last executing test programs: 12.760136273s ago: executing program 3 (id=949): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00000000b40000001c0012800c0001006d6163766c616e000c00028006000200000007d1a363981dee4fc2fc8600000000003ce52fb814ac7f674f1abd0ca668f6f3c60b85e63b31713b3e8fd87824a643201b1798cea60876e7a39169261253f7d20f3e46218fe5b7a87722fd7e81a340a88f08df58f15737a2cbb3d3ee9e40210f", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) (async) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000380)={[0x1000, 0xffff1000, 0xeeef0000, 0x100000], 0x947, 0x62, 0xe815}) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) (async) syz_emit_ethernet(0x11b, &(0x7f0000000040)={@random="9d1542e2b90d", @empty, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1c0a, 0x0, 0x1}, {0x5}, {0x5, 0x0, 0x1}, {0xe73, 0x0, 0x1}, {0x3f04, 0x0, 0x1}], @ipv4=@udp={{0x30, 0x4, 0x1, 0x3, 0xf1, 0x65, 0x0, 0x5, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x1c, 0x4e, 0x0, 0xe, [0x0, 0x9, 0x29, 0xe, 0x2, 0x6]}, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x1, [{@local, 0x906c}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x94, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0xd1}, {@private=0xa010100, 0x3}, {@empty, 0xfffff2d1}, {@loopback, 0xe}, {@local, 0xffffffff}, {@loopback, 0x8}, {@private=0xa010100, 0xffff}, {@loopback}, {@empty, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x84, 0x3, 0x9, [{@multicast2, 0x401}, {@multicast2, 0xfb9}, {@local, 0x1d4e}]}, @rr={0x7, 0x17, 0x56, [@multicast1, @local, @broadcast, @multicast1, @remote]}]}}, {0x4e22, 0x4e24, 0x31, 0x0, @gue={{0x1, 0x0, 0x0, 0x92, 0x0, @void}, "f6a7f857fd00814279d4d4ffb858e5495d3ec1986dfe9b6352f3f1e52274a036ac298f57a9"}}}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x1a3, 0xaad, 0xde, 0x4a]}) (async, rerun: 64) r8 = socket$inet(0x2, 0x3, 0xd) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xcef}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4010) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xdab, 0x7}, @sack_perm, @window={0x3, 0x25, 0x8001}], 0x4) (rerun: 64) 11.84030408s ago: executing program 3 (id=951): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="90e0ce76dfe6", 0x6}], 0x1}}], 0x1, 0x20000011) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) write$binfmt_aout(r4, 0x0, 0xffffffdb) faccessat2(r4, &(0x7f0000000000)='./file0\x00', 0x10, 0x1000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@fd={0xb, 0x3, 0x4, 0x400, 0x8, {0x77359400}, {0x3, 0x1d973510dca53372, 0x5, 0xff, 0x6d, 0x4, "4c9ce701"}, 0x8, 0x4, {}, 0x8}) write$sequencer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 11.780627128s ago: executing program 3 (id=952): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x2, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 11.620573139s ago: executing program 3 (id=953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x4000000, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x2, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000743ab0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a911f1e1c000000000000070000000900010073797a30000000000c0010"], 0xb0}}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000050000000000000000007aa29b30a77b06471292f910000031aaa9258da5ae8fca945aa186e2", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(r1, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000280)={0x2b, 0x2c, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x4, 0xad, "23795c63aff61a1f8aea3ef6ffd1840dfb7ec97504414619cf14ea841e8b2287fd26e512793861cf0de26fb9bc32ebcf9cc18c98915389b4dfb2c58b76ee892ebd3abaee2d128bd0baa365f2e858e21dd8508ff58e739dd442b9cd6e5926d4da4a61c0ffd193e01c836baaf8b01a44342c54c1b7a526f05b116d2a18791e4c6c1dd7b9806790246642d42e754b1ff85fd36303b15f5d2aa16436b440d5fe757a1c8335b9ce6db0505de46aba76"}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x7e, "2ed1626d1d0f3bb315952f2557079f2d51d64d2d8636f950b52b6595d82011644c97dd54b0054550233d1acef4a653d2abdc77c6663b99ca8528d6e9e444e907a67a774c431e2c7877b4c580add5cf15366a0a692890bb57eae74311ba8e7aa69d633fd69ad7370f5529e98b146f1fd375cf93417bcf9d53349f24b8eaf7"}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x170) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) 4.758938602s ago: executing program 3 (id=954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x2) (async) write$dsp(r2, &(0x7f00000001c0)='H', 0x1) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async) write$dsp(r2, &(0x7f0000000240)="1bde089db4e1f558c1fac0e45331c4ef9ef5b21e859ed4516b05165b37b710ff7130b8b173103d2e91bb97cefcf6cb67cc76e48d72d9a608acfa04246d8e455b", 0x40) (async) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000009000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000040008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) 4.749483492s ago: executing program 3 (id=958): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=virtio,cache=fscache,cachetag=ov']) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001100), 0x84400, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000780)=0x3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110026bd7000fddbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900fbfffffffcffffff080005000100000014d5dca4d740fee1af67000000000000000000001cd0730dec9f890e7123710dcb054e80b3f20dba48b7f1d7fa93d58827614f4719861d28a3e0cd46d0085136b3c77dbae8fb839625be03a8196cca98cd96df11cedd33c6b44f9e756ba80ca176dd0221f044e4ded1d259b088240f1fd556929c0c8f40c5284618f6bf499d72ddc5cf61a7b621c6a98e4e824f6eacb94bfe"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r11}, 0x10) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0xae, 0x1, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x6, 0x27}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xcd, 0x6}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x8, 0xfe, 0xff, 0x8, 0x9}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x6, [{0x42, &(0x7f0000000540)=@string={0x42, 0x3, "e998e6bc1128e21ff0f7244b10bbf3cc86143cc2d117ffd87cc9c29ba7a696205290ad5179701ff8c968fa4af3f2173f983e542f77558c9e7627d8769b142641"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x6e, &(0x7f00000005c0)=@string={0x6e, 0x3, "aca48fa6d1ec225d444661280c5ab7bdc7de6af767e07441c016065a0245fec60a73bdbbf0b7edd4ce726b1cf28af74a9e12542f5721f88ac7608980ac2aa16550818903f8d81c3140357399fa25b83980e7be697363782ee67587789364428805b6b1bf944a42ba1e96aba3"}}, {0x73, &(0x7f0000000640)=@string={0x73, 0x3, "fbbeddb030a5355231b1591c7263de3a7738d88f0178c8a7157897529874a44aa6e976645fca78a2786fef605fad0fe2fa9802e43bdbb1045b63b053a9f1386513527e8139a2ba2646870c4f17020113519536484b0ec3fc615131420bfe60bed2a99e1b01005a9203cad86e53087149aa"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x418}}]}) 2.238650044s ago: executing program 2 (id=990): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) lseek(r0, 0x9, 0x4) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000040)={0xa, 0x8, "a867dc159d50dfabd78a3e1af7591b97f0758b9a8583fb00", {0x4, 0x7}, 0xffffffff}) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0125010000000e0001006e617464657673696d0000000b0002006e657464657673696d300000000001000000000030791cf45982b30eb205b29d3ec4e6ca468e88aa0346a21c068a75069058557008cb029bcfe5c23f50991d7a6797e6c2d88d68007f2ce9efa3ba9ca6c7422f74df6cb138033f47f8794adb87d634ac3eba5ffe0dfad78a"], 0x34}}, 0x20000800) 2.149608956s ago: executing program 2 (id=992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') (async) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async) bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0x8002, 0x2}, 0xfffffe57) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) pwritev(r7, &(0x7f0000000800)=[{&(0x7f0000000240)="0485899dc32f7ffacae08a21b8bd2c7624234d6b33c3dcb5ae20fd0013ab8525ee1ea55ccad87141a981cb737ba13b9fe88387e35390a225bfb29b396a2e8c4e765607b3bde8355024c640336b51e636e6b97031d06229e6", 0x58}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000400)="c5b7f25a3fc61dba4992bb4c0ff0766b62743da57d7fbd57459426e32f1082c4a3018926807543ea3edde3d5a2dbb78c9904a5d6d5a355d9fb982f1746c03ff3382ffafc79112a528332f25d2c0f832377786c504449199fd882fa59a6aebf5bb383b1cb95dfdea19965596be8c90d201f4517feb66d51571f0bf7e0e6c42f5d626f485bc68c52c5ed4eb7a1c4da7acedbd2958d1223243dfcf1fa30cd3e30a1b738052e7382bb38dca3b307cb3ab5a2de6c55ef3527844a3d5a18fb65f5e73e12c6c806f8240d9a8c", 0xc9}, {&(0x7f0000000300)="04d59985fdc2d3706af072d6c00a36734a49001e9ef530a67b44d337e249640842c9d9dc4a1be68a4ec24aed28147c3ca807e81e4e7be50ad2ceef8c5290b7318d3125f96ca458ea408090ea4512ca4eee83836be8f4be2c3e0cd16f834865d899d92c5f123352ded75c9012e5ddd6c7dcaf21b8ac57682a78fb282df9604d8196e49c685c28a9d6e415da438e9bd9742f28f86bf55b99cd412b656bc46bfcc536e502c943c9e4", 0xa7}, {&(0x7f0000000500)="22a6fabc085abbd660b6458053979428bf3266dc39981375f0488657d00b7f3ce1cddb4ef4460e45a27c13fd4fdab3f56bcdd67857ac509c8382c75559a62cab3e4502cfcbfe7049c2fd9236628b4848d0a257ffc19da6450ee828bb230fca7dec12255c41749971699afef510a5da7d6472f9b201ddfcd8ffd356a653784e58a6962ab1135a1f39a05b8ce979957dca9bc69212a88b585c5269ec2778334f4e2797130a8dec08572bf61d974b2263904c476c8568bfa2528e5c4119bf1694ea5e4fd0551bf9", 0xc6}, {&(0x7f0000000040)="12eb905fa4b1353b588d3b2acf8f09d10cdb079c46450a31d515f8090f797aae611f4e82e89c02d024d64ae8e864a6945ae03300164cfe", 0x37}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="d66ce8117c4f9e5f3e231e6e06f365c4e8060219bcd81daac8c1c969953d5aa56e5a572c0f522315cf246316fa1b18168a64f5bbc5522257385ff8ed1effd942da4a4efd5e748e4d8fbe893859b04c9508e35dd93b00ea3c34b5a8b14794b3b6f78a2934af619642c941b8cc06cde7e7f31d521e29c8287c95277dea1f2855230c4bf1915342bc6e361835cc90d9bba0346b9faf410b6502", 0x98}], 0x8, 0x2, 0xfffffffd) (async) ioctl$KVM_SET_MSRS(r7, 0xc008aec1, &(0x7f0000000f80)=ANY=[@ANYRES16]) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r7, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x8, 0x3ff, &(0x7f0000000100)=0x2}) (async) unshare(0x4000400) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r8, 0xffffffffffffffff, 0x2c, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r10, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) (async) write(r5, &(0x7f00000000c0)="2e00031a010000", 0x7) 1.030344123s ago: executing program 0 (id=999): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x410280, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x4, 0x4, 0xd}) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$hidraw(r0, &(0x7f0000000080)="89a1dff20482270de3d18df653fd615876dba43a45554c1e00d2ce89b383a13ab26c2d9f0f504e503c4327a5171d9998d89e4aacc145070a84f63a79fdb548ad5287eb85cfb09ca67f7cc2c9", 0x4c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000140)=0xfe, 0x4) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, r1, &(0x7f0000000240)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x204080, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) r5 = syz_clone(0x19040000, &(0x7f0000000300)="13d3b0812c511d20c7a2f0388f7ccc36c49cb062d5ce5431465f888959696edde72bc636bf2e90d56e9c19df12005a6a371e69215f1cba7500c9a09b237710caf333fbf6650eae91c20880903472de1d00f009089615275df437dfd5751d149a94adf01954623a8c25f3e320deec20cb6eb4dd3a89de950bee472e748271e0e1dc140bfedbdfa810a8ea3d1b452817c33efd28d5d7a98b107ae150edb61d5d9dec0e6914087542baba6276188e23271853fc49fadcda43eb02d27dd76dc88451eacdc4fa010bea8bbefae3407a02b33c6a6e3f964069e9ac16d51422a959fa9b435eef0c71e2fd58b01cc12a74387679fa1cae1d2ef3cab1efd5a7a1435e", 0xfe, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="e76a458e46c908838fdd412adc6b1a9016c15ebc26f9e28c52aba04f1f79b5adea2bf1acfdec0707d377a376987c69f9788aaf9c7583bc0aebcaac0f4ae84fb8d64f2bac070464575508d9a492503281278857df4adc57ba0455a97559f911f2b4082eff35743112aa90081d40f665548e0b2ac2da35dff02bf4633112afd8a4151600ec6d9aace8656bf8346236571729e73d082ffb38f59a4ac9301fc84f25a6108b1f28d40be38655868a330b6a7c9ebeddf2c88b167c") r6 = syz_open_procfs(r5, &(0x7f0000000540)='schedstat\x00') r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x129000, 0x0) getpid() ioctl$CDROMPLAYBLK(r7, 0x5317, &(0x7f00000005c0)={0x8, 0x8}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000002780)={&(0x7f0000002680), 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x24, r10, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x0) setresuid(r1, r3, r2) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f00000027c0)={'filter\x00', 0x0, [0x2, 0xc560, 0xc]}, &(0x7f0000002840)=0x44) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r9) sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, r11, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) read$FUSE(r6, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000902, r12, &(0x7f0000004a00)) sendmsg$nl_generic(r7, &(0x7f0000004e40)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004e00)={&(0x7f0000004ac0)={0x32c, 0x33, 0x4, 0x70bd26, 0x25dfdbfd, {0xa}, [@generic="bd0f79c46296f367b60e7b7b0523b1f339f36507b295317d14f34fcafd44adb1a7d41a02801168f0d59179ef16aab2def1a84bd72ff1b76dad75f61839531e5e8126ef5fee2b3f646d7f65b58baa986cdef328d4a305287f6e989150a78f34f7b4f09a5944b04e976663dc8f24836bf20d9c340a5451b26734f24331d3825a1edaedbff72d1f3f477a", @generic="1a2778d7f290bc93e0ea0fdf569561474b4b80f3e14d94efe305e5ddbd2e17cb4cc6036ca4fb4ed63e4b1a7d159ab252e399a4c135fae1bd7a1841e61e11787d2cf5d7ec00218e11fc890d62f6c7b8fc888cef8d9844bddde421679c417c0b3ca653e28d078beedf809021815bc1a8e3f190dcc3d3980266a4f754ee99d85906a3f98a78cfe697956ff9db435f5e4e1b63fc5a757f7ecb77e28e43a3c23a16ed9b7f82100fe0ea538889e6aabf55c1d1cbdf715b1669218fcefdc3121caf5fd2e5645175f0db42f70c8cd9ca4f0a", @nested={0xe8, 0x10c, 0x0, 0x1, [@nested={0x4, 0xdb}, @generic="7f00c4497ed83dded610a9860a1ac55a1c894c3d421d72827e880549b3c838eab03e2e8c286757284270d536d3ebd83ddce2718200ed6c51937b2149ee7ed932624507053a360fbc497df6486d4b12a325ddaf70a01d9551090399529bec6b1727148f27e5e8eb82336b93cd905080acc46ff0e0a7ad29f448d35db31e177b779ca29aedd4b12cb74347", @nested={0x4, 0x139}, @typed={0x4, 0x138}, @typed={0xe, 0x46, 0x0, 0x0, @str='schedstat\x00'}, @generic="1e160071fbc5f5457676", @generic="fdd4dbc21d364dad165bbb0eb077f0997f73b7443ff2b2531be0af7d48fe49f1", @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x83}, @typed={0x8, 0xbb, 0x0, 0x0, @uid=r2}]}, @generic="ecba5b65fcc210314b7b04aaf092699bb7dc24a734ee274a9f6a6ef095e7bddecd1b6ea2b1de01117fe79a026f85fda13a0b5541a26e738ba7f5559da09aec4b6e00623a7be747ad792e61d7d40fd882dd85f47076da2a0e5433ce6e607957514e930ba483e13d40a55900bffd428b3b941fdda7ff640f667fa780cb91df44838f0d0f73315d8af62c924ceea5d977d8f6c604968a5831b86943d676c09b1bf214191cc92a3ebf0fd86db87d92d1d61288feeb538e893353160587991558ce59dca190a36347fc8ff781ba00cf", @typed={0xc, 0x147, 0x0, 0x0, @u64=0xa9}]}, 0x32c}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000000) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004e80), 0x20800, 0x0) close_range(r4, r13, 0x0) 980.318456ms ago: executing program 0 (id=1000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000001780), 0x13}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0xf0) 888.505397ms ago: executing program 0 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x0) bind$vsock_stream(r1, &(0x7f0000000240), 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f0000000080)=""/173, 0xad, 0x2041, &(0x7f0000000140)=@rc={0x1f, @none, 0xd}, 0x80) 887.956286ms ago: executing program 2 (id=1002): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x24804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = memfd_secret(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405d9d005c11c4a3df600e82a74d1cd1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x100, 0x3c0, @mcast2, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x50) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x24804) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000000)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) memfd_secret(0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) (async) pipe(&(0x7f0000000100)) (async) splice(r4, 0x0, r6, 0x0, 0x8, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405d9d005c11c4a3df600e82a74d1cd1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x100, 0x3c0, @mcast2, 0x7}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff3c, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x50) (async) 699.255113ms ago: executing program 0 (id=1003): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0xd, @pix={0x8, 0x3847, 0x32344d59, 0x0, 0x8000, 0x7, 0xa, 0x401, 0x0, 0x8, 0x0, 0x4}}}) getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000"], 0xf8}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001080)={{r4}, "c03970a62b171e323438f360c3a10d314c5b43cb8870501c0f4bfdc3a28fc75daa0649edb5e6154cfd0093328255b788314ff22be462349ec210a2a0fd75f7bf082fdc9b5cb6d34072618da7cbb1a8be00ab9edfb2b35afb0532e709b34c5d9c087437a5c2af44873aa85b76bd00bb7e61dc24d111f5199ca9c5466e35f4a883c1b483a4b5d8308f34fafecf40548677375d5d047ad076ea0a7b5b5b7dfa6678f689e43d4b3506e6a20675a91410969da80a1217ff9f1500563a87ae8de9ea60e8ed76b32016effb5a18e0b97018ddf39d0b0a55a41dbd529d07c9317a3e6d4b60a45edb82453ca34a998ea0cf485af5ad39119013a995ee25c94344145d81fee68ecc1267a0d17fd217dae727c9a8499c9f494cc6b83e7fc97662c50365d14bc5714f7b2b10a0a17304c7ee2d7117e8439f9e098f115c66b065cbe369a592a16f531f6398476834e6949c9176f7497819cb3f4d4c046cdc69256ce5ab9ff6b72d4e18cf33339340d810c04d1dab98ef2cbb4e221dd61abf3534d0635dc33ff0717398754e1e6e97cf9635c93ab4c0932801693e6d084964e33f99d14bc10b18351c19ba6b5335accfe346a295d100ae3654819cdb44fc1cabe8a8709f06089a32b4f54c748ca8ba55b97398729d46b835ac73bee65909698aeccee572e08557d40e5f6a0ae403cf1d351a58ccc2efe7617a2473b9e1313e1df0e7b458ae32f0b3a314c1eb22107b1e731d48b19a6d76d69966854e9508904f9fef39b25b5c07a0d650e064a567042cc1c0b5b739f0da3143833a70797ad3f0022023af2358e2c5588f422ce4c399d0dc6039903bff98eb8cae7ce8ad90c0dda5da92a24d1009b28a716a656a36a1155d852f87b9d143127019a140834fa28bd6d363dde50842f576a90309322318c0c96652b9154c713f649f7dd882bd31a77237323f3273c8c3049cc6f44149bbc670e66482f3800bc4d3fccb6ec54e3bdeb6ecfaeff36d08226ef9444c1fcc37c4065e66705b856976578607428d28527f9b27a98c1b20076cb851299717e83e6489bb0f39f858bcb53213da3b81ce0e4a78909853323ae57146b770a9bfc8d445939afcc4ee4cdafbc5bb1361002266b6a622ab319bfb55634d4c869c3e9162a92f5960518f4ef912ab2cf4fd21f7050bf5f33bf42484517f8f1e0680ad1dc46c7fa2ef6b0a18051bd6e8a3ebc2d2e962142074971239e526b79e161cba2d62d8b78c015c4b96aca9fbd63723a3e9001777228994590497b462eb45b2e024c2a753c401d5f4cd4ce2948038156599d47d8cacd0f84cb6bbc45fc737c440b6a3c64303ad2988ab8c940252e8cb611eb3e03256910479abad59dda32fff0105274b9f040aa587e29ac47090161a67de016b946abb2ab04bf7dd0fccd425b124f7e9b465625d4caf4908d6f7be31e07bcb7dfd5a07d145108ed9cfec7e2d702d9df1911b266954e07139f2e392b4a5db74bced033902cc897e8ff1122fa00aba7720293f944878533002d70c33dfa6a81b4e7814cb40d7e72308721537d801f1153b254ebffde30be6cba303d7e7b2ec3bb55433fb9e9efacca93098d4c5fc3df15c805dd20f0488107f8c3dedab244b7c01c8f13f5db8523783f9dc3bdd8ba716c1d72cdac2853335da389c5cbf2cb315c5c77673242dd793a471d6ac1cd9fe6ab0dec53d0bf8e4a14772dbb0e454019349a0d6a6fb3a925d17056db753010233106662dd4ad5bcbe1e737ee3b24ea391fd1f02e1f0aecad8106d7499493d7f9ecad2e724d076218b5b7c8ca457e2e3cc6a20e7a594d015724ea49dec007a9c423c6362ddfb5150d561d69b5b437cab0b54de8b0a19d75d03e033362fb281dca07b1a547494873600d516f854bdc85c391348d3cbb0697fc0e95400a34ac8e40ca50a874ec399939d551b4c50b8a70f3b8dccbda1f238c97c2c8314ad97b08631ce4f50f7eaea79f5926544fad4e763f3987e2b8f6d0b5aec5ecb13d92c3d86f4ac5a2842cfacb265e2b0eed95cd490b20bb41220fe47d6b3c5f93e1d0adcf0209468b7e27d3d33f36a8d14c26eeec2617ed1535d4f45de0b59e688f76b11b7da4ad5a232f191e73c59ee3d915a3d0119aa32eff7364f6c71200ab930