last executing test programs: 4m29.452646696s ago: executing program 3 (id=654): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff7}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000040)="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", 0x1000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/zoneinfo\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001080)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000001180)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r2, &(0x7f00000011c0)) read$FUSE(r0, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f00000043c0)={&(0x7f0000004380)=[{&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="7b7d2dde668198cf1dc2e0b076a1e13211b0a19844f0cd2dd82e13b55b70", 0x1e}, {&(0x7f00000042c0)="bdee0fc9bc09d280c215ff8346cb84b5d552cbd5a8e4092805702aaee00bb97524d1833d5558dc128b7dcfe9c850806cff524420d27fac544811f1f03cfafdbfda0a6df25042f48bbfb6d9059d540be66ba4a0e4c0bc04095ce78b4f201b69eb6e3722359340e003f19d3be3175c91ac5c8d9e01f24b1987cc2ccbbf515dbad11558ec4a", 0x84}], 0x3, 0x6, 0x0, 0x21, 0x6, 0x6, 0x5, 0x1}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000004700)={0x0, &(0x7f0000004440)=[@nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0x1cfe}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c03, 0x6, 0x100, 0x10}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x43aa}}, @wr_crn={0x67, 0x20, {0x2, 0xfffffffffffff459}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x78, {0x1, 0x6, [@nested_create_vm={0x12d, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x7}}]}}, @in_dx={0x69, 0x20, {0x21c0, 0x3}}, @out_dx={0x6a, 0x28, {0x5484, 0x1, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x36, 0x8, 0x5, 0x10}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x48}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x24, 0x3, 0x8001, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x57b, 0x4, 0x7fffffffffffffff, 0x8}}, @in_dx={0x69, 0x20, {0x31dd, 0x2}}], 0x2b8}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000004740)={0x0, 0xc60, 0x8}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000004b40)={0x0, 0x9618, 0x0, [0x1, 0x3, 0x1, 0x10, 0x5], [0x7fffffff, 0x8, 0x4, 0xffffffffffffffff, 0x8, 0xaa7, 0x0, 0x6, 0xc, 0xe7, 0xf, 0x9, 0x80000000, 0x1000, 0xb14f, 0x4, 0x4, 0x1000, 0x8, 0xd, 0xe33b, 0x9, 0x1, 0x6, 0x100000001, 0x9, 0x7, 0x100000000, 0x2, 0xf, 0x10000, 0x9, 0x8, 0x9f, 0x3a, 0x7f, 0x1, 0x1000, 0xe, 0x6d300000, 0x25, 0x100, 0x100000001, 0x6, 0x100000001, 0xd68, 0x4, 0x4, 0x0, 0x8001, 0xa, 0x2d1c, 0x40, 0xffffffffffff0000, 0x767b, 0xe, 0x0, 0x4, 0x2, 0x2351, 0x1, 0xe758, 0x81, 0x1, 0x7, 0x7ff, 0x5f57, 0xfffffffffffff800, 0x1, 0x9, 0x44b0, 0x91, 0x5, 0x6a, 0x7, 0x8, 0x9a3, 0x1ff, 0x8001, 0x8, 0xf1, 0xc1df, 0x7, 0x101, 0x9, 0x5, 0x2, 0xfe23, 0x7, 0x1, 0x8000000000000001, 0x0, 0x7, 0xe60, 0x200, 0x2, 0x8bf, 0x8, 0x5, 0x3, 0x9, 0x80000000000, 0x5, 0x9, 0x3, 0xc, 0x6, 0x4, 0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x3, 0x0, 0x2, 0x7, 0x2, 0x3, 0x8, 0x7c3f5b84, 0x1, 0x40]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000004f80)={0x1d, 0x8, {0x5, @struct={0x0, 0x7}, 0x0, 0x7, 0xd4, 0x80, 0x1, 0x9, 0x50, @struct={0x156, 0x9}, 0x36e2, 0x3, [0xd43d, 0x4, 0x7fffffff, 0x81, 0x5]}, {0x1, @struct={0x7, 0x7fffffff}, r5, 0x0, 0xa3b, 0xff, 0x7, 0x1, 0x10, @usage=0xe5b0, 0x800, 0x1, [0x2, 0xac3, 0xffffffffffff8449, 0xa78, 0xffffffff, 0x6]}, {0x7fff, @struct={0x7f, 0x5}, r6, 0x0, 0xe38f, 0x4, 0x1, 0xb9, 0x10, @struct={0x7, 0xbf}, 0x6, 0x3, [0x8, 0x7fff, 0x3, 0x0, 0x7]}, {0x8, 0x0, 0x1}}) ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f00000053c0)={&(0x7f0000005380)=[{0x0, 0x0, 0x3, 0xefa4, 0x5, 0x7f, 0x101, 0xebb}], 0x1, 0x38, 0x1, 0x5}) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000005400)={r1, r1, 0x1}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000005440)={r1, 0x0, 0x9, 0xae8, 0xb}, 0x1) r7 = syz_clone3(&(0x7f0000005680)={0x180000180, &(0x7f0000005480)=0xffffffffffffffff, &(0x7f00000054c0), &(0x7f0000005500), {0x35}, &(0x7f0000005540)=""/92, 0x5c, &(0x7f00000055c0)=""/69, &(0x7f0000005640)=[r3, r3, r3, r3], 0x4, {r0}}, 0x58) sync_file_range(r8, 0x2, 0x5, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000057c0)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005780)={&(0x7f0000005740)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x76}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000005800)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000005840)={0x2000}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000059c0)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005980)={&(0x7f00000058c0)={0xbc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x65}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040890}, 0x40811) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x65) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a40), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000005b00)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x3c, r10, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4010) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000005b40)="97a56e54bcc8f0894f9770826fe29d86737201bb3f47568381f371857d18c815f0bc0d56453c6608de1de85c8e31f93fa2a90086e17bbc7b10e491aaab054e7c7738d868343d106381f03e206b5203ade83127f3dd481f46522b129ed3b37bea6dd6e245774f779f34f740f37a3d1db83ba08f6653b7a81a", 0x78) ioctl$I2C_TENBIT(r1, 0x704, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x10000, &(0x7f0000005bc0)=""/131) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) 4m27.610389385s ago: executing program 3 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0x10}, {0x8, 0x6}, {0x7, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xd51}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x400) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="fb835193c91c3a81d188c45f01da", 0xe}], 0x1}, 0x4000880) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f73", 0x2f}], 0x1}, 0x4000000) 4m19.341173345s ago: executing program 3 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x100, 0x10, 0x1, 0x1, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@empty, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x34ff, 0xa}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x3}}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x1, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x11) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000400)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendto$inet6(r5, &(0x7f0000000500)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) ioctl$sock_TIOCOUTQ(r3, 0x5411, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x9, 0x6, 0xf8, 0x9}]}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x4, 0x2002) r8 = socket$netlink(0x10, 0x3, 0x8) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ptrace$pokeuser(0x6, r2, 0x358, 0x800000010000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="e5ff000400000000400000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003b00010020000000a0ff36e8b1d0fa3f14002100fc0200"/40], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 4m17.621721106s ago: executing program 3 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 4m16.180349009s ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000000340)=""/19, 0x13, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7f8452b536ad5db2784a6945a7a1c790a421ea2a089f6ab00ada4e5605b2e7262aed82ccf355b354ad5e321029cc4c48e609000cf5329cb7f1821ec7", @ANYRESOCT=r3], 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812"], 0x65) 4m14.579314785s ago: executing program 3 (id=680): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x4000005c, 0x692f93e5, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 3m58.514902537s ago: executing program 32 (id=680): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x4000005c, 0x692f93e5, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 13.670107066s ago: executing program 2 (id=1149): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 15) 12.561407388s ago: executing program 1 (id=1156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x802) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f00000000c0)={0x6, 0x5, 0x6, 0x1dc9, 0x80, 0xe, "92d2ccdfb61b7877ae393c6176ca8630", 0x9, 0x9, 0x5, 0xa1, 0x7, 0x0, 0x93}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000027000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.308513738s ago: executing program 2 (id=1157): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095", @ANYBLOB="afeab7ad2078bc772c6d4e734ee1e517119db72e9a0bb7f3f3051a8154c90195b33afe343cff35e35c912f1993288fa72909fee941eab41d2e5ad20a34ad5456d22b6f053800d8a0cdfce37d3f2cdc6bab55e22853be3bf6fa0083b1f714d0f2ca535f16e2408d0bb31084d8ce702ac13894d34d2156468ab850e7823516bd2fdcc8462bcd99316d9223ec76014fc8a5846eb3670f4e4e709f41dcfc4fa293261f628ff82487187a072b10905cae79c4b4b5f162ee63adaa1af3c44c4dac0a629534b3fbbeb88ffdae98d8a3c22ad255a1264244d8c18a4e158ef5f8b4a484f54809c0fc25fd76ed8ad8e68bfc3957447c3c25a2af93"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000000c0)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r4, 0x1, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r4, 0x1, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) 10.213063482s ago: executing program 1 (id=1159): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x44080) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @echo}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030400e72fde478eeaebe1000300", @ANYRES32=0x0, @ANYBLOB="00000000400000002c00128008000100677470002000028014000800000000000000000000000000000000000500050001000000"], 0x4c}}, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) readv(r3, &(0x7f0000005340)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1) readv(r3, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r2}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="44003300400000000000000009000802110000015050505050500000000001002d1a02881b06000000000000000d00c0001c0000000100ce9500000972060303"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 9.258531702s ago: executing program 2 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x600, 0x0, 0x202, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'team0\x00', {}, {0xff}}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x800, 0x4, 0x146ee, 0x8b46, 0x9af, 0x24}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x79, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000040)=""/119, 0x77) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) ioctl$SNDCTL_TMR_STOP(r7, 0x5403) (async) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000240)='\x00') (async) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251100000008000300", @ANYRES32=r8, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000906010200000000797a31000000000500010016000000340007801800018014000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7.233724939s ago: executing program 0 (id=1167): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1, 0x2}) io_uring_setup(0x4fee, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040a0404"], 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) 6.571423932s ago: executing program 2 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 5.073774014s ago: executing program 0 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) (async) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) (async) socket(0x10, 0x803, 0x0) (async) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r7, 0x0, 0x0) (async, rerun: 64) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGCOLLECTIONINDEX(r8, 0x40184810, 0x0) (async) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000001140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2001380000001bcf6a6046902fdffca2307b1204cee0ba81230de619735c6bc9b93404c6a455109a0cc97ec5d7d0894876b775d1659a2941435fa075800ef6f0d5a6eff2b55f60efab00000000"], 0x0}) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0xffff, r0}, 0x38) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)="73937d34c401b8501aac1ce4ce30c655713dba78a96ffe8e0dba03be3598f397bff2567f3339f4ce7dffff12a4c13913cd86117afadbc5baa340b235e880ddce48c53d1cb78611f60323b744a69c74050000006b2c8050f7611ecc7f8edd7d9bdcd2e5a31a6c6f174d336bed8082b31d52cf6a186f2ed49a41036c5e1af19fb70c4339b877606c754c7cfa33bd12bf535714783f2e181aca2b57c8fa0506fd", &(0x7f00000000c0)="6b645bf59fbe20b70a1a01cf32372a05e0d90064ca0d5f58ef7f0323795ee6bdfd9e416a4e039aa8033d7a92b5f9dbd80a4176afad9c3932bd91222d0a54f7360fcf37708aff52509afac18cba8dd4b72478bbfea7bcdda6073a0a74e9a72214b9c49d211f8b94066a9b31a6903c808bdfbc16c7f109695fc4d5e7c01627cdc6aff7bb4e7769a910f05ae592856b31533b12f679c4b4f4ce6c223711c5f64bc83678247fa5a6b1c1cddf883a0245faad13d94a98813a02c3aa83794a471de8b364a30eec2f325730ff03dae9b21960682d58909a48489e9e2e2d9edc9da8c79fdd6d3ef689340c8eb4b19410", 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 4.907496945s ago: executing program 1 (id=1171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000400)="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", 0xff1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x78) r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setrlimit(0x7, &(0x7f0000004b00)={0x6, 0xffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r2, 0x89e0, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000001440)=ANY=[@ANYBLOB="040e04000f08"], 0x7) 4.304160813s ago: executing program 1 (id=1172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56749, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x0, 0x2, 0xa, 0xa}, {0xc, 0x2, 0x1, 0x800, 0x3, 0x4}, 0x6, 0x3027, 0x1a52}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)="6d6561737572652066756e633d46c94c455f434845434b20", 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8000, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x15, 0x0, &(0x7f00000003c0), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.93938516s ago: executing program 4 (id=1173): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x12000, 0x0, 0x2, 0x224}, 0x30, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000084) (async) landlock_restrict_self(r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000fe0000000b"], 0x0) 3.845085071s ago: executing program 4 (id=1174): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0xc}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x0, 0x10}, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x7, 0x0}, 0x8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r0, 0x5, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r3, 0xffe6}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) recvmsg(r7, &(0x7f00000006c0)={&(0x7f0000000300)=@pppol2tpv3in6, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/68, 0x44}, {&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/243, 0xf3}], 0x4}, 0x21) recvmsg(r7, &(0x7f0000000a00)={&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000800)=""/156, 0x9c}], 0x2, &(0x7f0000000900)=""/210, 0xd2}, 0x40010120) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000a80)={0x6, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}]}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={r5, 0x5, 0x10}, 0xc) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000000b40)) syz_emit_vhci(&(0x7f0000000b80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_info_rsp={{0xb, 0x1, 0xc}, {0xff, 0x2, "24dd3094c2a1057d"}}]}}, 0x19) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r2, 0x58, &(0x7f0000000bc0)}, 0x10) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c80), 0x553042, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x13, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2a}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xf1, 0xe, 0x0, 0xf, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='syzkaller\x00', 0x7f, 0xf, &(0x7f0000000e40)=""/15, 0x40f00, 0x54, '\x00', r6, 0x25, r12, 0x8, &(0x7f0000000e80)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000ec0)=[r4, r2, r2, r4, r2, r4], &(0x7f0000000f00)=[{0x2, 0x2, 0xb, 0x8}, {0x5, 0x2, 0x4, 0x5}, {0x2, 0x3, 0xd, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x2, 0x5, 0xa}, {0x2, 0x1, 0xe, 0x8}, {0x0, 0x1, 0xc, 0xb}, {0x2, 0x4, 0x8, 0x8}], 0x10, 0x3}, 0x94) ioctl$SNDCTL_TMR_METRONOME(r12, 0x40045407) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000001040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000001380)={&(0x7f0000001080)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)=""/128, 0x80}, {&(0x7f0000001180)=""/61, 0x3d}, {&(0x7f00000011c0)=""/152, 0x98}], 0x3, &(0x7f00000012c0)=""/137, 0x89}, 0x40000000) socket$packet(0x11, 0x3, 0x300) getsockname$inet(r8, &(0x7f00000013c0)={0x2, 0x0, @dev}, &(0x7f0000001400)=0x10) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000001440), 0x4) syz_emit_vhci(&(0x7f0000001480)=@HCI_VENDOR_PKT, 0x2) 3.748446857s ago: executing program 0 (id=1175): syz_open_dev$sndctrl(0x0, 0x4, 0x70be42) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) (async) syz_emit_vhci(0x0, 0x61) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0x4, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24041091}, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000002007000000", @ANYRES32=r10, @ANYBLOB="000000000a000200aaaaaaaaaa0c"], 0x28}}, 0x40040) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040033250000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="900002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a0000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffff7f08000100", @ANYRES32=r6, @ANYBLOB="780002803c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000006b8eb8c90300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB], 0x424}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r11 = socket$inet6(0xa, 0x6, 0x1ff) connect$inet6(r11, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) (async, rerun: 32) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000280)={0x6, 0x0, [{0x33a, 0x0, 0x80}, {0x63b, 0x0, 0x6}, {0xacd, 0x0, 0x409e}, {0xaa0, 0x0, 0xfe65}, {0x395, 0x0, 0x1}, {0x823, 0x0, 0x9}]}) (rerun: 32) 3.747566178s ago: executing program 4 (id=1176): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000200000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdf257400000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000e0000005c000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000710025042dbd70007f0000000700000000", @ANYRES32=r7, @ANYBLOB="0c0001800800010063000100"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000fc0)={r0, 0x58, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001140)={'ip6tnl0\x00', &(0x7f00000010c0)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x10, 0x3, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x0, 0xb0b}}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xc, 0xfff2}, {0xffff, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001940)={&(0x7f0000002600)=ANY=[@ANYBLOB="b8070000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="e801028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e705000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="04000280088001c9ced279455ce8eed41d73000b24d2b13c410b275dd700fc02437e9d2827561f3c77c913e55c9e37d3236d34c4902a007478980d49f9523faf4429592fd067d7808dbce84e46f8490d2f98277016cd1210bd843f89db508ec0790814809832f751f0eb74a09e26eba86773399b5405ab98bb9a41b6863399ef4c24b3b9340207ce0275486bed1e23dbe32a899fb8907072f327b73691b03c227783666266", @ANYRES32=0x0, @ANYBLOB="000102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400d308000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400aa02000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r7, @ANYBLOB="300102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000008050606000000e30008050900000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="2801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r14, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400eb52ad6d080007000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000034000400010000060300000007000806060000009300009b8d4a00007f00070e030000000300bd00090000000400087fffffffff"], 0x7b8}, 0x1, 0x0, 0x0, 0xc011}, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={r5, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={r5, 0x1}, &(0x7f0000000380)=0x8) r15 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r15, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u8=&(0x7f0000001080)=0x8}}) syz_open_procfs(0x0, &(0x7f0000000d40)='net/ip6_flowlabel\x00') writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r16 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x5e3040, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r16, 0xc0389423, &(0x7f0000000300)={0x100000, 0x50, [0xdb1a, 0x80000001, 0x42cb], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 3.641841843s ago: executing program 1 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$netlink(0x10, 0x3, 0x0) memfd_create(0x0, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 3.45323544s ago: executing program 2 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='musb-hdrc\n\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/musb-hdrc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='pcspkr\n\x00', 0x7) close(r1) clock_gettime(0x0, &(0x7f0000003c80)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000140)=""/177, 0xb1}], 0x2, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/21, 0x15}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/228, 0xe4}, {&(0x7f0000000b40)=""/129, 0x81}, {&(0x7f0000000c00)=""/77, 0x4d}], 0x9, &(0x7f0000000d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/234, 0xea}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001000), 0x6e, &(0x7f0000002240)=[{&(0x7f0000001080)=""/51, 0x33}, {&(0x7f00000010c0)=""/24, 0x18}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/1, 0x1}, {&(0x7f0000002140)=""/218, 0xda}], 0x5}}, {{&(0x7f00000022c0)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002340)=""/237, 0xed}], 0x1}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000002500)=""/153, 0x99}, {&(0x7f00000025c0)=""/245, 0xf5}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/139, 0x8b}, {&(0x7f0000003780)=""/12, 0xc}, {&(0x7f00000037c0)=""/160, 0xa0}, {&(0x7f0000003880)=""/169, 0xa9}], 0x7, &(0x7f00000039c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x6, 0x1, &(0x7f0000003cc0)={r2, r3+10000000}) 3.2735794s ago: executing program 0 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 7) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 2.506822251s ago: executing program 2 (id=1180): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r3, 0xa, &(0x7f0000000100)=[0x7fff, 0x7, 0x8, 0x10001, 0xfffeffff, 0x200, 0x8, 0x6, 0x1000, 0x2], &(0x7f0000000140)=[0x38bb, 0x8, 0x2, 0x2, 0x80000000, 0x4], 0x2, 0x6, 0x5, &(0x7f0000000180)=[0x1, 0x4e, 0x4, 0x9, 0x55, 0x8d3], &(0x7f00000001c0)=[0x731, 0x6, 0x6]}) 2.191995699s ago: executing program 4 (id=1181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0xa, [0x6, 0x0, 0x6, 0x5, 0x101, 0x7, 0x9, 0x101, 0x5, 0x0]}, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x926}, [@generic={0xd, 0xf, 0x0, 0x100, 0xffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, &(0x7f00000001c0), 0x41100, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x4, 0x9, 0x80000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[r3, r3, r3], &(0x7f0000000300)=[{0x4, 0x2, 0x6, 0x2}], 0x10, 0x6}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001806fffc010000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c208009078000000800000"], 0x0) 1.802206468s ago: executing program 4 (id=1182): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x4, 0x0, 0xc, 0x1ff}, {0xa, 0xc4caa398de48f0ed, 0x8, 0x0, 0x1000, 0x10001}, 0x40004, 0x2, 0xcb8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x539f006f006f6a1d}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x70}}, 0x4000080) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x140, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e20, 0x6, @mcast1, 0x4}}}, 0x80) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.531900398s ago: executing program 4 (id=1183): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0xffff1000, 0x6000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f333e65440fdcd965670fc770ad420f09c4c221458109000000d9fe0f52bd0e0000000f07b9800000c00f3235010000000f3066baf80cb86bc45b8bef66bafc0cec", 0x42}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a18fcff0010000081"]) 1.092260705s ago: executing program 0 (id=1184): ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x14) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x63}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8040) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0xffffffff, 0xb000}) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @remote, 0x2}, 0x1c) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000640)={0x0, &(0x7f0000000300)=[@in_dx={0x69, 0x20, {0x137d, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x28a, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x2}}, @wrmsr={0x65, 0x20, {0x29b, 0x9}}, @nested_load_code={0x12e, 0x60, {0x3, "c744240003000000c7442402bf4c0000c7442406000000000f011c24f3410f0966b8ed008ed00f08460fa7c0670f0fbc7625000000bb0f078f497c802cfa4d0fc7689d66ba4300ec"}}, @wr_drn={0x68, 0x20, {0x6, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xad, 0x10, 0x9, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2400, 0x2, 0x8, 0x7}}, @in_dx={0x69, 0x20, {0xf418, 0x4}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x53a, 0xf2f4, 0xfffffffffffffffa, 0x4b}}, @wrmsr={0x65, 0x20, {0x583, 0x7fff}}, @code={0xa, 0x68, {"66440f38807000b8010000000f01d9c4633d4275f1c366baf80cb84462518eef66bafc0cedf4f466baf80cb810950986ef66bafc0c66edc74424000b010000c744240202000000ff1c2466b810018ee00f1cb978000000"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x68e, 0x8, 0xfffffffffffffffe, 0x70f1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x8, 0x70, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}], 0x328}) mmap(&(0x7f0000ce2000/0x1000)=nil, 0x1000, 0x8, 0x30, 0xffffffffffffffff, 0x1c3b6000) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e24, 0xa0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) move_mount(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x26) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x8, 0x3) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000800), &(0x7f0000000840)=0x4) fgetxattr(r2, &(0x7f0000000880)=@known='trusted.overlay.origin\x00', &(0x7f00000008c0)=""/197, 0xc5) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r5 = fspick(r2, &(0x7f00000009c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000a00)={0x7}) readv(r5, &(0x7f0000001bc0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/188, 0xbc}, {&(0x7f0000001b00)=""/190, 0xbe}], 0x3) getcwd(&(0x7f0000001c00)=""/247, 0xf7) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000001d00)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001d80)={0x0, "781426bfd6893833de3f217fb7227764"}) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000002d80)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$setown(r5, 0x8, r6) 230.72365ms ago: executing program 1 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x40) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xffffffffffffff3b) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0xf13e}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0401040000"], 0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvfrom$phonet(r5, &(0x7f00000003c0)=""/44, 0xfffffffffffffef6, 0x60, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0xc, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048b0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1186): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1, 0x2}) io_uring_setup(0x4fee, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040a0404"], 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) kernel console output (not intermixed with test programs): 1785711070.997:688): avc: denied { create } for pid=8272 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.989623][ T42] audit: type=1400 audit(1785711071.057:689): avc: denied { read } for pid=8272 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.288998][ T42] audit: type=1400 audit(1785711071.337:690): avc: denied { bind } for pid=8270 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.300481][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 121.135283][ T8300] MPI: mpi too large (16392 bits) [ 121.172147][ T8299] netlink: 80 bytes leftover after parsing attributes in process `syz.3.676'. [ 121.204230][ T42] audit: type=1400 audit(1785711074.267:691): avc: denied { name_bind } for pid=8297 comm="syz.1.677" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.235323][ T8299] SELinux: security policydb version 18 (MLS) not backwards compatible [ 121.240732][ T42] audit: type=1400 audit(1785711074.297:692): avc: denied { load_policy } for pid=8298 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.291580][ T8299] SELinux: failed to load policy [ 123.496351][ T42] audit: type=1400 audit(1785711076.547:693): avc: denied { map } for pid=8316 comm="syz.2.682" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.590142][ T42] audit: type=1400 audit(1785711076.637:694): avc: denied { execute } for pid=8316 comm="syz.2.682" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.556961][ T8322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.574919][ T8322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.034466][ T8322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.078474][ T8322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.480223][ T8335] netlink: 'syz.0.688': attribute type 11 has an invalid length. [ 125.505489][ T8322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.509501][ T8322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.686243][ T8322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.689942][ T8322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.775615][ T42] audit: type=1400 audit(1785711078.837:695): avc: denied { bind } for pid=8334 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.821966][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.003412][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 126.014783][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.198026][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.206579][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.354565][ T9] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 126.498714][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.520277][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.768074][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.805204][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.329409][ T8253] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.349238][ T8253] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.047146][ T42] audit: type=1400 audit(1785711081.107:696): avc: denied { read write } for pid=8350 comm="syz.2.691" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.062432][ T8351] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 128.066189][ T42] audit: type=1400 audit(1785711081.117:697): avc: denied { open } for pid=8350 comm="syz.2.691" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.089040][ T42] audit: type=1400 audit(1785711081.127:698): avc: denied { block_suspend } for pid=8350 comm="syz.2.691" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.283488][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 129.303345][ T42] audit: type=1400 audit(1785711082.357:699): avc: denied { write } for pid=8356 comm="syz.0.694" name="dlm" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.331067][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 131.396991][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.402140][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836634][ T9] usb 6-1: USB disconnect, device number 10 [ 135.365287][ T8380] zram0: detected capacity change from 0 to 8 [ 135.874938][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8383 comm=syz.0.702 [ 136.945442][ T8387] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 137.509491][ T8387] CIFS: VFS: Error connecting to socket. Aborting operation. [ 137.523421][ T8387] CIFS: VFS: cifs_mount failed w/return code = -4 [ 138.100899][ T42] audit: type=1400 audit(1785711091.157:700): avc: denied { watch } for pid=8389 comm="syz.0.705" path="/184/file0" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.151770][ T42] audit: type=1400 audit(1785711091.157:701): avc: denied { watch_sb watch_reads } for pid=8389 comm="syz.0.705" path="/184/file0" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.203901][ T42] audit: type=1400 audit(1785711091.237:702): avc: denied { execute } for pid=8396 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 138.242241][ T42] audit: type=1400 audit(1785711091.267:703): avc: denied { execute_no_trans } for pid=8396 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 140.644769][ T5732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.655121][ T5732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.673276][ T5732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.691165][ T5732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.702147][ T5732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.237604][ T8428] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.818791][ T5732] Bluetooth: hci4: command tx timeout [ 143.934198][ T8435] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 143.936734][ T8435] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.150975][ T8435] vhci_hcd vhci_hcd.0: Device attached [ 144.366801][ T8443] program syz.0.