0s ago: executing program 2 (id=1187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x0, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) kernel console output (not intermixed with test programs): ][ T7744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'. [ 86.755013][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.759559][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.763985][ T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 86.766743][ T13] veth1_vlan: left allmulticast mode [ 86.770036][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 86.777728][ T13] bond0 (unregistering): Released all slaves [ 86.803185][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.813024][ T7744] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 86.823611][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.864936][ T7729] team0: Port device team_slave_0 added [ 86.869231][ T7729] team0: Port device team_slave_1 added [ 86.884098][ T7754] FAULT_INJECTION: forcing a failure. [ 86.884098][ T7754] name failslab, interval 1, probability 0, space 0, times 1 [ 86.888178][ T7754] CPU: 2 UID: 0 PID: 7754 Comm: syz.1.604 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 86.888192][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.888198][ T7754] Call Trace: [ 86.888202][ T7754] [ 86.888206][ T7754] dump_stack_lvl+0x16c/0x1f0 [ 86.888225][ T7754] should_fail_ex+0x512/0x640 [ 86.888240][ T7754] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 86.888256][ T7754] should_failslab+0xc2/0x120 [ 86.888271][ T7754] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 86.888285][ T7754] ? __alloc_skb+0x2b2/0x380 [ 86.888301][ T7754] __alloc_skb+0x2b2/0x380 [ 86.888314][ T7754] ? __pfx___alloc_skb+0x10/0x10 [ 86.888328][ T7754] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 86.888341][ T7754] netlink_alloc_large_skb+0x69/0x130 [ 86.888352][ T7754] netlink_sendmsg+0x6a1/0xdd0 [ 86.888364][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.888379][ T7754] ____sys_sendmsg+0xa95/0xc70 [ 86.888390][ T7754] ? copy_msghdr_from_user+0x10a/0x160 [ 86.888404][ T7754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.888416][ T7754] ? __pfx__kstrtoull+0x10/0x10 [ 86.888431][ T7754] ___sys_sendmsg+0x134/0x1d0 [ 86.888445][ T7754] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.888465][ T7754] ? find_held_lock+0x2b/0x80 [ 86.888486][ T7754] __sys_sendmmsg+0x200/0x420 [ 86.888502][ T7754] ? __pfx___sys_sendmmsg+0x10/0x10 [ 86.888520][ T7754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.888541][ T7754] ? fput+0x70/0xf0 [ 86.888550][ T7754] ? ksys_write+0x1ac/0x250 [ 86.888563][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 86.888578][ T7754] __x64_sys_sendmmsg+0x9c/0x100 [ 86.888592][ T7754] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.888606][ T7754] do_syscall_64+0xcd/0x4c0 [ 86.888621][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.888632][ T7754] RIP: 0033:0x7f3a2098e929 [ 86.888640][ T7754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.888650][ T7754] RSP: 002b:00007f3a21836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 86.888661][ T7754] RAX: ffffffffffffffda RBX: 00007f3a20bb5fa0 RCX: 00007f3a2098e929 [ 86.888667][ T7754] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 86.888674][ T7754] RBP: 00007f3a21836090 R08: 0000000000000000 R09: 0000000000000000 [ 86.888680][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.888686][ T7754] R13: 0000000000000000 R14: 00007f3a20bb5fa0 R15: 00007ffe01d470d8 [ 86.888698][ T7754] [ 87.029245][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.032828][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.041105][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.068800][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.071257][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.079016][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.115288][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'. [ 87.117749][ T7729] hsr_slave_0: entered promiscuous mode [ 87.120631][ T7729] hsr_slave_1: entered promiscuous mode [ 87.180605][ T13] hsr_slave_0: left promiscuous mode [ 87.183202][ T13] hsr_slave_1: left promiscuous mode [ 87.185247][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.187553][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.190879][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.193256][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.201146][ T7768] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 87.214957][ T13] veth1_macvtap: left promiscuous mode [ 87.216874][ T13] veth0_macvtap: left promiscuous mode [ 87.219175][ T13] veth1_vlan: left promiscuous mode [ 87.222887][ T13] veth0_vlan: left promiscuous mode [ 87.470298][ T24] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 87.632487][ T24] usb 8-1: config 0 has an invalid interface number: 118 but max is 1 [ 87.634892][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.638172][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.641422][ T24] usb 8-1: config 0 has no interface number 0 [ 87.643609][ T24] usb 8-1: too many endpoints for config 0 interface 118 altsetting 115: 105, using maximum allowed: 30 [ 87.647430][ T24] usb 8-1: config 0 interface 118 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 87.652262][ T24] usb 8-1: config 0 interface 118 has no altsetting 0 [ 87.654476][ T24] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 87.657033][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.660799][ T24] usb 8-1: config 0 descriptor?? [ 87.668608][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 87.671375][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 87.677528][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 87.683469][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 87.686100][ T24] usb 8-1: media controller created [ 87.689406][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.697164][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 87.700456][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 87.706107][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input15 [ 87.711651][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 87.713649][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 87.752377][ T13] team0 (unregistering): Port device team_slave_1 removed [ 87.808706][ T13] team0 (unregistering): Port device team_slave_0 removed [ 87.864558][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.867378][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.870619][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 87.872629][ T24] dvb-usb: error while querying for an remote control event. [ 87.872969][ T6590] usb 8-1: USB disconnect, device number 10 [ 87.893147][ T6590] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 88.102365][ T5950] Bluetooth: hci1: command tx timeout [ 88.225981][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 88.229662][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 88.341227][ T7729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.345867][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 88.345881][ T40] audit: type=1400 audit(1751635320.305:466): avc: denied { create } for pid=7782 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.346167][ T7729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.349040][ T40] audit: type=1400 audit(1751635320.305:467): avc: denied { listen } for pid=7782 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.364742][ T40] audit: type=1400 audit(1751635320.305:468): avc: denied { accept } for pid=7782 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.367485][ T7729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.376517][ T7729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.438223][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.452691][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.457748][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.460053][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.472780][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.475627][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.580856][ T7805] syz.2.614: attempt to access beyond end of device [ 88.580856][ T7805] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 88.585096][ T7805] XFS (nbd2): SB validate failed with error -5. [ 88.620783][ T40] audit: type=1400 audit(1751635320.585:469): avc: denied { nosuid_transition } for pid=7803 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 88.627659][ T40] audit: type=1400 audit(1751635320.585:470): avc: denied { transition } for pid=7803 comm="syz.2.614" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 88.642963][ T40] audit: type=1400 audit(1751635320.585:471): avc: denied { entrypoint } for pid=7803 comm="syz.2.614" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1041 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.652092][ T40] audit: type=1400 audit(1751635320.585:472): avc: denied { share } for pid=7803 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 88.657971][ T40] audit: type=1400 audit(1751635320.585:473): avc: denied { noatsecure } for pid=7803 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 88.686064][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.737759][ T7836] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 88.836529][ T7729] veth0_vlan: entered promiscuous mode [ 88.843478][ T7729] veth1_vlan: entered promiscuous mode [ 88.863373][ T7729] veth0_macvtap: entered promiscuous mode [ 88.868554][ T7729] veth1_macvtap: entered promiscuous mode [ 88.884248][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.891995][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.898164][ T7729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.902961][ T7729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.906628][ T7729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.910342][ T7729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953784][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.957094][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.973743][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.976887][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.996036][ T40] audit: type=1400 audit(1751635320.955:474): avc: denied { mounton } for pid=7729 comm="syz-executor" path="/syzkaller.Ro1X6g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.000763][ T6590] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 89.007435][ T40] audit: type=1400 audit(1751635320.955:475): avc: denied { mounton } for pid=7729 comm="syz-executor" path="/syzkaller.Ro1X6g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.116528][ T7857] FAULT_INJECTION: forcing a failure. [ 89.116528][ T7857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.120832][ T7857] CPU: 3 UID: 0 PID: 7857 Comm: syz.1.621 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 89.120847][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.120853][ T7857] Call Trace: [ 89.120856][ T7857] [ 89.120860][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 89.120879][ T7857] should_fail_ex+0x512/0x640 [ 89.120896][ T7857] _copy_from_iter+0x29f/0x16f0 [ 89.120912][ T7857] ? __alloc_skb+0x200/0x380 [ 89.120927][ T7857] ? __pfx__copy_from_iter+0x10/0x10 [ 89.120943][ T7857] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 89.120957][ T7857] netlink_sendmsg+0x829/0xdd0 [ 89.120970][ T7857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.120985][ T7857] ____sys_sendmsg+0xa95/0xc70 [ 89.120996][ T7857] ? copy_msghdr_from_user+0x10a/0x160 [ 89.121015][ T7857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.121027][ T7857] ? __pfx__kstrtoull+0x10/0x10 [ 89.121041][ T7857] ___sys_sendmsg+0x134/0x1d0 [ 89.121056][ T7857] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.121076][ T7857] ? find_held_lock+0x2b/0x80 [ 89.121098][ T7857] __sys_sendmmsg+0x200/0x420 [ 89.121114][ T7857] ? __pfx___sys_sendmmsg+0x10/0x10 [ 89.121133][ T7857] ? bpf_trace_run2+0x265/0x590 [ 89.121149][ T7857] ? __might_fault+0x13b/0x190 [ 89.121164][ T7857] ? find_held_lock+0x2b/0x80 [ 89.121176][ T7857] ? syscall_trace_enter+0x1cb/0x260 [ 89.121191][ T7857] __x64_sys_sendmmsg+0x9c/0x100 [ 89.121206][ T7857] do_syscall_64+0xcd/0x4c0 [ 89.121222][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.121232][ T7857] RIP: 0033:0x7f3a2098e929 [ 89.121241][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.121251][ T7857] RSP: 002b:00007f3a21836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.121261][ T7857] RAX: ffffffffffffffda RBX: 00007f3a20bb5fa0 RCX: 00007f3a2098e929 [ 89.121267][ T7857] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 89.121273][ T7857] RBP: 00007f3a21836090 R08: 0000000000000000 R09: 0000000000000000 [ 89.121279][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.121285][ T7857] R13: 0000000000000000 R14: 00007f3a20bb5fa0 R15: 00007ffe01d470d8 [ 89.121298][ T7857] [ 89.223082][ T6590] usb 7-1: config 0 has an invalid interface number: 118 but max is 1 [ 89.225814][ T6590] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.228935][ T6590] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.232517][ T6590] usb 7-1: config 0 has no interface number 0 [ 89.234460][ T6590] usb 7-1: too many endpoints for config 0 interface 118 altsetting 115: 105, using maximum allowed: 30 [ 89.237977][ T6590] usb 7-1: config 0 interface 118 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 89.249251][ T6590] usb 7-1: config 0 interface 118 has no altsetting 0 [ 89.254681][ T6590] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 89.257497][ T6590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.262497][ T6590] usb 7-1: config 0 descriptor?? [ 89.271696][ T6590] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 89.273754][ T6590] dvb-usb: bulk message failed: -22 (3/0) [ 89.276698][ T6590] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 89.290434][ T6590] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 89.292932][ T6590] usb 7-1: media controller created [ 89.297768][ T6590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.304618][ T6590] dvb-usb: bulk message failed: -22 (6/0) [ 89.307734][ T6590] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 89.317070][ T6590] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input16 [ 89.331156][ T6590] dvb-usb: schedule remote query interval to 150 msecs. [ 89.333421][ T6590] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 