last executing test programs: 4.430494738s ago: executing program 0 (id=542): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 1.40642925s ago: executing program 3 (id=554): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7f) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.405666956s ago: executing program 1 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5207, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x800) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) syz_emit_ethernet(0x14c, &(0x7f0000000480)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0xcfd}, {}, {0x8}], @ipv4=@dccp={{0x28, 0x4, 0x0, 0x6, 0x12e, 0x66, 0x0, 0x8, 0x21, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x7, [{@rand_addr=0x64010101, 0x3}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x0, 0xd, "c400942d2cb237c19b53e6"}, @timestamp_addr={0x44, 0x1c, 0x3e, 0x1, 0x1, [{@multicast1, 0x7}, {@multicast1, 0x7}, {@broadcast, 0x10000}]}, @timestamp_prespec={0x44, 0x44, 0xaa, 0x3, 0xe, [{@broadcast, 0xc}, {@private=0xa010100, 0xc}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x180d}, {@multicast2, 0x4}, {@broadcast, 0x101}, {@multicast2, 0x401}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8001}, {@empty, 0x1}]}, @end]}}, {{0x4e23, 0x4e23, 0x4, 0x1, 0xb, 0x0, 0x0, 0xa, 0x4, "e3479a", 0x5, "efeb86"}, "99f60255c06772e537dc22eb8a5c816aeb332b425de320e50cfcfd9b450022718b671e73e11cc6e92653de1afbf23515a902a3d1d7ee916d3f96aa7eca38de3e15608dd432d89dd1f3086103025e7ec62afd7add153f18ac6ef52eede47e4282126f23bdeb0970e98ec120b0111ddaaf7741df0344c31b0bb6d0bb868f49"}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffee0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0xf0}}, 0x8090) 1.405379276s ago: executing program 0 (id=557): pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 1.329733245s ago: executing program 1 (id=558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x0, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (fail_nth: 39) 1.329098432s ago: executing program 0 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000134000480300001800b0001006f626a726566000020000280080003400000000c0900040073797a310000000008000140000000010900010073797a30000000000900020073797a32"], 0x88}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095dd353ef72434c5d456cf78a8592a0b475d515e8b3ced8bcaf7391ca51bc0da979a4eb05f4c8fb1712ff9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r4, 0xe, 0x1, 0x1, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r5, 0x2f, 0x0, 0x0, @void, @value=r6, @void, @void, r7}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xbe29}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r4, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.328991362s ago: executing program 1 (id=560): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x13, 0x8, 0x29, 0x0}}, 0xfffffffffffffe49) recvmsg(r2, &(0x7f0000000bc0)={&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f00000008c0)=""/226, 0xe2}], 0x3, &(0x7f0000000ac0)=""/229, 0xe5}, 0x40000010) 1.160343134s ago: executing program 0 (id=563): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 1.120987319s ago: executing program 0 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x70, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x42, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb13"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xb9) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'freezer'}]}, 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x8, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffa, 0x1, 0x8, 0xffffffff, 0xfffffffe, 0x3, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) 1.029754318s ago: executing program 3 (id=565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x10000000000001) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000200)=0x7) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000fd8000/0x4000)=nil, r8, 0x200000a, 0x11, r6, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) r9 = socket$tipc(0x1e, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000140)="360f7883b81e2626660fc7354f79f4650606b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x2a}], 0x1, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xd000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r12, 0xae80, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f0000000180)={0x7ff, 0x1, 0xfa, 0x34, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 938.694235ms ago: executing program 0 (id=566): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x769, "2eb99e7fdd6dd1faeaade2f3bf713f9a29d89a2ae6604715da60620afa6d3ba7"}) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60cf, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r10) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 785.996785ms ago: executing program 3 (id=567): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x2, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0x7, &(0x7f0000000240)={0x6, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x6, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x0, 0x80000000, 0x400, 0x8, 0x7, 0x2, 0x200000000003, 0x400000000000000a}) 730.208434ms ago: executing program 3 (id=568): pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 729.819782ms ago: executing program 3 