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.530370][ T1358] usb 40-1: SetAddress Request (2) to port 0 [ 144.546045][ T1358] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 144.627210][ T42] audit: type=1400 audit(1785711097.687:704): avc: denied { set_context_mgr } for pid=8433 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.898249][ T5732] Bluetooth: hci4: command tx timeout [ 144.992980][ T8438] vhci_hcd: connection reset by peer [ 145.021752][ T12] vhci_hcd vhci_hcd.1: stop threads [ 145.031776][ T12] vhci_hcd vhci_hcd.1: release socket [ 145.051770][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 147.081741][ T5732] Bluetooth: hci4: command tx timeout [ 149.128169][ T8463] binder: 8451:8463 ioctl c0306201 200000000640 returned -22 [ 149.138556][ T5732] Bluetooth: hci4: command tx timeout [ 149.183126][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.808744][ T1358] usb 40-1: device descriptor read/8, error -110 [ 150.004149][ T42] audit: type=1400 audit(1785711102.937:705): avc: denied { write } for pid=8461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.548948][ T1358] usb usb40-port1: attempt power cycle [ 151.950561][ T1358] usb usb40-port1: unable to enumerate USB device [ 152.971118][ T42] audit: type=1400 audit(1785711106.027:706): avc: denied { write } for pid=8473 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.085374][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 157.437570][ T42] audit: type=1400 audit(1785711110.477:707): avc: denied { write } for pid=8488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.503541][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888062585400: rx timeout, send abort [ 159.006049][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888062584c00: rx timeout, send abort [ 159.010114][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888062585400: abort rx timeout. Force session deactivation [ 159.509807][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888062584c00: abort rx timeout. Force session deactivation [ 159.633313][ T42] audit: type=1400 audit(1785711112.677:708): avc: denied { write } for pid=8506 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.052174][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 160.122312][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 160.956238][ T42] audit: type=1400 audit(1785711114.017:709): avc: denied { getopt } for pid=8518 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 161.470348][ T42] audit: type=1400 audit(1785711114.537:710): avc: denied { write } for pid=8519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.751538][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.754813][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.763432][ T8409] bridge_slave_0: entered allmulticast mode [ 161.776183][ T8409] bridge_slave_0: entered promiscuous mode [ 161.824648][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.837063][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.920165][ T8409] bridge_slave_1: entered allmulticast mode [ 162.229540][ T8409] bridge_slave_1: entered promiscuous mode [ 162.999379][ T8533] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 163.107373][ T8541] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 163.146154][ T42] audit: type=1400 audit(1785711116.187:711): avc: denied { create } for pid=8537 comm="syz.2.735" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 163.169063][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.530240][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.555965][ T42] audit: type=1400 audit(1785711116.207:712): avc: denied { associate } for pid=8537 comm="syz.2.735" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 163.556358][ T42] audit: type=1400 audit(1785711116.347:713): avc: denied { mounton } for pid=8537 comm="syz.2.735" path="/183/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 163.725706][ T42] audit: type=1400 audit(1785711116.677:714): avc: denied { write } for pid=8538 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.934507][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 164.113002][ T8409] team0: Port device team_slave_0 added [ 164.133750][ T9] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 164.139841][ T9] usb 7-1: config 1 has no interface number 0 [ 164.142759][ T9] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 164.147448][ T9] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 164.212591][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 164.225991][ T42] audit: type=1400 audit(1785711117.287:715): avc: denied { nlmsg_read } for pid=8545 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 164.239923][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.251137][ T8409] team0: Port device team_slave_1 added [ 164.258497][ T9] usb 7-1: Product: syz [ 164.260432][ T9] usb 7-1: Manufacturer: syz [ 164.282787][ T9] usb 7-1: SerialNumber: syz [ 164.365901][ T8541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.804495][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.816782][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.881362][ T8541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.901428][ T8409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.963915][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.966241][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.039120][ T8409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.172932][ T9] usb 7-1: Incompatible driver and firmware versions [ 165.306646][ T9] usb 7-1: USB disconnect, device number 9 [ 165.816104][ T8557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8557 comm=syz.1.738 [ 166.051061][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.737'. [ 166.074293][ T42] audit: type=1400 audit(1785711119.137:716): avc: denied { rmdir } for pid=5735 comm="syz-executor" name="bus" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 166.156411][ T8409] hsr_slave_0: entered promiscuous mode [ 166.293712][ T8409] hsr_slave_1: entered promiscuous mode [ 166.344279][ T8409] debugfs: 'hsr0' already exists in 'hsr' [ 166.356137][ T8409] Cannot create hsr debugfs directory [ 166.475487][ T42] audit: type=1400 audit(1785711119.537:717): avc: denied { write } for pid=8558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.838536][ T8570] binder: 8567:8570 ioctl c0306201 200000000480 returned -22 [ 167.903328][ T42] audit: type=1400 audit(1785711120.967:718): avc: denied { write } for pid=8573 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.996332][ T8575] openvswitch: netlink: Message has 16 unknown bytes. [ 168.052201][ T8575] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 168.118816][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 168.143822][ T8575] cramfs: wrong magic [ 168.160634][ T8577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=285 sclass=netlink_audit_socket pid=8577 comm=syz.0.741 [ 169.622520][ T8577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.741'. [ 169.646021][ T8581] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 169.947329][ T42] audit: type=1400 audit(1785711123.007:719): avc: denied { write } for pid=8585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.582816][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 171.172596][ T8409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.276111][ T8409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.333980][ T8409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.391066][ T8599] fuse: Unknown parameter '\ëo9âÇG[ùßfdç0x0000000000000004' [ 171.464449][ T8409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.509560][ T8409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.568083][ T42] audit: type=1400 audit(1785711124.617:720): avc: denied { name_connect } for pid=8596 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 171.637088][ T42] audit: type=1326 audit(1785711124.697:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.2.746" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6faa79e019 code=0x0 [ 171.676880][ T42] audit: type=1400 audit(1785711124.727:722): avc: denied { write } for pid=8594 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.760731][ T8409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.827159][ T8409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.896793][ T8409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.847090][ T8618] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 173.991813][ T1358] IPVS: starting estimator thread 0... [ 174.055122][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 174.078060][ T8625] IPVS: using max 44 ests per chain, 105600 per kthread [ 174.378552][ T8409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.472167][ T8615] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 174.508580][ T8611] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 174.619940][ T8409] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.731819][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.735208][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.941292][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.944877][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.183401][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 176.243400][ T8638] bond0: entered promiscuous mode [ 176.248316][ T8638] bond_slave_0: entered promiscuous mode [ 176.254511][ T8638] bond_slave_1: entered promiscuous mode [ 176.458464][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 178.522055][ T42] audit: type=1400 audit(1785711131.587:723): avc: denied { setopt } for pid=8654 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.530942][ T8660] netlink: 68 bytes leftover after parsing attributes in process `syz.0.757'. [ 180.093401][ T8663] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 181.619513][ T8684] SELinux: policydb version -1384680475 does not match my version range 15-35 [ 181.695048][ T8684] SELinux: failed to load policy [ 181.827139][ T8689] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 182.126120][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 182.309600][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.343271][ T5886] hid_parser_main: 91 callbacks suppressed [ 182.343347][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.387914][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.393732][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.411850][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.429465][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.452927][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.478819][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.496642][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.532622][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.561922][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x1 [ 182.583708][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.677332][ T5886] hid-generic 0004:FFFFFFFF:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 182.752795][ T8701] rdma_op ffff88804615e9f0 conn xmit_rdma 0000000000000000 [ 183.140557][ T8689] bond6: entered allmulticast mode [ 183.741277][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 183.838535][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802af5c400: rx timeout, send abort [ 183.886015][ T8689] netlink: 'syz.0.763': attribute type 29 has an invalid length. [ 183.959356][ T8689] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 184.076991][ T8689] netlink: 76 bytes leftover after parsing attributes in process `syz.0.763'. [ 184.126800][ T8409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.272360][ T42] audit: type=1400 audit(1785711137.327:724): avc: denied { read } for pid=8710 comm="syz.1.768" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.544900][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 187.451678][ T8737] netlink: 84 bytes leftover after parsing attributes in process `syz.1.774'. [ 187.454558][ T42] audit: type=1400 audit(1785711140.467:725): avc: denied { ioctl } for pid=8730 comm="syz.2.773" path="socket:[26899]" dev="sockfs" ino=26899 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.454688][ T42] audit: type=1400 audit(1785711140.497:726): avc: denied { read } for pid=8730 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.605624][ T8409] veth0_vlan: entered promiscuous mode [ 187.960152][ T42] audit: type=1400 audit(1785711140.857:727): avc: denied { setopt } for pid=8736 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.073269][ T8409] veth1_vlan: entered promiscuous mode [ 188.531314][ T8743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=8743 comm=syz.0.775 [ 188.830326][ T42] audit: type=1400 audit(1785711141.887:728): avc: denied { mounton } for pid=8744 comm="syz.1.776" path="/229/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 188.861072][ T8409] veth0_macvtap: entered promiscuous mode [ 188.982116][ T8409] veth1_macvtap: entered promiscuous mode [ 189.522974][ T8409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.818711][ T8409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.183466][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.342656][ T5811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.354454][ T5811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.581933][ T5811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.435406][ T6876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.452769][ T6876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.013186][ T6876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.058363][ T6876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.562591][ T42] audit: type=1400 audit(1785711145.627:729): avc: denied { mounton } for pid=8409 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 192.615058][ T42] audit: type=1400 audit(1785711145.657:730): avc: denied { mounton } for pid=8409 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 193.313889][ T42] audit: type=1400 audit(1785711146.377:731): avc: denied { read } for pid=8780 comm="syz.2.785" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.380666][ T42] audit: type=1400 audit(1785711146.397:732): avc: denied { open } for pid=8780 comm="syz.2.785" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.429595][ T42] audit: type=1400 audit(1785711146.417:733): avc: denied { ioctl } for pid=8780 comm="syz.2.785" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.119741][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.124102][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.240471][ T42] audit: type=1400 audit(1785711148.307:734): avc: denied { read } for pid=8796 comm="syz.4.789" dev="nsfs" ino=4026533803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 195.319937][ T42] audit: type=1400 audit(1785711148.327:735): avc: denied { open } for pid=8796 comm="syz.4.789" path="net:[4026533803]" dev="nsfs" ino=4026533803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 196.804178][ T8809] overlay: Unknown parameter 'uid<00000000000000060928' [ 197.358659][ T8813] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 197.589190][ T8813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.516817][ T42] audit: type=1400 audit(1785711151.567:736): avc: denied { shutdown } for pid=8825 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.834908][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 198.909847][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 198.941633][ T8834] netlink: 'syz.0.797': attribute type 6 has an invalid length. [ 199.690965][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.696535][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.951543][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.968614][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.259962][ T42] audit: type=1400 audit(1785711153.327:737): avc: denied { setattr } for pid=8845 comm="syz.1.801" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 201.154885][ T42] audit: type=1400 audit(1785711154.217:738): avc: denied { write } for pid=8854 comm="syz.2.803" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 202.032015][ T8766] IPVS: starting estimator thread 0... [ 202.086244][ T42] audit: type=1400 audit(1785711155.147:739): avc: denied { getopt } for pid=8871 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.095746][ T8873] mmap: syz.0.807 (8873): VmData 37531648 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 202.139036][ T8875] IPVS: using max 44 ests per chain, 105600 per kthread [ 202.447413][ T8879] syz.1.808: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.545978][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.1.808 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.546002][ T8879] Tainted: [L]=SOFTLOCKUP [ 202.546006][ T8879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.546014][ T8879] Call Trace: [ 202.546019][ T8879] [ 202.546025][ T8879] dump_stack_lvl+0x100/0x190 [ 202.546074][ T8879] warn_alloc.cold+0x94/0xa8 [ 202.546101][ T8879] ? __pfx_warn_alloc+0x10/0x10 [ 202.546130][ T8879] ? register_lock_class+0x40/0x560 [ 202.546150][ T8879] ? kasan_save_stack+0x3f/0x50 [ 202.546170][ T8879] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 202.546190][ T8879] ? xskq_create+0x52/0x1d0 [ 202.546250][ T8879] ? xsk_setsockopt+0x743/0xab0 [ 202.546261][ T8879] ? do_sock_setsockopt+0xf3/0x1d0 [ 202.546288][ T8879] ? __sys_setsockopt+0x195/0x220 [ 202.546301][ T8879] ? __x64_sys_setsockopt+0xbd/0x160 [ 202.546315][ T8879] ? do_syscall_64+0x115/0x870 [ 202.546330][ T8879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.546346][ T8879] ? xskq_create+0xfb/0x1d0 [ 202.546358][ T8879] __vmalloc_node_range_noprof+0x136c/0x1630 [ 202.546381][ T8879] ? xskq_create+0xfb/0x1d0 [ 202.546398][ T8879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.546418][ T8879] ? kasan_save_track+0x14/0x30 [ 202.546431][ T8879] ? __kasan_kmalloc+0xaa/0xb0 [ 202.546444][ T8879] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 202.546462][ T8879] ? xskq_create+0xfb/0x1d0 [ 202.546473][ T8879] vmalloc_user_noprof+0x9e/0xe0 [ 202.546489][ T8879] ? xskq_create+0xfb/0x1d0 [ 202.546501][ T8879] xskq_create+0xfb/0x1d0 [ 202.546513][ T8879] xsk_setsockopt+0x743/0xab0 [ 202.546525][ T8879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.546540][ T8879] ? selinux_socket_setsockopt+0x6a/0x80 [ 202.546584][ T8879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.546597][ T8879] do_sock_setsockopt+0xf3/0x1d0 [ 202.546616][ T8879] __sys_setsockopt+0x195/0x220 [ 202.546634][ T8879] __x64_sys_setsockopt+0xbd/0x160 [ 202.546652][ T8879] ? do_syscall_64+0x90/0x870 [ 202.546665][ T8879] ? lockdep_hardirqs_on+0x78/0x100 [ 202.546679][ T8879] do_syscall_64+0x115/0x870 [ 202.546692][ T8879] ? clear_bhb_loop+0x40/0x90 [ 202.546707][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.546719][ T8879] RIP: 0033:0x7fd2a4d9e019 [ 202.546731][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.546741][ T8879] RSP: 002b:00007fd2a5c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.546760][ T8879] RAX: ffffffffffffffda RBX: 00007fd2a5025fa0 RCX: 00007fd2a4d9e019 [ 202.546767][ T8879] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 202.546774][ T8879] RBP: 00007fd2a4e3500c R08: 0000000000000029 R09: 0000000000000000 [ 202.546781][ T8879] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.546789][ T8879] R13: 00007fd2a5026038 R14: 00007fd2a5025fa0 R15: 00007ffd1a24ae18 [ 202.546805][ T8879] [ 202.546872][ T8879] Mem-Info: [ 202.938556][ T8879] active_anon:18161 inactive_anon:0 isolated_anon:0 [ 202.938556][ T8879] active_file:579 inactive_file:36490 isolated_file:0 [ 202.938556][ T8879] unevictable:1768 dirty:64 writeback:0 [ 202.938556][ T8879] slab_reclaimable:8767 