89.333532][ T7869] ata3.00: invalid multi_count 1 ignored [ 89.470510][ T6017] usb 7-1: USB disconnect, device number 4 [ 89.497803][ T6017] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 89.596470][ T7891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7891 comm=syz.3.630 [ 89.727158][ T7905] FAULT_INJECTION: forcing a failure. [ 89.727158][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 89.731247][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.3.632 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 89.731262][ T7905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.731268][ T7905] Call Trace: [ 89.731272][ T7905] [ 89.731277][ T7905] dump_stack_lvl+0x16c/0x1f0 [ 89.731301][ T7905] should_fail_ex+0x512/0x640 [ 89.731319][ T7905] should_failslab+0xc2/0x120 [ 89.731335][ T7905] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 89.731350][ T7905] ? skb_clone+0x190/0x3f0 [ 89.731366][ T7905] skb_clone+0x190/0x3f0 [ 89.731381][ T7905] netlink_deliver_tap+0xabd/0xd30 [ 89.731401][ T7905] netlink_unicast+0x5df/0x7f0 [ 89.731413][ T7905] ? __pfx_netlink_unicast+0x10/0x10 [ 89.731427][ T7905] netlink_sendmsg+0x8d1/0xdd0 [ 89.731439][ T7905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.731455][ T7905] ____sys_sendmsg+0xa95/0xc70 [ 89.731466][ T7905] ? copy_msghdr_from_user+0x10a/0x160 [ 89.731480][ T7905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.731493][ T7905] ? __pfx__kstrtoull+0x10/0x10 [ 89.731508][ T7905] ___sys_sendmsg+0x134/0x1d0 [ 89.731522][ T7905] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.731543][ T7905] ? find_held_lock+0x2b/0x80 [ 89.731566][ T7905] __sys_sendmmsg+0x200/0x420 [ 89.731582][ T7905] ? __pfx___sys_sendmmsg+0x10/0x10 [ 89.731600][ T7905] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.731622][ T7905] ? fput+0x70/0xf0 [ 89.731632][ T7905] ? ksys_write+0x1ac/0x250 [ 89.731645][ T7905] ? __pfx_ksys_write+0x10/0x10 [ 89.731660][ T7905] __x64_sys_sendmmsg+0x9c/0x100 [ 89.731675][ T7905] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.731689][ T7905] do_syscall_64+0xcd/0x4c0 [ 89.731705][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.731715][ T7905] RIP: 0033:0x7fc5bd58e929 [ 89.731724][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.731734][ T7905] RSP: 002b:00007fc5be453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.731744][ T7905] RAX: ffffffffffffffda RBX: 00007fc5bd7b5fa0 RCX: 00007fc5bd58e929 [ 89.731751][ T7905] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 89.731757][ T7905] RBP: 00007fc5be453090 R08: 0000000000000000 R09: 0000000000000000 [ 89.731762][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.731768][ T7905] R13: 0000000000000000 R14: 00007fc5bd7b5fa0 R15: 00007ffddc639b18 [ 89.731781][ T7905] [ 89.991149][ T7925] syz.3.639: attempt to access beyond end of device [ 89.991149][ T7925] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 89.995279][ T7925] EXT4-fs (nbd3): unable to read superblock [ 90.113232][ T7932] FAULT_INJECTION: forcing a failure. [ 90.113232][ T7932] name failslab, interval 1, probability 0, space 0, times 0 [ 90.117087][ T7932] CPU: 2 UID: 0 PID: 7932 Comm: syz.2.642 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 90.117102][ T7932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.117109][ T7932] Call Trace: [ 90.117113][ T7932] [ 90.117117][ T7932] dump_stack_lvl+0x16c/0x1f0 [ 90.117135][ T7932] should_fail_ex+0x512/0x640 [ 90.117150][ T7932] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 90.117166][ T7932] should_failslab+0xc2/0x120 [ 90.117182][ T7932] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 90.117196][ T7932] ? __alloc_skb+0x2b2/0x380 [ 90.117212][ T7932] __alloc_skb+0x2b2/0x380 [ 90.117225][ T7932] ? __pfx___alloc_skb+0x10/0x10 [ 90.117237][ T7932] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 90.117254][ T7932] netlink_ack+0x15d/0xb80 [ 90.117269][ T7932] netlink_rcv_skb+0x332/0x420 [ 90.117279][ T7932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.117296][ T7932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.117311][ T7932] ? netlink_deliver_tap+0x1ae/0xd30 [ 90.117329][ T7932] netlink_unicast+0x53a/0x7f0 [ 90.117340][ T7932] ? __pfx_netlink_unicast+0x10/0x10 [ 90.117354][ T7932] netlink_sendmsg+0x8d1/0xdd0 [ 90.117366][ T7932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.117381][ T7932] ____sys_sendmsg+0xa95/0xc70 [ 90.117392][ T7932] ? copy_msghdr_from_user+0x10a/0x160 [ 90.117406][ T7932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.117418][ T7932] ? __pfx__kstrtoull+0x10/0x10 [ 90.117432][ T7932] ___sys_sendmsg+0x134/0x1d0 [ 90.117447][ T7932] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.117467][ T7932] ? find_held_lock+0x2b/0x80 [ 90.117488][ T7932] __sys_sendmmsg+0x200/0x420 [ 90.117504][ T7932] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.117522][ T7932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.117544][ T7932] ? fput+0x70/0xf0 [ 90.117553][ T7932] ? ksys_write+0x1ac/0x250 [ 90.117567][ T7932] ? __pfx_ksys_write+0x10/0x10 [ 90.117582][ T7932] __x64_sys_sendmmsg+0x9c/0x100 [ 90.117596][ T7932] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.117610][ T7932] do_syscall_64+0xcd/0x4c0 [ 90.117626][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.117637][ T7932] RIP: 0033:0x7f1e7198e929 [ 90.117645][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.117655][ T7932] RSP: 002b:00007f1e727e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.117665][ T7932] RAX: ffffffffffffffda RBX: 00007f1e71bb5fa0 RCX: 00007f1e7198e929 [ 90.117672][ T7932] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 90.117678][ T7932] RBP: 00007f1e727e8090 R08: 0000000000000000 R09: 0000000000000000 [ 90.117683][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.117689][ T7932] R13: 0000000000000000 R14: 00007f1e71bb5fa0 R15: 00007fff75622418 [ 90.117702][ T7932] [ 90.180646][ T5950] Bluetooth: hci1: command tx timeout [ 90.316249][ T7948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.647'. [ 90.319369][ T7948] netlink: 96 bytes leftover after parsing attributes in process `syz.3.647'. [ 90.351330][ T7950] netlink: 180 bytes leftover after parsing attributes in process `syz.3.648'. [ 90.361384][ T7952] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 90.368568][ T7955] netdevsim netdevsim1: Direct firmware load for . [ 90.368568][ T7955] failed with error -2 [ 90.375630][ T7955] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 90.375630][ T7955] [ 90.620423][ T6015] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 90.795357][ T6015] usb 7-1: config 0 has an invalid interface number: 118 but max is 1 [ 90.797967][ T6015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.801219][ T6015] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 90.804103][ T6015] usb 7-1: config 0 has no interface number 0 [ 90.806140][ T6015] usb 7-1: too many endpoints for config 0 interface 118 altsetting 115: 105, using maximum allowed: 30 [ 90.809573][ T6015] usb 7-1: config 0 interface 118 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 90.813720][ T6015] usb 7-1: config 0 interface 118 has no altsetting 0 [ 90.815861][ T6015] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 90.818715][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.822881][ T6015] usb 7-1: config 0 descriptor?? [ 90.829630][ T6015] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 90.839099][ T6015] dvb-usb: bulk message failed: -22 (3/0) [ 90.846734][ T6015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 90.849929][ T6015] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 90.852594][ T6015] usb 7-1: media controller created [ 90.854999][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.866779][ T6015] dvb-usb: bulk message failed: -22 (6/0) [ 90.868632][ T6015] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 90.874859][ T7969] binder: 7968:7969 ioctl c0306201 200000000180 returned -22 [ 90.875255][ T7970] binder: 7968:7970 ioctl c0306201 200000000180 returned -22 [ 90.903556][ T6015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input17 [ 90.915555][ T6015] dvb-usb: schedule remote query interval to 150 msecs. [ 90.918498][ T6015] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 90.925562][ T7979] binder: 7978:7979 ioctl 40046205 0 returned -22 [ 90.953340][ T7985] netlink: 'syz.4.658': attribute type 5 has an invalid length. [ 90.955869][ T7985] netlink: 'syz.4.658': attribute type 7 has an invalid length. [ 90.999509][ T7987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7987 comm=syz.4.659 [ 91.027424][ T6017] usb 7-1: USB disconnect, device number 5 [ 91.041330][ T6017] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 91.072140][ T7994] FAULT_INJECTION: forcing a failure. [ 91.072140][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 91.076094][ T7994] CPU: 1 UID: 0 PID: 7994 Comm: syz.3.662 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 91.076109][ T7994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.076115][ T7994] Call Trace: [ 91.076119][ T7994] [ 91.076123][ T7994] dump_stack_lvl+0x16c/0x1f0 [ 91.076141][ T7994] should_fail_ex+0x512/0x640 [ 91.076159][ T7994] should_failslab+0xc2/0x120 [ 91.076175][ T7994] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 91.076190][ T7994] ? skb_clone+0x190/0x3f0 [ 91.076207][ T7994] skb_clone+0x190/0x3f0 [ 91.076222][ T7994] netlink_deliver_tap+0xabd/0xd30 [ 91.076241][ T7994] netlink_unicast+0x6b2/0x7f0 [ 91.076253][ T7994] ? __pfx_netlink_unicast+0x10/0x10 [ 91.076267][ T7994] netlink_ack+0x696/0xb80 [ 91.076281][ T7994] netlink_rcv_skb+0x332/0x420 [ 91.076291][ T7994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.076307][ T7994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.076323][ T7994] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.076341][ T7994] netlink_unicast+0x53a/0x7f0 [ 91.076353][ T7994] ? __pfx_netlink_unicast+0x10/0x10 [ 91.076367][ T7994] netlink_sendmsg+0x8d1/0xdd0 [ 91.076379][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.076395][ T7994] ____sys_sendmsg+0xa95/0xc70 [ 91.076406][ T7994] ? copy_msghdr_from_user+0x10a/0x160 [ 91.076420][ T7994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.076433][ T7994] ? __pfx__kstrtoull+0x10/0x10 [ 91.076447][ T7994] ___sys_sendmsg+0x134/0x1d0 [ 91.076462][ T7994] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.076482][ T7994] ? find_held_lock+0x2b/0x80 [ 91.076504][ T7994] __sys_sendmmsg+0x200/0x420 [ 91.076520][ T7994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 91.076538][ T7994] ? bpf_trace_run2+0x265/0x590 [ 91.076555][ T7994] ? __might_fault+0x13b/0x190 [ 91.076569][ T7994] ? find_held_lock+0x2b/0x80 [ 91.076582][ T7994] ? syscall_trace_enter+0x1cb/0x260 [ 91.076597][ T7994] __x64_sys_sendmmsg+0x9c/0x100 [ 91.076611][ T7994] do_syscall_64+0xcd/0x4c0 [ 91.076627][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.076638][ T7994] RIP: 0033:0x7fc5bd58e929 [ 91.076646][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.076656][ T7994] RSP: 002b:00007fc5be453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.076666][ T7994] RAX: ffffffffffffffda RBX: 00007fc5bd7b5fa0 RCX: 00007fc5bd58e929 [ 91.076672][ T7994] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 91.076679][ T7994] RBP: 00007fc5be453090 R08: 0000000000000000 R09: 0000000000000000 [ 91.076684][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.076690][ T7994] R13: 0000000000000000 R14: 00007fc5bd7b5fa0 R15: 00007ffddc639b18 [ 91.076703][ T7994] [ 91.358757][ T8012] netlink: 'syz.1.669': attribute type 8 has an invalid length. [ 91.361356][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 91.631230][ T8031] FAULT_INJECTION: forcing a failure. [ 91.631230][ T8031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.635242][ T8031] CPU: 2 UID: 0 PID: 8031 Comm: syz.1.674 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 91.635256][ T8031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.635263][ T8031] Call Trace: [ 91.635267][ T8031] [ 91.635271][ T8031] dump_stack_lvl+0x16c/0x1f0 [ 91.635290][ T8031] should_fail_ex+0x512/0x640 [ 91.635310][ T8031] _copy_from_user+0x2e/0xd0 [ 91.635327][ T8031] copy_msghdr_from_user+0x98/0x160 [ 91.635342][ T8031] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.635358][ T8031] ? kfree+0x24f/0x4d0 [ 91.635370][ T8031] ? __pfx__kstrtoull+0x10/0x10 [ 91.635384][ T8031] ___sys_sendmsg+0xfe/0x1d0 [ 91.635398][ T8031] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.635424][ T8031] ? __pfx___might_resched+0x10/0x10 [ 91.635442][ T8031] __sys_sendmmsg+0x200/0x420 [ 91.635457][ T8031] ? __pfx___sys_sendmmsg+0x10/0x10 [ 91.635476][ T8031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.635497][ T8031] ? fput+0x70/0xf0 [ 91.635507][ T8031] ? ksys_write+0x1ac/0x250 [ 91.635521][ T8031] ? __pfx_ksys_write+0x10/0x10 [ 91.635536][ T8031] __x64_sys_sendmmsg+0x9c/0x100 [ 91.635550][ T8031] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.635564][ T8031] do_syscall_64+0xcd/0x4c0 [ 91.635580][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.635590][ T8031] RIP: 0033:0x7f3a2098e929 [ 91.635599][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.635609][ T8031] RSP: 002b:00007f3a21836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.635619][ T8031] RAX: ffffffffffffffda RBX: 00007f3a20bb5fa0 RCX: 00007f3a2098e929 [ 91.635625][ T8031] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 91.635632][ T8031] RBP: 00007f3a21836090 R08: 0000000000000000 R09: 0000000000000000 [ 91.635637][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.635643][ T8031] R13: 0000000000000000 R14: 00007f3a20bb5fa0 R15: 00007ffe01d470d8 [ 91.635656][ T8031] [ 91.756084][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 91.825974][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 91.828826][ T8051] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 91.854785][ T8051] kvm: Disabled LAPIC found during irq injection [ 91.979550][ T8060] FAULT_INJECTION: forcing a failure. [ 91.979550][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 91.984241][ T8060] CPU: 3 UID: 0 PID: 8060 Comm: syz.4.684 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 91.984264][ T8060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.984271][ T8060] Call Trace: [ 91.984275][ T8060] [ 91.984280][ T8060] dump_stack_lvl+0x16c/0x1f0 [ 91.984299][ T8060] should_fail_ex+0x512/0x640 [ 91.984314][ T8060] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 91.984328][ T8060] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 91.984339][ T8060] should_failslab+0xc2/0x120 [ 91.984354][ T8060] __kmalloc_cache_noprof+0x6a/0x3e0 [ 91.984367][ T8060] ? __lock_acquire+0xb8a/0x1c90 [ 91.984376][ T8060] ? flow_indr_dev_setup_offload+0x27f/0x8d0 [ 91.984392][ T8060] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 91.984401][ T8060] flow_indr_dev_setup_offload+0x27f/0x8d0 [ 91.984418][ T8060] tcf_block_offload_cmd.isra.0+0x2c6/0x310 [ 91.984430][ T8060] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 91.984445][ T8060] ? __pfx_down_write+0x10/0x10 [ 91.984459][ T8060] tcf_block_get_ext+0x7d9/0x1800 [ 91.984473][ T8060] tcf_block_get+0xa8/0x100 [ 91.984482][ T8060] ? __pfx_tcf_block_get+0x10/0x10 [ 91.984492][ T8060] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 91.984510][ T8060] sfb_init+0x33/0xc0 [ 91.984522][ T8060] ? __pfx_sfb_init+0x10/0x10 [ 91.984535][ T8060] qdisc_create+0x457/0xfc0 [ 91.984549][ T8060] tc_modify_qdisc+0x12bb/0x2130 [ 91.984565][ T8060] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 91.984589][ T8060] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 91.984602][ T8060] rtnetlink_rcv_msg+0x3c9/0xe90 [ 91.984618][ T8060] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.984637][ T8060] ? ref_tracker_free+0x37c/0x830 [ 91.984654][ T8060] netlink_rcv_skb+0x158/0x420 [ 91.984664][ T8060] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.984680][ T8060] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.984695][ T8060] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.984714][ T8060] netlink_unicast+0x53a/0x7f0 [ 91.984726][ T8060] ? __pfx_netlink_unicast+0x10/0x10 [ 91.984740][ T8060] netlink_sendmsg+0x8d1/0xdd0 [ 91.984752][ T8060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.984768][ T8060] ____sys_sendmsg+0xa95/0xc70 [ 91.984779][ T8060] ? copy_msghdr_from_user+0x10a/0x160 [ 91.984793][ T8060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.984806][ T8060] ? __pfx__kstrtoull+0x10/0x10 [ 91.984820][ T8060] ___sys_sendmsg+0x134/0x1d0 [ 91.984835][ T8060] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.984856][ T8060] ? find_held_lock+0x2b/0x80 [ 91.984878][ T8060] __sys_sendmmsg+0x200/0x420 [ 91.984893][ T8060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 91.984912][ T8060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.984933][ T8060] ? fput+0x70/0xf0 [ 91.984943][ T8060] ? ksys_write+0x1ac/0x250 [ 91.984956][ T8060] ? __pfx_ksys_write+0x10/0x10 [ 91.984972][ T8060] __x64_sys_sendmmsg+0x9c/0x100 [ 91.984986][ T8060] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.985001][ T8060] do_syscall_64+0xcd/0x4c0 [ 91.985017][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.985027][ T8060] RIP: 0033:0x7f420678e929 [ 91.985036][ T8060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.985046][ T8060] RSP: 002b:00007f4207640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.985057][ T8060] RAX: ffffffffffffffda RBX: 00007f42069b5fa0 RCX: 00007f420678e929 [ 91.985063][ T8060] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 91.985069][ T8060] RBP: 00007f4207640090 R08: 0000000000000000 R09: 0000000000000000 [ 91.985075][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.985081][ T8060] R13: 0000000000000000 R14: 00007f42069b5fa0 R15: 00007ffea2aa8cc8 [ 91.985094][ T8060] [ 92.115537][ T8063] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 92.260371][ T5950] Bluetooth: hci1: command tx timeout [ 92.391009][ T29] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 92.541770][ T29] usb 8-1: config 0 has an invalid interface number: 118 but max is 1 [ 92.544364][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.547791][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.550664][ T29] usb 8-1: config 0 has no interface number 0 [ 92.552570][ T29] usb 8-1: too many endpoints for config 0 interface 118 altsetting 115: 105, using maximum allowed: 30 [ 92.555953][ T29] usb 8-1: config 0 interface 118 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 92.560024][ T29] usb 8-1: config 0 interface 118 has no altsetting 0 [ 92.562407][ T29] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.565225][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.568876][ T29] usb 8-1: config 0 descriptor?? [ 92.572445][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 92.574812][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 92.578724][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 92.581851][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 92.584130][ T29] usb 8-1: media controller created [ 92.586803][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.593807][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 92.597325][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 92.604192][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input18 [ 92.608530][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 92.610837][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 92.661787][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.665438][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 92.668453][ T5950] Bluetooth: hci2: hardware error 0x00 [ 92.770281][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 92.773292][ T29] dvb-usb: error while querying for an remote control event. [ 92.776665][ T5977] usb 8-1: USB disconnect, device number 11 [ 92.789724][ T5977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 93.387812][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 93.387824][ T40] audit: type=1400 audit(1751635325.345:484): avc: denied { read } for pid=8095 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.510325][ T6015] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.607646][ T40] audit: type=1400 audit(1751635325.565:485): avc: denied { read } for pid=8102 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.660251][ T6015] usb 9-1: Using ep0 maxpacket: 8 [ 93.665748][ T6015] usb 9-1: config 6 has an invalid interface number: 1 but max is 0 [ 93.668257][ T6015] usb 9-1: config 6 has an invalid interface descriptor of length 2, skipping [ 93.675997][ T6015] usb 9-1: config 6 has no interface number 0 [ 93.678200][ T6015] usb 9-1: config 6 interface 1 altsetting 14 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 93.681845][ T6015] usb 9-1: config 6 interface 1 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 93.685458][ T6015] usb 9-1: config 6 interface 1 altsetting 14 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 93.688802][ T6015] usb 9-1: config 6 interface 1 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 93.693316][ T6015] usb 9-1: config 6 interface 1 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 93.696651][ T6015] usb 9-1: config 6 interface 1 altsetting 14 endpoint 0xB has invalid wMaxPacketSize 0 [ 93.699619][ T6015] usb 9-1: config 6 interface 1 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 93.703490][ T6015] usb 9-1: config 6 interface 1 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 93.706833][ T6015] usb 9-1: config 6 interface 1 altsetting 14 has 13 endpoint descriptors, different from the interface descriptor's value: 15 [ 93.710992][ T40] audit: type=1400 audit(1751635325.675:486): avc: denied { getopt } for pid=8108 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.711305][ T6015] usb 9-1: config 6 interface 1 has no altsetting 0 [ 93.721971][ T6015] usb 9-1: New USB device found, idVendor=b6c7, idProduct=f3de, bcdDevice=97.24 [ 93.724779][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.727241][ T6015] usb 9-1: Product: syz [ 93.728553][ T6015] usb 9-1: Manufacturer: syz [ 93.730011][ T6015] usb 9-1: SerialNumber: syz [ 93.944083][ T6015] usb 9-1: USB disconnect, device number 2 [ 94.257570][ T8112] xt_CT: No such helper "pptp" [ 94.312997][ T8117] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 94.330812][ T5949] Bluetooth: hci1: command tx timeout [ 94.508726][ T40] audit: type=1400 audit(1751635326.465:487): avc: denied { ioctl } for pid=8121 comm="syz.4.707" path="socket:[19091]" dev="sockfs" ino=19091 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.590857][ T5990] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 94.730427][ T5990] usb 8-1: device descriptor read/64, error -71 [ 94.731423][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.815820][ T40] audit: type=1400 audit(1751635326.775:488): avc: denied { write } for pid=8137 comm="syz.1.712" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.903385][ T8148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8148 comm=syz.2.716 [ 94.907653][ T8148] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 94.990299][ T5990] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 95.130492][ T5990] usb 8-1: device descriptor read/64, error -71 [ 95.241666][ T5990] usb usb8-port1: attempt power cycle [ 95.477975][ T8166] 9pnet_virtio: no channels available for device syz [ 95.489618][ T40] audit: type=1400 audit(1751635327.445:489): avc: denied { unmount } for pid=7729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 95.571177][ T8170] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 95.580335][ T5990] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 95.600854][ T5990] usb 8-1: device descriptor read/8, error -71 [ 95.691861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.764554][ T8175] FAULT_INJECTION: forcing a failure. [ 95.764554][ T8175] name failslab, interval 1, probability 0, space 0, times 0 [ 95.768464][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.2.724 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 95.768479][ T8175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.768486][ T8175] Call Trace: [ 95.768490][ T8175] [ 95.768494][ T8175] dump_stack_lvl+0x16c/0x1f0 [ 95.768536][ T8175] should_fail_ex+0x512/0x640 [ 95.768561][ T8175] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 95.768576][ T8175] ? __pfx_u32_classify+0x10/0x10 [ 95.768590][ T8175] should_failslab+0xc2/0x120 [ 95.768606][ T8175] __kmalloc_cache_noprof+0x6a/0x3e0 [ 95.768618][ T8175] ? u32_init+0x1cd/0xbe0 [ 95.768633][ T8175] ? __pfx_u32_classify+0x10/0x10 [ 95.768646][ T8175] u32_init+0x1cd/0xbe0 [ 95.768660][ T8175] ? __pfx_u32_classify+0x10/0x10 [ 95.768673][ T8175] tc_new_tfilter+0x1147/0x2340 [ 95.768689][ T8175] ? avc_has_perm_noaudit+0x117/0x3b0 [ 95.768702][ T8175] ? __pfx_tc_new_tfilter+0x10/0x10 [ 95.768726][ T8175] ? find_held_lock+0x2b/0x80 [ 95.768739][ T8175] ? __pfx_tc_new_tfilter+0x10/0x10 [ 95.768749][ T8175] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 95.768765][ T8175] ? __pfx_tc_new_tfilter+0x10/0x10 [ 95.768776][ T8175] rtnetlink_rcv_msg+0x95b/0xe90 [ 95.768793][ T8175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.768812][ T8175] ? ref_tracker_free+0x37c/0x830 [ 95.768828][ T8175] netlink_rcv_skb+0x158/0x420 [ 95.768839][ T8175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.768855][ T8175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.768870][ T8175] ? netlink_deliver_tap+0x1ae/0xd30 [ 95.768889][ T8175] netlink_unicast+0x53a/0x7f0 [ 95.768901][ T8175] ? __pfx_netlink_unicast+0x10/0x10 [ 95.768915][ T8175] netlink_sendmsg+0x8d1/0xdd0 [ 95.768931][ T8175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.768947][ T8175] ____sys_sendmsg+0xa95/0xc70 [ 95.768958][ T8175] ? copy_msghdr_from_user+0x10a/0x160 [ 95.768972][ T8175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.768985][ T8175] ? kfree+0x24f/0x4d0 [ 95.768995][ T8175] ? __pfx__kstrtoull+0x10/0x10 [ 95.769010][ T8175] ___sys_sendmsg+0x134/0x1d0 [ 95.769024][ T8175] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.769051][ T8175] ? __pfx___might_resched+0x10/0x10 [ 95.769068][ T8175] __sys_sendmmsg+0x200/0x420 [ 95.769084][ T8175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 95.769103][ T8175] ? bpf_trace_run2+0x265/0x590 [ 95.769120][ T8175] ? __might_fault+0x13b/0x190 [ 95.769139][ T8175] ? find_held_lock+0x2b/0x80 [ 95.769156][ T8175] ? syscall_trace_enter+0x1cb/0x260 [ 95.769177][ T8175] __x64_sys_sendmmsg+0x9c/0x100 [ 95.769196][ T8175] do_syscall_64+0xcd/0x4c0 [ 95.769213][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.769224][ T8175] RIP: 0033:0x7f1e7198e929 [ 95.769233][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.769243][ T8175] RSP: 002b:00007f1e727e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.769254][ T8175] RAX: ffffffffffffffda RBX: 00007f1e71bb5fa0 RCX: 00007f1e7198e929 [ 95.769260][ T8175] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 95.769267][ T8175] RBP: 00007f1e727e8090 R08: 0000000000000000 R09: 0000000000000000 [ 95.769272][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.769278][ T8175] R13: 0000000000000000 R14: 00007f1e71bb5fa0 R15: 00007fff75622418 [ 95.769291][ T8175] [ 95.880336][ T5990] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 95.906311][ T5990] usb 8-1: device descriptor read/8, error -71 [ 95.911499][ T40] audit: type=1400 audit(1751635327.875:490): avc: denied { create } for pid=8179 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.917358][ T40] audit: type=1400 audit(1751635327.875:491): avc: denied { write } for pid=8179 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.004817][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'. [ 96.020844][ T5990] usb usb8-port1: unable to enumerate USB device [ 96.129176][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.732'. [ 96.181740][ T8205] FAULT_INJECTION: forcing a failure. [ 96.181740][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 96.186537][ T8205] CPU: 2 UID: 0 PID: 8205 Comm: syz.4.734 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 96.186560][ T8205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.186571][ T8205] Call Trace: [ 96.186578][ T8205] [ 96.186585][ T8205] dump_stack_lvl+0x16c/0x1f0 [ 96.186614][ T8205] should_fail_ex+0x512/0x640 [ 96.186641][ T8205] should_failslab+0xc2/0x120 [ 96.186668][ T8205] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 96.186693][ T8205] ? skb_clone+0x190/0x3f0 [ 96.186722][ T8205] skb_clone+0x190/0x3f0 [ 96.186747][ T8205] netlink_deliver_tap+0xabd/0xd30 [ 96.186804][ T8205] netlink_unicast+0x6b2/0x7f0 [ 96.186824][ T8205] ? __pfx_netlink_unicast+0x10/0x10 [ 96.186851][ T8205] netlink_ack+0x696/0xb80 [ 96.186873][ T8205] netlink_rcv_skb+0x332/0x420 [ 96.186884][ T8205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.186901][ T8205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.186916][ T8205] ? netlink_deliver_tap+0x1ae/0xd30 [ 96.186934][ T8205] netlink_unicast+0x53a/0x7f0 [ 96.186947][ T8205] ? __pfx_netlink_unicast+0x10/0x10 [ 96.186961][ T8205] netlink_sendmsg+0x8d1/0xdd0 [ 96.186973][ T8205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.186988][ T8205] ____sys_sendmsg+0xa95/0xc70 [ 96.186999][ T8205] ? copy_msghdr_from_user+0x10a/0x160 [ 96.187014][ T8205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.187026][ T8205] ? kfree+0x24f/0x4d0 [ 96.187036][ T8205] ? __pfx__kstrtoull+0x10/0x10 [ 96.187053][ T8205] ___sys_sendmsg+0x134/0x1d0 [ 96.187068][ T8205] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.187094][ T8205] ? __pfx___might_resched+0x10/0x10 [ 96.187112][ T8205] __sys_sendmmsg+0x200/0x420 [ 96.187128][ T8205] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.187147][ T8205] ? bpf_trace_run2+0x265/0x590 [ 96.187163][ T8205] ? __might_fault+0x13b/0x190 [ 96.187177][ T8205] ? find_held_lock+0x2b/0x80 [ 96.187191][ T8205] ? syscall_trace_enter+0x1cb/0x260 [ 96.187206][ T8205] __x64_sys_sendmmsg+0x9c/0x100 [ 96.187221][ T8205] do_syscall_64+0xcd/0x4c0 [ 96.187237][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.187247][ T8205] RIP: 0033:0x7f420678e929 [ 96.187256][ T8205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.187265][ T8205] RSP: 002b:00007f4207640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.187275][ T8205] RAX: ffffffffffffffda RBX: 00007f42069b5fa0 RCX: 00007f420678e929 [ 96.187282][ T8205] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 96.187293][ T8205] RBP: 00007f4207640090 R08: 0000000000000000 R09: 0000000000000000 [ 96.187298][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.187304][ T8205] R13: 0000000000000000 R14: 00007f42069b5fa0 R15: 00007ffea2aa8cc8 [ 96.187318][ T8205] [ 96.278671][ C2] vkms_vblank_simulate: vblank timer overrun [ 96.314803][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.4.735'. [ 96.349157][ T5990] IPVS: starting estimator thread 0... [ 96.399342][ T40] audit: type=1400 audit(1751635328.355:492): avc: denied { mount } for pid=8218 comm="syz.4.738" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.407047][ T40] audit: type=1400 audit(1751635328.365:493): avc: denied { remount } for pid=8218 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.460287][ T8214] IPVS: using max 43 ests per chain, 103200 per kthread [ 97.413802][ T8254] netlink: 124 bytes leftover after parsing attributes in process `syz.3.740'. [ 97.417107][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 97.633544][ T8259] ipt_rpfilter: unknown options [ 98.159453][ T5950] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 98.164832][ T5950] Bluetooth: Wrong link type (-22) [ 98.273475][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.751'. [ 98.278513][ T8285] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 98.280735][ T8285] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.286106][ T8285] vhci_hcd vhci_hcd.0: Device attached [ 98.317484][ T8286] vhci_hcd: connection closed [ 98.319475][ T95] vhci_hcd: stop threads [ 98.324279][ T95] vhci_hcd: release socket [ 98.325580][ T95] vhci_hcd: disconnect device [ 98.467369][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'. [ 98.514607][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 98.514625][ T40] audit: type=1400 audit(1751635330.475:504): avc: denied { unmount } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 98.529640][ T40] audit: type=1326 audit(1751635330.485:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.755" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5bd58e929 code=0x0 [ 98.583268][ T40] audit: type=1400 audit(1751635330.545:506): avc: denied { create } for pid=8300 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.589659][ T40] audit: type=1400 audit(1751635330.545:507): avc: denied { write } for pid=8300 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.624457][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 98.654355][ T8315] FAULT_INJECTION: forcing a failure. [ 98.654355][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 98.658831][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.3.759 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 98.658846][ T8315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.658853][ T8315] Call Trace: [ 98.658857][ T8315] [ 98.658861][ T8315] dump_stack_lvl+0x16c/0x1f0 [ 98.658880][ T8315] should_fail_ex+0x512/0x640 [ 98.658895][ T8315] ? __kmalloc_noprof+0xbf/0x510 [ 98.658911][ T8315] ? u32_change+0x1809/0x40f0 [ 98.658925][ T8315] should_failslab+0xc2/0x120 [ 98.658940][ T8315] __kmalloc_noprof+0xd2/0x510 [ 98.658953][ T8315] ? __nla_parse+0x40/0x60 [ 98.658965][ T8315] u32_change+0x1809/0x40f0 [ 98.658982][ T8315] ? tc_new_tfilter+0x77c/0x2340 [ 98.658993][ T8315] ? __pfx_u32_change+0x10/0x10 [ 98.659009][ T8315] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 98.659044][ T8315] ? lockdep_rtnl_is_held+0x26/0x40 [ 98.659058][ T8315] ? __pfx_u32_change+0x10/0x10 [ 98.659072][ T8315] tc_new_tfilter+0xa35/0x2340 [ 98.659089][ T8315] ? avc_has_perm_noaudit+0x117/0x3b0 [ 98.659101][ T8315] ? __pfx_tc_new_tfilter+0x10/0x10 [ 98.659125][ T8315] ? find_held_lock+0x2b/0x80 [ 98.659139][ T8315] ? __pfx_tc_new_tfilter+0x10/0x10 [ 98.659149][ T8315] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.659164][ T8315] ? __pfx_tc_new_tfilter+0x10/0x10 [ 98.659175][ T8315] rtnetlink_rcv_msg+0x95b/0xe90 [ 98.659191][ T8315] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.659210][ T8315] ? ref_tracker_free+0x37c/0x830 [ 98.659226][ T8315] netlink_rcv_skb+0x158/0x420 [ 98.659238][ T8315] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.659253][ T8315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.659270][ T8315] ? netlink_deliver_tap+0x1ae/0xd30 [ 98.659289][ T8315] netlink_unicast+0x53a/0x7f0 [ 98.659301][ T8315] ? __pfx_netlink_unicast+0x10/0x10 [ 98.659315][ T8315] netlink_sendmsg+0x8d1/0xdd0 [ 98.659328][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.659343][ T8315] ____sys_sendmsg+0xa95/0xc70 [ 98.659354][ T8315] ? copy_msghdr_from_user+0x10a/0x160 [ 98.659369][ T8315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.659381][ T8315] ? kfree+0x24f/0x4d0 [ 98.659391][ T8315] ? __pfx__kstrtoull+0x10/0x10 [ 98.659405][ T8315] ___sys_sendmsg+0x134/0x1d0 [ 98.659420][ T8315] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.659447][ T8315] ? __pfx___might_resched+0x10/0x10 [ 98.659464][ T8315] __sys_sendmmsg+0x200/0x420 [ 98.659479][ T8315] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.659498][ T8315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.659519][ T8315] ? fput+0x70/0xf0 [ 98.659529][ T8315] ? ksys_write+0x1ac/0x250 [ 98.659542][ T8315] ? __pfx_ksys_write+0x10/0x10 [ 98.659558][ T8315] __x64_sys_sendmmsg+0x9c/0x100 [ 98.659572][ T8315] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.659586][ T8315] do_syscall_64+0xcd/0x4c0 [ 98.659602][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.659612][ T8315] RIP: 0033:0x7fc5bd58e929 [ 98.659621][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.659631][ T8315] RSP: 002b:00007fc5be453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.659641][ T8315] RAX: ffffffffffffffda RBX: 00007fc5bd7b5fa0 RCX: 00007fc5bd58e929 [ 98.659649][ T8315] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 98.659656][ T8315] RBP: 00007fc5be453090 R08: 0000000000000000 R09: 0000000000000000 [ 98.659662][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.659668][ T8315] R13: 0000000000000000 R14: 00007fc5bd7b5fa0 R15: 00007ffddc639b18 [ 98.659681][ T8315] [ 98.829705][ T40] audit: type=1400 audit(1751635330.785:508): avc: denied { connect } for pid=8323 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.831548][ T8326] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 98.836440][ T8325] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 98.850040][ T8326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 98.881289][ T8326] bond4: (slave veth3): Enslaving as an active interface with a down link [ 98.887050][ T8333] No such timeout policy "syz1" [ 98.887061][ T8332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.888918][ T8334] netlink: 'syz.1.766': attribute type 3 has an invalid length. [ 98.889598][ T8326] vlan3: entered allmulticast mode [ 98.889609][ T8326] veth1: entered allmulticast mode [ 98.889918][ T8326] veth1: entered promiscuous mode [ 98.890220][ T8326] veth1: left promiscuous mode [ 98.892615][ T8326] bond4: (slave vlan3): making interface the new active one [ 98.905440][ T8326] veth1: entered promiscuous mode [ 98.907339][ T8326] vlan3: entered promiscuous mode [ 98.909149][ T8326] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 98.922127][ T40] audit: type=1400 audit(1751635330.885:509): avc: denied { execute } for pid=8335 comm="syz.1.767" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.950780][ T8342] FAULT_INJECTION: forcing a failure. [ 98.950780][ T8342] name failslab, interval 1, probability 0, space 0, times 0 [ 98.955581][ T8342] CPU: 1 UID: 0 PID: 8342 Comm: syz.2.768 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 98.955596][ T8342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.955603][ T8342] Call Trace: [ 98.955606][ T8342] [ 98.955611][ T8342] dump_stack_lvl+0x16c/0x1f0 [ 98.955630][ T8342] should_fail_ex+0x512/0x640 [ 98.955645][ T8342] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 98.955661][ T8342] should_failslab+0xc2/0x120 [ 98.955677][ T8342] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 98.955691][ T8342] ? __alloc_skb+0x2b2/0x380 [ 98.955707][ T8342] __alloc_skb+0x2b2/0x380 [ 98.955720][ T8342] ? __pfx___alloc_skb+0x10/0x10 [ 98.955732][ T8342] ? __pfx_tc_new_tfilter+0x10/0x10 [ 98.955748][ T8342] netlink_ack+0x15d/0xb80 [ 98.955762][ T8342] netlink_rcv_skb+0x332/0x420 [ 98.955772][ T8342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.955789][ T8342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.955803][ T8342] ? netlink_deliver_tap+0x1ae/0xd30 [ 98.955821][ T8342] netlink_unicast+0x53a/0x7f0 [ 98.955833][ T8342] ? __pfx_netlink_unicast+0x10/0x10 [ 98.955847][ T8342] netlink_sendmsg+0x8d1/0xdd0 [ 98.955858][ T8342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.955873][ T8342] ____sys_sendmsg+0xa95/0xc70 [ 98.955884][ T8342] ? copy_msghdr_from_user+0x10a/0x160 [ 98.955899][ T8342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.955911][ T8342] ? kfree+0x24f/0x4d0 [ 98.955921][ T8342] ? __pfx__kstrtoull+0x10/0x10 [ 98.955935][ T8342] ___sys_sendmsg+0x134/0x1d0 [ 98.955949][ T8342] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.955975][ T8342] ? __pfx___might_resched+0x10/0x10 [ 98.955992][ T8342] __sys_sendmmsg+0x200/0x420 [ 98.956008][ T8342] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.956026][ T8342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.956047][ T8342] ? fput+0x70/0xf0 [ 98.956057][ T8342] ? ksys_write+0x1ac/0x250 [ 98.956070][ T8342] ? __pfx_ksys_write+0x10/0x10 [ 98.956085][ T8342] __x64_sys_sendmmsg+0x9c/0x100 [ 98.956099][ T8342] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.956113][ T8342] do_syscall_64+0xcd/0x4c0 [ 98.956128][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.956139][ T8342] RIP: 0033:0x7f1e7198e929 [ 98.956148][ T8342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.956157][ T8342] RSP: 002b:00007f1e727e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.956167][ T8342] RAX: ffffffffffffffda RBX: 00007f1e71bb5fa0 RCX: 00007f1e7198e929 [ 98.956174][ T8342] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 98.956180][ T8342] RBP: 00007f1e727e8090 R08: 0000000000000000 R09: 0000000000000000 [ 98.956186][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.956192][ T8342] R13: 0000000000000000 R14: 00007f1e71bb5fa0 R15: 00007fff75622418 [ 98.956210][ T8342] [ 99.470048][ T40] audit: type=1400 audit(1751635331.425:510): avc: denied { mounton } for pid=8355 comm="syz.3.774" path="/212/file1/file0" dev="autofs" ino=22560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 99.880440][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.952496][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.970595][ T40] audit: type=1400 audit(1751635331.935:511): avc: denied { write } for pid=8365 comm="syz.2.778" path="socket:[21203]" dev="sockfs" ino=21203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.002345][ T8371] FAULT_INJECTION: forcing a failure. [ 100.002345][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 100.006231][ T8371] CPU: 3 UID: 0 PID: 8371 Comm: syz.2.779 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 100.006246][ T8371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.006252][ T8371] Call Trace: [ 100.006256][ T8371] [ 100.006260][ T8371] dump_stack_lvl+0x16c/0x1f0 [ 100.006279][ T8371] should_fail_ex+0x512/0x640 [ 100.006293][ T8371] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 100.006309][ T8371] should_failslab+0xc2/0x120 [ 100.006325][ T8371] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 100.006339][ T8371] ? __alloc_skb+0x2b2/0x380 [ 100.006355][ T8371] __alloc_skb+0x2b2/0x380 [ 100.006367][ T8371] ? __pfx___alloc_skb+0x10/0x10 [ 100.006380][ T8371] ? __pfx_tc_new_tfilter+0x10/0x10 [ 100.006395][ T8371] netlink_ack+0x15d/0xb80 [ 100.006410][ T8371] netlink_rcv_skb+0x332/0x420 [ 100.006420][ T8371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.006436][ T8371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.006451][ T8371] ? netlink_deliver_tap+0x1ae/0xd30 [ 100.006469][ T8371] netlink_unicast+0x53a/0x7f0 [ 100.006481][ T8371] ? __pfx_netlink_unicast+0x10/0x10 [ 100.006495][ T8371] netlink_sendmsg+0x8d1/0xdd0 [ 100.006507][ T8371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.006522][ T8371] ____sys_sendmsg+0xa95/0xc70 [ 100.006532][ T8371] ? copy_msghdr_from_user+0x10a/0x160 [ 100.006547][ T8371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.006559][ T8371] ? kfree+0x24f/0x4d0 [ 100.006569][ T8371] ? __pfx__kstrtoull+0x10/0x10 [ 100.006583][ T8371] ___sys_sendmsg+0x134/0x1d0 [ 100.006597][ T8371] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.006622][ T8371] ? __pfx___might_resched+0x10/0x10 [ 100.006640][ T8371] __sys_sendmmsg+0x200/0x420 [ 100.006655][ T8371] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.006673][ T8371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.006695][ T8371] ? fput+0x70/0xf0 [ 100.006704][ T8371] ? ksys_write+0x1ac/0x250 [ 100.006734][ T8371] ? __pfx_ksys_write+0x10/0x10 [ 100.006751][ T8371] __x64_sys_sendmmsg+0x9c/0x100 [ 100.006764][ T8371] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.006778][ T8371] do_syscall_64+0xcd/0x4c0 [ 100.006794][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.006804][ T8371] RIP: 0033:0x7f1e7198e929 [ 100.006813][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.006823][ T8371] RSP: 002b:00007f1e727e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.006833][ T8371] RAX: ffffffffffffffda RBX: 00007f1e71bb5fa0 RCX: 00007f1e7198e929 [ 100.006840][ T8371] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 100.006846][ T8371] RBP: 00007f1e727e8090 R08: 0000000000000000 R09: 0000000000000000 [ 100.006852][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.006858][ T8371] R13: 0000000000000000 R14: 00007f1e71bb5fa0 R15: 00007fff75622418 [ 100.006870][ T8371] [ 100.074072][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.113471][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.117133][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.117434][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.127763][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.131402][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.187605][ T40] audit: type=1400 audit(1751635332.145:512): avc: denied { remount } for pid=8383 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 100.193855][ T40] audit: type=1400 audit(1751635332.145:513): avc: denied { mounton } for pid=8383 comm="syz.2.783" path="/172/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.213278][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.279730][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 100.366465][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.368898][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.373972][ T8372] bridge_slave_0: entered allmulticast mode [ 100.377084][ T8372] bridge_slave_0: entered promiscuous mode [ 100.394202][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.396488][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.398763][ T8372] bridge_slave_1: entered allmulticast mode [ 100.401656][ T8372] bridge_slave_1: entered promiscuous mode [ 100.454065][ T8405] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 100.461249][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.470259][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.487291][ T101] bridge_slave_1: left promiscuous mode [ 100.489815][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.495037][ T101] bridge_slave_0: left allmulticast mode [ 100.496937][ T101] bridge_slave_0: left promiscuous mode [ 100.498834][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.750766][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.754677][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.758002][ T101] bond0 (unregistering): Released all slaves [ 100.818883][ T8372] team0: Port device team_slave_0 added [ 100.834659][ T8372] team0: Port device team_slave_1 added [ 100.897906][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.900146][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.908988][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.913338][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.915461][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.927190][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.996899][ T8372] hsr_slave_0: entered promiscuous mode [ 101.000099][ T8372] hsr_slave_1: entered promiscuous mode [ 101.004508][ T8372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.006879][ T8372] Cannot create hsr debugfs directory [ 101.062393][ T101] hsr_slave_0: left promiscuous mode [ 101.064531][ T101] hsr_slave_1: left promiscuous mode [ 101.066523][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.068812][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.073643][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.076619][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.093160][ T101] veth1_to_batadv: left promiscuous mode [ 101.095051][ T101] veth1_macvtap: left promiscuous mode [ 101.096789][ T101] veth0_macvtap: left promiscuous mode [ 101.098597][ T101] veth1_vlan: left promiscuous mode [ 101.100385][ T101] veth0_vlan: left promiscuous mode [ 101.612957][ T101] team0 (unregistering): Port device team_slave_1 removed [ 101.669983][ T101] team0 (unregistering): Port device team_slave_0 removed [ 101.967435][ T8438] Process accounting resumed [ 101.991388][ T8446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 101.993482][ T8446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.996060][ T8446] vhci_hcd vhci_hcd.0: Device attached [ 102.006157][ T8447] vhci_hcd: connection closed [ 102.012278][ T13] vhci_hcd: stop threads [ 102.015143][ T13] vhci_hcd: release socket [ 102.016461][ T13] vhci_hcd: disconnect device [ 102.081079][ T8440] mkiss: ax0: crc mode is auto. [ 102.153902][ T8372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.158749][ T8372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.162919][ T8372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.167151][ T8372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.170366][ T5949] Bluetooth: hci3: command tx timeout [ 102.197339][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 102.235843][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.245890][ T8468] FAULT_INJECTION: forcing a failure. [ 102.245890][ T8468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.247436][ T8372] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.249894][ T8468] CPU: 2 UID: 0 PID: 8468 Comm: syz.1.797 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 102.249909][ T8468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.249916][ T8468] Call Trace: [ 102.249920][ T8468] [ 102.249924][ T8468] dump_stack_lvl+0x16c/0x1f0 [ 102.249942][ T8468] should_fail_ex+0x512/0x640 [ 102.249963][ T8468] _copy_from_user+0x2e/0xd0 [ 102.249979][ T8468] copy_msghdr_from_user+0x98/0x160 [ 102.249994][ T8468] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.250010][ T8468] ? kfree+0x24f/0x4d0 [ 102.250022][ T8468] ? __pfx__kstrtoull+0x10/0x10 [ 102.250035][ T8468] ___sys_sendmsg+0xfe/0x1d0 [ 102.250050][ T8468] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.250076][ T8468] ? __pfx___might_resched+0x10/0x10 [ 102.250093][ T8468] __sys_sendmmsg+0x200/0x420 [ 102.250109][ T8468] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.250127][ T8468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.250149][ T8468] ? fput+0x70/0xf0 [ 102.250169][ T8468] ? ksys_write+0x1ac/0x250 [ 102.250184][ T8468] ? __pfx_ksys_write+0x10/0x10 [ 102.250200][ T8468] __x64_sys_sendmmsg+0x9c/0x100 [ 102.250214][ T8468] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.250228][ T8468] do_syscall_64+0xcd/0x4c0 [ 102.250244][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.250254][ T8468] RIP: 0033:0x7f3a2098e929 [ 102.250263][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.250273][ T8468] RSP: 002b:00007f3a21836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.250283][ T8468] RAX: ffffffffffffffda RBX: 00007f3a20bb5fa0 RCX: 00007f3a2098e929 [ 102.250290][ T8468] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 102.250296][ T8468] RBP: 00007f3a21836090 R08: 0000000000000000 R09: 0000000000000000 [ 102.250302][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.250307][ T8468] R13: 0000000000000000 R14: 00007f3a20bb5fa0 R15: 00007ffe01d470d8 [ 102.250320][ T8468] [ 102.333015][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.335978][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.345794][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.348115][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.433440][ T8487] Invalid source name [ 102.434788][ T8487] UBIFS error (pid: 8487): cannot open "./file0", error -22 [ 102.438347][ T8487] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 102.452776][ T8487] qnx6: wrong signature (magic) in superblock #1. [ 102.457922][ T8487] qnx6: unable to read the first superblock [ 102.463642][ T8487] overlay: ./file0 is not a directory [ 102.492261][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.496521][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 102.576555][ T8510] FAULT_INJECTION: forcing a failure. [ 102.576555][ T8510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.582265][ T8510] CPU: 2 UID: 0 PID: 8510 Comm: syz.2.805 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 102.582281][ T8510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.582287][ T8510] Call Trace: [ 102.582291][ T8510] [ 102.582295][ T8510] dump_stack_lvl+0x16c/0x1f0 [ 102.582314][ T8510] should_fail_ex+0x512/0x640 [ 102.582330][ T8510] _copy_to_user+0x32/0xd0 [ 102.582346][ T8510] do_vfs_ioctl+0x115f/0x1a60 [ 102.582359][ T8510] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.582375][ T8510] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 102.582391][ T8510] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 102.582407][ T8510] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.582427][ T8510] ? hook_file_ioctl_common+0x145/0x410 [ 102.582441][ T8510] ? selinux_file_ioctl+0x180/0x270 [ 102.582454][ T8510] ? selinux_file_ioctl+0xb4/0x270 [ 102.582471][ T8510] __x64_sys_ioctl+0x114/0x210 [ 102.582484][ T8510] do_syscall_64+0xcd/0x4c0 [ 102.582499][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.582510][ T8510] RIP: 0033:0x7f1e7198e929 [ 102.582519][ T8510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.582529][ T8510] RSP: 002b:00007f1e727e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.582539][ T8510] RAX: ffffffffffffffda RBX: 00007f1e71bb5fa0 RCX: 00007f1e7198e929 [ 102.582545][ T8510] RDX: 0000200000000140 RSI: 00000000c0189436 RDI: 0000000000000005 [ 102.582551][ T8510] RBP: 00007f1e727e8090 R08: 0000000000000000 R09: 0000000000000000 [ 102.582557][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.582563][ T8510] R13: 0000000000000000 R14: 00007f1e71bb5fa0 R15: 00007fff75622418 [ 102.582576][ T8510] [ 102.664491][ T101] IPVS: stop unused estimator thread 0... [ 102.695454][ T8372] veth0_vlan: entered promiscuous mode [ 102.699885][ T8372] veth1_vlan: entered promiscuous mode [ 102.755765][ T8372] veth0_macvtap: entered promiscuous mode [ 102.762748][ T8372] veth1_macvtap: entered promiscuous mode [ 102.778780][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.787845][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.795041][ T8372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.799267][ T8372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.802739][ T8372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.805445][ T8372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.877489][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.880083][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.902277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.904766][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.911831][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.813'. [ 103.126524][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.130092][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.133535][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.136942][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.141532][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.144689][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.147605][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 103.174707][ T8563] FAULT_INJECTION: forcing a failure. [ 103.174707][ T8563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.178634][ T8563] CPU: 3 UID: 0 PID: 8563 Comm: syz.5.817 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 103.178649][ T8563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.178655][ T8563] Call Trace: [ 103.178659][ T8563] [ 103.178663][ T8563] dump_stack_lvl+0x16c/0x1f0 [ 103.178682][ T8563] should_fail_ex+0x512/0x640 [ 103.178716][ T8563] _copy_to_user+0x32/0xd0 [ 103.178733][ T8563] do_vfs_ioctl+0x115f/0x1a60 [ 103.178746][ T8563] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.178761][ T8563] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 103.178778][ T8563] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 103.178794][ T8563] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 103.178814][ T8563] ? hook_file_ioctl_common+0x145/0x410 [ 103.178829][ T8563] ? selinux_file_ioctl+0x180/0x270 [ 103.178843][ T8563] ? selinux_file_ioctl+0xb4/0x270 [ 103.178860][ T8563] __x64_sys_ioctl+0x114/0x210 [ 103.178877][ T8563] do_syscall_64+0xcd/0x4c0 [ 103.178893][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.178904][ T8563] RIP: 0033:0x7fd7f3f8e929 [ 103.178914][ T8563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.178924][ T8563] RSP: 002b:00007fd7f4e18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.178934][ T8563] RAX: ffffffffffffffda RBX: 00007fd7f41b5fa0 RCX: 00007fd7f3f8e929 [ 103.178941][ T8563] RDX: 0000200000000140 RSI: 00000000c0189436 RDI: 0000000000000005 [ 103.178948][ T8563] RBP: 00007fd7f4e18090 R08: 0000000000000000 R09: 0000000000000000 [ 103.178954][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.178972][ T8563] R13: 0000000000000000 R14: 00007fd7f41b5fa0 R15: 00007fff17324298 [ 103.178986][ T8563] [ 103.355894][ T5949] Bluetooth: hci3: Unexpected advertising set terminated event [ 103.436357][ T8579] netlink: 'syz.2.820': attribute type 4 has an invalid length. [ 103.502194][ T8582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.569878][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 103.569889][ T40] audit: type=1400 audit(1751635335.525:523): avc: denied { write } for pid=8587 comm="syz.5.824" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.584504][ T8527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.604985][ T8588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 103.607026][ T8588] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.609531][ T8588] vhci_hcd vhci_hcd.0: Device attached [ 103.614819][ T8588] vhci_hcd vhci_hcd.0: port 0 already used [ 103.617404][ T8590] vhci_hcd: connection closed [ 103.618594][ T101] vhci_hcd: stop threads [ 103.622480][ T101] vhci_hcd: release socket [ 103.624048][ T101] vhci_hcd: disconnect device [ 103.793038][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.815655][ T8614] Invalid source name [ 103.817046][ T8614] UBIFS error (pid: 8614): cannot open "./file0", error -22 [ 103.818652][ T8614] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 103.826743][ T8614] qnx6: wrong signature (magic) in superblock #1. [ 103.828810][ T8614] qnx6: unable to read the first superblock [ 103.835941][ T8614] overlay: ./file0 is not a directory [ 103.936746][ T40] audit: type=1400 audit(1751635335.895:524): avc: denied { watch } for pid=8629 comm="syz.1.833" path="/222/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.045944][ T40] audit: type=1400 audit(1751635336.005:525): avc: denied { create } for pid=8644 comm="syz.1.