c3d7114be4c221d8d6befaac6c90a58affe211fd2b77a2e0708632e5ea23b451e50d86a90f6dce112e3f5da975a08d684d1e2d7d7592f56656a6ffaab204059a5c49a3f7ab59e83192fc712174704a519690824835e5d57e24e07e130fa1eb1d05e1c046ee79aa30185fb28897e1133284c693620a00125893d4276d6d42997ac1e64500cda8f227f5d3aa026f0f16c9527324421fd28853c4736809e6a494e4048e5f841dd7137407c13b5dc46afef27fd459d56cc126691ab7cfbad8f7e7c6da4ee9cbd85a7410040a2da257c9d026d0f617a674c8635680780adc230361d9bfabe01fe1dca36261d8555d9896d3341bb68eb9a33b1400ea44c86b3635291a1c0253c3f1d70db27c6a8447a9bd66785c77ecd6135b364605ae519e1e433cc163fe4cc1dbf1b4aed854287958c6d399a6e7a1cf49e514c94cc09d74aee258e16a50513de3d7703f3c12641d1e30e8b8e800dba117ad3ad8df5cd5828ee80a938e152f4d1b1c0aa6f5456cda909c464200e8ad2a66d61e3f012dd2012d34cd13ac2008d0c66cdd0daae4a98943089dddf66df299df59b30cfe53d68a36a63ec84a2f13a05d73471ddbfa733e1fdef951ad61c872ccf0a2c3de878225b1c40e49bb64e1fedff410e903ad5425d52548a06eea8a779795fb6748cd8759266b7668d75627e6f6c5bf4d40fa6d9c4167fd36c1229e789d0d6c116ebcc4b328ab70ff72a2aa3a13cb7ee4ac9caaaa1b240f86efadb55f7804f80bfa531d4a40e7da71554d97813eca3db48338a1bc2c3206abb02660cb932e4e03f3b65f815fe1bd3eaa5dc1eba4ec18065b33fdf662ec74b31e6c6afc70d3cea68ea9838428d861ab90f94bc06338861197d909411333730a76a0125bc5bdfc7a2d272b57fd44ed2b508692bd9835e74d7e5fd747a1ba9d1b31da9d7e63bbd233b3a98f5c8d49a2fa279a659df2c78a450870744bfb80f7d459cd78488533f26bfd5a0d83df0bfcff336da7b6ec7721ba23900f1906c4f692104ec7ebfef24ca3bd2a1bc1676f9f0a86b3ea57208abcf13af2d0f6693d34c9dbfc9946b87e1984c1a9035440d64b02c420a6bc4fb18274d3aa19881e279ef0d4cb7716fb3a35989b7b5783a202ebead4d9798db9ed14fc1527f67414110eaa676cf30b49a221be2c8d15c4bf8e0cc556914542a83691b0db4913f8183316d9f439166427b9ec024b239e332b8b0690b5722f5bd47d864b1013f02d428f51bd237cd05f1b9a7e8bc0e878278550f5d609c362ee4c796cd5cf55a0841dd0dd9412f155dba3acfe330e1bd3862afa9c076b82188155d3fb0f4618c7ae8d76028afb023b7c4b2da06aa1ddf30334051485ea891b936590d9e7b169349d20264dfce8e1980e8d0ab622e8f5913c4ed4d7a3b3191f8d57dcfff78867b45fc9054c9677784cc9b0d396bb44117d069ca7057ef8ee9cf6ba009cf47e35e722333a28f8638d9373acf27560fb55cfcb4d2c715954b5ca570b0b233846efa12da8eba259d45e501123b5545dca9d811ddf8a79e5018f53e9d109f061b99a2a572cbdc4cde8f509e3501447ff6ca0fd3ca38833887b9f732a30a69d989ff5ceb9573b11f53d6ad2a860cc89809f2e5e31151c00a60bbafe0f29594e02c461a5a55a8bfba6fd698ff51c9a7c608b2fd70065da0f88f2d4ddfac8bbb359670b1236729eadbb73d67f895524798ab8ca9df086ee22928446c29fb4d13f3744aa1f0636a7108a26fde4e051620b070eddc031e20e529e837a9e314374583582bf3d33f7ebef087e519782482a0fb3a118c341a96b007430dc153f913b189f2bb95d7887947c5f4b7137222aac6b9a4e8cb9c72d2f395b660b447febcdad98f10b6fd68f43bf81a81ba0c94958afe16362b1099c47f5290cbfb5709be0a78f509b93eb5a135355e19bd50c68ea8db10abcee6b2d77bf88ee8eb15994d2881ba986291b6442790753f3b66f64653f3814f77871bc4225e6ceb7f78c9575c99fa896a3724223c76713fec648b14b187b90d92664336750523742ab372bae4a58aa9f27f0347bb404c1093805b4b4befe7d053e3ec2782e622ea3325306dc708a9ea8f7df7fd7ac450f54a6de3a325cff20bdd2a4562c7e194e88eb3059bd37da5caf61de02bfa2658fd85542de41a866515545672d94f25b8b96d3ed55443956cb68c750b8abf6fb766b59606c31a6ba7d1ebc917e9b1967e966049cb204941d04832ad9ed7b2c213dff19d18aa1f0958e8348bdaa67e7729ac8a9f8a5494f384817c17b0ee9de6da159896643329beca1cda1309360914c447d92900c05de0be7f2df21a55570221681025e4c0933847079517647d59ccdbd1e4ac17a889e8628b524215d5f9cf9441fc81b42ead3943c2ab382fcbc08c9f766e89751a2acd115ba305222f73538484125fb4c73aeb6f8a7dccb7967032fa3353369ab524d5ef44cbf9679d36e6ccd004c9220905d10b9fcd90dfc7f7eb7ff0d64d03888342161c5622d3052d37b82dd7d08cbd61ec20934b0c6b9114894396cd31efe919b0f71638cb805db4f66310b1f2812cecef12168584d3fda3e7b42390b0d32ac69ea649c25f3388e263f64cd4655febd0ba3fac5b40ce7401aaf9bdc305c46e2d77355cbb73fa8997065c3324af122b5fcf0500c596ae70f5d0e4ab7981aa25cd1c7a5fe4529c40fc0ddbd7b9fbc3c789f2d98a0b90d51deb1d72e5a00ed2cf9a2258fdf4fe0b9065745e95de794192a6901e8dabec1695288a8b8fa9063fbe979232fd0150e965011e964cc725181df54b78d03255ecae18023c7fa9ab9ced48e573c21c2400df26e57235aa498ceeb8b61566dbd7bd89eba3d23c58de108ea2f05a75c6e1c30c3e791b6c556161b5003c5fa872a969481a40abd2e14a9b7152fc8623125e4426d16099d727288d2bd8f1815b0a14e31343e7d0a645e260582596c9a1947d825eb1f4dcfe81845408fab89a737417c20b6a774c850fea013369768525ca3b7cc89a5a988f11e0e9eee4828c89b33e5d39af5fbfb961f9f355c0bc859185d1116de0ad47aa318054c48164ee6628fc4c4de77a943c21852c0d195a3b0c279a7897dffeed6472b8b8f1d8f31a8d89cf947a179f20d92568cdd6862b219aa55cdaa47c02a014161d49596d51bf1d100a86e289d5567f75d7e5660eb3ba96c25cab43b0497a5ca58e6c30159fed18d980a16aac02b756e1b1f206c71b4177a8e1ada7497fe5debe0cfcbdb7e6c305ade6bd8398ddef79e5da7b8c721197f2bda4c8ec9baec4ce329601c65cc28703efc9e4c459dba3fd1db1dda201b8364d4461a229fa10b7e56f67eb76293126974264357a4a21e5b34b850ce75b00c4f0a6471cef3312a514558ca7631f9a19c03225cc9141ede165c0f1d9f39feba8c555338c0230127061bbf316e044e2c31b2669ceb54594c0e85b04ab1b6337beb0b55c752ea1edb778a17170fcb74906865cf61e7a32c9bca07a4716d6690e5fc60184593b7063c2457847941da59b3be72153ddc08550be29a5c0330675d7b1937fac5b82f055bd106b39af6f68e83db637a76a9651232f1a6b784e06527e9de206e52116defaa895d0234498a6e5a8ed63bf76d631d50f8ed4fdbb845ffad3c456975bce922f2ab6af0de"}) r5 = syz_open_dev$hiddev(&(0x7f0000000200), 0x379, 0x40001) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x83d, 0x8}, &(0x7f0000000280)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ffff0000000000000000010018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000feffff54090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 630.393167ms ago: executing program 1 (id=1004): mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = io_uring_setup(0x3259, &(0x7f0000000000)={0x0, 0xf567, 0x40, 0x1, 0x109}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x10000000) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x1, 0x3, 0x7, 0x8e1ac7b, 0x0, 0x2, 0x5, 0x6, 0x9, 0xff, 0x9, 0x9, 0x3, 0x3}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000010c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x13}, @ioring_restriction_register_op={0x0, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op={0x1, 0x22}, @ioring_restriction_sqe_op={0x1, 0xc}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1}], 0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a8, 0x0, 0x3e0, 0x1c8, 0x1c8, 0x1c8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, &(0x7f0000001140), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xa2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @local, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'ip6gretap0\x00', 'macsec0\x00', {}, {0xff}, 0x3c, 0x9, 0x4, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xffffffff, 0x0, 0xff000000, 0xff], 'vcan0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x27, 0x6, 0x30}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x5], 0xff, 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}, 0x28, 0xc, 0x8}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x78, r2, 0x200, 0x70bd25, 0x286c0000, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040}, 0x20040840) r3 = dup2(r0, r1) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000001980)=0x5, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000019c0)=[0x9, 0x8], 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001a00), 0x100, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000001a40)=0x7) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000001a80), &(0x7f0000001ac0)='./file0\x00', 0x8, 0x3) write$vga_arbiter(r3, &(0x7f0000001b00), 0xf) fdatasync(r3) getsockname$packet(r5, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b80)=0x14) sendmsg$nl_route(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)=@setneightbl={0x6c, 0x43, 0x2, 0x70bd27, 0x25dfdbfc, {0x5}, [@NDTA_THRESH2={0x8, 0x3, 0xfff}, @NDTA_THRESH3={0x8}, @NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x1}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x2}, @NDTPA_GC_STALETIME={0xc}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0xe262}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x7ff}]}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH2={0x8, 0x3, 0x40}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001d00)={0x0, 0x9}, &(0x7f0000001d40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001dc0)={r7, 0x38, &(0x7f0000001d80)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x6}, @in6={0xa, 0x4e23, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000001e00)=0x10) syz_emit_ethernet(0xc2, &(0x7f0000001e40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@mpls_uc={0x8847, {[{0x1}], @llc={@llc={0x1, 0xbc, "64d8", "524917769ca89a80ee3c795d7ce899c545dbca19c54d1e3efa22fad10fbf513f058570d6a8ec9e6d806ebf00ff3819599ac5b77ca62b8d87b1a070e773bde862b1e61b966d64f1b0e4e6c15aa70bbc0b47cbd82d2caa932250a92211f809abe1bd15b5a05df58b14364bd22932e42b7253121d6d51ce0808e94f063c7cba85232adf4c18a665a0af6d9de8ca64b7fa799fa3dd9be6bbdd6e8818bc5108724c9b72fb060a4dabfc87b06a464c"}}}}}}, &(0x7f0000001f40)={0x1, 0x3, [0xced, 0xba5, 0x2c8, 0xdfb]}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001fc0)={&(0x7f0000001f80)='rxrpc_tx_fail\x00', r5, 0x0, 0x8000000000000000}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002000)={{0x1, 0x1, 0x18, r8, {0x0, 0xee01}}, './file0\x00'}) 629.520391ms ago: executing program 0 (id=1005): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x10009, 0x32314147, 0x3, 0x2, 0xfc, 0x0, 0xfffffffe, 0x1, 0x1, 0x1, 0xd}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000002300)={0x2, 0x4e22, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000814000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd09003200030030000000600000000100110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r12 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f0000002400)=ANY=[], 0x3d}) r13 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f011c24660f3881", @ANYRES8=r12], 0xa0}) ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffff36, {0xdddd1000, 0x5000}}, "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", "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"}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 535.922905ms ago: executing program 1 (id=1006): fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800000129bd7000fcdbdf2502200080fd740009000200000c001680050005000000000008000300", @ANYRES32=r5, @ANYBLOB="021007007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40801) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 535.465845ms ago: executing program 2 (id=1007): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', 0x0}) 449.971451ms ago: executing program 1 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xc}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x401}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4010080) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x28, 0xffffffffffffffff, 0x0, 0x0, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x4, 0x3}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x2f, 0x1, 0x1, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @remote, 0x40, 0x20, 0x5, 0x1}}) socket$nl_xfrm(0x10, 0x3, 0x6) 449.478448ms ago: executing program 2 (id=1009): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101180, 0x0) connect$netrom(r0, &(0x7f0000000040)={{0x3, @bcast, 0x6}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/197) connect$netrom(r0, &(0x7f00000001c0)={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/126, 0x7e, 0x0, &(0x7f00000002c0)=""/184, 0xb8}, &(0x7f00000003c0)=0x40) (rerun: 32) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) connect$netrom(r0, &(0x7f0000000400)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) (async, rerun: 32) close$binfmt(r0) (async, rerun: 32) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r1, &(0x7f00000004c0)={0x1f, @none, 0xa4}, 0xa) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000500)='net\x00') (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/225, 0xe1, 0x0, &(0x7f0000000640)=""/254, 0xfe}, &(0x7f0000000780)=0x40) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) (async) pread64(r0, &(0x7f00000007c0)=""/116, 0x74, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x5, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x10000, 0x1000}}) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)=@polexpire={0x2a4, 0x1b, 0x938, 0x70bd2a, 0x25dfdbfe, {{{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x6, 0xa, 0x10, 0x80, 0x32, r5, r6}, {0x3, 0x1, 0x8000000000000001, 0x80000001, 0x40, 0x5, 0x2, 0x5}, {0x401, 0x7, 0x5, 0xc000000000000000}, 0xfffffffb, 0x6e6bba, 0x2, 0x1, 0x1}, 0x2}, [@lastused={0xc, 0xf, 0xa}, @lastused={0xc, 0xf, 0x4}, @tmpl={0x144, 0x5, [{{@in=@private=0xa010101, 0x4d4, 0x3c}, 0xa, @in=@local, 0x3504, 0x4, 0x2, 0x8, 0x8, 0x0, 0x8}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@remote, 0x3503, 0x0, 0x3, 0x0, 0x7, 0xff, 0x2}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3505, 0x2, 0x1, 0x6, 0x7, 0x7, 0x8000}, {{@in6=@mcast2, 0x4d5, 0xf1}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x8, 0xfff, 0x8, 0xffff193f}, {{@in=@remote, 0x4d3, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x3504, 0x1, 0x0, 0x7, 0xeb5e, 0x0, 0x9}]}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2a, 0xa065}}, @algo_crypt={0x49, 0x2, {{'adiantum(xchacha12-generic,tea,blake2s-128-arm)\x00'}, 0x8, "d5"}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@private1, 0x0, 0x2}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async) r7 = syz_io_uring_setup(0x2ca9, &(0x7f0000000d00)={0x0, 0x3c31, 0x200, 0x2, 0x2f0}, &(0x7f0000000d80), &(0x7f0000000dc0)) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000e00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000f40), 0x8000, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) (async, rerun: 32) io_uring_enter(r7, 0x6070, 0xbbb, 0x0, &(0x7f0000000f80)={[0x7fff]}, 0x8) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) lseek(r0, 0x2000000000, 0x5896840457b06110) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000fc0), 0x141000, 0x0) (rerun: 64) 370.189698ms ago: executing program 2 (id=1010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r9 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) socket(0x2b, 0x80801, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 299.927688ms ago: executing program 1 (id=1011): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='K', 0x1}, {&(0x7f0000000e80)="88d3540000000000de3863851a5e934374f07dfeb4a075ac5f3f37f932c1fa80e243405af831748620947b8523af5cbfdeed41047cf958a47822e29cda570d89fb6423b4c1b432752d4c4d69e9c84e336a50e842f94d9206363e0a2657c2e75a56e99769e9fadaf67a6b5dd183497c29aa9d61c8f621b05a6c5f250c48729a4c1f938235b60aea7eeac2930a8e9f3e7f8924da5dc82cdce6e8c38fc88f58b13c5c26e802b27f01eef3ed5ec8f05b", 0xae}], 0x2}}], 0x1, 0x8080) (async) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) (async) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x4, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 299.656825ms ago: executing program 1 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000001}) 219.745491ms ago: executing program 1 (id=1013): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) io_setup(0xfd, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000040)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) (async) close(0xffffffffffffffff) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) io_setup(0xfd, &(0x7f0000000080)) (async) io_pgetevents(r1, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) (async) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000040)) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) (async) 0s ago: executing program 0 (id=1014): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000094ca4df088529e5271d09c"], 0x50) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x991) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000cb7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): adutux: No device or device unplugged -19 [ 146.970647][ T7027] syz.1.309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 147.105348][ T7035] snd_dummy snd_dummy.0: control 4:7:1:syz0:40960 is already present [ 147.261368][ T7041] program syz.1.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.303947][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 147.307110][ T1110] ata1.00: irq_stat 0x40000000 [ 147.309266][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 147.312474][ T1110] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 6 [ 147.312474][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 147.319172][ T1110] ata1.00: status: { DRDY ERR } [ 147.321284][ T1110] ata1.00: error: { ABRT } [ 147.323384][ T1110] ata1.00: device reported invalid CHS sector 0 [ 147.479200][ T1478] usb 5-1: USB disconnect, device number 6 [ 147.643613][ T5304] Bluetooth: hci0: command tx timeout [ 147.863585][ T1478] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.883762][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 148.015827][ T1478] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.020206][ T1478] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.024166][ T1478] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.032494][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.036257][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 148.049976][ T7067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.053286][ T53] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 148.060694][ T1478] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.064090][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.067691][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.071253][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.082802][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.089402][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.092873][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.227399][ T7110] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 148.309129][ T7075] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.309444][ T1478] usb 5-1: USB disconnect, device number 7 [ 148.316281][ T53] usb 8-1: usb_control_msg returned -32 [ 148.321365][ T53] usbtmc 8-1:16.0: can't read capabilities [ 148.494260][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 148.496504][ T1110] ata1: failed to read log page 10h (errno=-5) [ 148.498468][ T1110] ata1.00: exception Emask 0x1 SAct 0x100 SErr 0x0 action 0x0 [ 148.500772][ T1110] ata1.00: irq_stat 0x40000000 [ 148.502264][ T1110] ata1.00: failed command: WRITE FPDMA QUEUED [ 148.504690][ T1110] ata1.00: cmd 61/08:40:36:81:08/00:00:00:00:00/40 tag 8 ncq dma 4096 out [ 148.504690][ T1110] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 148.510982][ T1110] ata1.00: status: { DRDY } [ 148.512469][ T1110] ata1.00: error: { ABRT } [ 148.517094][ T1110] ata1.00: configured for UDMA/100 [ 148.519030][ T1110] ata1: EH complete [ 148.526123][ T7114] input: syz0 as /devices/virtual/input/input15 [ 148.647603][ T7117] x_tables: duplicate underflow at hook 1 [ 148.677625][ T7121] macvlan0: entered promiscuous mode [ 148.679795][ T7121] macvlan0: entered allmulticast mode [ 148.681763][ T7121] veth1_vlan: entered allmulticast mode [ 149.245630][ T1478] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.413742][ T1478] usb 5-1: Using ep0 maxpacket: 8 [ 149.417448][ T1478] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.421278][ T1478] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.424902][ T1478] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.428176][ T1478] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.432430][ T1478] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.436099][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.487857][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.647332][ T1478] usb 5-1: GET_CAPABILITIES returned 0 [ 149.649115][ T1478] usbtmc 5-1:16.0: can't read capabilities [ 149.733606][ T5304] Bluetooth: hci0: command tx timeout [ 149.854426][ T1478] usb 5-1: USB disconnect, device number 8 [ 150.426311][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 150.426323][ T40] audit: type=1400 audit(1749091578.688:391): avc: denied { accept } for pid=7138 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.525418][ T40] audit: type=1400 audit(1749091578.788:392): avc: denied { mount } for pid=7141 comm="syz.0.339" name="/" dev="autofs" ino=15704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 150.531788][ T7143] __nla_validate_parse: 133 callbacks suppressed [ 150.531804][ T7143] netlink: 92 bytes leftover after parsing attributes in process `syz.0.339'. [ 150.533034][ T40] audit: type=1400 audit(1749091578.788:393): avc: denied { create } for pid=7141 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.544155][ T40] audit: type=1400 audit(1749091578.788:394): avc: denied { getopt } for pid=7141 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.599868][ T1026] usb 8-1: USB disconnect, device number 3 [ 150.623053][ T40] audit: type=1400 audit(1749091578.878:395): avc: denied { bind } for pid=7144 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.629049][ T40] audit: type=1400 audit(1749091578.878:396): avc: denied { listen } for pid=7144 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.671144][ T40] audit: type=1400 audit(1749091578.928:397): avc: denied { getopt } for pid=7146 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.677637][ T40] audit: type=1400 audit(1749091578.928:398): avc: denied { execute_no_trans } for pid=7146 comm="syz.3.341" path="/27/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.314267][ T40] audit: type=1400 audit(1749091579.578:399): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 151.341189][ T40] audit: type=1400 audit(1749091579.598:400): avc: denied { ioctl } for pid=7149 comm="syz.0.342" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 ioctlcmd=0x550e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 151.381920][ T7152] overlayfs: failed to resolve './file1': -2 [ 151.662702][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 152.030375][ T7188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7188 comm=syz.0.353 [ 152.036991][ T7188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.080076][ T7190] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 152.082519][ T7190] binder: 7189:7190 ioctl 4018620d 2000000000c0 returned -1 [ 152.242751][ T7207] bridge1: entered allmulticast mode [ 152.479977][ T7210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49197 sclass=netlink_audit_socket pid=7210 comm=syz.3.360 [ 152.487434][ T7210] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 153.003098][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 153.483220][ T7251] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 153.645169][ T7265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.676334][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.726336][ T7269] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.374'. [ 153.730082][ T7269] netlink: zone id is out of range [ 153.732230][ T7269] netlink: zone id is out of range [ 153.734997][ T7269] netlink: zone id is out of range [ 153.736966][ T7269] netlink: zone id is out of range [ 153.738576][ T7269] netlink: zone id is out of range [ 153.740182][ T7269] netlink: zone id is out of range [ 153.741764][ T7269] netlink: zone id is out of range [ 153.743377][ T7269] netlink: zone id is out of range [ 153.745898][ T7269] netlink: zone id is out of range [ 153.833627][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 153.837820][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.841930][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.846610][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.850780][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.857002][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.861146][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.979158][ T7286] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 153.981658][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.984713][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 153.991626][ T7286] vhci_hcd vhci_hcd.0: port 0 already used [ 153.999089][ T7287] vhci_hcd: connection closed [ 153.999955][ T63] vhci_hcd: stop threads [ 154.002957][ T63] vhci_hcd: release socket [ 154.004590][ T63] vhci_hcd: disconnect device [ 154.069568][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 154.071288][ T10] usbtmc 6-1:16.0: can't read capabilities [ 154.355931][ T10] usb 6-1: USB disconnect, device number 3 [ 154.711184][ T7306] syz.0.384 (7306): attempted to duplicate a private mapping with mremap. This is not supported. [ 154.941677][ T7314] syz.1.387: attempt to access beyond end of device [ 154.941677][ T7314] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 154.945947][ T7314] vxfs: unable to read disk superblock at 1 [ 154.948157][ T7314] syz.1.387: attempt to access beyond end of device [ 154.948157][ T7314] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 154.952094][ T7314] vxfs: unable to read disk superblock at 8 [ 154.954917][ T7314] vxfs: can't find superblock. [ 154.974213][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'. [ 155.033407][ T5304] Bluetooth: hci3: unknown advertising packet type: 0x6e [ 155.033442][ T5304] Bluetooth: hci3: Malformed LE Event: 0x02 [ 155.144660][ T7323] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 155.148636][ T7323] cramfs: wrong magic [ 155.150884][ T7323] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 155.191375][ T7326] netlink: 'syz.1.391': attribute type 21 has an invalid length. [ 155.194660][ T7326] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.328478][ T7334] ipt_rpfilter: unknown options [ 155.863187][ T7338] "syz.0.395" (7338) uses obsolete ecb(arc4) skcipher [ 155.867011][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 155.867021][ T40] audit: type=1400 audit(1749091584.128:421): avc: denied { ioctl } for pid=7337 comm="syz.0.395" path="socket:[14172]" dev="sockfs" ino=14172 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.876788][ T40] audit: type=1400 audit(1749091584.128:422): avc: denied { bind } for pid=7337 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.882649][ T40] audit: type=1400 audit(1749091584.128:423): avc: denied { connect } for pid=7337 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.093247][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 156.096789][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 156.102902][ T40] audit: type=1400 audit(1749091584.358:424): avc: denied { connect } for pid=7355 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.201437][ T40] audit: type=1400 audit(1749091584.458:425): avc: denied { write } for pid=7357 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 156.216232][ T40] audit: type=1400 audit(1749091584.478:426): avc: denied { connect } for pid=7370 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.262603][ T40] audit: type=1400 audit(1749091584.518:427): avc: denied { remount } for pid=7357 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 156.284061][ T40] audit: type=1400 audit(1749091584.548:428): avc: denied { connect } for pid=7383 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.326872][ T7389] tipc: Enabling of bearer rejected, failed to enable media [ 156.389528][ T40] audit: type=1400 audit(1749091584.648:429): avc: denied { associate } for pid=7398 comm="syz.1.410" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.409471][ T40] audit: type=1400 audit(1749091584.668:430): avc: denied { write } for pid=7398 comm="syz.1.410" name="file0" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.417003][ T7405] 9pnet_virtio: no channels available for device syz [ 156.502095][ T7422] binder: BINDER_SET_CONTEXT_MGR already set [ 156.505898][ T7422] binder: 7419:7422 ioctl 4018620d 200000000040 returned -16 [ 156.513755][ T7422] binder: BINDER_SET_CONTEXT_MGR already set [ 156.518343][ T7422] binder: 7419:7422 ioctl 4018620d 200000000040 returned -16 [ 156.520793][ T7422] binder: BINDER_SET_CONTEXT_MGR already set [ 156.522644][ T7422] binder: 7419:7422 ioctl 4018620d 200000000040 returned -16 [ 156.561669][ T7431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=194 sclass=netlink_route_socket pid=7431 comm=syz.0.418 [ 156.618952][ T7442] random: crng reseeded on system resumption [ 156.643157][ T7442] Restarting kernel threads ... [ 156.646080][ T7442] Done restarting kernel threads. [ 156.649152][ T7444] overlayfs: conflicting lowerdir path [ 156.657572][ T7444] program syz.0.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.660586][ T7446] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 156.663211][ T7446] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 156.682637][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 156.720962][ T7455] SELinux: policydb string length 553648136 does not match expected length 8 [ 156.726227][ T7455] SELinux: failed to load policy [ 156.811023][ T7463] syzkaller0: entered promiscuous mode [ 156.813436][ T7463] syzkaller0: entered allmulticast mode [ 156.823561][ T7463] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 156.827746][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 156.974880][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.432'. [ 157.103610][ T839] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 157.274897][ T839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.277733][ T839] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 157.280923][ T839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.283778][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 157.287239][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8369, setting to 1024 [ 157.291896][ T839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.295770][ T839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.298671][ T839] usb 6-1: Product: syz [ 157.300154][ T839] usb 6-1: Manufacturer: syz [ 157.305264][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 157.306916][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 157.310211][ T839] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 157.312153][ T839] cdc_wdm 6-1:1.0: Unknown control protocol [ 157.365564][ T7478] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 157.368125][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.434'. [ 157.370987][ T7478] dummy0: entered promiscuous mode [ 157.374623][ T7478] bridge0: port 3(dummy0) entered blocking state [ 157.376952][ T7478] bridge0: port 3(dummy0) entered disabled state [ 157.379123][ T7478] dummy0: entered allmulticast mode [ 157.381929][ T7478] bridge0: port 3(dummy0) entered blocking state [ 157.384539][ T7478] bridge0: port 3(dummy0) entered forwarding state [ 157.511175][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 157.514120][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 157.516977][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 157.519738][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 157.522557][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 157.525390][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 157.528364][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 157.531037][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 157.534136][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 157.537020][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 157.539644][ T839] usb 6-1: USB disconnect, device number 4 [ 157.542180][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 157.542195][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 157.542207][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 157.677716][ T7491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.439'. [ 157.786598][ T7498] Mount JFS Failure: -22 [ 157.832763][ T7491] syz.2.439: attempt to access beyond end of device [ 157.832763][ T7491] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 157.839344][ T7491] gfs2: error -5 reading superblock [ 157.840950][ T7505] tipc: Started in network mode [ 157.843180][ T7505] tipc: Node identity a67f9be5798, cluster identity 4711 [ 157.846944][ T7505] tipc: Enabled bearer , priority 0 [ 157.849181][ T7506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.439'. [ 157.853957][ T7505] syzkaller0: entered promiscuous mode [ 157.855762][ T7505] syzkaller0: entered allmulticast mode [ 157.861701][ T7505] tipc: Resetting bearer [ 157.866565][ T7503] tipc: Resetting bearer [ 157.873619][ T7503] tipc: Disabling bearer [ 157.978581][ T7513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.982467][ T7514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.996504][ T7521] tipc: Started in network mode [ 157.998117][ T7521] tipc: Node identity f299d03422f6, cluster identity 4711 [ 158.000696][ T7521] tipc: Enabled bearer , priority 0 [ 158.009329][ T7521] syzkaller0: MTU too low for tipc bearer [ 158.011206][ T7521] tipc: Disabling bearer [ 158.022302][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 158.289258][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.437818][ T7555] block device autoloading is deprecated and will be removed. [ 158.453805][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 158.557009][ T7555] veth1_vlan (unregistering): left allmulticast mode [ 158.791247][ T7565] (syz.1.460,7565,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 158.794137][ T7565] (syz.1.460,7565,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 158.834511][ T7571] trusted_key: encrypted_key: insufficient parameters specified [ 158.893311][ T7573] bridge0: port 3(syz_tun) entered blocking state [ 158.900908][ T7573] bridge0: port 3(syz_tun) entered disabled state [ 158.912484][ T7573] syz_tun: entered allmulticast mode [ 158.916318][ T7573] syz_tun: entered promiscuous mode [ 158.919997][ T7573] bridge0: port 3(syz_tun) entered blocking state [ 158.922937][ T7573] bridge0: port 3(syz_tun) entered forwarding state [ 158.985839][ T7577] ipt_REJECT: ECHOREPLY no longer supported. [ 159.166630][ T7596] binder: BINDER_SET_CONTEXT_MGR already set [ 159.168643][ T7596] binder: 7593:7596 ioctl 4018620d 200000000040 returned -16 [ 159.256398][ T7607] trusted_key: syz.1.477 sent an empty control message without MSG_MORE. [ 159.684430][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.746401][ T7617] bridge_slave_1 (unregistering): left allmulticast mode [ 159.748718][ T7617] bridge_slave_1 (unregistering): left promiscuous mode [ 159.750941][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.464246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 160.470488][ T7644] netem: incorrect gi model size [ 160.472559][ T7644] netem: change failed [ 160.704645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.860541][ T7669] batadv_slave_1: entered promiscuous mode [ 160.867008][ T7669] batadv_slave_1: left promiscuous mode [ 160.959443][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 160.959458][ T40] audit: type=1400 audit(1749091589.218:464): avc: denied { create } for pid=7677 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.967944][ T40] audit: type=1400 audit(1749091589.218:465): avc: denied { create } for pid=7677 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 161.006105][ T5304] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 161.008983][ T5304] Bluetooth: hci2: Injecting HCI hardware error event [ 161.012932][ T5304] Bluetooth: hci2: hardware error 0x00 [ 161.017016][ T65] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 161.022857][ T7684] bpf: Bad value for 'uid' [ 161.025325][ T7684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.027577][ T7684] IPv6: NLM_F_CREATE should be set when creating new route [ 161.047193][ T7684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7684 comm=syz.0.501 [ 161.133761][ T7692] __nla_validate_parse: 8 callbacks suppressed [ 161.133773][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.503'. [ 161.139245][ T7692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.503'. [ 161.168980][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 161.173421][ T40] audit: type=1400 audit(1749091589.428:466): avc: denied { read } for pid=7693 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.367508][ T7704] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 161.370001][ T7704] netlink: 56 bytes leftover after parsing attributes in process `syz.3.507'. [ 161.403236][ T7706] netlink: 348 bytes leftover after parsing attributes in process `syz.3.508'. [ 161.408558][ T7706] syzkaller1: entered promiscuous mode [ 161.410331][ T7706] syzkaller1: entered allmulticast mode [ 161.432078][ T7708] pim6reg1: entered promiscuous mode [ 161.435694][ T7708] pim6reg1: entered allmulticast mode [ 161.548597][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 161.556170][ T7711] 9pnet_fd: Insufficient options for proto=fd [ 161.866889][ T7757] xt_TCPMSS: Only works on TCP SYN packets [ 161.920286][ T7763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 161.964663][ T1478] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.974763][ T40] audit: type=1400 audit(1749091846.232:467): avc: denied { write } for pid=7762 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.028311][ T40] audit: type=1400 audit(1749091846.282:468): avc: denied { lock } for pid=7768 comm="syz.2.527" path="socket:[17842]" dev="sockfs" ino=17842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 162.079731][ T40] audit: type=1400 audit(1749091846.332:469): avc: denied { ioctl } for pid=7777 comm="syz.2.528" path="socket:[17848]" dev="sockfs" ino=17848 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.134993][ T1478] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.143578][ T1478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.147072][ T1478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.150111][ T1478] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.161936][ T1478] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.167201][ T1478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.176039][ T1478] usb 6-1: config 0 descriptor?? [ 162.207479][ T7793] net_ratelimit: 116 callbacks suppressed [ 162.207490][ T7793] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 162.219265][ T7793] bridge0: port 4(veth0_to_bridge) entered blocking state [ 162.222554][ T7793] bridge0: port 4(veth0_to_bridge) entered disabled state [ 162.225154][ T7793] veth0_to_bridge: entered allmulticast mode [ 162.227776][ T7793] veth0_to_bridge: entered promiscuous mode [ 162.229701][ T7793] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.234115][ T7793] bridge0: port 4(veth0_to_bridge) entered blocking state [ 162.236382][ T7793] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 162.283437][ T40] audit: type=1326 audit(1749091846.532:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.534" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48d558e929 code=0x0 [ 162.534034][ T7815] 9pnet_fd: Insufficient options for proto=fd [ 162.569785][ T7817] tipc: Enabled bearer , priority 10 [ 162.584887][ T1478] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 162.599491][ T1478] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 162.621231][ T40] audit: type=1400 audit(1749091846.872:471): avc: denied { read write } for pid=7823 comm="syz.0.544" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.633689][ T40] audit: type=1400 audit(1749091846.872:472): avc: denied { open } for pid=7823 comm="syz.0.544" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.690055][ T7835] netlink: 'syz.3.546': attribute type 11 has an invalid length. [ 162.778480][ T7837] bond0: entered promiscuous mode [ 162.780266][ T7837] bond_slave_0: entered promiscuous mode [ 162.782175][ T7837] bond_slave_1: entered promiscuous mode [ 162.785161][ T7837] batadv0: entered promiscuous mode [ 162.789769][ T7837] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 162.795657][ T7837] bond0: left promiscuous mode [ 162.797722][ T7837] bond_slave_0: left promiscuous mode [ 162.799562][ T7837] bond_slave_1: left promiscuous mode [ 162.801879][ T7837] batadv0: left promiscuous mode [ 163.062512][ T40] audit: type=1400 audit(1749091847.312:473): avc: denied { ioctl } for pid=7856 comm="syz.3.554" path="socket:[18052]" dev="sockfs" ino=18052 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.083016][ T7857] Invalid source name [ 163.084997][ T5304] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 163.088079][ T7857] UBIFS error (pid: 7857): cannot open "/dev/sg0", error -22 [ 163.114276][ T7859] netlink: 'syz.2.555': attribute type 10 has an invalid length. [ 163.128503][ T7859] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.135930][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 163.138920][ T7858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.155637][ T7863] syz.3.557 (7863) used greatest stack depth: 18728 bytes left [ 163.192970][ T7868] input: syz1 as /devices/virtual/input/input17 [ 163.240274][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 163.243554][ T7870] dns_resolver: Unsupported content type (234) [ 163.327216][ T7875] Bluetooth: Invalid esc byte 0x05 [ 163.397187][ T7877] xt_l2tp: v2 doesn't support IP mode [ 163.463885][ T5633] usb 6-1: USB disconnect, device number 5 [ 163.499480][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.561'. [ 163.571142][ T7880] dlm: non-version read from control device 8224 [ 163.575888][ T1478] tipc: Node number set to 3758070757 [ 163.930029][ T7914] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 164.089329][ T7924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.206035][ T1478] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 164.253655][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 164.281610][ T7942] x_tables: duplicate underflow at hook 1 [ 164.364635][ T1478] usb 7-1: device descriptor read/64, error -71 [ 164.504310][ T7978] netlink: 'syz.1.589': attribute type 3 has an invalid length. [ 164.623655][ T1478] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 164.726292][ T7990] usb usb1: usbfs: process 7990 (syz.0.597) did not claim interface 0 before use [ 164.753580][ T1478] usb 7-1: device descriptor read/64, error -71 [ 164.873733][ T1478] usb usb7-port1: attempt power cycle [ 165.009026][ T8002] libceph: resolve '4' (ret=-3): failed [ 165.048549][ T8006] program syz.0.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.195699][ T8011] cgroup: fork rejected by pids controller in /syz0 [ 165.223606][ T1478] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 165.245988][ T1478] usb 7-1: device descriptor read/8, error -71 [ 165.494822][ T1478] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 165.525087][ T1478] usb 7-1: device descriptor read/8, error -71 [ 165.644127][ T1478] usb usb7-port1: unable to enumerate USB device [ 166.171276][ T8058] netlink: 'syz.0.605': attribute type 2 has an invalid length. [ 166.292988][ T8062] /dev/nullb0: Can't open blockdev [ 167.089603][ T8068] Bluetooth: (null): Invalid header checksum [ 167.142000][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 167.142012][ T40] audit: type=1400 audit(1749091851.392:495): avc: denied { execmem } for pid=8065 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.413321][ T8083] netlink: 'syz.2.616': attribute type 29 has an invalid length. [ 167.446674][ T8085] __nla_validate_parse: 3 callbacks suppressed [ 167.446686][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 167.474292][ T8087] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.484486][ T40] audit: type=1400 audit(1749091851.732:496): avc: denied { mount } for pid=8088 comm="syz.3.617" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 167.492667][ T8089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.530990][ T8085] ipip0: entered promiscuous mode [ 167.551381][ T40] audit: type=1400 audit(1749091851.802:497): avc: denied { ioctl } for pid=8091 comm="syz.2.618" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 167.714578][ T40] audit: type=1400 audit(1749091851.952:498): avc: denied { unmount } for pid=6640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 167.753775][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.619'. [ 167.965374][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 168.011298][ T8108] ipip0: entered promiscuous mode [ 168.017074][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.624'. [ 168.053264][ T8113] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 168.060853][ T40] audit: type=1400 audit(1749091852.312:499): avc: denied { name_bind } for pid=8112 comm="syz.3.625" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 168.169956][ T8096] syz.2.620 (8096): drop_caches: 1 [ 168.184646][ T8115] program syz.3.626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.188781][ T8115] netlink: 'syz.3.626': attribute type 21 has an invalid length. [ 168.191201][ T40] audit: type=1400 audit(1749091852.442:500): avc: denied { getopt } for pid=8114 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.197096][ T8115] netlink: 156 bytes leftover after parsing attributes in process `syz.3.626'. [ 168.324989][ T8096] syz.2.620 (8096): drop_caches: 1 [ 168.359765][ T8120] lo: Master is either lo or non-ether device [ 168.473317][ T8126] program syz.2.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.516935][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.631'. [ 168.589938][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.632'. [ 168.683223][ T8037] syz.0.604 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 168.693661][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.0.604 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 168.693678][ T8037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.693685][ T8037] Call Trace: [ 168.693689][ T8037] [ 168.693693][ T8037] dump_stack_lvl+0x16c/0x1f0 [ 168.693715][ T8037] dump_header+0x101/0x930 [ 168.693732][ T8037] oom_kill_process+0x270/0xa60 [ 168.693748][ T8037] out_of_memory+0x350/0x1700 [ 168.693766][ T8037] ? __pfx_out_of_memory+0x10/0x10 [ 168.693784][ T8037] mem_cgroup_out_of_memory+0x118/0x130 [ 168.693797][ T8037] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 168.693824][ T8037] ? do_raw_spin_unlock+0x172/0x230 [ 168.693840][ T8037] try_charge_memcg+0x72b/0xd50 [ 168.693858][ T8037] ? __pfx_try_charge_memcg+0x10/0x10 [ 168.693873][ T8037] ? __print_lock_name+0xd1/0xe0 [ 168.693886][ T8037] ? rcu_read_unlock+0x17/0x60 [ 168.693907][ T8037] charge_memcg+0x8a/0x230 [ 168.693922][ T8037] __mem_cgroup_charge+0x2b/0x1e0 [ 168.693933][ T8037] shmem_alloc_and_add_folio+0x514/0xc20 [ 168.693950][ T8037] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 168.693965][ T8037] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 168.693981][ T8037] shmem_get_folio_gfp+0x67f/0x1600 [ 168.693998][ T8037] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 168.694012][ T8037] ? timestamp_truncate+0x21e/0x2d0 [ 168.694035][ T8037] shmem_write_begin+0x160/0x300 [ 168.694050][ T8037] ? __pfx_shmem_write_begin+0x10/0x10 [ 168.694064][ T8037] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 168.694079][ T8037] generic_perform_write+0x3d0/0x930 [ 168.694097][ T8037] ? __pfx_generic_perform_write+0x10/0x10 [ 168.694112][ T8037] ? generic_update_time+0xcf/0xf0 [ 168.694121][ T8037] ? mnt_put_write_access_file+0x45/0xf0 [ 168.694138][ T8037] shmem_file_write_iter+0x10e/0x140 [ 168.694155][ T8037] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 168.694170][ T8037] __kernel_write_iter+0x317/0xa90 [ 168.694185][ T8037] ? __pfx___kernel_write_iter+0x10/0x10 [ 168.694199][ T8037] ? __up_read+0x1f8/0x750 [ 168.694211][ T8037] ? dump_user_range+0x745/0xb60 [ 168.694228][ T8037] dump_user_range+0x41f/0xb60 [ 168.694244][ T8037] ? __pfx_dump_user_range+0x10/0x10 [ 168.694257][ T8037] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 168.694278][ T8037] ? __pfx_writenote+0x10/0x10 [ 168.694296][ T8037] elf_core_dump+0x288a/0x3a90 [ 168.694318][ T8037] ? __pfx_elf_core_dump+0x10/0x10 [ 168.694331][ T8037] ? kasan_save_stack+0x42/0x60 [ 168.694344][ T8037] ? kasan_save_stack+0x33/0x60 [ 168.694356][ T8037] ? kasan_save_track+0x14/0x30 [ 168.694369][ T8037] ? __kasan_kmalloc+0xaa/0xb0 [ 168.694381][ T8037] ? do_coredump+0x1c9a/0x4f10 [ 168.694392][ T8037] ? get_signal+0x22e3/0x26d0 [ 168.694404][ T8037] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 168.694419][ T8037] ? 0xffffffffff600000 [ 168.694452][ T8037] ? do_coredump+0x399f/0x4f10 [ 168.694463][ T8037] do_coredump+0x399f/0x4f10 [ 168.694480][ T8037] ? __pfx_do_coredump+0x10/0x10 [ 168.694494][ T8037] ? find_held_lock+0x2b/0x80 [ 168.694506][ T8037] ? is_bpf_text_address+0x8a/0x1a0 [ 168.694522][ T8037] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 168.694538][ T8037] ? is_bpf_text_address+0x94/0x1a0 [ 168.694550][ T8037] ? kernel_text_address+0x8d/0x100 [ 168.694562][ T8037] ? __kernel_text_address+0xd/0x40 [ 168.694572][ T8037] ? unwind_get_return_address+0x59/0xa0 [ 168.694598][ T8037] ? stack_depot_save_flags+0x28/0xa40 [ 168.694610][ T8037] ? __lock_acquire+0xb8a/0x1c90 [ 168.694628][ T8037] ? kasan_save_stack+0x42/0x60 [ 168.694640][ T8037] ? kasan_save_stack+0x33/0x60 [ 168.694652][ T8037] ? kasan_save_track+0x14/0x30 [ 168.694664][ T8037] ? kasan_save_free_info+0x3b/0x60 [ 168.694675][ T8037] ? __kasan_slab_free+0x51/0x70 [ 168.694688][ T8037] ? kmem_cache_free+0x2d1/0x4d0 [ 168.694700][ T8037] ? __sigqueue_free+0xba/0x2a0 [ 168.694714][ T8037] ? get_signal+0xcba/0x26d0 [ 168.694725][ T8037] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 168.694755][ T8037] ? proc_coredump_connector+0x2d1/0x4f0 [ 168.694770][ T8037] ? __pfx_proc_coredump_connector+0x10/0x10 [ 168.694788][ T8037] ? rcu_is_watching+0x12/0xc0 [ 168.694804][ T8037] get_signal+0x22e3/0x26d0 [ 168.694819][ T8037] ? force_sig_fault+0xc4/0x100 [ 168.694832][ T8037] ? __pfx_get_signal+0x10/0x10 [ 168.694849][ T8037] arch_do_signal_or_restart+0x8f/0x7d0 [ 168.694860][ T8037] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 168.694873][ T8037] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.694894][ T8037] irqentry_exit_to_user_mode+0x12a/0x270 [ 168.694911][ T8037] asm_exc_page_fault+0x26/0x30 [ 168.694922][ T8037] RIP: 0033:0x7f505b98e929 [ 168.694933][ T8037] Code: Unable to access opcode bytes at 0x7f505b98e8ff. [ 168.694937][ T8037] RSP: 002b:00007f505c85cf08 EFLAGS: 00010246 [ 168.694946][ T8037] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f505b98e929 [ 168.694953][ T8037] RDX: 00007f505c85cf20 RSI: 0000000000000058 RDI: 00007f505c85cf20 [ 168.694959][ T8037] RBP: 00007f505ba10b39 R08: 0000000000000000 R09: 0000000000000058 [ 168.694965][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.694970][ T8037] R13: 0000000000000000 R14: 00007f505bbb6080 R15: 00007ffc9e67a678 [ 168.694987][ T8037] [ 168.774410][ T8037] memory: usage 307200kB, limit 307200kB, failcnt 10694 [ 168.846522][ T8137] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 168.853655][ T8037] memory+swap: usage 432184kB, limit 9007199254740988kB, failcnt 0 [ 168.892838][ T8037] kmem: usage 11468kB, limit 9007199254740988kB, failcnt 0 [ 168.893220][ T8136] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 168.895640][ T8037] Memory cgroup stats for /syz0: [ 168.897756][ T8037] cache 302665728 [ 168.900539][ T8037] rss 151552 [ 168.904270][ T8037] rss_huge 0 [ 168.905594][ T8037] shmem 302665728 [ 168.907047][ T8037] mapped_file 0 [ 168.908448][ T8037] dirty 0 [ 168.909615][ T8037] writeback 0 [ 168.910931][ T8037] workingset_refault_anon 533 [ 168.912873][ T8037] workingset_refault_file 1655 [ 168.914508][ T8037] swap 127983616 [ 168.915692][ T8037] swapcached 12288 [ 168.916900][ T8037] nr_memmap_boot_pages 163441 [ 168.918544][ T8037] pgpgin 91041 [ 168.919650][ T8037] pglazyfree 54099 [ 168.920851][ T8037] pgfault 117 [ 168.921915][ T8037] a_other 118681600 [ 168.923126][ T8037] inactive_anon 184147968 [ 168.924995][ T8037] active_anon 0 [ 168.926368][ T8037] inactive_file 0 [ 168.927658][ T8037] active_file 0 [ 168.928788][ T8037] hierarchical_memory_limit 314572800 [ 168.930391][ T8037] hierarchical_memsw_limit 9223372036854771712 [ 168.932300][ T8037] total_cache 302665728 [ 168.934138][ T8141] rdma_op ffff888046ea61f0 conn xmit_rdma 0000000000000000 [ 168.935336][ T8037] total_rss 151552 [ 168.938008][ T8037] total_rss_huge 0 [ 168.939188][ T8037] total_shmem 302665728 [ 168.940523][ T8037] total_mapped_file 0 [ 168.942312][ T8037] total_dirty 0 [ 168.943438][ T8037] total_writeback 0 [ 168.945047][ T8037] total_workingset_refault_anon 533 [ 168.946823][ T8037] total_workingset_refault_file 1655 [ 168.948511][ T8037] total_swap 127983616 [ 168.949822][ T8037] total_swapcached 12288 [ 168.951154][ T8037] total_nr_memmap_boot_pages 163441 [ 168.952795][ T8037] total_pgpgin 91041 [ 168.956599][ T8037] total_pglazyfree 54099 [ 168.957949][ T8037] total_pgfault 117 [ 168.959298][ T8037] total_a_other 118681600 [ 168.960668][ T8037] total_inactive_anon 184147968 [ 168.962195][ T8037] total_active_anon 0 [ 168.963446][ T8037] total_inactive_file 0 [ 168.966790][ T8037] total_active_file 0 [ 168.969209][ T8037] anon_cost 0 [ 168.970459][ T8037] file_cost 0 [ 168.971578][ T8037] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.604,pid=8022,uid=0 [ 168.978625][ T8037] Memory cgroup out of memory: Killed process 8022 (syz.0.604) total-vm:45172kB, anon-rss:0kB, file-rss:31616kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 169.005791][ T8106] syz.0.623 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 169.009313][ T8106] CPU: 2 UID: 0 PID: 8106 Comm: syz.0.623 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 169.009340][ T8106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.009347][ T8106] Call Trace: [ 169.009352][ T8106] [ 169.009357][ T8106] dump_stack_lvl+0x16c/0x1f0 [ 169.009378][ T8106] dump_header+0x101/0x930 [ 169.009395][ T8106] oom_kill_process+0x270/0xa60 [ 169.009412][ T8106] out_of_memory+0x350/0x1700 [ 169.009429][ T8106] ? __pfx_out_of_memory+0x10/0x10 [ 169.009448][ T8106] mem_cgroup_out_of_memory+0x118/0x130 [ 169.009460][ T8106] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 169.009475][ T8106] ? do_raw_spin_unlock+0x172/0x230 [ 169.009490][ T8106] try_charge_memcg+0x72b/0xd50 [ 169.009508][ T8106] ? __pfx_try_charge_memcg+0x10/0x10 [ 169.009526][ T8106] ? find_held_lock+0x2b/0x80 [ 169.009541][ T8106] charge_memcg+0x8a/0x230 [ 169.009557][ T8106] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 169.009569][ T8106] __read_swap_cache_async+0x43e/0x5a0 [ 169.009585][ T8106] ? __pfx___read_swap_cache_async+0x10/0x10 [ 169.009598][ T8106] ? swp_swap_info+0xce/0x130 [ 169.009614][ T8106] ? __pfx_swp_swap_info+0x10/0x10 [ 169.009633][ T8106] swap_cluster_readahead+0x4e1/0x710 [ 169.009649][ T8106] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 169.009671][ T8106] ? get_vma_policy+0x242/0x3c0 [ 169.009682][ T8106] swapin_readahead+0x13a/0xd60 [ 169.009699][ T8106] ? __pfx_swapin_readahead+0x10/0x10 [ 169.009710][ T8106] ? __filemap_get_folio+0x32b/0xc30 [ 169.009729][ T8106] ? swap_cache_get_folio+0x1df/0x450 [ 169.009742][ T8106] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 169.009754][ T8106] ? __pfx_get_swap_device+0x10/0x10 [ 169.009768][ T8106] ? do_swap_page+0x125/0x6520 [ 169.009781][ T8106] do_swap_page+0x63f/0x6520 [ 169.009792][ T8106] ? __lock_acquire+0x622/0x1c90 [ 169.009812][ T8106] ? __pfx_do_swap_page+0x10/0x10 [ 169.009824][ T8106] ? __pfx_default_wake_function+0x10/0x10 [ 169.009840][ T8106] ? rcu_is_watching+0x12/0xc0 [ 169.009853][ T8106] ? ___pte_offset_map+0x1d5/0x570 [ 169.009872][ T8106] __handle_mm_fault+0x162f/0x5490 [ 169.009889][ T8106] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.009900][ T8106] ? __pfx_mt_find+0x10/0x10 [ 169.009918][ T8106] ? find_vma+0xbf/0x140 [ 169.009926][ T8106] ? __pfx_find_vma+0x10/0x10 [ 169.009937][ T8106] handle_mm_fault+0x589/0xd10 [ 169.009949][ T8106] ? __pkru_allows_pkey+0x21/0xb0 [ 169.009965][ T8106] do_user_addr_fault+0x7a6/0x1370 [ 169.009982][ T8106] ? rcu_is_watching+0x12/0xc0 [ 169.009996][ T8106] exc_page_fault+0x5c/0xb0 [ 169.010012][ T8106] asm_exc_page_fault+0x26/0x30 [ 169.010022][ T8106] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 169.010035][ T8106] Code: c9 75 f6 e9 82 1d 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 169.010045][ T8106] RSP: 0018:ffffc90004127b08 EFLAGS: 00050246 [ 169.010054][ T8106] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000040 [ 169.010060][ T8106] RDX: 0000000000080000 RSI: ffffffff8161176e RDI: 00007f505c87d7c0 [ 169.010066][ T8106] RBP: 0000000000000000 R08: c230a984828786ce R09: 0000000000000000 [ 169.010072][ T8106] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f505c87d5c0 [ 169.010078][ T8106] R13: ffff88802c61bdc0 R14: 00007f505c87d5c0 R15: 00007ffffffff000 [ 169.010089][ T8106] ? copy_fpstate_to_sigframe+0x15e/0xaf0 [ 169.010105][ T8106] copy_fpstate_to_sigframe+0x178/0xaf0 [ 169.010121][ T8106] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 169.010134][ T8106] ? posixtimer_deliver_signal+0xed/0x6a0 [ 169.010148][ T8106] ? x86_task_fpu+0x5f/0x90 [ 169.010161][ T8106] get_sigframe+0x4a8/0x9c0 [ 169.010174][ T8106] ? __pfx_get_sigframe+0x10/0x10 [ 169.010184][ T8106] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 169.010198][ T8106] ? _raw_spin_unlock_irq+0x29/0x50 [ 169.010213][ T8106] ? siginfo_layout+0x177/0x290 [ 169.010227][ T8106] x64_setup_rt_frame+0x12e/0xcf0 [ 169.010241][ T8106] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 169.010253][ T8106] ? do_futex+0x122/0x350 [ 169.010268][ T8106] ? __pfx_do_futex+0x10/0x10 [ 169.010285][ T8106] arch_do_signal_or_restart+0x5e4/0x7d0 [ 169.010300][ T8106] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 169.010316][ T8106] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 169.010327][ T8106] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 169.010342][ T8106] exit_to_user_mode_loop+0x84/0x110 [ 169.010354][ T8106] do_syscall_64+0x3f6/0x4c0 [ 169.010365][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.010375][ T8106] RIP: 0033:0x7f505b98e927 [ 169.010384][ T8106] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 169.010394][ T8106] RSP: 002b:00007f505c87e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.010403][ T8106] RAX: 00000000000000ca RBX: 00007f505bbb5fa8 RCX: 00007f505b98e929 [ 169.010409][ T8106] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f505bbb5fa8 [ 169.010415][ T8106] RBP: 00007f505bbb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 169.010421][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f505bbb5fac [ 169.010427][ T8106] R13: 0000000000000000 R14: 