slab_unreclaimable:73194 [ 202.938556][ T8879] mapped:30127 shmem:2324 pagetables:3631 [ 202.938556][ T8879] sec_pagetables:298 bounce:0 [ 202.938556][ T8879] kernel_misc_reclaimable:0 [ 202.938556][ T8879] free:453244 free_pcp:7326 free_cma:0 [ 203.156937][ T8879] Node 0 active_anon:72520kB inactive_anon:0kB active_file:2316kB inactive_file:145552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100028kB dirty:256kB writeback:0kB shmem:5756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:30720kB kernel_stack:14712kB pagetables:8944kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 203.195410][ T8879] Node 1 active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 203.277453][ T8879] Node 0 DMA free:13196kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.297091][ T8879] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 203.426390][ T8879] Node 0 DMA32 free:214612kB boost:0kB min:27788kB low:34732kB high:41676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72596kB inactive_anon:0kB active_file:2316kB inactive_file:145552kB unevictable:3536kB writepending:256kB zspages:0kB present:2080628kB managed:1255220kB mlocked:0kB bounce:0kB free_pcp:16484kB local_pcp:6152kB free_cma:0kB [ 203.688548][ T8879] lowmem_reserve[]: 0 0 0 0 0 [ 203.690650][ T8879] Node 1 Normal free:1585168kB boost:0kB min:39452kB low:49312kB high:59172kB reserved_highatomic:0KB free_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:0kB inactive_file:408kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:10376kB local_pcp:9888kB free_cma:0kB [ 203.750185][ T8879] lowmem_reserve[]: 0 0 0 0 0 [ 203.820544][ T8879] Node 0 DMA: 5*4kB (U) 5*8kB (U) 5*16kB (U) 6*32kB (U) 7*64kB (U) 5*128kB (U) 4*256kB (U) 3*512kB (U) 5*1024kB (U) 2*2048kB (M) 0*4096kB = 13196kB [ 203.878636][ T8879] Node 0 DMA32: 653*4kB (UME) 382*8kB (UME) 267*16kB (UM) 246*32kB (UME) 165*64kB (UME) 234*128kB (UME) 167*256kB (UME) 104*512kB (UME) 47*1024kB (UM) 6*2048kB (UM) 0*4096kB = 214740kB [ 204.162261][ T8879] Node 1 Normal: 66*4kB (UME) 87*8kB (UME) 229*16kB (UME) 232*32kB (UME) 208*64kB (UME) 192*128kB (UME) 163*256kB (UME) 155*512kB (UM) 129*1024kB (UME) 10*2048kB (UME) 308*4096kB (UM) = 1585168kB [ 204.257582][ T8879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.673407][ T8879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.887467][ T8879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.111337][ T8879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.245026][ T8879] 39389 total pagecache pages [ 205.255037][ T8879] 0 pages in swap cache [ 205.264972][ T8879] Free swap = 124996kB [ 205.271722][ T8879] Total swap = 124996kB [ 205.277090][ T8879] 1048443 pages RAM [ 205.287119][ T8879] 0 pages HighMem/MovableOnly [ 205.314091][ T8879] 285327 pages reserved [ 205.331231][ T8879] 0 pages cma reserved [ 206.757762][ T42] audit: type=1400 audit(1785711159.807:740): avc: denied { write } for pid=8903 comm="syz.2.816" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.771815][ T8904] program syz.4.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.823363][ T42] audit: type=1400 audit(1785711159.887:741): avc: denied { setopt } for pid=8903 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.967484][ T8908] TCP: TCP_TX_DELAY enabled [ 207.017130][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 207.077390][ T8902] netlink: 72 bytes leftover after parsing attributes in process `syz.0.813'. [ 207.120349][ T42] audit: type=1400 audit(1785711160.177:742): avc: denied { write } for pid=8898 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.168215][ T42] audit: type=1400 audit(1785711162.227:743): avc: denied { setopt } for pid=8913 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 209.177486][ T8915] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 210.264730][ T8931] 9p: Bad value for 'rfdno' [ 210.426253][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.821'. [ 210.454304][ T8942] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.416772][ T8957] raw_sendmsg: syz.1.826 forgot to set AF_INET. Fix it! [ 212.446887][ T8960] nvme_fabrics: unknown parameter or missing value 'transSt=l§¸ð7uñ£o' in ctrl creation request [ 213.238583][ T8956] Bluetooth: MGMT ver 1.23 [ 213.250972][ T8956] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 214.080914][ T42] audit: type=1400 audit(1785711167.147:744): avc: denied { write } for pid=8963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.871006][ T8974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.831'. [ 217.410731][ T42] audit: type=1400 audit(1785711170.447:745): avc: denied { write } for pid=8981 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.893826][ T8993] fuse: Unknown parameter '0x0000000000000005' [ 217.910037][ T8989] sit1: entered allmulticast mode [ 217.922745][ T8993] fuse: blksize only supported for fuseblk [ 219.001731][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.839'. [ 219.051868][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.839'. [ 219.104819][ T9000] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 219.169145][ T9000] iwpm_hello_cb: Unable to parse nlmsg [ 219.233667][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 219.804994][ T42] audit: type=1400 audit(1785711172.867:746): avc: denied { ioctl } for pid=9002 comm="syz.2.840" path="socket:[28613]" dev="sockfs" ino=28613 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.907085][ T42] audit: type=1400 audit(1785711172.967:747): avc: denied { write } for pid=9001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.387102][ T42] audit: type=1400 audit(1785711173.447:748): avc: denied { append } for pid=9012 comm="syz.1.843" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.432128][ T9013] binder: 9012:9013 ioctl 4018620d 0 returned -22 [ 220.449673][ T42] audit: type=1400 audit(1785711173.497:749): avc: denied { getopt } for pid=9014 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.466637][ T9013] binder: 9012:9013 ioctl c0306201 200000000300 returned -11 [ 221.542606][ T9015] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2 [ 221.580783][ T42] audit: type=1400 audit(1785711174.647:750): avc: denied { write } for pid=9020 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.756065][ T42] audit: type=1400 audit(1785711174.817:751): avc: denied { write } for pid=9025 comm="syz.4.847" name="functions" dev="configfs" ino=14739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.845524][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'. [ 223.109438][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.163445][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.244069][ T42] audit: type=1400 audit(1785711176.287:752): avc: denied { execute } for pid=9040 comm="syz.4.850" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 224.675522][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 225.176684][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.853'. [ 225.713708][ T42] audit: type=1400 audit(1785711178.757:753): avc: denied { create } for pid=9066 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 225.927357][ T42] audit: type=1400 audit(1785711178.987:754): avc: denied { sys_admin } for pid=9066 comm="syz.0.856" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 225.935258][ T9068] capability: warning: `syz.0.856' uses 32-bit capabilities (legacy support in use) [ 227.256931][ T42] audit: type=1400 audit(1785711180.317:755): avc: denied { read } for pid=9085 comm="syz.1.862" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 227.312801][ T42] audit: type=1400 audit(1785711180.317:756): avc: denied { open } for pid=9085 comm="syz.1.862" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 227.492078][ T42] audit: type=1400 audit(1785711180.557:757): avc: denied { write } for pid=9085 comm="syz.1.862" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 227.559913][ T42] audit: type=1400 audit(1785711180.617:758): avc: denied { sys_nice } for pid=9087 comm="syz.0.860" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 227.635809][ T9091] fuse: Unknown parameter 'groupá9¤°G_id' [ 227.729292][ T9089] loop2: detected capacity change from 0 to 7 [ 227.764555][ T9089] Dev loop2: unable to read RDB block 7 [ 227.776877][ T9089] loop2: AHDI p1 p2 p3 [ 227.809970][ T9089] loop2: partition table partially beyond EOD, truncated [ 227.839105][ T9089] loop2: p1 start 1601398130 is beyond EOD, truncated [ 227.872398][ T9089] loop2: p2 start 1702059890 is beyond EOD, truncated [ 230.092032][ T42] audit: type=1400 audit(1785711183.157:759): avc: denied { execute } for pid=9109 comm="syz.2.870" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.855571][ T9120] netlink: 7 bytes leftover after parsing attributes in process `syz.0.872'. [ 231.898235][ T9120] cgroup: subsys name conflicts with all [ 231.901350][ T9122] cgroup: subsys name conflicts with all [ 232.892578][ T42] audit: type=1400 audit(1785711185.957:760): avc: denied { append } for pid=9124 comm="syz.1.874" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.139833][ T42] audit: type=1400 audit(1785711187.207:761): avc: denied { connect } for pid=9131 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.198414][ T5820] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 234.398639][ T5820] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.421347][ T5820] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.441012][ T5820] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.447009][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.505549][ T9133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.589948][ T5820] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.112644][ T42] audit: type=1400 audit(1785711188.167:762): avc: denied { read } for pid=9139 comm="syz.1.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.707203][ T5820] usb 7-1: USB disconnect, device number 10 [ 236.915082][ T9148] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 236.996699][ T9149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.883'. [ 237.627006][ T9148] bond2: (slave veth0_to_bond): Releasing backup interface [ 238.097145][ T9155] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 238.405466][ T9148] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 238.849391][ T9158] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.161712][ T42] audit: type=1326 audit(1785711192.217:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.2.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6faa79e019 code=0x7fc00000 [ 239.344853][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.402058][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.209861][ T9162] vlan1: entered promiscuous mode [ 240.269936][ T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 240.342510][ T9162] hsr0: entered promiscuous mode [ 240.405492][ T9162] vlan1: entered allmulticast mode [ 240.407425][ T9162] hsr0: entered allmulticast mode [ 240.410945][ T9162] hsr_slave_0: entered allmulticast mode [ 240.413160][ T9162] hsr_slave_1: entered allmulticast mode [ 240.489151][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 240.494691][ T9] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 240.504577][ T9] usb 7-1: Product: syz [ 240.506030][ T9] usb 7-1: Manufacturer: syz [ 240.532043][ T9] usb 7-1: SerialNumber: syz [ 240.619835][ T9] usb 7-1: config 0 descriptor?? [ 241.325541][ T9179] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 241.898580][ T9] usb 7-1: USB disconnect, device number 11 [ 243.038283][ T9179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.401674][ T6154] udevd[6154]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.393095][ T9204] program syz.0.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.830169][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 245.866972][ T1134] ata1.00: irq_stat 0x40000000 [ 245.893908][ T1134] ata1.00: failed command: ZAC MANAGEMENT OUT [ 245.896032][ T1134] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 0 [ 245.896032][ T1134] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 245.987364][ T1134] ata1.00: status: { DRDY ERR } [ 246.009251][ T1134] ata1.00: error: { ABRT } [ 246.010992][ T1134] ata1.00: device reported invalid CHS sector 0 [ 249.458976][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 250.113400][ T42] audit: type=1400 audit(1785711203.177:764): avc: denied { ioctl } for pid=9232 comm="syz.4.900" path="socket:[30132]" dev="sockfs" ino=30132 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.666709][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 250.775666][ T9238] 8021q: VLANs not supported on ip_vti0 [ 251.123669][ T42] audit: type=1400 audit(1785711204.187:765): avc: denied { map } for pid=9240 comm="syz.2.903" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 251.159522][ T42] audit: type=1400 audit(1785711204.187:766): avc: denied { execute } for pid=9240 comm="syz.2.903" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 252.299783][ T42] audit: type=1400 audit(1785711205.367:767): avc: denied { watch } for pid=9250 comm="syz.4.905" path="/proc/113/fdinfo" dev="proc" ino=30146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 252.348050][ T42] audit: type=1400 audit(1785711205.377:768): avc: denied { watch_sb watch_reads } for pid=9250 comm="syz.4.905" path="/proc/113/fdinfo" dev="proc" ino=30146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 253.394500][ T9256] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 254.315240][ T42] audit: type=1400 audit(1785711207.377:769): avc: denied { read } for pid=9262 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.390970][ T42] audit: type=1400 audit(1785711207.457:770): avc: denied { getopt } for pid=9262 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 255.546827][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550995][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.201162][ T42] audit: type=1400 audit(1785711209.257:771): avc: denied { write } for pid=9268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.826011][ T42] audit: type=1400 audit(1785711210.887:772): avc: denied { write } for pid=9290 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.073649][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'. [ 258.086529][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'. [ 258.105761][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 258.180347][ T42] audit: type=1400 audit(1785711211.247:773): avc: denied { execute } for pid=9292 comm="syz.2.915" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 258.813570][ T9294] team0: Port device veth0 removed [ 258.891565][ T9303] netlink: 76 bytes leftover after parsing attributes in process `syz.0.918'. [ 259.191008][ T9307] binder: 9302:9307 ioctl c0205838 200000000180 returned -22 [ 259.200248][ T9303] binder: 9302:9303 ioctl c0205838 200000000180 returned -22 [ 259.353145][ T42] audit: type=1400 audit(1785711212.417:774): avc: denied { setattr } for pid=9302 comm="syz.0.918" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.936664][ T42] audit: type=1400 audit(1785711212.997:775): avc: denied { write } for pid=9305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.988977][ T8766] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 261.181498][ T8766] usb 7-1: Using ep0 maxpacket: 8 [ 261.213671][ T8766] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.239236][ T8766] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.256800][ T8766] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.280291][ T8766] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.310799][ T8766] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.338395][ T8766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.492862][ T9323] netlink: 68 bytes leftover after parsing attributes in process `syz.0.924'. [ 261.735498][ T42] audit: type=1400 audit(1785711214.797:776): avc: denied { write } for pid=9321 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.750397][ T8766] usb 7-1: GET_CAPABILITIES returned 0 [ 261.752464][ T8766] usbtmc 7-1:16.0: can't read capabilities [ 261.811807][ T42] audit: type=1400 audit(1785711214.877:777): avc: denied { getopt } for pid=9322 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 262.175312][ T9330] binder: Bad value for 'max' [ 262.183670][ T42] audit: type=1400 audit(1785711215.227:778): avc: denied { mounton } for pid=9324 comm="syz.4.925" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.496088][ T9316] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 262.534065][ T5813] usb 7-1: USB disconnect, device number 12 [ 265.039763][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 265.146179][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 265.193202][ T9358] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 265.207822][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 265.571684][ T9358] geneve2: entered promiscuous mode [ 265.573650][ T9358] geneve2: entered allmulticast mode [ 266.332090][ T9368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2416 sclass=netlink_route_socket pid=9368 comm=syz.4.935 [ 266.394191][ T9368] netlink: 112 bytes leftover after parsing attributes in process `syz.4.935'. [ 267.366348][ T9381] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 267.861293][ T5732] Bluetooth: hci4: command 0x0406 tx timeout [ 268.170499][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.175529][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.927003][ T64] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 270.272330][ T8766] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 270.438212][ T8766] usb 9-1: Using ep0 maxpacket: 32 [ 270.464918][ T8766] usb 9-1: unable to get BOS descriptor or descriptor too short [ 270.475962][ T8766] usb 9-1: too many configurations: 224, using maximum allowed: 8 [ 270.524231][ T8766] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 270.535047][ T8766] usb 9-1: can't read configurations, error -61 [ 270.705904][ T8766] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.870631][ T8766] usb 9-1: Using ep0 maxpacket: 32 [ 270.919624][ T8766] usb 9-1: unable to get BOS descriptor or descriptor too short [ 270.932696][ T8766] usb 9-1: too many configurations: 224, using maximum allowed: 8 [ 270.969466][ T8766] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 270.982473][ T8766] usb 9-1: can't read configurations, error -61 [ 270.993645][ T8766] usb usb9-port1: attempt power cycle [ 271.353314][ T8766] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 271.399429][ T8766] usb 9-1: Using ep0 maxpacket: 32 [ 271.440126][ T8766] usb 9-1: unable to get BOS descriptor or descriptor too short [ 271.442975][ T8766] usb 9-1: too many configurations: 224, using maximum allowed: 8 [ 271.495439][ T8766] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 271.514905][ T8766] usb 9-1: can't read configurations, error -61 [ 271.659871][ T8766] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 271.700472][ T9435] netlink: 'syz.1.952': attribute type 5 has an invalid length. [ 271.712896][ T8766] usb 9-1: Using ep0 maxpacket: 32 [ 271.743992][ T8766] usb 9-1: unable to get BOS descriptor or descriptor too short [ 271.758151][ T8766] usb 9-1: too many configurations: 224, using maximum allowed: 8 [ 271.786834][ T8766] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 271.800681][ T8766] usb 9-1: can't read configurations, error -61 [ 271.811756][ T8766] usb usb9-port1: unable to enumerate USB device [ 272.274619][ T9435] ip6erspan0: entered promiscuous mode [ 272.567608][ T9438] ip6gretap0: entered promiscuous mode [ 272.730005][ T42] audit: type=1400 audit(1785711225.787:779): avc: denied { write } for pid=9439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.533243][ T64] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 273.775175][ T42] audit: type=1400 audit(1785711226.837:780): avc: denied { getopt } for pid=9447 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 274.332609][ T42] audit: type=1400 audit(1785711227.387:781): avc: denied { write } for pid=9453 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.240737][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.264203][ T9460] batadv_slave_1: entered promiscuous mode [ 276.109083][ T42] audit: type=1400 audit(1785711229.177:782): avc: denied { write } for pid=9467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.409971][ T9476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.961'. [ 277.808384][ T42] audit: type=1400 audit(1785711230.847:783): avc: denied { write } for pid=9481 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.833991][ T9506] tipc: Started in network mode [ 278.835795][ T9506] tipc: Node identity ba996e98fa6, cluster identity 4711 [ 278.922108][ T9506] tipc: Enabled bearer , priority 0 [ 278.929969][ T9508] JFS: charset not found [ 278.964543][ T9510] syzkaller0: entered promiscuous mode [ 278.981061][ T9510] syzkaller0: entered allmulticast mode [ 279.292441][ T9502] tipc: Resetting bearer [ 279.402924][ T9500] tipc: Resetting bearer [ 279.547762][ T9500] tipc: Disabling bearer [ 280.111524][ T5813] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 280.303060][ T5813] usb 6-1: not running at top speed; connect to a high speed hub [ 280.323638][ T5813] usb 6-1: config 10 has an invalid interface number: 33 but max is 0 [ 280.342738][ T5813] usb 6-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 280.358796][ T5813] usb 6-1: config 10 has an invalid descriptor of length 1, skipping remainder of the config [ 280.367151][ T5813] usb 6-1: config 10 has no interface number 0 [ 280.382948][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0x9 has an invalid bInterval 23, changing to 4 [ 280.405297][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0x9 has invalid maxpacket 1535, setting to 1023 [ 280.415653][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 280.431152][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 280.441903][ T5813] usb 6-1: config 10 interface 33 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 280.456255][ T5813] usb 6-1: config 10 interface 33 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 280.466939][ T5813] usb 6-1: config 10 interface 33 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 280.478045][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0xD has invalid maxpacket 2047, setting to 64 [ 280.497172][ T5813] usb 6-1: config 10 interface 33 altsetting 9 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 280.532473][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0x86 has invalid maxpacket 2184, setting to 64 [ 280.544599][ T5813] usb 6-1: config 10 interface 33 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 280.557797][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 280.573926][ T5813] usb 6-1: config 10 interface 33 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 280.592411][ T5813] usb 6-1: config 10 interface 33 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 280.605514][ T5813] usb 6-1: config 10 interface 33 has no altsetting 0 [ 280.621672][ T5813] usb 6-1: New USB device found, idVendor=153b, idProduct=1181, bcdDevice=85.dd [ 280.653061][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.680455][ T5813] usb 6-1: Product: syz [ 280.682001][ T5813] usb 6-1: Manufacturer: Ó¿ [ 280.711831][ T5813] usb 6-1: SerialNumber: syz [ 280.801099][ T9517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.815616][ T9517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.871698][ T64] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 281.126835][ T42] audit: type=1400 audit(1785711234.187:784): avc: denied { setopt } for pid=9516 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.485818][ T5813] dvb-usb: found a 'Terratec Cinergy S2 PCIe Dual Port 1' in warm state. [ 281.512430][ T5813] dw2102: su3000_power_ctrl: 1, initialized 0 [ 281.519899][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 281.630727][ T5813] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 281.823701][ T5813] dvb-usb: Terratec Cinergy S2 PCIe Dual Port 1 error while loading driver (-19) [ 282.004257][ T5813] usb 6-1: USB disconnect, device number 11 [ 282.698207][ T9544] JFS: charset not found [ 282.805621][ T64] Bluetooth: hci4: unexpected event for opcode 0x080f [ 283.494135][ T9551] tipc: Enabled bearer , priority 0 [ 283.521985][ T9551] syzkaller0: entered promiscuous mode [ 283.527786][ T9551] syzkaller0: entered allmulticast mode [ 283.681539][ T9551] tipc: Resetting bearer [ 283.752325][ T9547] tipc: Resetting bearer [ 283.946020][ T9547] tipc: Disabling bearer [ 284.186804][ T9557] team0: Device xfrm0 is of different type [ 284.784972][ T9561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.920106][ T42] audit: type=1400 audit(1785711237.977:785): avc: denied { create } for pid=9565 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 285.561466][ T9580] nvme_fabrics: unknown parameter or missing value 'þ#¨¦p••0v=´ñœƒÎáOòTf÷8sçYs¹ŒAù¾ û+Ò£€ï÷®ÿP½!Zþ¼ðk`•Ù2Ñß®²%ðµ¢>Áëà¡Ú?îM¾²›0êköÊÀ²—û<²4¤œ´Ü½¥ê£ùJ¼Töµüij†) ±' in ctrl creation request [ 285.719278][ T9580] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 286.080753][ T9584] JFS: charset not found [ 286.150157][ T64] Bluetooth: hci2: unexpected event for opcode 0x080f [ 286.822384][ T64] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 286.825496][ T64] Bluetooth: hci4: Injecting HCI hardware error event [ 286.836277][ T64] Bluetooth: hci4: hardware error 0x00 [ 286.993537][ T5732] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 287.808730][ T9597] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 287.887342][ T9597] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 288.006193][ T9598] tipc: Started in network mode [ 288.020545][ T9598] tipc: Node identity 7a1412e171a7, cluster identity 4711 [ 288.027229][ T9598] tipc: Enabled bearer , priority 0 [ 288.050562][ T9598] syzkaller0: entered promiscuous mode [ 288.070354][ T9598] syzkaller0: entered allmulticast mode [ 288.107286][ T9598] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 288.216835][ T9598] tipc: Resetting bearer [ 288.298693][ T9596] tipc: Resetting bearer [ 288.406203][ T9596] tipc: Disabling bearer [ 289.139143][ T64] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 289.498462][ T9622] JFS: charset not found [ 289.560165][ T64] Bluetooth: hci2: unexpected event for opcode 0x080f [ 290.741260][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.745914][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.866630][ T64] Bluetooth: hci2: Malformed LE Event: 0x1d [ 292.056475][ T42] audit: type=1400 audit(1785711245.117:786): avc: denied { mounton } for pid=9643 comm="syz.4.1008" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 292.669156][ T9652] tipc: Enabled bearer , priority 0 [ 292.736543][ T9652] syzkaller0: entered promiscuous mode [ 292.752390][ T9652] syzkaller0: entered allmulticast mode [ 292.786078][ T9653] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 292.882844][ T9652] tipc: Resetting bearer [ 292.927291][ T9651] tipc: Resetting bearer [ 292.995109][ T9651] tipc: Disabling bearer [ 293.621981][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 293.630830][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 293.636226][ T5732] Bluetooth: hci2: hardware error 0x00 [ 294.443205][ T9668] JFS: charset not found [ 294.499941][ T64] Bluetooth: hci2: unexpected event for opcode 0x080f [ 295.349760][ T9673] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 295.375841][ T9673] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 295.858566][ T5732] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 296.116163][ T9678] netlink: 'syz.0.1017': attribute type 7 has an invalid length. [ 297.466144][ T9686] tipc: Enabled bearer , priority 0 [ 297.509891][ T9686] syzkaller0: entered promiscuous mode [ 297.524209][ T9686] syzkaller0: entered allmulticast mode [ 297.576973][ T9691] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 297.694023][ T9686] tipc: Resetting bearer [ 297.791311][ T9683] tipc: Resetting bearer [ 297.940506][ T9683] tipc: Disabling bearer [ 298.832446][ T9698] JFS: charset not found [ 300.007478][ T5813] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 300.214611][ T5813] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.225459][ T5813] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 300.237389][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 300.283800][ T5813] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.331240][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 300.403115][ T5813] usb 7-1: Product: syz [ 300.474042][ T5813] usb 7-1: Manufacturer: syz [ 300.475878][ T5813] usb 7-1: SerialNumber: syz [ 300.602332][ T5813] usb 7-1: config 0 descriptor?? [ 300.624741][ T9705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.799143][ T5813] usb 7-1: selecting invalid altsetting 0 [ 302.919760][ T5813] usb 7-1: USB disconnect, device number 13 [ 303.845811][ T6342] udevd[6342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.443910][ T9730] tipc: Enabled bearer , priority 0 [ 304.484642][ T9730] syzkaller0: entered promiscuous mode [ 304.521800][ T9730] syzkaller0: entered allmulticast mode [ 304.709272][ T9732] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 304.944292][ T9730] tipc: Resetting bearer [ 305.256780][ T9728] tipc: Resetting bearer [ 305.462190][ T9728] tipc: Disabling bearer [ 306.406711][ T42] audit: type=1400 audit(1785711259.457:787): avc: denied { setattr } for pid=9736 comm="syz.1.1033" name="PACKET" dev="sockfs" ino=32517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.879864][ T9742] JFS: charset not found [ 307.261356][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 308.637784][ T39] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1035 jiffies old. [ 316.993647][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995941][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.733290][ T9757] 9pnet_fd: Insufficient options for proto=fd [ 321.825830][ T9760] openvswitch: netlink: Actions may not be safe on all matching packets [ 323.239587][ T9777] tipc: Enabled bearer , priority 0 [ 323.346900][ T9773] syzkaller0: entered promiscuous mode [ 323.350442][ T9773] syzkaller0: entered allmulticast mode [ 323.439379][ T9778] bond0: (slave sit0): refused to change device type [ 323.478736][ T9773] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 323.624362][ T9773] tipc: Resetting bearer [ 323.651001][ T9781] JFS: charset not found [ 323.687182][ T9769] tipc: Resetting bearer [ 323.834224][ T9769] tipc: Disabling bearer [ 326.465403][ T5886] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 326.708872][ T5886] usb 7-1: config 0 has no interfaces? [ 326.711035][ T5886] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 326.741809][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.821829][ T5886] usb 7-1: config 0 descriptor?? [ 328.085336][ T9791] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1049'. [ 328.189053][ T9806] loop5: detected capacity change from 0 to 7 [ 328.246722][ T9806] loop5: p3 p4 [ 328.261143][ T9806] loop5: partition table partially beyond EOD, truncated [ 330.072176][ T9] usb 7-1: USB disconnect, device number 14 [ 330.292133][ T9821] JFS: charset not found [ 330.426716][ T9820] tipc: Enabled bearer , priority 0 [ 330.514043][ T9820] syzkaller0: entered promiscuous mode [ 330.515944][ T9820] syzkaller0: entered allmulticast mode [ 330.608351][ T9799] udevd[9799]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 330.644334][ T9768] udevd[9768]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 330.716885][ T9822] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 330.898556][ T9820] tipc: Resetting bearer [ 331.055747][ T9817] tipc: Resetting bearer [ 331.359548][ T9817] tipc: Disabling bearer [ 331.887487][ T9831] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1061'. [ 331.927728][ T42] audit: type=1400 audit(1785711284.987:788): avc: denied { accept } for pid=9830 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 333.469773][ T42] audit: type=1400 audit(1785711286.527:789): avc: denied { connect } for pid=9843 comm="syz.1.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 334.248821][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.278925][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.824446][ T9855] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20001 [ 335.602378][ T9861] JFS: charset not found [ 335.986922][ T9867] kAFS: No cell specified [ 336.562411][ T9872] FAULT_INJECTION: forcing a failure. [ 336.562411][ T9872] name failslab, interval 1, probability 0, space 0, times 1 [ 336.582267][ T9872] CPU: 2 UID: 0 PID: 9872 Comm: syz.1.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.582299][ T9872] Tainted: [L]=SOFTLOCKUP [ 336.582303][ T9872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 336.582309][ T9872] Call Trace: [ 336.582313][ T9872] [ 336.582318][ T9872] dump_stack_lvl+0x100/0x190 [ 336.582346][ T9872] should_fail_ex.cold+0x5/0xa [ 336.582376][ T9872] should_failslab+0xc2/0x120 [ 336.582394][ T9872] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 336.582412][ T9872] ? security_set_bools+0x115/0x6c0 [ 336.582432][ T9872] kmemdup_noprof+0x29/0x60 [ 336.582451][ T9872] security_set_bools+0x115/0x6c0 [ 336.582467][ T9872] ? sel_commit_bools_write+0x25b/0x420 [ 336.582484][ T9872] sel_commit_bools_write+0x36d/0x420 [ 336.582499][ T9872] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 336.582519][ T9872] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 336.582534][ T9872] vfs_writev+0x5ed/0xdd0 [ 336.582562][ T9872] ? __pfx_vfs_writev+0x10/0x10 [ 336.582579][ T9872] ? rcu_read_lock_any_held+0x6a/0xa0 [ 336.582601][ T9872] ? __fget_files+0x21f/0x3d0 [ 336.582624][ T9872] ? do_writev+0x13e/0x340 [ 336.582639][ T9872] do_writev+0x13e/0x340 [ 336.582655][ T9872] ? __pfx_do_writev+0x10/0x10 [ 336.582674][ T9872] do_syscall_64+0x115/0x870 [ 336.582693][ T9872] ? clear_bhb_loop+0x40/0x90 [ 336.582707][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.582719][ T9872] RIP: 0033:0x7fd2a4d9e019 [ 336.582730][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.582740][ T9872] RSP: 002b:00007fd2a5c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 336.582752][ T9872] RAX: ffffffffffffffda RBX: 00007fd2a5025fa0 RCX: 00007fd2a4d9e019 [ 336.582759][ T9872] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 336.582765][ T9872] RBP: 00007fd2a5c51090 R08: 0000000000000000 R09: 0000000000000000 [ 336.582772][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.582778][ T9872] R13: 00007fd2a5026038 R14: 00007fd2a5025fa0 R15: 00007ffd1a24ae18 [ 336.582793][ T9872] [ 336.883318][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'. [ 337.074628][ T9885] openvswitch: netlink: Flow key attr not present in new flow. [ 337.540268][ T42] audit: type=1400 audit(1785711290.607:790): avc: denied { bind } for pid=9886 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.661285][ T9889] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 337.781624][ T9881] gretap1: entered allmulticast mode [ 338.884316][ T9900] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 338.889696][ T9902] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 339.316676][ T9902] geneve2: entered promiscuous mode [ 339.343614][ T9902] geneve2: entered allmulticast mode [ 339.458566][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.479933][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.498974][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.517946][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.525778][ T9906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.875880][ T9909] JFS: charset not found [ 341.142040][ T9918] tmpfs: Bad value for 'mpol' [ 341.636200][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 341.748533][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 341.767681][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 342.301734][ T55] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 342.314913][ T55] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 342.370059][ T9928] ceph: No mds server is up or the cluster is laggy [ 342.652433][ T55] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 343.676952][ T9946] tipc: Enabled bearer , priority 0 [ 343.703985][ T9946] syzkaller0: entered promiscuous mode [ 343.714408][ T9946] syzkaller0: entered allmulticast mode [ 343.792236][ T9946] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 343.907450][ T9951] FAULT_INJECTION: forcing a failure. [ 343.907450][ T9951] name failslab, interval 1, probability 0, space 0, times 0 [ 343.921068][ T9951] CPU: 2 UID: 0 PID: 9951 Comm: syz.2.