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.052271][ T40] audit: type=1400 audit(1751635336.005:526): avc: denied { append } for pid=8647 comm="syz.2.837" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.215452][ T8671] xt_TCPMSS: Only works on TCP SYN packets [ 104.263013][ T5949] Bluetooth: hci3: command tx timeout [ 104.265296][ T40] audit: type=1400 audit(1751635336.225:527): avc: denied { read } for pid=8676 comm="syz.2.844" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.279185][ T40] audit: type=1400 audit(1751635336.225:528): avc: denied { open } for pid=8676 comm="syz.2.844" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.294654][ T40] audit: type=1400 audit(1751635336.225:529): avc: denied { ioctl } for pid=8676 comm="syz.2.844" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.332270][ T40] audit: type=1400 audit(1751635336.295:530): avc: denied { connect } for pid=8689 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.339423][ T40] audit: type=1400 audit(1751635336.295:531): avc: denied { setopt } for pid=8693 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.506385][ T40] audit: type=1400 audit(1751635336.465:532): avc: denied { ioctl } for pid=8710 comm="syz.4.853" path="socket:[22402]" dev="sockfs" ino=22402 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.525037][ T8713] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.531177][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.593465][ T8728] input: syz1 as /devices/virtual/input/input19 [ 104.665642][ T8724] binder: BINDER_SET_CONTEXT_MGR already set [ 104.667596][ T8724] binder: 8722:8724 ioctl 40046207 0 returned -16 [ 104.682401][ T8723] binder_alloc: binder_alloc_mmap_handler: 8722 200000ffd000-200001000000 already mapped failed -16 [ 104.684537][ T8724] binder_alloc: 8722: binder_alloc_buf, no vma [ 104.901669][ T8749] ubi0: attaching mtd0 [ 104.905849][ T8749] ubi0: scanning is finished [ 104.908245][ T8749] ubi0: empty MTD device detected [ 105.002274][ T8749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 105.004611][ T8749] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 105.006773][ T8749] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 105.008853][ T8749] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 105.011420][ T8749] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 105.013496][ T8749] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 105.015718][ T8749] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3302221361 [ 105.018418][ T8749] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 105.022218][ T8755] ubi0: background thread "ubi_bgt0d" started, PID 8755 [ 105.643034][ T8772] input: syz1 as /devices/virtual/input/input20 [ 105.850388][ T6590] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 105.882314][ T8788] FAULT_INJECTION: forcing a failure. [ 105.882314][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.886403][ T8788] CPU: 3 UID: 0 PID: 8788 Comm: syz.2.871 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 105.886418][ T8788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.886425][ T8788] Call Trace: [ 105.886429][ T8788] [ 105.886434][ T8788] dump_stack_lvl+0x16c/0x1f0 [ 105.886453][ T8788] should_fail_ex+0x512/0x640 [ 105.886469][ T8788] _copy_from_user+0x2e/0xd0 [ 105.886485][ T8788] do_sys_poll+0x1d5/0xdf0 [ 105.886500][ T8788] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.886517][ T8788] ? kernel_text_address+0x8d/0x100 [ 105.886529][ T8788] ? __kernel_text_address+0xd/0x40 [ 105.886542][ T8788] ? __pfx_do_sys_poll+0x10/0x10 [ 105.886567][ T8788] ? find_held_lock+0x2b/0x80 [ 105.886606][ T8788] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 105.886623][ T8788] ? set_user_sigmask+0x21b/0x2b0 [ 105.886634][ T8788] ? __pfx_set_user_sigmask+0x10/0x10 [ 105.886646][ T8788] ? __fget_files+0x20e/0x3c0 [ 105.886678][ T8788] __x64_sys_ppoll+0x254/0x2d0 [ 105.886694][ T8788] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 105.886708][ T8788] ? ksys_write+0x1ac/0x250 [ 105.886722][ T8788] ? __pfx_ksys_write+0x10/0x10 [ 105.886739][ T8788] do_syscall_64+0xcd/0x4c0 [ 105.886755][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.886766][ T8788] RIP: 0033:0x7f1e7198e929 [ 105.886775][ T8788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.886785][ T8788] RSP: 002b:00007f1e727c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 105.886795][ T8788] RAX: ffffffffffffffda RBX: 00007f1e71bb6080 RCX: 00007f1e7198e929 [ 105.886801][ T8788] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 105.886807][ T8788] RBP: 00007f1e727c7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.886813][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.886819][ T8788] R13: 0000000000000000 R14: 00007f1e71bb6080 R15: 00007fff75622418 [ 105.886832][ T8788] [ 105.952919][ C3] vkms_vblank_simulate: vblank timer overrun [ 106.001465][ T6590] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 106.004008][ T6590] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.007493][ T6590] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.011104][ T6590] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.014476][ T6590] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.018283][ T6590] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.021148][ T6590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.025756][ T6590] usb 9-1: config 0 descriptor?? [ 106.027809][ T8766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.330479][ T5950] Bluetooth: hci3: command tx timeout [ 106.434482][ T8766] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.438414][ T6590] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 106.448522][ T6590] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 106.580400][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 106.580413][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.650936][ T5977] usb 9-1: USB disconnect, device number 3 [ 106.733814][ T8812] random: crng reseeded on system resumption [ 106.743276][ T8812] Restarting kernel threads ... [ 106.745284][ T8812] Done restarting kernel threads. [ 106.788297][ T8815] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 106.794117][ T8815] macsec1: entered allmulticast mode [ 106.795826][ T8815] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 106.801292][ T8815] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 106.803738][ T8815] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 107.121178][ T8844] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 107.125497][ T8844] overlayfs: overlapping lowerdir path [ 107.175856][ T8839] netlink: 'syz.5.886': attribute type 13 has an invalid length. [ 107.198027][ T8851] overlay: ./bus is not a directory [ 107.225398][ T8853] __nla_validate_parse: 62 callbacks suppressed [ 107.225410][ T8853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.890'. [ 107.696239][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 107.787782][ T8877] netlink: 'syz.1.896': attribute type 4 has an invalid length. [ 107.793446][ T8877] netlink: 'syz.1.896': attribute type 4 has an invalid length. [ 108.151863][ T8922] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 108.410280][ T5949] Bluetooth: hci3: command tx timeout [ 108.420455][ T7164] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 108.586875][ T7164] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.590000][ T7164] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.593209][ T7164] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 108.595401][ T8925] mkiss: ax0: crc mode is auto. [ 108.595989][ T7164] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.602323][ T7164] usb 9-1: config 0 descriptor?? [ 108.606490][ T7164] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 108.608888][ T7164] dvb-usb: bulk message failed: -22 (3/0) [ 108.612984][ T7164] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 108.615924][ T7164] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 108.618095][ T7164] usb 9-1: media controller created [ 108.620532][ T7164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.626396][ T7164] dvb-usb: bulk message failed: -22 (6/0) [ 108.628222][ T7164] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 108.633709][ T7164] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input22 [ 108.638028][ T7164] dvb-usb: schedule remote query interval to 150 msecs. [ 108.640784][ T7164] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 108.649929][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 108.649939][ T40] audit: type=1400 audit(1751635340.605:549): avc: denied { write } for pid=8924 comm="syz.5.910" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.811360][ T7164] dvb-usb: bulk message failed: -22 (1/0) [ 108.811530][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.813773][ T7164] dvb-usb: error while querying for an remote control event. [ 108.816744][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.824881][ T29] usb 9-1: USB disconnect, device number 4 [ 108.843884][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 108.857214][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 109.024128][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 109.105378][ T8953] overlayfs: failed to resolve './bus/file0': -2 [ 109.110473][ T838] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 109.190330][ T5990] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 109.272063][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.275557][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.278623][ T838] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 109.281566][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.286771][ T838] usb 6-1: config 0 descriptor?? [ 109.350328][ T5990] usb 10-1: Using ep0 maxpacket: 8 [ 109.361514][ T5990] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 109.364513][ T5990] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 109.368237][ T5990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.372337][ T5990] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 109.373878][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 109.376316][ T5990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 109.382965][ T5990] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.387250][ T5990] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.390844][ T5990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.602407][ T5990] usb 10-1: GET_CAPABILITIES returned 0 [ 109.604245][ T5990] usbtmc 10-1:16.0: can't read capabilities [ 109.616681][ T8963] netlink: 180 bytes leftover after parsing attributes in process `syz.4.924'. [ 109.695038][ T838] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 109.697289][ T838] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 109.701182][ T838] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0007/input/input23 [ 109.715462][ T838] cm6533_jd 0003:0D8C:0022.0007: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 109.798297][ T8971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=225 sclass=netlink_route_socket pid=8971 comm=syz.4.927 [ 109.807316][ C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 109.811798][ T8945] usbtmc 10-1:16.0: Unable to send data, error -71 [ 109.817038][ T7164] usb 10-1: USB disconnect, device number 2 [ 109.935165][ T40] audit: type=1400 audit(1751635341.895:550): avc: denied { write } for pid=8934 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.945690][ T53] usb 6-1: USB disconnect, device number 7 [ 110.082721][ T94] vlan3: left promiscuous mode [ 110.128216][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.930'. [ 110.130406][ T5990] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 110.138330][ T8984] netlink: 'syz.2.930': attribute type 83 has an invalid length. [ 110.267982][ T8993] ISOFS: Unable to identify CD-ROM format. [ 110.270663][ T5990] usb 9-1: device descriptor read/64, error -71 [ 110.277919][ T8992] ISOFS: Unable to identify CD-ROM format. [ 110.378105][ T9002] netlink: 'syz.5.936': attribute type 39 has an invalid length. [ 110.408539][ T9006] netlink: 180 bytes leftover after parsing attributes in process `syz.2.937'. [ 110.472313][ T9012] veth0_to_bond: entered allmulticast mode [ 110.520311][ T5990] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 110.650343][ T5990] usb 9-1: device descriptor read/64, error -71 [ 110.680343][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 110.769868][ T5990] usb usb9-port1: attempt power cycle [ 110.841463][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.844893][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.847891][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.853495][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.856920][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.867013][ T29] usb 10-1: config 0 descriptor?? [ 111.120267][ T5990] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 111.140925][ T5990] usb 9-1: device descriptor read/8, error -71 [ 111.277452][ T29] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 111.336817][ T9040] netlink: 180 bytes leftover after parsing attributes in process `syz.1.947'. [ 111.340085][ T40] audit: type=1326 audit(1751635343.295:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.356847][ T40] audit: type=1326 audit(1751635343.295:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.364751][ T40] audit: type=1326 audit(1751635343.305:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.372007][ T40] audit: type=1326 audit(1751635343.305:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.380944][ T40] audit: type=1326 audit(1751635343.305:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.389331][ T40] audit: type=1326 audit(1751635343.305:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.398823][ T5990] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 111.399259][ T40] audit: type=1326 audit(1751635343.305:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.409435][ T40] audit: type=1326 audit(1751635343.305:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.2.940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7198e929 code=0x7fc00000 [ 111.421036][ T5990] usb 9-1: device descriptor read/8, error -71 [ 111.431790][ T9044] syz.1.949: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 111.532066][ T5990] usb usb9-port1: unable to enumerate USB device [ 111.676814][ T9062] netlink: 180 bytes leftover after parsing attributes in process `syz.2.956'. [ 111.950286][ T5990] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 112.100240][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 112.103865][ T5990] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 112.106770][ T5990] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.111095][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.115527][ T5990] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.120044][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.124438][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.128691][ T5990] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.133744][ T5990] usb 7-1: config 168 interface 0 has no altsetting 0 [ 112.137165][ T5990] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 112.139960][ T5990] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.144213][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.148581][ T5990] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.153172][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.157380][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.161858][ T5990] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.167018][ T5990] usb 7-1: config 168 interface 0 has no altsetting 0 [ 112.170434][ T5990] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 112.173308][ T5990] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.177097][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.180843][ T5990] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.184890][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.188322][ T5990] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.191861][ T5990] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.195990][ T5990] usb 7-1: config 168 interface 0 has no altsetting 0 [ 112.200602][ T5990] usb 7-1: string descriptor 0 read error: -22 [ 112.203046][ T5990] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.205814][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.215219][ T5990] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 112.465321][ T6015] usb 7-1: USB disconnect, device number 6 [ 112.767539][ T9098] netlink: 180 bytes leftover after parsing attributes in process `syz.2.966'. [ 112.842274][ T9107] input: syz1 as /devices/virtual/input/input24 [ 113.086408][ T9124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9124 comm=syz.4.976 [ 113.190824][ T9139] hpfs: hpfs_map_sector(): read error [ 113.300406][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'. [ 113.354766][ T10] usb 10-1: USB disconnect, device number 3 [ 113.381524][ T9158] /dev/sg0: Can't lookup blockdev [ 113.469289][ T9168] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 113.475977][ T9168] netlink: 244 bytes leftover after parsing attributes in process `syz.4.989'. [ 113.560810][ T5990] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 113.575875][ T9181] tipc: Started in network mode [ 113.577456][ T9181] tipc: Node identity e0000002, cluster identity 4711 [ 113.579668][ T9181] tipc: Enabling of bearer rejected, failed to enable media [ 113.621580][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.995'. [ 113.719557][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 113.719568][ T40] audit: type=1400 audit(1751635345.675:625): avc: denied { read } for pid=9197 comm="syz.5.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.732482][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.736183][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.739299][ T5990] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 113.742473][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.746433][ T5990] usb 7-1: config 0 descriptor?? [ 113.755248][ T9203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20508 sclass=netlink_route_socket pid=9203 comm=syz.1.997 [ 113.914814][ T9231] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1008'. [ 113.945062][ T40] audit: type=1400 audit(1751635345.905:626): avc: denied { accept } for pid=9233 comm="syz.5.1009" path="socket:[26956]" dev="sockfs" ino=26956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.954726][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1009'. [ 113.957587][ T9235] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 113.958223][ T9234] evm: overlay not supported [ 113.960328][ T9235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.050282][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 114.103331][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1013'. [ 114.157625][ T5990] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 114.160937][ T5990] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 114.165607][ T5990] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0009/input/input25 [ 114.179586][ T5990] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 114.201528][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.204896][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.207851][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.213301][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.216534][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.221987][ T10] usb 6-1: config 0 descriptor?? [ 114.299912][ T9258] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1017'. [ 114.413100][ T9271] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 114.418414][ T838] usb 7-1: USB disconnect, device number 7 [ 114.441666][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 114.443626][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.451788][ T10] usb 6-1: USB disconnect, device number 8 [ 114.480755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.490496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.571913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.574565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.577149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.579712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.582522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.644484][ T9284] kvm: kvm [9279]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x204 [ 114.671292][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'. [ 115.058673][ T9296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1024'. [ 115.061761][ T9296] netlink: 'syz.2.1024': attribute type 6 has an invalid length. [ 115.065196][ T9296] netlink: 'syz.2.1024': attribute type 5 has an invalid length. [ 115.067740][ T9296] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 115.194854][ T40] audit: type=1400 audit(1751635347.155:627): avc: denied { write } for pid=9298 comm="syz.2.1025" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.409567][ T9314] random: crng reseeded on system resumption [ 115.467249][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.471048][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.473362][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.476222][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.478535][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.491344][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.492640][ T9325] Failed to initialize the IGMP autojoin socket (err -2) [ 115.493623][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.498230][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.506779][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.509106][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.511629][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.513929][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.516265][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.518570][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.524026][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.526343][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.528624][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.533269][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.535582][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.537856][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.540149][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.542480][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.544790][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.547094][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.549328][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.553237][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.555541][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.557824][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.560122][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.562935][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.565250][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.567541][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.570224][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.573312][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.575586][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.577858][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.580152][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.592554][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.594889][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.597175][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.599468][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.602132][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.604446][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.606734][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.609013][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.611678][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.614178][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.616456][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.618744][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.622642][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.624945][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.627229][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.629493][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.636030][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.638343][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.640835][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.643140][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.645418][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.647710][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.649985][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.652566][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.654854][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.657105][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.659344][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.664130][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.666697][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.668978][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.672671][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.674989][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.690265][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.692598][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.694905][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.697210][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.699527][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.702059][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.704364][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.706644][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.708940][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.711709][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.714014][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.716295][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.718587][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.722005][ T7164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.728263][ T7164] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 115.774844][ T9347] netlink: 'syz.2.1034': attribute type 29 has an invalid length. [ 115.777962][ T9347] netlink: 'syz.2.1034': attribute type 29 has an invalid length. [ 115.782517][ T9343] fido_id[9343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.792267][ T9347] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 115.794666][ T9347] PKCS7: Only support pkcs7_signedData type [ 115.837441][ T40] audit: type=1400 audit(1751635347.795:628): avc: denied { map } for pid=9350 comm="syz.1.1035" path="pipe:[7332]" dev="pipefs" ino=7332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.974501][ T40] audit: type=1400 audit(1751635347.935:629): avc: denied { execute } for pid=9376 comm="syz.2.1044" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.986262][ T9380] Failed to initialize the IGMP autojoin socket (err -2) [ 116.259026][ T40] audit: type=1400 audit(1751635348.215:630): avc: denied { create } for pid=9398 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.266423][ T40] audit: type=1400 audit(1751635348.215:631): avc: denied { getopt } for pid=9398 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.352585][ T40] audit: type=1400 audit(1751635348.315:632): avc: denied { setattr } for pid=9408 comm="syz.1.1052" name="/" dev="9p" ino=35913831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.360155][ T9411] netlink: 'syz.2.1053': attribute type 29 has an invalid length. [ 116.370818][ T9411] netlink: 'syz.2.1053': attribute type 29 has an invalid length. [ 116.397810][ T9413] autofs4:pid:9413:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 116.428544][ T40] audit: type=1400 audit(1751635348.385:633): avc: denied { mount } for pid=9418 comm="syz.1.1054" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 116.436621][ T40] audit: type=1400 audit(1751635348.385:634): avc: denied { mounton } for pid=9418 comm="syz.1.1054" path="/277/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 116.438853][ T9420] geneve2: entered promiscuous mode [ 116.446209][ T9420] geneve2: entered allmulticast mode [ 116.469907][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.637241][ T9444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.658281][ T9447] 9pnet: Could not find request transport: jmap [ 116.832172][ T9460] sp0: Synchronizing with TNC [ 116.908850][ T9464] netlink: 'syz.4.1066': attribute type 11 has an invalid length. [ 116.912212][ T9464] overlayfs: overlapping lowerdir path [ 116.913370][ T9466] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 116.992855][ T9482] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.995354][ T9482] overlayfs: failed to set xattr on upper [ 116.997232][ T9482] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.999476][ T9482] overlayfs: ...falling back to index=off. [ 117.001458][ T9482] overlayfs: ...falling back to uuid=null. [ 117.038782][ T9492] overlayfs: failed to resolve './file1': -2 [ 117.059496][ T9494] netlink: 'syz.5.1079': attribute type 1 has an invalid length. [ 117.085992][ T9508] netlink: 'syz.1.1082': attribute type 21 has an invalid length. [ 117.089892][ T9510] afs: Unknown parameter 'autƒkell' [ 117.152438][ T9520] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 117.155666][ T9520] overlayfs: overlapping lowerdir path [ 117.172291][ T9524] overlayfs: failed to resolve './file1': -2 [ 117.334228][ T9557] overlayfs: failed to resolve './file1': -2 [ 117.440257][ T6015] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 117.474409][ T9580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=9580 comm=syz.5.1110 [ 117.567240][ T9590] overlayfs: failed to resolve './file0': -2 [ 117.612308][ T6015] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.616321][ T6015] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.621137][ T6015] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.623939][ T6015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.735447][ T9601] IPVS: Error during creation of socket; terminating [ 117.833773][ T6015] usb 9-1: usb_control_msg returned -32 [ 117.835481][ T6015] usbtmc 9-1:16.0: can't read capabilities [ 118.009267][ T9615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 118.044543][ T9620] overlayfs: failed to resolve './file0': -2 [ 118.317223][ T9642] overlayfs: failed to resolve './file0': -2 [ 118.372371][ T9644] __nla_validate_parse: 17 callbacks suppressed [ 118.372383][ T9644] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1134'. [ 118.623885][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 118.626992][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 118.630374][ T9667] validate_nla: 2 callbacks suppressed [ 118.630383][ T9667] netlink: 'syz.2.1141': attribute type 20 has an invalid length. [ 118.631727][ T9669] netlink: 'syz.5.1142': attribute type 2 has an invalid length. [ 118.661593][ T9671] overlayfs: failed to resolve './file0': -2 [ 118.796295][ T9688] random: crng reseeded on system resumption [ 118.823172][ T9694] overlayfs: failed to resolve './file0': -2 [ 118.862151][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 118.862161][ T40] audit: type=1400 audit(1751635350.825:645): avc: denied { append } for pid=9697 comm="syz.5.1155" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.038906][ T9720] overlayfs: failed to resolve './file0': -2 [ 119.160642][ T40] audit: type=1400 audit(1751635351.125:646): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.210252][ T6017] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 119.340270][ T6017] usb 10-1: device descriptor read/64, error -71 [ 119.420371][ T7164] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.570289][ T7164] usb 7-1: Using ep0 maxpacket: 8 [ 119.573084][ T7164] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.576389][ T7164] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.579180][ T7164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.583381][ T7164] usb 7-1: config 0 descriptor?? [ 119.590386][ T6017] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 119.720279][ T6017] usb 10-1: device descriptor read/64, error -71 [ 119.790779][ T7164] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 119.840360][ T6017] usb usb10-port1: attempt power cycle [ 120.188204][ T7164] usb 9-1: USB disconnect, device number 9 [ 120.191864][ T9728] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -19 [ 120.197216][ T24] usb 7-1: USB disconnect, device number 8 [ 120.210225][ T6017] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 120.241735][ T6017] usb 10-1: device descriptor read/8, error -71 [ 120.490282][ T6017] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 120.510997][ T6017] usb 10-1: device descriptor read/8, error -71 [ 120.630843][ T6017] usb usb10-port1: unable to enumerate USB device [ 121.388768][ T9776] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 121.455395][ T9789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1185'. [ 121.497706][ T9794] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 121.501556][ T9794] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 121.504954][ T9794] CPU: 3 UID: 0 PID: 9794 Comm: syz.2.1187 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 121.509082][ T9794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.512368][ T9794] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 121.514659][ T9794] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 121.520862][ T9794] RSP: 0018:ffffc9000375f270 EFLAGS: 00010202 [ 121.522754][ T9794] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000c0d1000 [ 121.525235][ T9794] RDX: 000000000000000b RSI: ffffffff8993652c RDI: 0000000000000058 [ 121.527672][ T9794] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 121.530108][ T9794] R10: 00000000000b0000 R11: 0000000000000001 R12: ffffffff8ce8c620 [ 121.532551][ T9794] R13: 0000000000000058 R14: ffffffff8ce8c600 R15: ffff88802aae9000 [ 121.535090][ T9794] FS: 00007f1e727e86c0(0000) GS:ffff8880d6a17000(0000) knlGS:0000000000000000 [ 121.537827][ T9794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.539886][ T9794] CR2: 00007ffe01d46ac0 CR3: 000000004cdb7000 CR4: 0000000000352ef0 [ 121.542458][ T9794] Call Trace: [ 121.543554][ T9794] [ 121.544534][ T9794] drr_qlen_notify+0x24/0x150 [ 121.546032][ T9794] qdisc_tree_reduce_backlog+0x224/0x500 [ 121.547787][ T9794] fq_change+0xc60/0x1d30 [ 121.549145][ T9794] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 121.551027][ T9794] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.552655][ T9794] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.554510][ T9794] ? __pfx_fq_change+0x10/0x10 [ 121.556040][ T9794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.557940][ T9794] ? __pfx_qdisc_watchdog+0x10/0x10 [ 121.559578][ T9794] ? __hrtimer_setup+0x176/0x280 [ 121.561110][ T9794] fq_init+0x696/0x840 [ 121.562383][ T9794] ? __pfx_fq_init+0x10/0x10 [ 121.563854][ T9794] qdisc_create+0x457/0xfc0 [ 121.565304][ T9794] tc_modify_qdisc+0x12bb/0x2130 [ 121.566855][ T9794] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 121.568493][ T9794] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 121.570126][ T9794] rtnetlink_rcv_msg+0x3c9/0xe90 [ 121.571673][ T9794] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.573384][ T9794] ? ref_tracker_free+0x37c/0x830 [ 121.574962][ T9794] netlink_rcv_skb+0x158/0x420 [ 121.576454][ T9794] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.578149][ T9794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.580021][ T9794] ? netlink_deliver_tap+0x1ae/0xd30 [ 121.582142][ T9794] netlink_unicast+0x53a/0x7f0 [ 121.583735][ T9794] ? __pfx_netlink_unicast+0x10/0x10 [ 121.585427][ T9794] netlink_sendmsg+0x8d1/0xdd0 [ 121.586893][ T9794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.588508][ T9794] ____sys_sendmsg+0xa95/0xc70 [ 121.589996][ T9794] ? copy_msghdr_from_user+0x10a/0x160 [ 121.591688][ T9794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.593321][ T9794] ? preempt_schedule_thunk+0x16/0x30 [ 121.595035][ T9794] ? try_to_wake_up+0xa2f/0x1680 [ 121.596573][ T9794] ___sys_sendmsg+0x134/0x1d0 [ 121.598098][ T9794] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.599754][ T9794] ? __lock_acquire+0x622/0x1c90 [ 121.601400][ T9794] __sys_sendmsg+0x16d/0x220 [ 121.602897][ T9794] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.604512][ T9794] ? __x64_sys_futex+0x1e0/0x4c0 [ 121.606058][ T9794] do_syscall_64+0xcd/0x4c0 [ 121.607497][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.609358][ T9794] RIP: 0033:0x7f1e7198e929 [ 121.610724][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.616594][ T9794] RSP: 002b:00007f1e727e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.619185][ T9794] RAX: ffffffffffffffda RBX: 00007f1e71bb5fa0 RCX: 00007f1e7198e929 [ 121.621616][ T9794] RDX: 0000000004048000 RSI: 0000200000000200 RDI: 0000000000000006 [ 121.624058][ T9794] RBP: 00007f1e71a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.626599][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.629028][ T9794] R13: 0000000000000000 R14: 00007f1e71bb5fa0 R15: 00007fff75622418 [ 121.631468][ T9794] [ 121.632446][ T9794] Modules linked in: [ 121.633786][ C3] vkms_vblank_simulate: vblank timer overrun [ 121.634476][ T40] audit: type=1400 audit(1751635353.595:647): avc: denied { read } for pid=5341 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 121.635781][ T9794] ---[ end trace 0000000000000000 ]--- [ 121.643983][ T40] audit: type=1400 audit(1751635353.605:648): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.644397][ T9794] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 121.651313][ T40] audit: type=1400 audit(1751635353.605:649): avc: denied { search } for pid=5341 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.653045][ T9794] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 121.653058][ T9794] RSP: 0018:ffffc9000375f270 EFLAGS: 00010202 [ 121.653068][ T9794] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000c0d1000 [ 121.659580][ T40] audit: type=1400 audit(1751635353.605:650): avc: denied { add_name } for pid=5341 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.665706][ T9794] RDX: 000000000000000b RSI: ffffffff8993652c RDI: 0000000000000058 [ 121.667607][ T40] audit: type=1400 audit(1751635353.605:651): avc: denied { create } for pid=5341 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.670072][ T9794] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 121.670081][ T9794] R10: 00000000000b0000 R11: 0000000000000001 R12: ffffffff8ce8c620 [ 121.670088][ T9794] R13: 0000000000000058 R14: ffffffff8ce8c600 R15: ffff88802aae9000 [ 121.670095][ T9794] FS: 00007f1e727e86c0(0000) GS:ffff8880d6a17000(0000) knlGS:0000000000000000 [ 121.670117][ T9794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.677536][ T40] audit: type=1400 audit(1751635353.605:652): avc: denied { append open } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.678902][ T9794] CR2: 00007ffe01d46ac0 CR3: 000000004cdb7000 CR4: 0000000000352ef0 [ 121.685365][ T40] audit: type=1400 audit(1751635353.605:653): avc: denied { getattr } for pid=5341 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.687574][ T9794] Kernel panic - not syncing: Fatal exception in interrupt [ 121.690535][ T9794] Kernel Offset: disabled VM DIAGNOSIS: 13:22:33 Registers: info registers vcpu 0 CPU#0 RAX=00000000001175bc RBX=0000000000000000 RCX=ffffffff8b885c69 RDX=ffffed100d486646 RSI=ffffffff8c157fe0 RDI=ffffffff8191fc61 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a96a50 R15=0000000000000000 RIP=ffffffff8b8847cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6717000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe01d45bb8 CR3=0000000034cb3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000400000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206985488 00007f4206985480 00007f4206985478 00007f4206985450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42074ed100 00007f4206985440 00007f4206980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4206985498 00007f4206985490 00007f4206985488 00007f4206985480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000011 RCX=ffffffff81b01697 RDX=ffff888026cea440 RSI=ffffffff81b01682 RDI=0000000000000005 RBP=ffffc90003d2fbd0 RSP=ffffc90003d2fa80 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a73b2e8 R12=1ffff920007a5f58 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81b0168b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555de08500 ffffffff 00c00000 GS =0000 ffff8880d6817000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ea47f CR3=0000000051134000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71b85488 00007f1e71b85480 00007f1e71b85478 00007f1e71b85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e726ed100 00007f1e71b85440 00007f1e71b80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71b85498 00007f1e71b85490 00007f1e71b85488 00007f1e71b85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000b6174 RBX=0000000000000002 RCX=ffffffff8b885c69 RDX=ffffed100d4c6646 RSI=ffffffff8c157fe0 RDI=ffffffff8191fc61 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90a96a50 R15=0000000000000000 RIP=ffffffff8b8847cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6917000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1e727e7f98 CR3=000000004ce49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff17324620 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7f4011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7f4011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7f4011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7f4011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7f4011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7f4011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bfdb5 RDI=ffffffff9b0c3320 RBP=ffffffff9b0c32e0 RSP=ffffc9000375ebe0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0c32e0 R15=ffffffff855bfd50 RIP=ffffffff855bfddf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1e727e86c0 ffffffff 00c00000 GS =0000 ffff8880d6a17000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe01d46ac0 CR3=000000004cdb7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71b85488 00007f1e71b85480 00007f1e71b85478 00007f1e71b85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e726ed100 00007f1e71b85440 00007f1e71b85458 00007f1e71b854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e71b85498 00007f1e71b85490 00007f1e71b85488 00007f1e71b85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000