00007ffc9e67a590 R15: 00007ffc9e67a678 [ 169.010440][ T8106] [ 169.010455][ T8106] memory: usage 307200kB, limit 307200kB, failcnt 11014 [ 169.174810][ T8106] memory+swap: usage 408204kB, limit 9007199254740988kB, failcnt 0 [ 169.177248][ T8106] kmem: usage 11464kB, limit 9007199254740988kB, failcnt 0 [ 169.179531][ T8106] Memory cgroup stats for /syz0: [ 169.179700][ T8106] cache 282091520 [ 169.182590][ T8106] rss 151552 [ 169.183811][ T8106] rss_huge 0 [ 169.185002][ T8106] shmem 282091520 [ 169.186300][ T8106] mapped_file 0 [ 169.187457][ T8106] dirty 0 [ 169.188447][ T8106] writeback 0 [ 169.189564][ T8106] workingset_refault_anon 533 [ 169.191140][ T8106] workingset_refault_file 1655 [ 169.192749][ T8106] swap 124653568 [ 169.194001][ T8106] swapcached 16384 [ 169.195265][ T8106] nr_memmap_boot_pages 165586 [ 169.196828][ T8106] pgpgin 98208 [ 169.197961][ T8106] pglazyfree 54234 [ 169.199162][ T8106] pgfault 117 [ 169.200239][ T8106] a_other 108183552 [ 169.201436][ T8106] inactive_anon 173989888 [ 169.202754][ T8106] active_anon 0 [ 169.203909][ T8106] inactive_file 0 [ 169.205063][ T8106] active_file 0 [ 169.206179][ T8106] hierarchical_memory_limit 314572800 [ 169.207858][ T8106] hierarchical_memsw_limit 9223372036854771712 [ 169.209826][ T8106] total_cache 282091520 [ 169.211164][ T8106] total_rss 151552 [ 169.212456][ T8106] total_rss_huge 0 [ 169.213811][ T8106] total_shmem 282091520 [ 169.215256][ T8106] total_mapped_file 0 [ 169.216595][ T8106] total_dirty 0 [ 169.217764][ T8106] total_writeback 0 [ 169.218946][ T8106] total_workingset_refault_anon 533 [ 169.220558][ T8106] total_workingset_refault_file 1655 [ 169.222166][ T8106] total_swap 124653568 [ 169.223432][ T8106] total_swapcached 16384 [ 169.234423][ T8106] total_nr_memmap_boot_pages 165586 [ 169.236516][ T8106] total_pgpgin 98208 [ 169.237989][ T8106] total_pglazyfree 54234 [ 169.239788][ T8106] total_pgfault 117 [ 169.241399][ T8106] total_a_other 108183552 [ 169.243161][ T8106] total_inactive_anon 173989888 [ 169.253726][ T8106] total_active_anon 0 [ 169.255027][ T8106] total_inactive_file 0 [ 169.256375][ T8106] total_active_file 0 [ 169.257642][ T8106] anon_cost 0 [ 169.258711][ T8106] file_cost 0 [ 169.259787][ T8106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.604,pid=8038,uid=0 [ 169.267845][ T8151] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.638'. [ 169.284677][ T8106] Memory cgroup out of memory: Killed process 8038 (syz.0.604) total-vm:45172kB, anon-rss:0kB, file-rss:30592kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 169.402663][ T8160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.414799][ T40] audit: type=1400 audit(1749091853.672:501): avc: denied { rename } for pid=8159 comm="syz.2.641" name="file0" dev="overlay" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.423131][ T40] audit: type=1400 audit(1749091853.672:502): avc: denied { unlink } for pid=8159 comm="syz.2.641" name="file1" dev="overlay" ino=35913862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.443562][ T40] audit: type=1400 audit(1749091853.682:503): avc: denied { write open } for pid=8159 comm="syz.2.641" path=2F202864656C6574656429 dev="tmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.455059][ T40] audit: type=1400 audit(1749091853.702:504): avc: denied { setattr } for pid=8159 comm="syz.2.641" name="#813" dev="tmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.784437][ T8175] overlayfs: failed to resolve './file1': -2 [ 169.837175][ T8176] 9pnet_virtio: no channels available for device syz [ 169.954914][ T8180] fuse: Unknown parameter '0ffd' [ 170.053610][ T8183] netlink: 284 bytes leftover after parsing attributes in process `syz.3.650'. [ 170.797789][ T8017] syz.0.604 (8017) used greatest stack depth: 18712 bytes left [ 170.852791][ T8035] syz.0.604 (8035) used greatest stack depth: 17408 bytes left [ 171.092991][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 171.096080][ T8212] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 171.098821][ T8212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.378453][ T8229] sp0: Synchronizing with TNC [ 171.823550][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 171.983732][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 171.987113][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.991118][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.994330][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.998928][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.002098][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.007190][ T34] usb 5-1: config 0 descriptor?? [ 172.188084][ T8269] input: syz0 as /devices/virtual/input/input18 [ 172.221566][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.228458][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.759199][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 174.761141][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 174.766168][ T34] usb 5-1: USB disconnect, device number 9 [ 182.619033][ T8281] __nla_validate_parse: 2 callbacks suppressed [ 182.619043][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 182.678298][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 182.678308][ T40] audit: type=1400 audit(1749091866.932:510): avc: denied { read } for pid=8280 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.691083][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 182.730834][ T40] audit: type=1400 audit(1749091866.982:511): avc: denied { connect } for pid=8295 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.737284][ T40] audit: type=1400 audit(1749091866.982:512): avc: denied { ioctl } for pid=8297 comm="syz.2.681" path="socket:[21368]" dev="sockfs" ino=21368 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.751423][ T40] audit: type=1400 audit(1749091867.002:513): avc: denied { read write } for pid=8295 comm="syz.0.680" name="file0" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.764397][ T40] audit: type=1400 audit(1749091867.002:514): avc: denied { open } for pid=8295 comm="syz.0.680" path="/178/file0/file0" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.771629][ T40] audit: type=1400 audit(1749091867.012:515): avc: denied { bind } for pid=8295 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.788713][ T40] audit: type=1400 audit(1749091867.042:516): avc: denied { setopt } for pid=8305 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.840161][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.842389][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.842640][ T40] audit: type=1400 audit(1749091867.092:517): avc: denied { read } for pid=8317 comm="syz.0.685" path="socket:[21398]" dev="sockfs" ino=21398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.845021][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.854602][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.857229][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.859895][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.862289][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.862974][ T8320] program syz.2.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.866044][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.870995][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.873821][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.876174][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.878388][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.880757][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.883116][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.886642][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.889139][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.891669][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.894189][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.896257][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.898494][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.903027][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.906323][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.909484][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.912417][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.915477][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.918404][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.921414][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.924336][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.927365][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.930341][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.933363][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.936449][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.939322][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.942275][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.945915][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.948642][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.951004][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.953234][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.955521][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.957805][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.960033][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.962252][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.964530][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.966643][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.968900][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.971038][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.973218][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.975431][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.977557][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.979748][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.981890][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.984077][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.986218][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.988333][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.990490][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.992633][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.994999][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.997222][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 182.999300][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.001402][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.003604][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.005845][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.007946][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.010071][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.012184][ T5304] Bluetooth: hci1: unexpected event 0x07 length: 4 < 255 [ 183.023594][ T838] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 183.024767][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.693'. [ 183.037121][ T8330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.693'. [ 183.040101][ T8330] netlink: 43 bytes leftover after parsing attributes in process `syz.0.693'. [ 183.042827][ T8330] netlink: 'syz.0.693': attribute type 5 has an invalid length. [ 183.045348][ T8330] netlink: 43 bytes leftover after parsing attributes in process `syz.0.693'. [ 183.138709][ T40] audit: type=1400 audit(1749091867.392:518): avc: denied { watch } for pid=8336 comm="syz.0.695" path="/182/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.145878][ T40] audit: type=1400 audit(1749091867.402:519): avc: denied { watch_sb watch_reads } for pid=8336 comm="syz.0.695" path="/182/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.183277][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.187436][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.190498][ T838] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 183.193754][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.198054][ T838] usb 8-1: config 0 descriptor?? [ 183.245386][ T8343] netlink: 'syz.0.697': attribute type 14 has an invalid length. [ 183.406446][ T838] usbhid 8-1:0.0: can't add hid device: -71 [ 183.408398][ T838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 183.412265][ T838] usb 8-1: USB disconnect, device number 4 [ 183.415516][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'. [ 183.423898][ T8352] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 183.434548][ T8352] program syz.0.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.437326][ T8352] ata1.00: non-matching transfer count (32/0) [ 183.742395][ T8374] xt_hashlimit: size too large, truncated to 1048576 [ 183.750512][ T8374] syz.0.705: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.757169][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.0.705 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 183.757185][ T8374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.757192][ T8374] Call Trace: [ 183.757195][ T8374] [ 183.757199][ T8374] dump_stack_lvl+0x16c/0x1f0 [ 183.757238][ T8374] warn_alloc+0x248/0x3a0 [ 183.757253][ T8374] ? __pfx_warn_alloc+0x10/0x10 [ 183.757272][ T8374] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 183.757288][ T8374] ? __vmalloc_node_noprof+0xad/0xf0 [ 183.757302][ T8374] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 183.757318][ T8374] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 183.757333][ T8374] ? rcu_is_watching+0x12/0xc0 [ 183.757348][ T8374] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.757361][ T8374] ? __alloc_pages_noprof+0xb/0x1b0 [ 183.757374][ T8374] ? ___kmalloc_large_node+0x84/0x1e0 [ 183.757388][ T8374] __kvmalloc_node_noprof+0x30a/0x620 [ 183.757401][ T8374] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 183.757416][ T8374] ? net_generic+0xea/0x2a0 [ 183.757428][ T8374] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 183.757445][ T8374] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 183.757459][ T8374] hashlimit_mt_check_common+0x8bb/0x1460 [ 183.757477][ T8374] hashlimit_mt_check+0x71/0x90 [ 183.757490][ T8374] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 183.757504][ T8374] xt_check_match+0x286/0xa50 [ 183.757517][ T8374] ? kasan_populate_early_shadow+0xd2/0x320 [ 183.757533][ T8374] ? __pfx_xt_check_match+0x10/0x10 [ 183.757548][ T8374] ? xt_find_target+0x1f2/0x290 [ 183.757562][ T8374] ? xt_find_match+0x1f6/0x290 [ 183.757578][ T8374] find_check_entry.constprop.0+0x34e/0xa20 [ 183.757596][ T8374] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 183.757614][ T8374] ? kasan_quarantine_put+0x10a/0x240 [ 183.757628][ T8374] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.757646][ T8374] ? kfree+0x2b4/0x4d0 [ 183.757656][ T8374] ? translate_table+0xc0e/0x17b0 [ 183.757672][ T8374] translate_table+0xd0b/0x17b0 [ 183.757691][ T8374] ? __pfx_translate_table+0x10/0x10 [ 183.757703][ T8374] ? xt_alloc_table_info+0x3e/0xa0 [ 183.757719][ T8374] do_ip6t_set_ctl+0x570/0xb00 [ 183.757733][ T8374] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 183.757748][ T8374] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 183.757764][ T8374] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.757787][ T8374] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 183.757801][ T8374] nf_setsockopt+0x8d/0xf0 [ 183.757814][ T8374] ipv6_setsockopt+0x135/0x170 [ 183.757828][ T8374] rawv6_setsockopt+0xc2/0x510 [ 183.757840][ T8374] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 183.757852][ T8374] ? selinux_socket_setsockopt+0x6a/0x80 [ 183.757876][ T8374] ? sock_common_setsockopt+0x2e/0xf0 [ 183.757888][ T8374] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 183.757900][ T8374] do_sock_setsockopt+0x224/0x470 [ 183.757911][ T8374] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 183.757930][ T8374] __sys_setsockopt+0x1a0/0x230 [ 183.757948][ T8374] __x64_sys_setsockopt+0xbd/0x160 [ 183.757962][ T8374] ? do_syscall_64+0x91/0x4c0 [ 183.757970][ T8374] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.757986][ T8374] do_syscall_64+0xcd/0x4c0 [ 183.757996][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.758007][ T8374] RIP: 0033:0x7f505b98e929 [ 183.758016][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.758026][ T8374] RSP: 002b:00007f505c87e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.758037][ T8374] RAX: ffffffffffffffda RBX: 00007f505bbb5fa0 RCX: 00007f505b98e929 [ 183.758043][ T8374] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 183.758049][ T8374] RBP: 00007f505ba10b39 R08: 0000000000000588 R09: 0000000000000000 [ 183.758055][ T8374] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 183.758061][ T8374] R13: 0000000000000000 R14: 00007f505bbb5fa0 R15: 00007ffc9e67a678 [ 183.758074][ T8374] [ 183.758077][ T8374] Mem-Info: [ 183.880198][ T8374] active_anon:7816 inactive_anon:64 isolated_anon:0 [ 183.880198][ T8374] active_file:8077 inactive_file:7391 isolated_file:0 [ 183.880198][ T8374] unevictable:1772 dirty:47 writeback:0 [ 183.880198][ T8374] slab_reclaimable:8747 slab_unreclaimable:73979 [ 183.880198][ T8374] mapped:24371 shmem:2396 pagetables:1314 [ 183.880198][ T8374] sec_pagetables:301 bounce:0 [ 183.880198][ T8374] kernel_misc_reclaimable:0 [ 183.880198][ T8374] free:492402 free_pcp:20430 free_cma:0 [ 183.899135][ T8374] Node 0 active_anon:31264kB inactive_anon:256kB active_file:32308kB inactive_file:29428kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:97484kB dirty:188kB writeback:0kB shmem:6048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12208kB pagetables:5084kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 183.912966][ T8374] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.926301][ T8374] Node 0 DMA free:15108kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:40kB free_cma:0kB [ 183.938642][ T8374] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 183.940801][ T8374] Node 0 DMA32 free:352340kB boost:24576kB min:52092kB low:58968kB high:65844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31140kB inactive_anon:256kB active_file:32308kB inactive_file:29428kB unevictable:3552kB writepending:188kB present:2080628kB managed:1264892kB mlocked:16kB bounce:0kB free_pcp:60432kB local_pcp:7944kB free_cma:0kB [ 183.950740][ T8374] lowmem_reserve[]: 0 0 0 0 0 [ 183.952353][ T8374] Node 1 Normal free:1602160kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:21124kB local_pcp:10296kB free_cma:0kB [ 183.961936][ T8374] lowmem_reserve[]: 0 0 0 0 0 [ 183.963648][ T8374] Node 0 DMA: 5*4kB (UM) 6*8kB (UM) 12*16kB (UM) 8*32kB (UM) 8*64kB (UM) 6*128kB (UM) 6*256kB (UM) 3*512kB (UM) 2*1024kB (M) 0*2048kB 2*4096kB (ME) = 15108kB [ 183.968641][ T8374] Node 0 DMA32: 734*4kB (UME) 661*8kB (UME) 501*16kB (UME) 833*32kB (UME) 660*64kB (UME) 272*128kB (UME) 176*256kB (UME) 110*512kB (UME) 52*1024kB (UM) 24*2048kB (UM) 7*4096kB (M) = 352400kB [ 183.974560][ T8374] Node 1 Normal: 110*4kB (UME) 99*8kB (UME) 104*16kB (UME) 195*32kB (UME) 105*64kB (UME) 55*128kB (UME) 33*256kB (M) 24*512kB (UM) 20*1024kB (UME) 11*2048kB (UM) 370*4096kB (UM) = 1602160kB [ 183.980253][ T8374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.983204][ T8374] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.986432][ T8374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.989444][ T8374] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.992313][ T8374] 17894 total pagecache pages [ 183.993942][ T8374] 5 pages in swap cache [ 183.995353][ T8374] Free swap = 124652kB [ 183.996783][ T8374] Total swap = 124996kB [ 183.998168][ T8374] 1048443 pages RAM [ 183.999444][ T8374] 0 pages HighMem/MovableOnly [ 184.000991][ T8374] 282893 pages reserved [ 