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)={0x5c, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@remote, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x7, 0xd7, 0x500, 0x3, 0x403fcdb4427a01a9, r3}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0xc05, 0x70bd25, 0x25dfdbfd, {0xa, 0x1, 0x0, 0xfe, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000040) syz_emit_ethernet(0x42, &(0x7f0000000cc0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @empty, @private1, @local, @loopback}}}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1a, 0x4) 669.579767ms ago: executing program 3 (id=570): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xd}, {0x9, 0xa}, {0xe, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x9, 0x6, 0x77, 0x9, 0x800, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1000}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xa0, 0xfffffff8, 0x4, 0x9, 0x4}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x55}, 0x24008014) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 419.675974ms ago: executing program 1 (id=571): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020000103000000000000000f0200002000000001000000000800040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) poll(0x0, 0x0, 0x7) (async) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="05001301000000000040800000400bfdffffffffaf0001001e000001f79b3259a6138ef7f818f50e30546515c23683755778769775e2c5460b9d93df77044d585e003fe92347b29fa62744ff3f6108a35a87038de8d1f07a"], 0x44}}, 0x40080) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/net\x00') (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) fremovexattr(r6, &(0x7f0000000100)=@known='security.selinux\x00') (async) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="fc00000019000100000000000200000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d80900000000000000000000000000000000000000000000010000000000000044000500fe880000000000000000000000000001000000023200000002000000fc0100000000000000000000000000040135000004000000f7ffffff00000000000000003f50e646e5e4d99016c04b"], 0xfc}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES64=r3, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x2000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) read$rfkill(r0, &(0x7f0000000400), 0x8) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000300), 0x10) read$FUSE(r0, &(0x7f0000001c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500), 0x88424, &(0x7f0000003c40)=ANY=[@ANYBLOB="75737271756f74615f696e6f64655f686172646c69000800003968f72c6e6f737761702c7569643d", @ANYRESHEX=r11, @ANYBLOB=',size=m4,quota,nr_inodes=tt2740t%e,subj_type=\x00,\x00']) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0xb, @mcast1, 0x6b7c}, 0x1c) (async, rerun: 32) read$midi(r0, &(0x7f0000000040)=""/52, 0x34) (async, rerun: 32) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT=r10, @ANYRES32=r0, @ANYBLOB="a3ab1870d584945ca55f27a0d7f51b3ced720d34f84ba0f9840d16721feff15b8d5ba455ffb3440b5ea65a0054763826abec384e2c0b47505f0e7878b89054234a3ab5c4cf1650ce1727bf8048f06568c824b0ec408f3bd7e56161e70b26fa064022bf519fd9d351a5d972bd12775d9124c49f0bb2b6288cb7d068f97729bf4fbc0d0454c48b1cdc69950f76b542c528397293ccdf3e785186e3adeb59e1a28f8defa44259049718e7670082a11f19f8610dc4d96baffb5e92c7056bd34471f3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="1800130200000000000000000002000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184a00000700000000000000000000003da43000ffffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r12, @fallback=0x2c, r0, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x207, 0x29a6, 0x5}, 0x10, 0x0, r0, 0x0, &(0x7f00000003c0)=[r0, r0, r0, r13, r0, r0], 0x0, 0x10, 0xb}, 0x94) 418.6437ms ago: executing program 1 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="71fc62906abf5431e950d10ba2861129e1d18530cbd6a3e59ea4ecefbaf960057737847f4c86438b890e682fac44848e681bedd1ca66120e17eede5f10974be47d3bb38e06f43611f0ad444bbb6f3a4d7ae333895d3d9c23fee4e1420f38b26d82290579e2f39396657432ee4d672f46d6bade70dd5fe4f7b9552bbe23df5506cd3069ea0a832f0fb631a6c7f8a495", 0x8f}, {&(0x7f0000000240)="a64500c673694f060ecf0ba168310afd027b0ac9b88800a8f9b17ebd2099bec9be06f0dfacff34ce211dada48b6085816ff75ad7313f6cca52721e274d7ad52b5d1366260f4203635ab3c245e0d2d31f99bbcd75612c43a6fb0228359cf3592ad2ec0ec7f6e5120e964856494c0da7ea2daeab4983e199a38056a74d24c1e3bed948f3ae4b7a7e4b65fcb71435c04135", 0x90}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @broadcast}}}], 0x20}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffef9, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x80, 0x10, 0x0, 0x4, 0xff, 0x0, 0xa00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000021}, 0x61e466b44fe0618f) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) (async) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="71fc62906abf5431e950d10ba2861129e1d18530cbd6a3e59ea4ecefbaf960057737847f4c86438b890e682fac44848e681bedd1ca66120e17eede5f10974be47d3bb38e06f43611f0ad444bbb6f3a4d7ae333895d3d9c23fee4e1420f38b26d82290579e2f39396657432ee4d672f46d6bade70dd5fe4f7b9552bbe23df5506cd3069ea0a832f0fb631a6c7f8a495", 0x8f}, {&(0x7f0000000240)="a64500c673694f060ecf0ba168310afd027b0ac9b88800a8f9b17ebd2099bec9be06f0dfacff34ce211dada48b6085816ff75ad7313f6cca52721e274d7ad52b5d1366260f4203635ab3c245e0d2d31f99bbcd75612c43a6fb0228359cf3592ad2ec0ec7f6e5120e964856494c0da7ea2daeab4983e199a38056a74d24c1e3bed948f3ae4b7a7e4b65fcb71435c04135", 