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.921089][ T9951] Tainted: [L]=SOFTLOCKUP [ 343.921093][ T9951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.921100][ T9951] Call Trace: [ 343.921104][ T9951] [ 343.921109][ T9951] dump_stack_lvl+0x100/0x190 [ 343.921130][ T9951] should_fail_ex.cold+0x5/0xa [ 343.921150][ T9951] should_failslab+0xc2/0x120 [ 343.921166][ T9951] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 343.921182][ T9951] ? trace_kmem_cache_alloc+0xdd/0x100 [ 343.921197][ T9951] ? __kasan_slab_alloc+0x89/0x90 [ 343.921211][ T9951] ? cond_bools_copy+0x45/0xf0 [ 343.921228][ T9951] kmemdup_noprof+0x29/0x60 [ 343.921243][ T9951] cond_bools_copy+0x45/0xf0 [ 343.921256][ T9951] hashtab_duplicate+0x24a/0x5c0 [ 343.921274][ T9951] ? __pfx_cond_bools_copy+0x10/0x10 [ 343.921289][ T9951] ? __pfx_cond_bools_destroy+0x10/0x10 [ 343.921304][ T9951] cond_policydb_dup+0x155/0x750 [ 343.921319][ T9951] ? security_set_bools+0x115/0x6c0 [ 343.921333][ T9951] ? __asan_memcpy+0x3c/0x60 [ 343.921345][ T9951] security_set_bools+0x13f/0x6c0 [ 343.921360][ T9951] ? sel_commit_bools_write+0x25b/0x420 [ 343.921376][ T9951] sel_commit_bools_write+0x36d/0x420 [ 343.921391][ T9951] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 343.921407][ T9951] ? vfs_writev+0x7dc/0xdd0 [ 343.921425][ T9951] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 343.921440][ T9951] vfs_writev+0x5ed/0xdd0 [ 343.921459][ T9951] ? __pfx_vfs_writev+0x10/0x10 [ 343.921475][ T9951] ? taprio_dequeue+0x15c/0x5f0 [ 343.921503][ T9951] ? __fget_files+0x21f/0x3d0 [ 343.921518][ T9951] ? do_writev+0x13e/0x340 [ 343.921533][ T9951] do_writev+0x13e/0x340 [ 343.921549][ T9951] ? __pfx_do_writev+0x10/0x10 [ 343.921568][ T9951] do_syscall_64+0x115/0x870 [ 343.921583][ T9951] ? clear_bhb_loop+0x40/0x90 [ 343.921597][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.921608][ T9951] RIP: 0033:0x7f6faa79e019 [ 343.921618][ T9951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.921628][ T9951] RSP: 002b:00007f6fab70b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.921640][ T9951] RAX: ffffffffffffffda RBX: 00007f6faaa25fa0 RCX: 00007f6faa79e019 [ 343.921647][ T9951] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 343.921653][ T9951] RBP: 00007f6fab70b090 R08: 0000000000000000 R09: 0000000000000000 [ 343.921660][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.921666][ T9951] R13: 00007f6faaa26038 R14: 00007f6faaa25fa0 R15: 00007ffd63396328 [ 343.921680][ T9951] [ 343.925673][ T9948] tipc: Resetting bearer [ 344.189693][ T9945] tipc: Resetting bearer [ 344.443222][ T9945] tipc: Disabling bearer [ 344.526160][ T42] audit: type=1400 audit(1785711297.577:791): avc: denied { write } for pid=9944 comm="syz.4.1092" lport=56618 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 344.554866][ T42] audit: type=1400 audit(1785711297.577:792): avc: denied { setopt } for pid=9944 comm="syz.4.1092" lport=56618 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 344.612478][ T42] audit: type=1400 audit(1785711297.607:793): avc: denied { getopt } for pid=9944 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.242210][ T9967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.000055][ T5813] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 347.168884][ T5813] usb 9-1: device descriptor read/64, error -71 [ 347.403970][ T9971] usb 5-1: USB disconnect, device number 7 [ 347.438178][ T5813] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 347.636069][ T5813] usb 9-1: device descriptor read/64, error -71 [ 347.781631][ T5813] usb usb9-port1: attempt power cycle [ 347.806700][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 348.139465][ T5813] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 348.161197][ T5813] usb 9-1: device descriptor read/8, error -71 [ 348.408796][ T5813] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 348.554945][ T5813] usb 9-1: device descriptor read/8, error -71 [ 348.701158][ T5813] usb usb9-port1: unable to enumerate USB device [ 348.811266][ T9982] FAULT_INJECTION: forcing a failure. [ 348.811266][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 348.841692][ T9982] CPU: 2 UID: 0 PID: 9982 Comm: syz.0.1104 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.841713][ T9982] Tainted: [L]=SOFTLOCKUP [ 348.841717][ T9982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.841723][ T9982] Call Trace: [ 348.841728][ T9982] [ 348.841733][ T9982] dump_stack_lvl+0x100/0x190 [ 348.841755][ T9982] should_fail_ex.cold+0x5/0xa [ 348.841770][ T9982] should_failslab+0xc2/0x120 [ 348.841787][ T9982] kmem_cache_alloc_noprof+0x91/0x6a0 [ 348.841802][ T9982] ? hashtab_duplicate+0x225/0x5c0 [ 348.841824][ T9982] hashtab_duplicate+0x225/0x5c0 [ 348.841841][ T9982] ? __pfx_cond_bools_copy+0x10/0x10 [ 348.841858][ T9982] ? __pfx_cond_bools_destroy+0x10/0x10 [ 348.841872][ T9982] cond_policydb_dup+0x155/0x750 [ 348.841888][ T9982] ? security_set_bools+0x115/0x6c0 [ 348.841901][ T9982] ? __asan_memcpy+0x3c/0x60 [ 348.841913][ T9982] security_set_bools+0x13f/0x6c0 [ 348.841928][ T9982] ? sel_commit_bools_write+0x305/0x420 [ 348.841942][ T9982] ? sel_commit_bools_write+0x30e/0x420 [ 348.841959][ T9982] sel_commit_bools_write+0x36d/0x420 [ 348.841974][ T9982] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 348.841994][ T9982] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 348.842008][ T9982] vfs_writev+0x5ed/0xdd0 [ 348.842029][ T9982] ? __pfx_vfs_writev+0x10/0x10 [ 348.842045][ T9982] ? irqentry_exit+0x24d/0xa00 [ 348.842069][ T9982] ? __fget_files+0x21f/0x3d0 [ 348.842084][ T9982] ? do_writev+0x13e/0x340 [ 348.842103][ T9982] do_writev+0x13e/0x340 [ 348.842119][ T9982] ? __pfx_do_writev+0x10/0x10 [ 348.842139][ T9982] do_syscall_64+0x115/0x870 [ 348.842152][ T9982] ? clear_bhb_loop+0x40/0x90 [ 348.842166][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.842178][ T9982] RIP: 0033:0x7f969319e019 [ 348.842188][ T9982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.842199][ T9982] RSP: 002b:00007f9694027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 348.842210][ T9982] RAX: ffffffffffffffda RBX: 00007f9693425fa0 RCX: 00007f969319e019 [ 348.842217][ T9982] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 348.842223][ T9982] RBP: 00007f9694027090 R08: 0000000000000000 R09: 0000000000000000 [ 348.842230][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.842236][ T9982] R13: 00007f9693426038 R14: 00007f9693425fa0 R15: 00007ffd585c7a38 [ 348.842251][ T9982] [ 350.194149][ T9987] tipc: Enabled bearer , priority 0 [ 350.275026][ T9984] syzkaller0: entered promiscuous mode [ 350.291672][ T9984] syzkaller0: entered allmulticast mode [ 350.443754][ T9986] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 350.789270][ T9987] tipc: Resetting bearer [ 350.840419][ T9983] tipc: Resetting bearer [ 351.254688][ T9983] tipc: Disabling bearer [ 351.746093][ T8454] tipc: Node number set to 1090088600 [ 352.600709][ T5813] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 352.840325][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.871048][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.904440][ T5813] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.926299][ T5813] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.941483][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.092503][ T5813] usb 9-1: config 0 descriptor?? [ 353.270536][T10004] gfs2: error -5 reading superblock [ 353.993222][ T5813] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 354.131509][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.255294][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.525551][T10011] FAULT_INJECTION: forcing a failure. [ 354.525551][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 354.530902][T10011] CPU: 2 UID: 0 PID: 10011 Comm: syz.0.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.530929][T10011] Tainted: [L]=SOFTLOCKUP [ 354.530934][T10011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.530944][T10011] Call Trace: [ 354.530950][T10011] [ 354.530956][T10011] dump_stack_lvl+0x100/0x190 [ 354.530986][T10011] should_fail_ex.cold+0x5/0xa [ 354.531009][T10011] should_failslab+0xc2/0x120 [ 354.531032][T10011] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 354.531054][T10011] ? trace_kmem_cache_alloc+0xdd/0x100 [ 354.531075][T10011] ? __kasan_slab_alloc+0x89/0x90 [ 354.531096][T10011] ? cond_bools_copy+0x45/0xf0 [ 354.531122][T10011] kmemdup_noprof+0x29/0x60 [ 354.531142][T10011] cond_bools_copy+0x45/0xf0 [ 354.531162][T10011] hashtab_duplicate+0x24a/0x5c0 [ 354.531189][T10011] ? __pfx_cond_bools_copy+0x10/0x10 [ 354.531213][T10011] ? __pfx_cond_bools_destroy+0x10/0x10 [ 354.531237][T10011] cond_policydb_dup+0x155/0x750 [ 354.531259][T10011] ? security_set_bools+0x115/0x6c0 [ 354.531282][T10011] ? __asan_memcpy+0x3c/0x60 [ 354.531303][T10011] security_set_bools+0x13f/0x6c0 [ 354.531328][T10011] ? sel_commit_bools_write+0x25b/0x420 [ 354.531355][T10011] sel_commit_bools_write+0x36d/0x420 [ 354.531380][T10011] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 354.531411][T10011] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 354.531435][T10011] vfs_writev+0x5ed/0xdd0 [ 354.531470][T10011] ? __pfx_vfs_writev+0x10/0x10 [ 354.531496][T10011] ? rcu_read_lock_any_held+0x6a/0xa0 [ 354.531539][T10011] ? __fget_files+0x21f/0x3d0 [ 354.531565][T10011] ? do_writev+0x13e/0x340 [ 354.531590][T10011] do_writev+0x13e/0x340 [ 354.531615][T10011] ? __pfx_do_writev+0x10/0x10 [ 354.531647][T10011] do_syscall_64+0x115/0x870 [ 354.531666][T10011] ? clear_bhb_loop+0x40/0x90 [ 354.531687][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.531705][T10011] RIP: 0033:0x7f969319e019 [ 354.531718][T10011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.531734][T10011] RSP: 002b:00007f9694027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 354.531751][T10011] RAX: ffffffffffffffda RBX: 00007f9693425fa0 RCX: 00007f969319e019 [ 354.531762][T10011] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 354.531772][T10011] RBP: 00007f9694027090 R08: 0000000000000000 R09: 0000000000000000 [ 354.531781][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.531791][T10011] R13: 00007f9693426038 R14: 00007f9693425fa0 R15: 00007ffd585c7a38 [ 354.531815][T10011] [ 354.951780][ T42] audit: type=1400 audit(1785711307.957:794): avc: denied { view } for pid=10009 comm="syz.1.1113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 354.991911][T10024] netlink: 'syz.0.1116': attribute type 39 has an invalid length. [ 355.070796][ T5813] usb 9-1: reset high-speed USB device number 10 using dummy_hcd [ 355.158236][T10024] hsr_slave_0 (unregistering): left promiscuous mode [ 355.207322][T10027] tipc: Enabled bearer , priority 0 [ 355.210228][T10030] netlink: 'syz.2.1122': attribute type 4 has an invalid length. [ 355.212701][T10030] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1122'. [ 355.279087][T10027] syzkaller0: entered promiscuous mode [ 355.280819][T10027] syzkaller0: entered allmulticast mode [ 355.293867][T10027] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 355.899232][T10030] .`: renamed from bond0 (while UP) [ 355.951890][ T5886] usb 9-1: USB disconnect, device number 10 [ 356.118623][T10032] tipc: Resetting bearer [ 356.258872][T10026] tipc: Resetting bearer [ 356.345037][T10037] FAULT_INJECTION: forcing a failure. [ 356.345037][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 356.351528][T10037] CPU: 2 UID: 0 PID: 10037 Comm: syz.0.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.351555][T10037] Tainted: [L]=SOFTLOCKUP [ 356.351561][T10037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.351571][T10037] Call Trace: [ 356.351577][T10037] [ 356.351584][T10037] dump_stack_lvl+0x100/0x190 [ 356.351612][T10037] should_fail_ex.cold+0x5/0xa [ 356.351635][T10037] should_failslab+0xc2/0x120 [ 356.351656][T10037] kmem_cache_alloc_noprof+0x91/0x6a0 [ 356.351677][T10037] ? hashtab_duplicate+0x225/0x5c0 [ 356.351709][T10037] hashtab_duplicate+0x225/0x5c0 [ 356.351731][T10037] ? __pfx_cond_bools_copy+0x10/0x10 [ 356.351747][T10037] ? __pfx_cond_bools_destroy+0x10/0x10 [ 356.351762][T10037] cond_policydb_dup+0x155/0x750 [ 356.351776][T10037] ? security_set_bools+0x115/0x6c0 [ 356.351790][T10037] ? __asan_memcpy+0x3c/0x60 [ 356.351802][T10037] security_set_bools+0x13f/0x6c0 [ 356.351818][T10037] ? sel_commit_bools_write+0x25b/0x420 [ 356.351834][T10037] sel_commit_bools_write+0x36d/0x420 [ 356.351849][T10037] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 356.351869][T10037] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 356.351883][T10037] vfs_writev+0x5ed/0xdd0 [ 356.351909][T10037] ? __pfx_vfs_writev+0x10/0x10 [ 356.351926][T10037] ? rcu_read_lock_any_held+0x6a/0xa0 [ 356.351946][T10037] ? __fget_files+0x21f/0x3d0 [ 356.351961][T10037] ? do_writev+0x13e/0x340 [ 356.351976][T10037] do_writev+0x13e/0x340 [ 356.351992][T10037] ? __pfx_do_writev+0x10/0x10 [ 356.352011][T10037] do_syscall_64+0x115/0x870 [ 356.352025][T10037] ? clear_bhb_loop+0x40/0x90 [ 356.352038][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.352049][T10037] RIP: 0033:0x7f969319e019 [ 356.352059][T10037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.352070][T10037] RSP: 002b:00007f9694027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 356.352081][T10037] RAX: ffffffffffffffda RBX: 00007f9693425fa0 RCX: 00007f969319e019 [ 356.352088][T10037] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 356.352094][T10037] RBP: 00007f9694027090 R08: 0000000000000000 R09: 0000000000000000 [ 356.352101][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.352107][T10037] R13: 00007f9693426038 R14: 00007f9693425fa0 R15: 00007ffd585c7a38 [ 356.352121][T10037] [ 356.525617][T10040] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 356.528159][T10041] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 356.549077][ T42] audit: type=1400 audit(1785711309.537:795): avc: denied { mounton } for pid=10039 comm="syz.2.1125" path="/285/config" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.566412][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.569321][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.655637][ T42] audit: type=1400 audit(1785711309.717:796): avc: denied { write } for pid=10039 comm="syz.2.1125" name="strings" dev="configfs" ino=14741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.686871][T10026] tipc: Disabling bearer [ 356.701912][ T42] audit: type=1400 audit(1785711309.747:797): avc: denied { write } for pid=10039 comm="syz.2.1125" name="0x409" dev="configfs" ino=34358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.712495][T10046] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 356.712495][T10046] The task syz.0.1126 (10046) triggered the difference, watch for misbehavior. [ 356.745525][ T42] audit: type=1400 audit(1785711309.747:798): avc: denied { write } for pid=10039 comm="syz.2.1125" name="0x409" dev="configfs" ino=34358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.799722][ T42] audit: type=1400 audit(1785711309.757:799): avc: denied { write } for pid=10039 comm="syz.2.1125" name="0x409" dev="configfs" ino=34358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.886434][ T42] audit: type=1400 audit(1785711309.827:800): avc: denied { remove_name } for pid=10039 comm="syz.2.1125" name="s1" dev="configfs" ino=34359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.907275][ T42] audit: type=1400 audit(1785711309.827:801): avc: denied { rmdir } for pid=10039 comm="syz.2.1125" name="s1" dev="configfs" ino=34359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 357.109657][T10052] cgroup2: Unknown parameter 'euid' [ 357.138649][T10052] netlink: 'syz.4.1124': attribute type 10 has an invalid length. [ 357.142055][T10052] ipvlan0: entered allmulticast mode [ 357.144247][T10052] veth0_vlan: entered allmulticast mode [ 357.198122][T10052] team0: Device ipvlan0 failed to register rx_handler [ 357.249088][ T42] audit: type=1400 audit(1785711310.297:802): avc: denied { create } for pid=10053 comm="syz.1.1128" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.253138][T10055] xt_hashlimit: size too large, truncated to 1048576 [ 357.275204][ T42] audit: type=1400 audit(1785711310.297:803): avc: denied { unlink } for pid=10053 comm="syz.1.1128" name="file0" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.976011][T10068] tmpfs: Unknown parameter 'grpquota_inode·:s˜ˆëxi' [ 359.028853][T10071] FAULT_INJECTION: forcing a failure. [ 359.028853][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 359.033847][T10071] CPU: 2 UID: 0 PID: 10071 Comm: syz.2.