184.002323][ T8374] 0 pages cma reserved [ 184.097364][ T10] libceph: connect (1)[c::]:6789 error -1 [ 184.099387][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 184.163055][ T8385] ceph: No mds server is up or the cluster is laggy [ 184.273582][ T5633] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 184.318848][ T8390] binder: BINDER_SET_CONTEXT_MGR already set [ 184.321113][ T8390] binder: 8389:8390 ioctl 4018620d 200000000040 returned -16 [ 184.324148][ T8390] binder: 8389:8390 ioctl c0306201 200000000240 returned -11 [ 184.443618][ T5633] usb 7-1: Using ep0 maxpacket: 32 [ 184.446750][ T5633] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.449374][ T5633] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.452029][ T5633] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.454830][ T5633] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.457748][ T5633] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.460760][ T5633] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.464758][ T5633] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.467552][ T5633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.471665][ T5633] usb 7-1: config 0 descriptor?? [ 184.681005][ T5633] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.689333][ T5633] usb 7-1: USB disconnect, device number 10 [ 184.695450][ T5633] usblp0: removed [ 185.056261][ C0] Unknown status report in ack skb [ 185.141908][ T8413] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 185.143670][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 185.155579][ T8413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.212470][ T8420] batadv_slave_1: entered promiscuous mode [ 185.230169][ T8422] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 185.232466][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 185.244517][ T8422] netlink: 52 bytes leftover after parsing attributes in process `syz.0.719'. [ 185.313622][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 185.317137][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 185.317581][ T8420] team0 (unregistering): Port device team_slave_0 removed [ 185.319797][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 185.325179][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 185.328659][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.330821][ T8420] team0 (unregistering): Port device team_slave_1 removed [ 185.331651][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.337976][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.343451][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 185.346986][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.353100][ T34] usb 7-1: config 0 descriptor?? [ 185.370700][ T8425] veth5: entered promiscuous mode [ 185.374537][ T8425] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 185.381884][ T8424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.400031][ T8419] batadv_slave_1: left promiscuous mode [ 185.477037][ T8431] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 185.478780][ T8430] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.480330][ T8431] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 185.483702][ T8430] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 185.488184][ T8431] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 185.491595][ T8430] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 185.559569][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.763410][ T34] usb 7-1: USB disconnect, device number 11 [ 185.766278][ T34] usblp0: removed [ 185.963910][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.968497][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.972457][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.976420][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.980268][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.984153][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.987922][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.991681][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.995550][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.999400][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.307747][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 186.314294][ T8451] NILFS (nbd2): device size too small [ 186.478656][ T8467] virtio-fs: tag not found [ 186.482818][ T8465] usb usb8: usbfs: process 8465 (syz.3.734) did not claim interface 0 before use [ 186.928557][ T8503] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 186.998109][ T8508] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 187.050752][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.060688][ T8508] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 187.064919][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.075564][ T8508] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 187.085476][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.096779][ T8508] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 187.102247][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.112757][ T8508] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 187.118258][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.128398][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.150368][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.168432][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.177883][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.190659][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.205669][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.213382][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.239148][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.248161][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.268505][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.285498][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.310766][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.327217][ T8531] sch_fq: defrate 0 ignored. [ 187.332973][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.333033][ T8531] cgroup: release_agent respecified [ 187.376803][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.395664][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.406630][ T8537] SELinux: failed to load policy [ 187.409432][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.428394][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.437328][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.443454][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.451884][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.508822][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.509210][ T8540] Invalid ELF header magic: != ELF [ 187.532218][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.584097][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.604994][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.616186][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.638229][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.644378][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.666155][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.670297][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.689567][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.707431][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.715410][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.730217][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.743845][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.746566][ T8557] __nla_validate_parse: 6 callbacks suppressed [ 187.746575][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 187.752427][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.781189][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.797308][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 187.797322][ T40] audit: type=1400 audit(1749091872.052:545): avc: denied { read } for pid=8554 comm="syz.2.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.798311][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 187.833317][ T8508] team0: Device hsr_slave_0 failed to register rx_handler [ 187.913794][ T40] audit: type=1400 audit(1749091872.172:546): avc: denied { map } for pid=8565 comm="syz.0.763" path="socket:[22077]" dev="sockfs" ino=22077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.923003][ T8566] netlink: 108 bytes leftover after parsing attributes in process `syz.0.763'. [ 187.938437][ T40] audit: type=1400 audit(1749091872.192:547): avc: denied { append } for pid=8573 comm="syz.1.765" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.950858][ T5304] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 187.953679][ T40] audit: type=1400 audit(1749091872.212:548): avc: denied { mounton } for pid=8568 comm="syz.3.764" path="/151/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 187.962212][ T8578] loop4: detected capacity change from 0 to 524255232 [ 188.100007][ T40] audit: type=1400 audit(1749091872.352:549): avc: denied { connect } for pid=8597 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 188.121592][ T5354] udevd[5354]: worker [8277] terminated by signal 33 (Unknown signal 33) [ 188.124412][ T5354] udevd[5354]: worker [8277] failed while handling '/devices/virtual/vc/vcsa20' [ 188.127857][ T5354] udevd[5354]: worker [8446] terminated by signal 33 (Unknown signal 33) [ 188.130543][ T5354] udevd[5354]: worker [8446] failed while handling '/devices/virtual/vc/vcs20' [ 188.157865][ T5354] udevd[5354]: worker [8294] terminated by signal 33 (Unknown signal 33) [ 188.160673][ T5354] udevd[5354]: worker [8294] failed while handling '/devices/virtual/block/loop4' [ 188.162765][ T40] audit: type=1400 audit(1749091872.412:550): avc: denied { mount } for pid=8599 comm="syz.0.770" name="/" dev="9p" ino=35913823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 188.181402][ T40] audit: type=1400 audit(1749091872.432:551): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 188.282011][ T8606] netlink: 788 bytes leftover after parsing attributes in process `syz.0.771'. [ 188.465576][ T8627] netlink: 256 bytes leftover after parsing attributes in process `syz.0.775'. [ 188.468955][ T8627] ksmbd: Unknown IPC event: 0, ignore. [ 188.635762][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.778'. [ 188.641553][ T8638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8638 comm=syz.3.778 [ 188.645388][ T8645] xt_hashlimit: size too large, truncated to 1048576 [ 188.648243][ T8640] netlink: 830 bytes leftover after parsing attributes in process `syz.3.778'. [ 188.694129][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.779'. [ 188.699287][ T8647] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 188.700447][ T8648] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=8648 comm=syz.0.780 [ 189.073587][ T40] audit: type=1400 audit(1749091873.322:552): avc: denied { map } for pid=8661 comm="syz.3.786" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.081195][ T40] audit: type=1400 audit(1749091873.332:553): avc: denied { execute } for pid=8661 comm="syz.3.786" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.419430][ T8673] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.501667][ T8677] binder: BINDER_SET_CONTEXT_MGR already set [ 189.504462][ T8677] binder: 8676:8677 ioctl 4018620d 200000000100 returned -16 [ 189.507989][ T8677] binder: 8676:8677 ioctl c0306201 200000000640 returned -22 [ 189.531983][ T8677] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 189.556758][ T8676] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 189.690844][ T8686] ata1.00: invalid multi_count 1 ignored [ 189.730083][ T40] audit: type=1400 audit(1749091873.982:554): avc: denied { mounton } for pid=8679 comm="syz.3.793" path="/bus" dev="ramfs" ino=25648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 189.753316][ T8689] netlink: 5 bytes leftover after parsing attributes in process `syz.2.791'. [ 189.757352][ T8689] 0XD: renamed from gretap0 (while UP) [ 189.769844][ T8689] 0XD: entered allmulticast mode [ 189.785556][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 189.885064][ T8700] tipc: Started in network mode [ 189.887102][ T8700] tipc: Node identity ac14142f, cluster identity 4711 [ 189.889709][ T8700] tipc: New replicast peer: 0.0.0.0 [ 189.891509][ T8700] tipc: Enabled bearer , priority 10 [ 189.898897][ T8700] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0000 [ 189.903572][ T8700] /dev/nullb0: Can't open blockdev [ 189.909995][ T8700] pimreg: entered allmulticast mode [ 190.111786][ T8710] validate_nla: 38 callbacks suppressed [ 190.111798][ T8710] netlink: 'syz.0.801': attribute type 13 has an invalid length. [ 190.304740][ T8715] xt_socket: unknown flags 0x50 [ 190.306333][ T8716] xt_socket: unknown flags 0x50 [ 190.318003][ T10] IPVS: starting estimator thread 0... [ 190.325561][ T8716] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 190.327700][ T8716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.333620][ T8716] vhci_hcd vhci_hcd.0: Device attached [ 190.346978][ T8718] vhci_hcd: connection closed [ 190.348264][ T1153] vhci_hcd: stop threads [ 190.351995][ T1153] vhci_hcd: release socket [ 190.354644][ T1153] vhci_hcd: disconnect device [ 190.403703][ T8717] IPVS: using max 25 ests per chain, 60000 per kthread [ 190.567228][ T8728] nbd: must specify an index to disconnect [ 190.892499][ T10] tipc: Node number set to 2886997039 [ 190.973517][ C0] net_ratelimit: 42420 callbacks suppressed [ 190.973529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.973538][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.975854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.980488][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.984248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.988834][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 190.992530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.997197][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.000901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.005566][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.143115][ T8753] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 191.148285][ T8755] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 191.405219][ T5996] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 191.560529][ T5996] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.565189][ T5996] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.569950][ T5996] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.573260][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.595281][ T8753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.600695][ T5996] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.798411][ T8793] tipc: Enabling of bearer rejected, failed to enable media [ 191.802050][ T8790] tipc: Enabling of bearer rejected, failed to enable media [ 191.895869][ T8797] trusted_key: encrypted_key: insufficient parameters specified [ 191.944741][ T5996] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.959929][ T838] usb 5-1: USB disconnect, device number 10 [ 192.013648][ T1478] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 192.096407][ T5996] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.100584][ T5996] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.104056][ T5996] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.106970][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.111979][ T8783] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.116020][ T5996] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.163615][ T1478] usb 8-1: Using ep0 maxpacket: 32 [ 192.172270][ T1478] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.180525][ T1478] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.191333][ T1478] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 192.197002][ T1478] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 192.200292][ T1478] usb 8-1: Product: syz [ 192.202048][ T1478] usb 8-1: Manufacturer: syz [ 192.204217][ T1478] usb 8-1: SerialNumber: syz [ 192.213012][ T1478] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input21 [ 192.326112][ T838] usb 6-1: USB disconnect, device number 6 [ 192.441135][ T1478] usb 8-1: USB disconnect, device number 5 [ 192.487003][ T1478] appletouch 8-1:1.0: input: appletouch disconnected [ 192.922753][ T8831] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 192.931541][ T8831] __nla_validate_parse: 6 callbacks suppressed [ 192.931577][ T8831] netlink: 224 bytes leftover after parsing attributes in process `syz.0.835'. [ 192.940036][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 192.944669][ T8831] tipc: Enabling of bearer rejected, media not registered [ 193.019421][ T8835] nbd: must specify a size in bytes for the device [ 193.057645][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 193.065205][ T8835] binder: 8834:8835 ioctl 40046205 0 returned -22 [ 193.071251][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 193.076322][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 193.152984][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 193.152997][ T40] audit: type=1400 audit(1749091877.402:558): avc: denied { getopt } for pid=8840 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 193.310474][ T40] audit: type=1400 audit(1749091877.562:559): avc: denied { ioctl } for pid=8846 comm="syz.0.840" path="socket:[25186]" dev="sockfs" ino=25186 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.539321][ T40] audit: type=1400 audit(1749091877.782:560): avc: denied { setattr } for pid=8864 comm="syz.2.843" name="NETROM" dev="sockfs" ino=25988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 193.644373][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 193.981386][ T40] audit: type=1400 audit(1749091878.232:561): avc: denied { bind } for pid=8892 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.988366][ T40] audit: type=1400 audit(1749091878.242:562): avc: denied { name_bind } for pid=8892 comm="syz.3.853" src=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 193.994871][ T40] audit: type=1400 audit(1749091878.242:563): avc: denied { node_bind } for pid=8892 comm="syz.3.853" src=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 194.230624][ T8901] cgroup: subsys name conflicts with all [ 194.237885][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 194.242601][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 194.456538][ T40] audit: type=1400 audit(1749091878.712:564): avc: denied { ioctl } for pid=8912 comm="syz.2.859" path="socket:[26109]" dev="sockfs" ino=26109 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.492849][ T8915] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 194.506338][ T8915] hsr_slave_0: left promiscuous mode [ 194.521630][ T8915] hsr_slave_1: left promiscuous mode [ 194.646541][ T40] audit: type=1400 audit(1749091878.902:565): avc: denied { create } for pid=8917 comm="syz.3.860" name="file4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 194.801120][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 194.851475][ T40] audit: type=1400 audit(1749091879.102:566): avc: denied { ioctl } for pid=8926 comm="syz.3.861" path="socket:[26765]" dev="sockfs" ino=26765 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 195.029790][ T8935] kAFS: No cell specified [ 195.115425][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 195.340175][ T8948] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 195.498643][ T8966] Bluetooth: MGMT ver 1.23 [ 195.503079][ T8966] binder: BINDER_SET_CONTEXT_MGR already set [ 