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.033877][T10071] Tainted: [L]=SOFTLOCKUP [ 359.033883][T10071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.033894][T10071] Call Trace: [ 359.033909][T10071] [ 359.033917][T10071] dump_stack_lvl+0x100/0x190 [ 359.034101][T10071] should_fail_ex.cold+0x5/0xa [ 359.034141][T10071] should_failslab+0xc2/0x120 [ 359.034194][T10071] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 359.034226][T10071] ? trace_kmem_cache_alloc+0xdd/0x100 [ 359.034250][T10071] ? __kasan_slab_alloc+0x89/0x90 [ 359.034273][T10071] ? cond_bools_copy+0x45/0xf0 [ 359.034357][T10071] kmemdup_noprof+0x29/0x60 [ 359.034387][T10071] cond_bools_copy+0x45/0xf0 [ 359.034409][T10071] hashtab_duplicate+0x24a/0x5c0 [ 359.034438][T10071] ? __pfx_cond_bools_copy+0x10/0x10 [ 359.034463][T10071] ? __pfx_cond_bools_destroy+0x10/0x10 [ 359.034488][T10071] cond_policydb_dup+0x155/0x750 [ 359.034512][T10071] ? security_set_bools+0x115/0x6c0 [ 359.034536][T10071] ? __asan_memcpy+0x3c/0x60 [ 359.034556][T10071] security_set_bools+0x13f/0x6c0 [ 359.034581][T10071] ? sel_commit_bools_write+0x25b/0x420 [ 359.034607][T10071] sel_commit_bools_write+0x36d/0x420 [ 359.034630][T10071] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 359.034662][T10071] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 359.034683][T10071] vfs_writev+0x5ed/0xdd0 [ 359.034751][T10071] ? __pfx_vfs_writev+0x10/0x10 [ 359.034778][T10071] ? rcu_read_lock_any_held+0x6a/0xa0 [ 359.034839][T10071] ? __fget_files+0x21f/0x3d0 [ 359.034873][T10071] ? do_writev+0x13e/0x340 [ 359.034896][T10071] do_writev+0x13e/0x340 [ 359.034923][T10071] ? __pfx_do_writev+0x10/0x10 [ 359.034956][T10071] do_syscall_64+0x115/0x870 [ 359.035069][T10071] ? clear_bhb_loop+0x40/0x90 [ 359.035094][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.035112][T10071] RIP: 0033:0x7f6faa79e019 [ 359.035128][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.035145][T10071] RSP: 002b:00007f6fab70b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 359.035173][T10071] RAX: ffffffffffffffda RBX: 00007f6faaa25fa0 RCX: 00007f6faa79e019 [ 359.035185][T10071] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 359.035195][T10071] RBP: 00007f6fab70b090 R08: 0000000000000000 R09: 0000000000000000 [ 359.035206][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.035216][T10071] R13: 00007f6faaa26038 R14: 00007f6faaa25fa0 R15: 00007ffd63396328 [ 359.035242][T10071] [ 359.815951][T10090] netlink: 'syz.1.1140': attribute type 2 has an invalid length. [ 360.086324][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 360.141870][T10090] : entered promiscuous mode [ 360.172444][T10092] tipc: Enabled bearer , priority 0 [ 360.232455][T10093] syzkaller0: entered promiscuous mode [ 360.269286][T10093] syzkaller0: entered allmulticast mode [ 361.313755][T10082] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 361.383090][T10096] tipc: Resetting bearer [ 361.422974][T10081] tipc: Resetting bearer [ 361.473008][T10100] WARNING! power/level is deprecated; use power/control instead [ 361.489562][T10081] tipc: Disabling bearer [ 361.607168][ T55] tipc: Node number set to 196285153 [ 361.675391][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.146477][T10106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.205789][T10108] binder: BINDER_SET_CONTEXT_MGR already set [ 362.223975][T10108] binder: 10107:10108 ioctl 4018620d 200000000480 returned -16 [ 362.233414][T10109] binder: 10107:10109 ioctl c0306201 200000000040 returned -22 [ 362.282525][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 362.282563][ T42] audit: type=1400 audit(1785711315.347:805): avc: denied { ioctl } for pid=10107 comm="syz.0.1145" path="socket:[33221]" dev="sockfs" ino=33221 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.331463][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.539151][T10113] openvswitch: netlink: Tunnel attr 16 has unexpected len 16 expected 0 [ 362.576078][ T42] audit: type=1400 audit(1785711315.637:806): avc: denied { mounton } for pid=10111 comm="syz.2.1147" path="/295/file0" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 362.588726][T10114] fuse: Bad value for 'user_id' [ 362.590492][T10114] fuse: Bad value for 'user_id' [ 363.197184][T10129] FAULT_INJECTION: forcing a failure. [ 363.197184][T10129] name failslab, interval 1, probability 0, space 0, times 0 [ 363.226990][T10129] CPU: 0 UID: 0 PID: 10129 Comm: syz.2.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.227012][T10129] Tainted: [L]=SOFTLOCKUP [ 363.227016][T10129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.227022][T10129] Call Trace: [ 363.227028][T10129] [ 363.227032][T10129] dump_stack_lvl+0x100/0x190 [ 363.227055][T10129] should_fail_ex.cold+0x5/0xa [ 363.227071][T10129] should_failslab+0xc2/0x120 [ 363.227088][T10129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 363.227103][T10129] ? hashtab_duplicate+0x225/0x5c0 [ 363.227125][T10129] hashtab_duplicate+0x225/0x5c0 [ 363.227142][T10129] ? __pfx_cond_bools_copy+0x10/0x10 [ 363.227157][T10129] ? __pfx_cond_bools_destroy+0x10/0x10 [ 363.227173][T10129] cond_policydb_dup+0x155/0x750 [ 363.227188][T10129] ? security_set_bools+0x115/0x6c0 [ 363.227203][T10129] ? __asan_memcpy+0x3c/0x60 [ 363.227217][T10129] security_set_bools+0x13f/0x6c0 [ 363.227232][T10129] ? sel_commit_bools_write+0x25b/0x420 [ 363.227248][T10129] sel_commit_bools_write+0x36d/0x420 [ 363.227264][T10129] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 363.227283][T10129] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 363.227297][T10129] vfs_writev+0x5ed/0xdd0 [ 363.227320][T10129] ? __pfx_vfs_writev+0x10/0x10 [ 363.227337][T10129] ? rcu_read_lock_any_held+0x6a/0xa0 [ 363.227358][T10129] ? __fget_files+0x21f/0x3d0 [ 363.227374][T10129] ? do_writev+0x13e/0x340 [ 363.227388][T10129] do_writev+0x13e/0x340 [ 363.227404][T10129] ? __pfx_do_writev+0x10/0x10 [ 363.227424][T10129] do_syscall_64+0x115/0x870 [ 363.227439][T10129] ? clear_bhb_loop+0x40/0x90 [ 363.227453][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.227464][T10129] RIP: 0033:0x7f6faa79e019 [ 363.227474][T10129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.227485][T10129] RSP: 002b:00007f6fab70b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 363.227496][T10129] RAX: ffffffffffffffda RBX: 00007f6faaa25fa0 RCX: 00007f6faa79e019 [ 363.227503][T10129] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 363.227510][T10129] RBP: 00007f6fab70b090 R08: 0000000000000000 R09: 0000000000000000 [ 363.227516][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.227522][T10129] R13: 00007f6faaa26038 R14: 00007f6faaa25fa0 R15: 00007ffd63396328 [ 363.227537][T10129] [ 363.372653][T10137] binder: BINDER_SET_CONTEXT_MGR already set [ 363.374593][T10137] binder: 10136:10137 ioctl 4018620d 200000000480 returned -16 [ 364.081356][T10141] syz_tun: entered allmulticast mode [ 364.134292][ T42] audit: type=1400 audit(1785711317.197:807): avc: denied { write } for pid=10118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.253922][T10144] lo: entered allmulticast mode [ 364.312150][ T42] audit: type=1326 audit(1785711317.377:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.0.1155" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f969319e019 code=0x0 [ 364.330794][ T42] audit: type=1400 audit(1785711317.387:809): avc: denied { ioctl } for pid=10139 comm="syz.4.1154" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.564109][T10148] /dev/sg0: Can't lookup blockdev [ 364.847135][T10139] syz_tun: left allmulticast mode [ 365.820506][ T42] audit: type=1400 audit(1785711318.887:810): avc: denied { read write } for pid=5731 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 365.825229][ T42] audit: type=1400 audit(1785711318.887:811): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 366.378600][ T42] audit: type=1800 audit(1785711319.437:812): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.1157" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 366.536278][ T42] audit: type=1400 audit(1785711319.597:813): avc: denied { firmware_load } for pid=10152 comm="syz.2.1157" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 366.541858][ T42] audit: type=1400 audit(1785711319.607:814): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 366.594313][T10158] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 366.594509][T10158] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 366.726901][T10158] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 367.289759][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 367.289807][ T42] audit: type=1400 audit(1785711320.347:819): avc: denied { ioctl } for pid=10160 comm="syz.0.1158" path="/dev/vmci" dev="devtmpfs" ino=709 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.326388][ T42] audit: type=1400 audit(1785711320.377:820): avc: denied { search } for pid=10157 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.343717][ T42] audit: type=1400 audit(1785711320.377:821): avc: denied { search } for pid=10157 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.351506][ T42] audit: type=1400 audit(1785711320.377:822): avc: denied { search } for pid=10157 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.359333][ T42] audit: type=1400 audit(1785711320.377:823): avc: denied { getattr } for pid=10157 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=6855 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.368661][ T42] audit: type=1400 audit(1785711320.377:824): avc: denied { write } for pid=10157 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.377054][ T42] audit: type=1400 audit(1785711320.377:825): avc: denied { remove_name } for pid=10157 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=6855 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.393851][T10167] SET target dimension over the limit! [ 367.401041][ T42] audit: type=1400 audit(1785711320.377:826): avc: denied { unlink } for pid=10157 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=6855 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.469040][ T42] audit: type=1400 audit(1785711320.427:827): avc: denied { create } for pid=10166 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.477030][ T42] audit: type=1400 audit(1785711320.427:828): avc: denied { write } for pid=10166 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.597003][T10171] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 367.681645][T10171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.737059][ T8766] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 367.771251][T10171] bond1: (slave geneve2): making interface the new active one [ 367.790255][T10171] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 368.104145][ T8766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 368.110147][ T8766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25096, setting to 1024 [ 368.129644][ T8766] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 368.150516][ T8766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.336415][ T8766] usb 7-1: config 0 descriptor?? [ 368.603812][ T8766] usbhid 7-1:0.0: can't add hid device: -71 [ 368.626350][ T8766] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 368.762313][ T8766] usb 7-1: USB disconnect, device number 15 [ 368.921058][T10168] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 369.105366][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 369.753933][ T8766] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 372.169842][T10195] tipc: Enabled bearer , priority 0 [ 372.181118][T10195] syzkaller0: entered promiscuous mode [ 372.183292][T10195] syzkaller0: entered allmulticast mode [ 372.357545][T10195] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 372.426593][T10195] tipc: Resetting bearer [ 372.455703][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 372.455721][ T42] audit: type=1400 audit(1785711325.507:869): avc: denied { prog_run } for pid=10204 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 372.466611][T10194] tipc: Resetting bearer [ 372.472579][ T42] audit: type=1400 audit(1785711325.507:870): avc: denied { module_request } for pid=10204 comm="syz.1.1172" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 372.498003][ T42] audit: type=1400 audit(1785711325.557:871): avc: denied { read write } for pid=10197 comm="syz.4.1170" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 372.507263][T10194] tipc: Disabling bearer [ 372.509108][ T42] audit: type=1400 audit(1785711325.557:872): avc: denied { open } for pid=10197 comm="syz.4.1170" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 372.543013][ T42] audit: type=1400 audit(1785711325.607:873): avc: denied { sys_module } for pid=10204 comm="syz.1.1172" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 372.713030][T10214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=10214 comm=syz.4.1173 [ 372.766551][ T42] audit: type=1400 audit(1785711325.797:874): avc: denied { create } for pid=10215 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.071161][ T42] audit: type=1400 audit(1785711326.127:875): avc: denied { ioctl } for pid=10223 comm="syz.4.1176" path="socket:[35022]" dev="sockfs" ino=35022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.576142][ T42] audit: type=1400 audit(1785711326.637:876): avc: denied { write } for pid=10223 comm="syz.4.1176" name="ip6_flowlabel" dev="proc" ino=4026533900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 373.704927][ T42] audit: type=1400 audit(1785711326.767:877): avc: denied { mounton } for pid=10230 comm="syz.2.1178" path="/300/sys" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 373.745759][ T42] audit: type=1400 audit(1785711326.777:878): avc: denied { mount } for pid=10230 comm="syz.2.1178" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 373.805783][T10231] musb-hdrc pcspkr: error -ENXIO: IRQ mc not found [ 374.213299][T10233] tipc: Enabled bearer , priority 0 [ 374.244860][T10233] syzkaller0: entered promiscuous mode [ 374.258943][T10233] syzkaller0: entered allmulticast mode [ 374.332385][T10233] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 374.584306][T10236] FAULT_INJECTION: forcing a failure. [ 374.584306][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 374.590813][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz.0.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.590833][T10236] Tainted: [L]=SOFTLOCKUP [ 374.590837][T10236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.590843][T10236] Call Trace: [ 374.590848][T10236] [ 374.590853][T10236] dump_stack_lvl+0x100/0x190 [ 374.590874][T10236] should_fail_ex.cold+0x5/0xa [ 374.590889][T10236] should_failslab+0xc2/0x120 [ 374.590904][T10236] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 374.590919][T10236] ? __alloc_skb+0x140/0x710 [ 374.590982][T10236] __alloc_skb+0x140/0x710 [ 374.590995][T10236] ? __alloc_skb+0x5b7/0x710 [ 374.591007][T10236] ? __pfx___alloc_skb+0x10/0x10 [ 374.591021][T10236] ? __fib6_drop_pcpu_from.part.0+0x1e4/0x480 [ 374.591048][T10236] inet6_rt_notify+0x1d2/0x4c0 [ 374.591067][T10236] fib6_del+0xf7a/0x1790 [ 374.591083][T10236] ? __pfx_fib6_del+0x10/0x10 [ 374.591094][T10236] ? fib6_clean_node+0x247/0x5d0 [ 374.591106][T10236] ? fib6_ifdown+0x9a/0x7e0 [ 374.591120][T10236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.591143][T10236] ? fib6_ifdown+0xcd/0x7e0 [ 374.591160][T10236] fib6_clean_node+0x424/0x5d0 [ 374.591173][T10236] ? __pfx_fib6_clean_node+0x10/0x10 [ 374.591191][T10236] fib6_walk_continue+0x451/0x8d0 [ 374.591211][T10236] fib6_walk+0x182/0x370 [ 374.591222][T10236] fib6_clean_tree+0xdc/0x120 [ 374.591232][T10236] ? __pfx_fib6_ifdown+0x10/0x10 [ 374.591247][T10236] ? __pfx_fib6_clean_tree+0x10/0x10 [ 374.591260][T10236] ? __pfx_fib6_clean_node+0x10/0x10 [ 374.591272][T10236] ? __pfx_fib6_ifdown+0x10/0x10 [ 374.591291][T10236] ? __pfx_fib6_ifdown+0x10/0x10 [ 374.591306][T10236] __fib6_clean_all+0x107/0x2d0 [ 374.591320][T10236] rt6_disable_ip+0x2a6/0x980 [ 374.591347][T10236] ? __pfx_rt6_disable_ip+0x10/0x10 [ 374.591367][T10236] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 374.591379][T10236] ? irqentry_exit+0x24d/0xa00 [ 374.591393][T10236] ? lockdep_hardirqs_on+0x78/0x100 [ 374.591407][T10236] ? irqentry_exit+0x24d/0xa00 [ 374.591429][T10236] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 374.591449][T10236] ? addrconf_notify+0x649/0x1ba0 [ 374.591472][T10236] addrconf_notify+0x7c6/0x1ba0 [ 374.591491][T10236] ? __pfx_tls_dev_event+0x10/0x10 [ 374.591509][T10236] ? __pfx_addrconf_notify+0x10/0x10 [ 374.591524][T10236] ? ip6mr_device_event+0x1c4/0x230 [ 374.591541][T10236] notifier_call_chain+0x99/0x3f0 [ 374.591562][T10236] call_netdevice_notifiers_info+0xbe/0x110 [ 374.591581][T10236] netif_set_mtu_ext+0x48b/0x7b0 [ 374.591596][T10236] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 374.591613][T10236] ? __lock_acquire+0x49f/0x1a40 [ 374.591634][T10236] netif_set_mtu+0x9c/0x130 [ 374.591647][T10236] ? __pfx_netif_set_mtu+0x10/0x10 [ 374.591665][T10236] ? mark_held_locks+0x40/0x70 [ 374.591677][T10236] ? full_name_hash+0xbc/0x100 [ 374.591692][T10236] dev_set_mtu+0xb2/0x260 [ 374.591707][T10236] dev_ifsioc+0x21b/0x1fc0 [ 374.591723][T10236] ? __pfx_dev_ifsioc+0x10/0x10 [ 374.591735][T10236] ? __pfx___mutex_lock+0x10/0x10 [ 374.591753][T10236] ? dev_load+0x8e/0x240 [ 374.591765][T10236] ? dev_load+0x8e/0x240 [ 374.591785][T10236] dev_ioctl+0x342/0x10e0 [ 374.591799][T10236] sock_do_ioctl+0x1a0/0x280 [ 374.591817][T10236] ? __pfx_sock_do_ioctl+0x10/0x10 [ 374.591836][T10236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.591853][T10236] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 374.591875][T10236] sock_ioctl+0x599/0x6b0 [ 374.591886][T10236] ? __pfx_sock_ioctl+0x10/0x10 [ 374.591896][T10236] ? hook_file_ioctl_common+0x140/0x440 [ 374.591912][T10236] ? selinux_file_ioctl+0x13b/0x290 [ 374.591928][T10236] ? selinux_file_ioctl+0xb6/0x290 [ 374.591946][T10236] ? __pfx_sock_ioctl+0x10/0x10 [ 374.591957][T10236] __x64_sys_ioctl+0x18e/0x210 [ 374.591973][T10236] do_syscall_64+0x115/0x870 [ 374.591986][T10236] ? clear_bhb_loop+0x40/0x90 [ 374.592000][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.592012][T10236] RIP: 0033:0x7f969319e019 [ 374.592022][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.592032][T10236] RSP: 002b:00007f9693fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.592044][T10236] RAX: ffffffffffffffda RBX: 00007f9693426180 RCX: 00007f969319e019 [ 374.592051][T10236] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 374.592058][T10236] RBP: 00007f9693fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 374.592064][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.592071][T10236] R13: 00007f9693426218 R14: 00007f9693426180 R15: 00007ffd585c7a38 [ 374.592085][T10236] [ 374.863298][T10236] tipc: Resetting bearer [ 374.875512][T10243] loop5: detected capacity change from 0 to 7 [ 374.889062][T10232] tipc: Resetting bearer [ 374.924880][T10243] Dev loop5: unable to read RDB block 7 [ 374.926948][T10243] loop5: AHDI p1 p2 p3 p4 [ 374.929277][T10232] tipc: Disabling bearer [ 374.929732][T10243] loop5: partition table partially beyond EOD, truncated [ 374.941205][T10243] loop5: p1 start 1601398130 is beyond EOD, truncated [ 374.943193][T10243] loop5: p2 start 1702059890 is beyond EOD, truncated [ 374.945039][T10243] loop5: p3 start 1280 is beyond EOD, truncated [ 375.042931][T10238] vhci_hcd vhci_hcd.0: remove, state 4 [ 375.044956][T10238] usb usb38: USB disconnect, device number 1 [ 375.147923][ T12] vhci_hcd vhci_hcd.0: stop threads [ 375.149650][ T12] vhci_hcd vhci_hcd.0: release socket [ 375.151425][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 375.260662][ T8253] vhci_hcd vhci_hcd.0: stop threads [ 375.263024][ T8253] vhci_hcd vhci_hcd.0: release socket [ 375.265252][ T8253] vhci_hcd vhci_hcd.0: disconnect device [ 375.269773][ T13] vhci_hcd vhci_hcd.0: stop threads [ 375.271809][ T13] vhci_hcd vhci_hcd.0: release socket [ 375.277159][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 375.345996][ T13] vhci_hcd vhci_hcd.0: stop threads [ 375.354462][ T13] vhci_hcd vhci_hcd.0: release socket [ 375.356545][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 375.413139][ T13] vhci_hcd vhci_hcd.0: stop threads [ 375.415066][ T13] vhci_hcd vhci_hcd.0: release socket [ 375.433304][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 375.441124][ T13] vhci_hcd vhci_hcd.0: stop threads [ 375.442991][ T13] vhci_hcd vhci_hcd.0: release socket [ 375.454428][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 375.498107][ T13] vhci_hcd vhci_hcd.0: stop threads [ 375.500005][ T13] vhci_hcd vhci_hcd.0: release socket [ 375.518457][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 375.530497][ T13] vhci_hcd vhci_hcd.0: stop threads [ 375.532352][ T13] vhci_hcd vhci_hcd.0: release socket [ 375.566171][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 375.589170][T10238] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 375.801453][T10238] vhci_hcd vhci_hcd.0: remove, state 4 [ 375.822491][T10238] usb usb37: USB disconnect, device number 1 [ 376.625656][ T13] vhci_hcd vhci_hcd.0: stop threads [ 376.626049][T10238] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 376.651249][ T13] vhci_hcd vhci_hcd.0: release socket [ 376.666682][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 376.692115][ T13] vhci_hcd vhci_hcd.0: stop threads [ 376.708823][ T13] vhci_hcd vhci_hcd.0: release socket [ 376.759224][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 376.761944][ T13] vhci_hcd vhci_hcd.0: stop threads [ 376.791696][ T13] vhci_hcd vhci_hcd.0: release socket [ 376.816602][ T13] ================================================================== [ 376.819686][ T13] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 376.822822][ T13] Read of size 4 at addr ffff88802baf88f0 by task kworker/u32:1/13 [ 376.826775][ T13] [ 376.827991][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.828012][ T13] Tainted: [L]=SOFTLOCKUP [ 376.828018][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.828030][ T13] Workqueue: usbip_event event_handler [ 376.828087][ T13] Call Trace: [ 376.828094][ T13] [ 376.828101][ T13] dump_stack_lvl+0x100/0x190 [ 376.828120][ T13] print_report+0x13d/0x4b0 [ 376.828153][ T13] ? __virt_addr_valid+0x239/0x430 [ 376.828184][ T13] ? vhci_cleanup_unlink_list+0x44/0x456 [ 376.828209][ T13] kasan_report+0xdf/0x1c0 [ 376.828227][ T13] ? vhci_cleanup_unlink_list+0x44/0x456 [ 376.828253][ T13] vhci_cleanup_unlink_list+0x44/0x456 [ 376.828280][ T13] vhci_shutdown_connection.cold+0x165/0x37c [ 376.828307][ T13] event_handler+0x216/0x570 [ 376.828321][ T13] process_one_work+0xa23/0x1940 [ 376.828354][ T13] ? __pfx_process_one_work+0x10/0x10 [ 376.828374][ T13] ? __pfx_event_handler+0x10/0x10 [ 376.828391][ T13] worker_thread+0x5ef/0xe50 [ 376.828407][ T13] ? kthread+0x13a/0x450 [ 376.828423][ T13] ? __pfx_worker_thread+0x10/0x10 [ 376.828438][ T13] kthread+0x370/0x450 [ 376.828453][ T13] ? __pfx_kthread+0x10/0x10 [ 376.828469][ T13] ret_from_fork+0x72b/0xd50 [ 376.828500][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 376.828521][ T13] ? __switch_to+0x800/0x10f0 [ 376.828539][ T13] ? __pfx_kthread+0x10/0x10 [ 376.828554][ T13] ret_from_fork_asm+0x1a/0x30 [ 376.828582][ T13] [ 376.828586][ T13] [ 376.887082][ T13] Allocated by task 1: [ 376.888620][ T13] kasan_save_stack+0x30/0x50 [ 376.890491][ T13] kasan_save_track+0x14/0x30 [ 376.892374][ T13] __kasan_kmalloc+0xaa/0xb0 [ 376.894199][ T13] __kmalloc_noprof+0x322/0x820 [ 376.896122][ T13] __usb_create_hcd+0x5e/0xac0 [ 376.898025][ T13] vhci_hcd_probe+0xf3/0x4e0 [ 376.899868][ T13] platform_probe+0x106/0x1d0 [ 376.901745][ T13] really_probe+0x241/0xa60 [ 376.903543][ T13] __driver_probe_device+0x20e/0x450 [ 376.905608][ T13] driver_probe_device+0x4a/0x140 [ 376.907581][ T13] __device_attach_driver+0x1df/0x320 [ 376.909690][ T13] bus_for_each_drv+0x159/0x1e0 [ 376.911622][ T13] __device_attach+0x1e4/0x4d0 [ 376.913528][ T13] device_initial_probe+0xaf/0xd0 [ 376.915525][ T13] bus_probe_device+0x64/0x160 [ 376.917390][ T13] device_add+0x121d/0x1970 [ 376.919186][ T13] platform_device_add+0x35a/0x800 [ 376.921157][ T13] platform_device_register_full+0x5cf/0x830 [ 376.923411][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 376.925230][ T13] do_one_initcall+0x11d/0x700 [ 376.927058][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 376.929102][ T13] kernel_init+0x1f/0x1e0 [ 376.930828][ T13] ret_from_fork+0x72b/0xd50 [ 376.932640][ T13] ret_from_fork_asm+0x1a/0x30 [ 376.934435][ T13] [ 376.935358][ T13] Freed by task 10238: [ 376.936902][ T13] kasan_save_stack+0x30/0x50 [ 376.938193][ T13] kasan_save_track+0x14/0x30 [ 376.939815][ T13] kasan_save_free_info+0x3b/0x70 [ 376.941801][ T13] __kasan_slab_free+0x5f/0x80 [ 376.943692][ T13] kfree+0x22b/0x6c0 [ 376.945247][ T13] usb_put_hcd+0x149/0x1f0 [ 376.947015][ T13] vhci_hcd_remove+0x107/0x1b0 [ 376.948899][ T13] platform_remove+0x5f/0x80 [ 376.950746][ T13] device_remove+0xcb/0x180 [ 376.952519][ T13] device_release_driver_internal+0x44e/0x620 [ 376.954895][ T13] unbind_store+0xf8/0x110 [ 376.956643][ T13] drv_attr_store+0x74/0xb0 [ 376.958418][ T13] sysfs_kf_write+0xf2/0x150 [ 376.960264][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 376.962329][ T13] vfs_write+0x6ac/0x1050 [ 376.964026][ T13] ksys_write+0x12a/0x250 [ 376.965718][ T13] do_syscall_64+0x115/0x870 [ 376.967552][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.969856][ T13] [ 376.970808][ T13] Last potentially related work creation: [ 376.973009][ T13] kasan_save_stack+0x30/0x50 [ 376.974854][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 376.976896][ T13] insert_work+0x36/0x230 [ 376.978582][ T13] __queue_work+0x9bc/0x12b0 [ 376.980441][ T13] queue_work_on+0x1a9/0x1e0 [ 376.982222][ T13] usb_hcd_giveback_urb+0x330/0x4a0 [ 376.984290][ T13] unlink1+0x418/0x510 [ 376.985899][ T13] usb_hcd_unlink_urb+0x131/0x210 [ 376.987881][ T13] usb_kill_urb+0x121/0x320 [ 376.989671][ T13] hub_quiesce+0x1e9/0x320 [ 376.991413][ T13] hub_suspend+0x4ab/0x9e0 [ 376.993161][ T13] usb_suspend_both+0x288/0x950 [ 376.994965][ T13] usb_runtime_suspend+0x49/0x120 [ 376.996880][ T13] __rpm_callback+0xc8/0x620 [ 376.998577][ T13] rpm_callback+0x16a/0x1b0 [ 377.000312][ T13] rpm_suspend+0x2f4/0x11a0 [ 377.002115][ T13] __pm_runtime_suspend+0xba/0x1a0 [ 377.004135][ T13] usb_runtime_idle+0x7e/0x90 [ 377.005976][ T13] rpm_idle+0x322/0x790 [ 377.007617][ T13] pm_runtime_work+0x120/0x150 [ 377.009489][ T13] process_one_work+0xa23/0x1940 [ 377.011460][ T13] worker_thread+0x5ef/0xe50 [ 377.013266][ T13] kthread+0x370/0x450 [ 377.014888][ T13] ret_from_fork+0x72b/0xd50 [ 377.016685][ T13] ret_from_fork_asm+0x1a/0x30 [ 377.018556][ T13] [ 377.019508][ T13] Second to last potentially related work creation: [ 377.022052][ T13] kasan_save_stack+0x30/0x50 [ 377.023904][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 377.025930][ T13] insert_work+0x36/0x230 [ 377.027627][ T13] __queue_work+0x9bc/0x12b0 [ 377.029431][ T13] queue_work_on+0x1a9/0x1e0 [ 377.031265][ T13] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 377.033301][ T13] usb_hcd_submit_urb+0xab7/0x2150 [ 377.035315][ T13] usb_submit_urb+0x827/0x19b0 [ 377.037189][ T13] usb_start_wait_urb+0x10e/0x580 [ 377.039151][ T13] usb_control_msg+0x328/0x4b0 [ 377.041056][ T13] hub_ext_port_status+0x152/0x600 [ 377.043070][ T13] hub_event+0xc48/0x4a60 [ 377.044762][ T13] process_one_work+0xa23/0x1940 [ 377.046713][ T13] worker_thread+0x5ef/0xe50 [ 377.048506][ T13] kthread+0x370/0x450 [ 377.050108][ T13] ret_from_fork+0x72b/0xd50 [ 377.051923][ T13] ret_from_fork_asm+0x1a/0x30 [ 377.053793][ T13] [ 377.054749][ T13] The buggy address belongs to the object at ffff88802baf8000 [ 377.054749][ T13] which belongs to the cache kmalloc-8k of size 8192 [ 377.060104][ T13] The buggy address is located 2288 bytes inside of [ 377.060104][ T13] freed 8192-byte region [ffff88802baf8000, ffff88802bafa000) [ 377.065403][ T13] [ 377.066352][ T13] The buggy address belongs to the physical page: [ 377.068845][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2baf8 [ 377.072248][ T13] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 377.075499][ T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 377.078378][ T13] page_type: f5(slab) [ 377.079963][ T13] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 377.083281][ T13] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 377.086453][ T13] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 377.089760][ T13] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 377.093037][ T13] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 377.096304][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 377.099656][ T13] page dumped because: kasan: bad access detected [ 377.102117][ T13] page_owner tracks the page as allocated [ 377.104248][ T13] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8582382811, free_ts 0 [ 377.111671][ T13] post_alloc_hook+0xfd/0x120 [ 377.113463][ T13] get_page_from_freelist+0xf48/0x3530 [ 377.115546][ T13] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 377.117753][ T13] new_slab+0xa2/0x640 [ 377.119299][ T13] refill_objects+0xe3/0x410 [ 377.121033][ T13] __pcs_replace_empty_main+0x376/0x680 [ 377.123167][ T13] __kmalloc_cache_noprof+0x479/0x6c0 [ 377.125140][ T13] uhci_start+0x296/0x1200 [ 377.126815][ T13] usb_add_hcd.cold+0xae3/0x1158 [ 377.128724][ T13] usb_hcd_pci_probe+0x46e/0xcb0 [ 377.130593][ T13] local_pci_probe+0xdd/0x1b0 [ 377.132357][ T13] pci_call_probe+0x176/0x800 [ 377.134100][ T13] pci_device_probe+0x1cd/0x370 [ 377.135916][ T13] really_probe+0x241/0xa60 [ 377.137603][ T13] __driver_probe_device+0x20e/0x450 [ 377.139654][ T13] driver_probe_device+0x4a/0x140 [ 377.141551][ T13] page_owner free stack trace missing [ 377.143649][ T13] [ 377.144584][ T13] Memory state around the buggy address: [ 377.146769][ T13] ffff88802baf8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.149880][ T13] ffff88802baf8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.152902][ T13] >ffff88802baf8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.155914][ T13] ^ [ 377.158883][ T13] ffff88802baf8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.162009][ T13] ffff88802baf8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.164584][ T13] ================================================================== [ 377.330387][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 377.332717][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.336082][ T13] Tainted: [L]=SOFTLOCKUP [ 377.337437][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.340556][ T13] Workqueue: usbip_event event_handler [ 377.342258][ T13] Call Trace: [ 377.343323][ T13] [ 377.344260][ T13] dump_stack_lvl+0x100/0x190 [ 377.345737][ T13] vpanic+0x552/0x970 [ 377.347014][ T13] ? __pfx_vpanic+0x10/0x10 [ 377.348443][ T13] ? mark_held_locks+0x40/0x70 [ 377.349972][ T13] ? vhci_cleanup_unlink_list+0x44/0x456 [ 377.351746][ T13] panic+0xd1/0xe0 [ 377.352966][ T13] ? __pfx_panic+0x10/0x10 [ 377.354368][ T13] ? vhci_cleanup_unlink_list+0x44/0x456 [ 377.356127][ T13] ? preempt_schedule_common+0x42/0xc0 [ 377.357815][ T13] ? check_panic_on_warn+0x1f/0x90 [ 377.359415][ T13] check_panic_on_warn.cold+0x19/0x34 [ 377.361118][ T13] end_report.part.0+0x3a/0x90 [ 377.362609][ T13] kasan_report.cold+0xe/0x18 [ 377.364098][ T13] ? vhci_cleanup_unlink_list+0x44/0x456 [ 377.365841][ T13] vhci_cleanup_unlink_list+0x44/0x456 [ 377.367546][ T13] vhci_shutdown_connection.cold+0x165/0x37c [ 377.369412][ T13] event_handler+0x216/0x570 [ 377.370887][ T13] process_one_work+0xa23/0x1940 [ 377.372453][ T13] ? __pfx_process_one_work+0x10/0x10 [ 377.374125][ T13] ? __pfx_event_handler+0x10/0x10 [ 377.375716][ T13] worker_thread+0x5ef/0xe50 [ 377.377174][ T13] ? kthread+0x13a/0x450 [ 377.378511][ T13] ? __pfx_worker_thread+0x10/0x10 [ 377.380149][ T13] kthread+0x370/0x450 [ 377.381426][ T13] ? __pfx_kthread+0x10/0x10 [ 377.382880][ T13] ret_from_fork+0x72b/0xd50 [ 377.384351][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 377.385963][ T13] ? __switch_to+0x800/0x10f0 [ 377.387446][ T13] ? __pfx_kthread+0x10/0x10 [ 377.388899][ T13] ret_from_fork_asm+0x1a/0x30 [ 377.390449][ T13] [ 377.391982][ T13] Kernel Offset: disabled [ 377.393334][ T13] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:55:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a2fef5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90000107560 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b6fe225 R15=ffffffff85a2fe90 RIP=ffffffff85a2ff1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9693f556c8 CR3=000000002be98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000b200 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd585c7f26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd585c7f26 00007ffd585c7f2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96932355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f969323562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9693235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9693235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540 RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1c9fc7c000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fef0ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055f6dbb38370 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ca06b07f0 00007f1ca06b07e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffff00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a2a2a20 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a5536b5c18a4a 2a2a2a2a4159434e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 000055f6dbb38370 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58455f485449575f 4e57575f44497b76 6e65242d6e77772f 64692d79622f6b73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e203b65222c332a 6367627020670813 021056021812135a 4b0b44154d2f1816 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffdff777f7f7f7f 7f6f6e7f767f7e7f 6f7f7f5f7d775bdf ffbfff7f7f7ffeff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6dbb3ae30 000055f6dbb27aa0 000055f6db8ec4d0 000055f6dbb2c5e0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696400644e2d4953 2f4554584500484f 49534e4554574544 485449575f242d57 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8c402600 RDI=ffffffff8c402640 RBP=ffff88806a628418 RSP=ffffc90000648ef8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bbb4a50 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003efb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce5283006 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce5283006 00007ffce528300c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd723a355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd723a3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd723a35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd723a35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eed2540 RSI=ffffffff81b57ece RDI=ffff88801eed2540 RBP=0000000000000003 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f6dbc75678 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e616c78760001 000a801200280000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1a24b306 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1a24b306 00007ffd1a24b30c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a4e355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a4e3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a4e35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a4e35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0500030005000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a4ff25f8 00007fd2a4ff25c8 00007fd2a4ff2600 00007fd2a4ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000