195.505858][ T8966] binder: 8964:8966 ioctl 4018620d 200000000040 returned -16 [ 195.523122][ T8965] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 195.525277][ T8965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.529285][ T8965] vhci_hcd vhci_hcd.0: Device attached [ 195.538301][ T8968] vhci_hcd: connection closed [ 195.540267][ T40] audit: type=1400 audit(1749091879.792:567): avc: denied { execute } for pid=8958 comm="syz.2.873" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.580683][ T8618] vhci_hcd: stop threads [ 195.582545][ T8618] vhci_hcd: release socket [ 195.588456][ T8618] vhci_hcd: disconnect device [ 195.782496][ T8975] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 195.983597][ C0] net_ratelimit: 67354 callbacks suppressed [ 195.983597][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.983610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.985833][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.989519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.993129][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 195.996826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.000425][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.004096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.007708][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.011374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.132790][ T8997] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 196.220113][ T9004] bridge_slave_0: left allmulticast mode [ 196.222030][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.239817][ T9008] netlink: 'syz.3.886': attribute type 8 has an invalid length. [ 196.254766][ T9004] bond0: (slave bond_slave_1): Releasing backup interface [ 196.282433][ T9004] team0: Port device team_slave_0 removed [ 196.319215][ T9004] team0: Port device team_slave_1 removed [ 196.323202][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.326547][ T9004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.337513][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.340481][ T9004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.354538][ T9004] bond2: (slave veth5): Releasing backup interface [ 196.517226][ T9020] binder: 9019:9020 ioctl c018620c 2000000001c0 returned -22 [ 196.520412][ T9021] binder: 9019:9021 ioctl c018620c 2000000001c0 returned -22 [ 196.532738][ T9020] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.539299][ T9020] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.547118][ T9020] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.550856][ T9020] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.555404][ T9020] geneve2: entered promiscuous mode [ 196.557679][ T9020] geneve2: entered allmulticast mode [ 196.684456][ T1478] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 196.695507][ T9027] 9pnet: Unknown protocol version 9p2000.u [ 197.296978][ T9055] syzkaller1: entered promiscuous mode [ 197.298738][ T9055] syzkaller1: entered allmulticast mode [ 197.445741][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 197.583666][ T53] usb 6-1: device descriptor read/64, error -71 [ 197.823789][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.963626][ T53] usb 6-1: device descriptor read/64, error -71 [ 198.076113][ T53] usb usb6-port1: attempt power cycle [ 198.080847][ T9099] /dev/nullb0: Can't open blockdev [ 198.242459][ T9108] virtio-fs: tag not found [ 198.413589][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.431839][ T9114] syz.0.916: attempt to access beyond end of device [ 198.431839][ T9114] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 198.434537][ T53] usb 6-1: device descriptor read/8, error -71 [ 198.438840][ T9114] XFS (nbd0): SB validate failed with error -5. [ 198.673649][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.698089][ T53] usb 6-1: device descriptor read/8, error -71 [ 198.709573][ T5997] kernel read not supported for file /video7 (pid: 5997 comm: kworker/1:4) [ 198.803826][ T53] usb usb6-port1: unable to enumerate USB device [ 198.819137][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 198.819153][ T40] audit: type=1400 audit(1749091883.062:580): avc: denied { mounton } for pid=9125 comm="syz.2.919" path="/215/file1" dev="autofs" ino=27782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 199.360793][ T9134] usb usb9: check_ctrlrecip: process 9134 (syz.3.921) requesting ep 01 but needs 81 [ 199.365945][ T9134] usb usb9: usbfs: process 9134 (syz.3.921) did not claim interface 0 before use [ 199.409658][ T9132] syzkaller1: entered promiscuous mode [ 199.411460][ T9132] syzkaller1: entered allmulticast mode [ 199.416980][ T9132] /dev/nullb0: Can't open blockdev [ 199.561315][ T53] kernel write not supported for file /video36 (pid: 53 comm: kworker/2:1) [ 199.663676][ T9144] __nla_validate_parse: 9 callbacks suppressed [ 199.663694][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 199.669039][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 199.846946][ T9157] nbd: must specify a device to reconfigure [ 199.900873][ T9160] xt_hashlimit: invalid rate [ 199.977722][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 200.010458][ T9162] tipc: Enabled bearer , priority 0 [ 200.014964][ T9162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=9162 comm=syz.0.931 [ 200.081673][ T40] audit: type=1404 audit(1749091884.332:581): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 200.100174][ T40] audit: type=1400 audit(1749091884.352:582): avc: denied { mounton } for pid=9170 comm="syz.3.933" path="/205/file0" dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 200.122901][ T40] audit: type=1404 audit(1749091884.372:583): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 200.147359][ T40] audit: type=1400 audit(1749091884.402:584): avc: denied { read write } for pid=5966 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.164709][ T40] audit: type=1400 audit(1749091884.402:585): avc: denied { open } for pid=5966 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.187426][ T40] audit: type=1400 audit(1749091884.402:586): avc: denied { ioctl } for pid=5966 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.188622][ T9176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.201413][ T40] audit: type=1400 audit(1749091884.412:587): avc: denied { read } for pid=9175 comm="syz.2.935" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.209471][ T40] audit: type=1400 audit(1749091884.412:588): avc: denied { open } for pid=9175 comm="syz.2.935" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.216828][ T40] audit: type=1400 audit(1749091884.412:589): avc: denied { ioctl } for pid=9175 comm="syz.2.935" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.228633][ T9161] tipc: Disabling bearer [ 200.570483][ T9207] overlayfs: upper fs does not support tmpfile. [ 200.620025][ T9199] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.641039][ T9202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9202 comm=syz.2.941 [ 200.647680][ T9205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9205 comm=syz.2.941 [ 200.653670][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 200.825048][ T53] usb 6-1: config 0 has no interfaces? [ 200.826952][ T53] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.829816][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.854668][ T5304] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 200.857664][ T5304] Bluetooth: hci3: Injecting HCI hardware error event [ 200.863163][ T5304] Bluetooth: hci3: hardware error 0x00 [ 200.868280][ T53] usb 6-1: config 0 descriptor?? [ 200.993517][ C0] net_ratelimit: 73125 callbacks suppressed [ 200.993530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.993530][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.996107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.999632][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 201.004364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.007887][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.012516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.016186][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.020957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.024482][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 201.139968][ T838] usb 6-1: USB disconnect, device number 11 [ 201.158148][ T1026] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 201.436455][ T1026] usb 7-1: Using ep0 maxpacket: 16 [ 201.529677][ T1026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.657786][ T1026] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 201.660606][ T1026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.663051][ T1026] usb 7-1: Product: syz [ 201.688749][ T1026] usb 7-1: Manufacturer: syz [ 201.690229][ T1026] usb 7-1: SerialNumber: syz [ 201.700432][ T1026] usb 7-1: config 0 descriptor?? [ 201.733339][ T1026] hub 7-1:0.0: bad descriptor, ignoring hub [ 201.754347][ T1026] hub 7-1:0.0: probe with driver hub failed with error -5 [ 201.776874][ T1026] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22 [ 202.578348][ T5997] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 203.131891][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.958'. [ 203.260298][ T5304] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 203.435322][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 203.583679][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 203.586771][ T53] usb 8-1: config 1 interface 0 altsetting 174 bulk endpoint 0x1 has invalid maxpacket 32 [ 203.589933][ T53] usb 8-1: config 1 interface 0 altsetting 174 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.595953][ T53] usb 8-1: config 1 interface 0 has no altsetting 0 [ 203.602296][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.606314][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.608904][ T53] usb 8-1: Product: ᐊ [ 203.610326][ T53] usb 8-1: Manufacturer: ࡡ [ 203.611949][ T53] usb 8-1: SerialNumber: ꒬ꚏ崢䙄⡡娌붷䅴ᛀ娆䔂웾猊뮽런퓭狎ᱫ諲䫷ኞ⽔⅗諸惇肉⪬斡腐Ήㄜ㕀饳◺㦸榾捳⹸痦碇撓衂똅뾱䪔멂阞ꎫ [ 203.621503][ T9269] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.624181][ T9269] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.837696][ T53] usb 8-1: USB disconnect, device number 6 [ 204.249500][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 204.249512][ T40] audit: type=1400 audit(1749091888.502:693): avc: denied { bind } for pid=9280 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.351350][ T40] audit: type=1400 audit(1749091888.602:694): avc: denied { unmount } for pid=6640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.649219][ T7927] bridge0: port 3(syz_tun) entered disabled state [ 204.689071][ T7927] syz_tun (unregistering): left allmulticast mode [ 204.691792][ T7927] syz_tun (unregistering): left promiscuous mode [ 204.695030][ T7927] bridge0: port 3(syz_tun) entered disabled state [ 204.968306][ T40] audit: type=1400 audit(1749091889.222:695): avc: denied { execute } for pid=9283 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 204.983550][ T40] audit: type=1400 audit(1749091889.232:696): avc: denied { execute_no_trans } for pid=9283 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 205.193491][ C0] sched: DL replenish lagged too much [ 205.278291][ T838] usb 7-1: USB disconnect, device number 12 [ 206.003614][ C0] net_ratelimit: 73556 callbacks suppressed [ 206.003627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.003695][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.005700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.010694][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 206.014520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.019532][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.023142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.028201][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.031692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.036813][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 209.435956][ T40] audit: type=1400 audit(1749091893.692:697): avc: denied { mount } for pid=9295 comm="syz.1.963" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.503951][ T9303] tmpfs: Cannot change global quota limit on remount [ 209.506457][ T40] audit: type=1400 audit(1749091893.762:698): avc: denied { remount } for pid=9295 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.523217][ T40] audit: type=1400 audit(1749091893.772:699): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.579388][ T40] audit: type=1400 audit(1749091893.832:700): avc: denied { read write } for pid=9306 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 209.595479][ T40] audit: type=1400 audit(1749091893.842:701): avc: denied { open } for pid=9306 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 209.597517][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.613263][ T40] audit: type=1400 audit(1749091893.862:702): avc: denied { ioctl } for pid=9307 comm="syz.0.967" path="/dev/vhost-vsock" dev="devtmpfs" ino=1302 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 209.619693][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.628229][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.632856][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.640639][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.650286][ T40] audit: type=1400 audit(1749091893.902:703): avc: denied { mounton } for pid=9306 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 209.687890][ T40] audit: type=1400 audit(1749091893.942:704): avc: denied { write } for pid=9313 comm="syz.1.966" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 209.695782][ T9314] usb usb9: usbfs: process 9314 (syz.1.966) did not claim interface 0 before use [ 209.776363][ T40] audit: type=1400 audit(1749091894.032:705): avc: denied { create } for pid=9318 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.786864][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 209.798588][ T9328] netlink: 'syz.1.971': attribute type 10 has an invalid length. [ 209.803248][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.820054][ T9322] can: request_module (can-proto-0) failed. [ 209.882119][ T40] audit: type=1400 audit(1749091894.132:706): avc: denied { create } for pid=9334 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.979749][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.982252][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.985766][ T9306] bridge_slave_0: entered allmulticast mode [ 209.988577][ T9306] bridge_slave_0: entered promiscuous mode [ 209.999335][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.001606][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.013666][ T9306] bridge_slave_1: entered allmulticast mode [ 210.028230][ T9306] bridge_slave_1: entered promiscuous mode [ 210.053044][ T9346] program syz.2.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.059306][ T9346] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 210.164697][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.184983][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.310532][ T9306] team0: Port device team_slave_0 added [ 210.325148][ T9306] team0: Port device team_slave_1 added [ 210.421321][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.425971][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.443999][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.452440][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.457114][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.473678][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.610210][ T9306] hsr_slave_0: entered promiscuous mode [ 210.615142][ T9306] hsr_slave_1: entered promiscuous mode [ 210.620091][ T9306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.629899][ T9306] Cannot create hsr debugfs directory [ 210.643587][ T6029] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 210.726351][ T9365] xt_cgroup: invalid path, errno=-2 [ 210.729300][ T9365] Bluetooth: MGMT ver 1.23 [ 210.796745][ T6029] usb 7-1: Using ep0 maxpacket: 16 [ 210.801266][ T6029] usb 7-1: config index 0 descriptor too short (expected 65472, got 36) [ 210.804351][ T6029] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 210.809902][ T6029] usb 7-1: config 255 has an invalid descriptor of length 208, skipping remainder of the config [ 210.819154][ T6029] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 210.830351][ T6029] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 210.838443][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.931191][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.013551][ C3] net_ratelimit: 74189 callbacks suppressed [ 211.013563][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 211.013623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.015947][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.019643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.023616][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.027080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.031639][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:13:c4:24:fc:ab, vlan:0) [ 211.035241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.039850][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.043373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.063140][ T6029] usb 7-1: string descriptor 0 read error: -71 [ 211.071491][ T6029] usb 7-1: USB disconnect, device number 13 [ 211.275230][ T9306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.560131][ T9306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.666599][ T9384] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.986'. [ 211.672682][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 211.675805][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'. [ 211.678652][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 211.682784][ T9384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'. [ 211.686394][ T9384] netlink: 104 bytes leftover after parsing attributes in process `syz.2.986'. [ 211.723799][ T5304] Bluetooth: hci0: command tx timeout [ 211.763406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 211.792075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 211.808517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 211.811591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 211.846998][ T9306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.866184][ T9395] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 211.959552][ T9409] netlink: 'syz.0.994': attribute type 32 has an invalid length. [ 211.962026][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 212.001512][ T9306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.018540][ T9409] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 212.019259][ T9410] netlink: 'syz.0.994': attribute type 27 has an invalid length. [ 212.496576][ T9428] input: syz1 as /devices/virtual/input/input23 [ 212.718959][ T9410] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 212.830756][ T9410] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.833682][ T9410] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.836559][ T9410] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.839465][ T9410] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.848642][ T9410] ipip0: left promiscuous mode [ 212.864399][ T9410] veth5: left promiscuous mode [ 212.897436][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.900305][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.088831][ T9306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.116348][ T9306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.157013][ T9306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.180712][ T9306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.214339][ T9441] IPv6: Can't replace route, no match found [ 213.274016][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.285179][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.301492][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.304630][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.322644][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.325726][ T8618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.415108][ T9447] netlink: 'syz.0.1003': attribute type 64 has an invalid length. [ 213.418003][ T9447] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 213.420436][ T9447] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1003'. [ 213.425386][ T9447] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=9447 comm=syz.0.1003 [ 213.529660][ T9455] netlink: 'syz.1.1006': attribute type 14 has an invalid length. [ 213.557370][ T9455] xt_socket: unknown flags 0x8 [ 213.650288][ T9464] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1008'. [ 213.733275][ T9471] ip6gre1: entered allmulticast mode [ 213.803601][ T5304] Bluetooth: hci0: command tx timeout [ 213.836757][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.864237][ T9306] veth0_vlan: entered promiscuous mode [ 213.871528][ T9306] veth1_vlan: entered promiscuous mode [ 213.897627][ T9306] veth0_macvtap: entered promiscuous mode [ 213.901663][ T9306] veth1_macvtap: entered promiscuous mode [ 213.913448][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.921555][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.928684][ T9306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.931311][ T9306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.934380][ T9306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.937895][ T9306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.026776][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.029991][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.086266][ T8585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.090662][ T8585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.131767][ T9306] ================================================================== [ 214.134500][ T9306] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 SYZFAIL: failed to recv rpc [ 214.136889][ T9306] Write of size 8 at addr ffff88802bc8cc08 by task syz-executor/9306 [ 214.140935][ T9306] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 214.142377][ T9306] CPU: 2 UID: 0 PID: 9306 Comm: syz-executor Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 214.142393][ T9306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.142400][ T9306] Call Trace: [ 214.142404][ T9306] [ 214.142409][ T9306] dump_stack_lvl+0x116/0x1f0 [ 214.142429][ T9306] print_report+0xcd/0x680 [ 214.142446][ T9306] ? __virt_addr_valid+0x81/0x610 [ 214.142459][ T9306] ? __phys_addr+0xe8/0x180 [ 214.142470][ T9306] ? binder_add_device+0xa4/0xb0 [ 214.142483][ T9306] kasan_report+0xe0/0x110 [ 214.142498][ T9306] ? binder_add_device+0xa4/0xb0 [ 214.142511][ T9306] binder_add_device+0xa4/0xb0 [ 214.142522][ T9306] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 214.142540][ T9306] binderfs_fill_super+0x8d4/0x1360 [ 214.142556][ T9306] ? __pfx_binderfs_fill_super+0x10/0x10 [ 214.142576][ T9306] ? shrinker_register+0x1a8/0x260 [ 214.142592][ T9306] ? sget_fc+0x808/0xc20 [ 214.142605][ T9306] ? __pfx_set_anon_super_fc+0x10/0x10 [ 214.142622][ T9306] ? __pfx_binderfs_fill_super+0x10/0x10 [ 214.142636][ T9306] get_tree_nodev+0xda/0x190 [ 214.142651][ T9306] vfs_get_tree+0x8e/0x340 [ 214.142662][ T9306] path_mount+0x14d4/0x1f70 [ 214.142672][ T9306] ? kmem_cache_free+0x2d1/0x4d0 [ 214.142686][ T9306] ? __pfx_path_mount+0x10/0x10 [ 214.142703][ T9306] ? putname+0x154/0x1a0 [ 214.142713][ T9306] __x64_sys_mount+0x28d/0x310 [ 214.142723][ T9306] ? __pfx___x64_sys_mount+0x10/0x10 [ 214.142734][ T9306] do_syscall_64+0xcd/0x4c0 [ 214.142744][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.142755][ T9306] RIP: 0033:0x7ff3989900ca [ 214.142765][ T9306] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.142776][ T9306] RSP: 002b:00007ffcb3077128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.142787][ T9306] RAX: ffffffffffffffda RBX: 00007ff398a10efc RCX: 00007ff3989900ca [ 214.142793][ T9306] RDX: 00007ff398a20935 RSI: 00007ff398a10efc RDI: 00007ff398a20935 [ 214.142800][ T9306] RBP: 00007ff398a11145 R08: 0000000000000000 R09: 00007ff398bb6738 [ 214.142806][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3989ec1a8 [ 214.142812][ T9306] R13: 00007ff3989ec180 R14: 0000000000000009 R15: 0000000000000000 [ 214.142822][ T9306] [ 214.142826][ T9306] [ 214.219439][ T9306] Allocated by task 9306: [ 214.221310][ T9306] kasan_save_stack+0x33/0x60 [ 214.223087][ T9306] kasan_save_track+0x14/0x30 [ 214.224634][ T9306] __kasan_kmalloc+0xaa/0xb0 [ 214.226146][ T9306] __kmalloc_noprof+0x223/0x510 [ 214.227716][ T9306] fib6_info_alloc+0x40/0x160 [ 214.229363][ T9306] ip6_route_info_create+0x14c/0x870 [ 214.231322][ T9306] ip6_route_add+0x26/0x1d0 [ 214.232993][ T9306] addrconf_prefix_route+0x2fd/0x510 [ 214.234736][ T9306] inet6_addr_add+0x589/0x960 [ 214.236294][ T9306] inet6_rtm_newaddr+0x1619/0x1c70 [ 214.237918][ T9306] rtnetlink_rcv_msg+0x95b/0xe90 [ 214.239513][ T9306] netlink_rcv_skb+0x155/0x420 [ 214.241041][ T9306] netlink_unicast+0x53d/0x7f0 [ 214.242701][ T9306] netlink_sendmsg+0x8d1/0xdd0 [ 214.244675][ T9306] __sys_sendto+0x4a3/0x520 [ 214.246641][ T9306] __x64_sys_sendto+0xe0/0x1c0 [ 214.248291][ T9306] do_syscall_64+0xcd/0x4c0 [ 214.249823][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.251804][ T9306] [ 214.252612][ T9306] Freed by task 23: [ 214.253879][ T9306] kasan_save_stack+0x33/0x60 [ 214.255841][ T9306] kasan_save_track+0x14/0x30 [ 214.257600][ T9306] kasan_save_free_info+0x3b/0x60 [ 214.259642][ T9306] __kasan_slab_free+0x51/0x70 [ 214.261417][ T9306] kfree+0x2b4/0x4d0 [ 214.263017][ T9306] rcu_core+0x799/0x14e0 [ 214.264723][ T9306] handle_softirqs+0x219/0x8e0 [ 214.266610][ T9306] run_ksoftirqd+0x3a/0x60 [ 214.268433][ T9306] smpboot_thread_fn+0x3f7/0xae0 [ 214.270297][ T9306] kthread+0x3c5/0x780 [ 214.271965][ T9306] ret_from_fork+0x5d4/0x6f0 [ 214.273712][ T9306] ret_from_fork_asm+0x1a/0x30 [ 214.275671][ T9306] [ 214.276608][ T9306] Last potentially related work creation: [ 214.278837][ T9306] kasan_save_stack+0x33/0x60 [ 214.280595][ T9306] kasan_record_aux_stack+0xa7/0xc0 [ 214.282684][ T9306] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 214.285059][ T9306] ip6_route_info_create_nh+0x935/0xfa0 [ 214.287270][ T9306] ip6_route_add+0x5a/0x1d0 [ 214.289125][ T9306] addrconf_prefix_route+0x2fd/0x510 [ 214.290829][ T9306] inet6_addr_add+0x589/0x960 [ 214.292339][ T9306] inet6_rtm_newaddr+0x1619/0x1c70 [ 214.293966][ T9306] rtnetlink_rcv_msg+0x95b/0xe90 [ 214.295576][ T9306] netlink_rcv_skb+0x155/0x420 [ 214.297104][ T9306] netlink_unicast+0x53d/0x7f0 [ 214.298721][ T9306] netlink_sendmsg+0x8d1/0xdd0 [ 214.300671][ T9306] __sys_sendto+0x4a3/0x520 [ 214.302343][ T9306] __x64_sys_sendto+0xe0/0x1c0 [ 214.304300][ T9306] do_syscall_64+0xcd/0x4c0 [ 214.306036][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.308438][ T9306] [ 214.309427][ T9306] The buggy address belongs to the object at ffff88802bc8cc00 [ 214.309427][ T9306] which belongs to the cache kmalloc-512 of size 512 [ 214.314428][ T9306] The buggy address is located 8 bytes inside of [ 214.314428][ T9306] freed 512-byte region [ffff88802bc8cc00, ffff88802bc8ce00) [ 214.318656][ T9306] [ 214.319439][ T9306] The buggy address belongs to the physical page: [ 214.321447][ T9306] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bc8c [ 214.324161][ T9306] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 214.326840][ T9306] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 214.329342][ T9306] page_type: f5(slab) [ 214.330612][ T9306] raw: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 214.333301][ T9306] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 214.335955][ T9306] head: 00fff00000000040 ffff88801b842c80 0000000000000000 dead000000000001 [ 214.338579][ T9306] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 214.341240][ T9306] head: 00fff00000000002 ffffea0000af2301 00000000ffffffff 00000000ffffffff [ 214.344085][ T9306] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 214.346851][ T9306] page dumped because: kasan: bad access detected [ 214.348889][ T9306] page_owner tracks the page as allocated [ 214.350693][ T9306] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u32:1), ts 144380084705, free_ts 142669940869 [ 214.357278][ T9306] post_alloc_hook+0x1c0/0x230 [ 214.358805][ T9306] get_page_from_freelist+0x1321/0x3890 [ 214.360561][ T9306] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 214.362440][ T9306] alloc_pages_mpol+0x1fb/0x550 [ 214.363997][ T9306] new_slab+0x23b/0x330 [ 214.365351][ T9306] ___slab_alloc+0xd9c/0x1940 [ 214.366849][ T9306] __slab_alloc.constprop.0+0x56/0xb0 [ 214.368556][ T9306] __kmalloc_cache_noprof+0xfb/0x3e0 [ 214.370223][ T9306] __ipv6_dev_mc_inc+0x2b9/0xc10 [ 214.371804][ T9306] addrconf_dad_work+0x284/0x14e0 [ 214.373401][ T9306] process_one_work+0x9cf/0x1b70 [ 214.375018][ T9306] worker_thread+0x6c8/0xf10 [ 214.376505][ T9306] kthread+0x3c5/0x780 [ 214.377815][ T9306] ret_from_fork+0x5d4/0x6f0 [ 214.379296][ T9306] ret_from_fork_asm+0x1a/0x30 [ 214.380845][ T9306] page last free pid 5969 tgid 5969 stack trace: [ 214.382837][ T9306] __free_frozen_pages+0x7fe/0x1180 [ 214.384488][ T9306] __put_partials+0x16d/0x1c0 [ 214.385987][ T9306] qlist_free_all+0x4d/0x120 [ 214.387441][ T9306] kasan_quarantine_reduce+0x195/0x1e0 [ 214.389113][ T9306] __kasan_slab_alloc+0x69/0x90 [ 214.390613][ T9306] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 214.392316][ T9306] getname_flags.part.0+0x4c/0x550 [ 214.393958][ T9306] getname_flags+0x93/0xf0 [ 214.395440][ T9306] user_path_at+0x24/0x60 [ 214.396883][ T9306] __x64_sys_umount+0x10a/0x1a0 [ 214.398432][ T9306] do_syscall_64+0xcd/0x4c0 [ 214.399887][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.401783][ T9306] [ 214.402561][ T9306] Memory state around the buggy address: [ 214.404404][ T9306] ffff88802bc8cb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.407121][ T9306] ffff88802bc8cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.409749][ T9306] >ffff88802bc8cc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.412265][ T9306] ^ [ 214.413794][ T9306] ffff88802bc8cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.416490][ T9306] ffff88802bc8cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.419150][ T9306] ================================================================== [ 214.473545][ T9306] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 214.475945][ T9306] CPU: 2 UID: 0 PID: 9306 Comm: syz-executor Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 214.479710][ T9306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.483283][ T9306] Call Trace: [ 214.484483][ T9306] [ 214.485522][ T9306] dump_stack_lvl+0x3d/0x1f0 [ 214.487028][ T9306] panic+0x71c/0x800 [ 214.488326][ T9306] ? __pfx_panic+0x10/0x10 [ 214.489768][ T9306] ? irqentry_exit+0x3b/0x90 [ 214.491253][ T9306] ? lockdep_hardirqs_on+0x7c/0x110 [ 214.492937][ T9306] ? preempt_schedule_thunk+0x16/0x30 [ 214.494682][ T9306] ? binder_add_device+0xa4/0xb0 [ 214.496282][ T9306] ? preempt_schedule_common+0x44/0xc0 [ 214.498035][ T9306] ? check_panic_on_warn+0x1f/0xb0 [ 214.499719][ T9306] ? binder_add_device+0xa4/0xb0 [ 214.501420][ T9306] check_panic_on_warn+0xab/0xb0 [ 214.503139][ T9306] end_report+0x107/0x170 [ 214.504659][ T9306] kasan_report+0xee/0x110 [ 214.506269][ T9306] ? binder_add_device+0xa4/0xb0 [ 214.507871][ T9306] binder_add_device+0xa4/0xb0 [ 214.509400][ T9306] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 214.511498][ T9306] binderfs_fill_super+0x8d4/0x1360 [ 214.513188][ T9306] ? __pfx_binderfs_fill_super+0x10/0x10 [ 214.515026][ T9306] ? shrinker_register+0x1a8/0x260 [ 214.516726][ T9306] ? sget_fc+0x808/0xc20 [ 214.518130][ T9306] ? __pfx_set_anon_super_fc+0x10/0x10 [ 214.519939][ T9306] ? __pfx_binderfs_fill_super+0x10/0x10 [ 214.521737][ T9306] get_tree_nodev+0xda/0x190 [ 214.523209][ T9306] vfs_get_tree+0x8e/0x340 [ 214.524684][ T9306] path_mount+0x14d4/0x1f70 [ 214.526137][ T9306] ? kmem_cache_free+0x2d1/0x4d0 [ 214.527734][ T9306] ? __pfx_path_mount+0x10/0x10 [ 214.529294][ T9306] ? putname+0x154/0x1a0 [ 214.530658][ T9306] __x64_sys_mount+0x28d/0x310 [ 214.532187][ T9306] ? __pfx___x64_sys_mount+0x10/0x10 [ 214.533891][ T9306] do_syscall_64+0xcd/0x4c0 [ 214.535372][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.537248][ T9306] RIP: 0033:0x7ff3989900ca [ 214.538667][ T9306] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.544670][ T9306] RSP: 002b:00007ffcb3077128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.547291][ T9306] RAX: ffffffffffffffda RBX: 00007ff398a10efc RCX: 00007ff3989900ca [ 214.549780][ T9306] RDX: 00007ff398a20935 RSI: 00007ff398a10efc RDI: 00007ff398a20935 [ 214.552251][ T9306] RBP: 00007ff398a11145 R08: 0000000000000000 R09: 00007ff398bb6738 [ 214.554762][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3989ec1a8 [ 214.557257][ T9306] R13: 00007ff3989ec180 R14: 0000000000000009 R15: 0000000000000000 [ 214.559740][ T9306] [ 214.561373][ T9306] Kernel Offset: disabled [ 214.562750][ T9306] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:47:22 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff93cce228 RCX=ffffc900037e8001 RDX=1ffffffff1be3bb4 RSI=ffffffff8c1548e0 RDI=ffffffff8df1dda0 RBP=0000000000000000 RSP=ffffc90000006eb0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000057bfb R12=ffffc90000006f88 R13=ffffc90000006f38 R14=ffffc900037e7bd8 R15=ffffc90000006f6c RIP=ffffffff81a15e41 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6765000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f505bbb7bac CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fe290a2e2b440f3 8b373d22db7f356f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97812c3860178939 5490b571aa6fa789 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 252692eae42bb62e f2ec3759d57e989d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ee18fa4c5ac3707 b4ea2069100905a5 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bd07a9f57e9e05e 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92ff8e0a00000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c58d85b139bc3573 c933456b07210915 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000006ac6558e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a40fb0b9a32bf9d 79555ecd435f1aee ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8c90bdc20a0ae58 5adaf49fe1d9add4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505bb84488 00007f505bb84480 00007f505bb84478 00007f505bb84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505c6ed100 00007f505bb84440 00007f505bb84458 00007f505bb844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505bb84498 00007f505bb84490 00007f505bb84488 00007f505bb84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006160000 RBX=0000000000000000 RCX=ffff8881063c1070 RDX=000000000000009d RSI=ffffffff86a67a38 RDI=ffff8881063c12d0 RBP=0000000000000001 RSP=ffffc900006a0b78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff8881063c1070 R15=0000000000000001 RIP=ffffffff86a67a75 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3e08bc5300 ffffffff 00c00000 GS =0000 ffff8880d6865000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc301657d0 CR3=00000000320b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=e7663322a042f39d 4198d8986caf38fe e7663322a042f39d 4198d8986caf38fe e7663322a042f39d 4198d8986caf38fe e7663322a042f39d 4198d8986caf38fe ZMM18=3ff77e814c199bc3 5700b9228df04676 3ff77e814c199bc3 5700b9228df04676 3ff77e814c199bc3 5700b9228df04676 3ff77e814c199bc3 5700b9228df04676 ZMM19=1308000000000000 0000000000000004 1308000000000000 0000000000000003 1308000000000000 0000000000000002 1308000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02020004a0030008 000498031fffffff f80800049003048e 0400048c03018804 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004880340080004 8003048004068003 0680042003000800 10030fffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04000301000000 0806028004040172 9e00766461746162 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200040346040000 03048080c4801000 0880c3c482080001 00000a0806060125 ZMM25=c4a759b7c4a759b7 c4a759b7c4a759b7 c4a759b7c4a759b7 c4a759b7c4a759b7 c4a759b7c4a759b7 c4a759b7c4a759b7 c4a759b7c4a759b7 c4a759b7c4a759b7 ZMM26=8b1558748b155874 8b1558748b155874 8b1558748b155874 8b1558748b155874 8b1558748b155874 8b1558748b155874 8b1558748b155874 8b1558748b155874 ZMM27=af5b462caf5b462c af5b462caf5b462c af5b462caf5b462c af5b462caf5b462c af5b462caf5b462c af5b462caf5b462c af5b462caf5b462c af5b462caf5b462c ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2b0500002b050000 2b0500002b050000 2b0500002b050000 2b0500002b050000 2b0500002b050000 2b0500002b050000 2b0500002b050000 2b0500002b050000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85598b15 RDI=ffffffff9b077320 RBP=ffffffff9b0772e0 RSP=ffffc900246ff508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000030333954 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b0772e0 R15=ffffffff85598ab0 RIP=ffffffff85598b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555591c48500 ffffffff 00c00000 GS =0000 ffff8880d6965000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ce6cc CR3=000000005874c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb3077140 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb30770f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb30770f6 00007ffcb30770fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff398a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff398a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff398a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff398a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff398a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff398a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888053fde000 RBX=ffff888053fde190 RCX=ffffffff89584b98 RDX=ffff888028300000 RSI=0000000000000008 RDI=ffff888053fde190 RBP=0000000000000000 RSP=ffffc900006f7968 R8 =0000000000000005 R9 =000000000000000e R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=ffff888053fdc000 R15=0000000000000000 RIP=ffffffff8222d5f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a65000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f505c87df98 CR3=0000000047419000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505ba11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505ba11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505ba11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505ba11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505ba11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505ba11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505bb84488 00007f505bb84480 00007f505bb84478 00007f505bb84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505c6ed100 00007f505bb84440 00007f505bb84458 00007f505bb844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f505bb84498 00007f505bb84490 00007f505bb84488 00007f505bb84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000128 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000