0x90}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @broadcast}}}], 0x20}, 0x20040000) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffef9, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x80, 0x10, 0x0, 0x4, 0xff, 0x0, 0xa00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000021}, 0x61e466b44fe0618f) (async) 371.783353ms ago: executing program 1 (id=573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0xfa0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 290.114031ms ago: executing program 2 (id=575): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0fd000000001f030000000000002e030200000000002604fdffffff000ec3141800000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 289.870779ms ago: executing program 2 (id=576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x10000000000001) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000200)=0x7) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000fd8000/0x4000)=nil, r8, 0x200000a, 0x11, r6, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000140)="360f7883b81e2626660fc7354f79f4650606b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x2a}], 0x1, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xd000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 59.44402ms ago: executing program 2 (id=577): pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 59.284224ms ago: executing program 2 (id=578): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r1, r1, 0x2f}, 0x20) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@fallback=r1, r3, 0x2f, 0x2038, 0x4, @void, @void, @value=r4}, 0x20) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 388.024µs ago: executing program 2 (id=579): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}]}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001114013f27bd7000fcdbdf2508004a0002000000080003000a00000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x420740, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r3, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200000, 0x108) 0s ago: executing program 2 (id=580): get_mempolicy(0x0, 0x0, 0xffffffffffffff1d, &(0x7f0000219000/0x1000)=nil, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4000000010000104000000000008000000f40000", @ANYRES32=0x0, @ANYBLOB="9d26000000000000140003006d61637674617030000000000000000004002b80050027"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) listen(r3, 0x108) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x90) r6 = openat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0xa, 0x602, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x588}) recvmmsg(0xffffffffffffffff, 0x0, 0x4a, 0x2022, &(0x7f0000007700)={0x0, 0x3938700}) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) timer_settime(r7, 0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 3 (id=581): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) write$cgroup_devices(r2, &(0x7f0000000280)={'c', ' *:* ', 'w\x00'}, 0x8) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0xe1, 0x0, 0x8000000b}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003240)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 55.096085][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.100678][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.103523][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.108488][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.111821][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.116383][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.119822][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.124242][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.179632][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.185763][ T5743] Bluetooth: hci2: command tx timeout [ 55.185762][ T62] Bluetooth: hci3: command tx timeout [ 55.186101][ T62] Bluetooth: hci0: command tx timeout [ 55.187269][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.194401][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.201457][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.204470][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.208688][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.217933][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.223599][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.240547][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.264834][ T62] Bluetooth: hci1: command tx timeout [ 55.277714][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.292853][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.301684][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.304783][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.323474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.325906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.331258][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.347171][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.350146][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.363767][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.366160][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.392913][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.429688][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.451328][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.453576][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.461703][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.477235][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.479499][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.497620][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.518465][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.521442][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.533913][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.536945][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.746200][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.757710][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.799402][ T5733] veth0_vlan: entered promiscuous mode [ 55.813984][ T5733] veth1_vlan: entered promiscuous mode [ 55.818883][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.821600][ T5729] veth0_vlan: entered promiscuous mode [ 55.833440][ T5729] veth1_vlan: entered promiscuous mode [ 55.849305][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.869651][ T5733] veth0_macvtap: entered promiscuous mode [ 55.877961][ T5729] veth0_macvtap: entered promiscuous mode [ 55.888622][ T5733] veth1_macvtap: entered promiscuous mode [ 55.891330][ T5729] veth1_macvtap: entered promiscuous mode [ 55.895070][ T5730] veth0_vlan: entered promiscuous mode [ 55.906610][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.917312][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.926756][ T5730] veth1_vlan: entered promiscuous mode [ 55.934193][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.939751][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.952659][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.955814][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.959618][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.967214][ T5741] veth0_vlan: entered promiscuous mode [ 55.977759][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.989556][ T5741] veth1_vlan: entered promiscuous mode [ 55.996868][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.001701][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.012447][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.016394][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.047714][ T1264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.051624][ T1264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.075384][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.076024][ T5730] veth0_macvtap: entered promiscuous mode [ 56.077883][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.091421][ T5741] veth0_macvtap: entered promiscuous mode [ 56.096318][ T5730] veth1_macvtap: entered promiscuous mode [ 56.100237][ T5741] veth1_macvtap: entered promiscuous mode [ 56.121041][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.134175][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.134236][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.140035][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.143270][ T1264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.154246][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.155321][ T1264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.163759][ T1264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.168912][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.180388][ T1264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.188246][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.198743][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.202061][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.224064][ T170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.230160][ T170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.246326][ T170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.249233][ T170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.263089][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.270454][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.309863][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.313563][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.329576][ T1264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.338067][ T1264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.356158][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.358091][ T5885] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.359646][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.577963][ T5907] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 56.583496][ T5907] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 56.640326][ T5919] tmpfs: Bad value for 'mpol' [ 56.653238][ T5901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5901 comm=syz.3.7 [ 56.711760][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 56.718383][ T5937] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 56.727037][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 56.733578][ T5937] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 56.800473][ T5926] netlink: 'syz.2.16': attribute type 32 has an invalid length. [ 56.899597][ T5962] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24'. [ 56.902860][ T5962] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 56.957999][ T5968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5968 comm=syz.0.27 [ 56.966360][ T5968] dummy0: entered promiscuous mode [ 56.970394][ T5968] dummy0: left promiscuous mode [ 56.993314][ T5970] Zero length message leads to an empty skb [ 57.045241][ T5821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.047857][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'. [ 57.161166][ T5982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32'. [ 57.214669][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 57.219445][ T5821] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 57.222692][ T5821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.226310][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.229547][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.232646][ T5821] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.238129][ T5821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.241176][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.264868][ T62] Bluetooth: hci2: command tx timeout [ 57.274809][ T62] Bluetooth: hci0: command tx timeout [ 57.275419][ T5731] Bluetooth: hci3: command tx timeout [ 57.345296][ T5731] Bluetooth: hci1: command tx timeout [ 57.451839][ T5821] usb 6-1: GET_CAPABILITIES returned 0 [ 57.454406][ T5821] usbtmc 6-1:16.0: can't read capabilities [ 57.666643][ T5949] [U] ^@ [ 57.670853][ T5821] usb 6-1: USB disconnect, device number 2 [ 57.813272][ T5999] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 57.815844][ T5999] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.820846][ T5999] vhci_hcd vhci_hcd.0: Device attached [ 57.824309][ T6003] usbip_core: unknown command [ 57.830328][ T6003] vhci_hcd: unknown pdu 1937341035 [ 57.832607][ T6003] usbip_core: unknown command [ 57.835532][ T1264] vhci_hcd vhci_hcd.1: stop threads [ 57.837368][ T1264] vhci_hcd vhci_hcd.1: release socket [ 57.839159][ T1264] vhci_hcd vhci_hcd.1: disconnect device [ 57.847192][ T6008] mmap: syz.0.38 (6008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.851980][ T6007] geneve1: entered allmulticast mode [ 57.858426][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 57.861394][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 57.940408][ T41] kauditd_printk_skb: 102 callbacks suppressed [ 57.940423][ T41] audit: type=1400 audit(1777609734.295:194): avc: denied { mount } for pid=6011 comm="syz.2.41" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.953356][ T41] audit: type=1400 audit(1777609734.305:195): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.993885][ T41] audit: type=1400 audit(1777609734.345:196): avc: denied { setopt } for pid=6024 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.998741][ T6029] IPVS: nq: FWM 3 0x00000003 - no destination available [ 57.999004][ T5834] IPVS: starting estimator thread 0... [ 58.003385][ T6026] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 58.081241][ T41] audit: type=1400 audit(1777609734.435:197): avc: denied { create } for pid=6035 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.092203][ T41] audit: type=1400 audit(1777609734.445:198): avc: denied { write } for pid=6035 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.099220][ T6031] IPVS: using max 45 ests per chain, 108000 per kthread [ 58.166492][ T41] audit: type=1400 audit(1777609734.525:199): avc: granted { setsecparam } for pid=6044 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 58.271333][ T41] audit: type=1400 audit(1777609734.625:200): avc: denied { create } for pid=6046 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.276217][ T6047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 58.280038][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.283258][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 58.287414][ T41] audit: type=1400 audit(1777609734.645:201): avc: denied { ioctl } for pid=6046 comm="syz.0.52" path="socket:[8078]" dev="sockfs" ino=8078 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.295392][ T41] audit: type=1400 audit(1777609734.645:202): avc: denied { watch watch_reads } for pid=6046 comm="syz.0.52" path="/17" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.343258][ T6050] vhci_hcd: connection closed [ 58.345740][ T60] vhci_hcd vhci_hcd.0: stop threads [ 58.349063][ T60] vhci_hcd vhci_hcd.0: release socket [ 58.350761][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 58.365891][ T41] audit: type=1400 audit(1777609734.715:203): avc: denied { create } for pid=6052 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.400459][ T6056] team0: Device ipvlan1 failed to register rx_handler [ 58.462302][ T6062] warning: `syz.1.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.523945][ T6067] Illegal XDP return value 710066484 on prog (id 71) dev N/A, expect packet loss! [ 58.760793][ T6083] netlink: 92 bytes leftover after parsing attributes in process `syz.1.63'. [ 58.870178][ T6084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'. [ 59.285722][ T6096] FAULT_INJECTION: forcing a failure. [ 59.285722][ T6096] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 59.290691][ T6096] CPU: 3 UID: 0 PID: 6096 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT(full) [ 59.290706][ T6096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.290712][ T6096] Call Trace: [ 59.290717][ T6096] [ 59.290722][ T6096] dump_stack_lvl+0x100/0x190 [ 59.290745][ T6096] should_fail_ex.cold+0x5/0xa [ 59.290758][ T6096] ? prepare_alloc_pages+0x16d/0x5f0 [ 59.290772][ T6096] should_fail_alloc_page+0xeb/0x140 [ 59.290785][ T6096] prepare_alloc_pages+0x1f0/0x5f0 [ 59.290800][ T6096] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 59.290818][ T6096] ? stack_depot_save_flags+0x27/0x9d0 [ 59.290834][ T6096] ? stack_depot_save_flags+0x27/0x9d0 [ 59.290853][ T6096] ? kasan_save_stack+0x3f/0x50 [ 59.290868][ T6096] ? kasan_save_stack+0x30/0x50 [ 59.290883][ T6096] ? kasan_save_track+0x14/0x30 [ 59.290898][ T6096] ? __kasan_kmalloc+0xaa/0xb0 [ 59.290913][ T6096] ? __kvmalloc_node_noprof+0x360/0xa00 [ 59.290929][ T6096] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 59.290942][ T6096] ? mmu_topup_memory_caches+0xbc/0x170 [ 59.290958][ T6096] ? kvm_mmu_load+0xd6/0x23e0 [ 59.290970][ T6096] ? vcpu_run+0x39f4/0x5ca0 [ 59.290984][ T6096] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 59.290998][ T6096] ? kvm_vcpu_ioctl+0x730/0x1720 [ 59.291008][ T6096] ? __x64_sys_ioctl+0x18e/0x210 [ 59.291019][ T6096] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 59.291045][ T6096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.291060][ T6096] ? policy_nodemask+0xed/0x4f0 [ 59.291073][ T6096] alloc_pages_mpol+0x1fb/0x540 [ 59.291084][ T6096] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 59.291097][ T6096] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 59.291112][ T6096] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 59.291126][ T6096] alloc_pages_noprof+0x1a/0x160 [ 59.291140][ T6096] get_free_pages_noprof+0x10/0xb0 [ 59.291150][ T6096] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 59.291166][ T6096] mmu_topup_memory_caches+0xbc/0x170 [ 59.291182][ T6096] kvm_mmu_load+0xd6/0x23e0 [ 59.291195][ T6096] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 59.291205][ T6096] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 59.291217][ T6096] ? __pfx_kvm_mmu_load+0x10/0x10 [ 59.291230][ T6096] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 59.291243][ T6096] ? kvm_check_and_inject_events+0x961/0x1070 [ 59.291257][ T6096] ? record_steal_time+0x3d0/0xbc0 [ 59.291269][ T6096] vcpu_run+0x39f4/0x5ca0 [ 59.291289][ T6096] ? __pfx_vcpu_run+0x10/0x10 [ 59.291308][ T6096] ? rcu_is_watching+0x12/0xc0 [ 59.291326][ T6096] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 59.291341][ T6096] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 59.291360][ T6096] kvm_vcpu_ioctl+0x730/0x1720 [ 59.291373][ T6096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.291384][ T6096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.291397][ T6096] ? do_vfs_ioctl+0x226/0x13e0 [ 59.291407][ T6096] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 59.291418][ T6096] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.291437][ T6096] ? __fget_files+0x215/0x3d0 [ 59.291450][ T6096] ? hook_file_ioctl_common+0x149/0x410 [ 59.291469][ T6096] ? selinux_file_ioctl+0x13b/0x290 [ 59.291482][ T6096] ? selinux_file_ioctl+0xb6/0x290 [ 59.291495][ T6096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.291507][ T6096] __x64_sys_ioctl+0x18e/0x210 [ 59.291519][ T6096] do_syscall_64+0x10b/0xf80 [ 59.291531][ T6096] ? clear_bhb_loop+0x40/0x90 [ 59.291544][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.291554][ T6096] RIP: 0033:0x7f90b5d9cdd9 [ 59.291564][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.291573][ T6096] RSP: 002b:00007f90b6cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.291630][ T6096] RAX: ffffffffffffffda RBX: 00007f90b6015fa0 RCX: 00007f90b5d9cdd9 [ 59.291637][ T6096] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 59.291642][ T6096] RBP: 00007f90b6cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 59.291648][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.291654][ T6096] R13: 00007f90b6016038 R14: 00007f90b6015fa0 R15: 00007ffc8b917ca8 [ 59.291667][ T6096] [ 59.305439][ T5835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.346121][ T5731] Bluetooth: hci3: command tx timeout [ 59.349157][ T62] Bluetooth: hci0: command tx timeout [ 59.349186][ T5743] Bluetooth: hci2: command tx timeout [ 59.435056][ T5731] Bluetooth: hci1: command tx timeout [ 59.508353][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.512836][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.519186][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.524243][ T5835] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.531513][ T6101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.532530][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.534822][ T6101] IPv6: NLM_F_CREATE should be set when creating new route [ 59.540932][ T5835] usb 5-1: config 0 descriptor?? [ 59.638977][ T6111] syzkaller1: entered promiscuous mode [ 59.640839][ T6111] syzkaller1: entered allmulticast mode [ 59.912565][ T6123] ip6t_REJECT: ECHOREPLY is not supported [ 59.963081][ T5835] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x2 [ 59.965628][ T5835] plantronics 0003:047F:FFFF.0002: report_id 0 is invalid [ 59.967846][ T5835] plantronics 0003:047F:FFFF.0002: item 0 2 1 8 parsing failed [ 59.971189][ T5835] plantronics 0003:047F:FFFF.0002: parse failed [ 59.973245][ T5835] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 60.161364][ T40] usb 5-1: USB disconnect, device number 2 [ 60.195017][ T6126] overlayfs: unescaped trailing colons in lowerdir mount option. [ 60.198572][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 60.286313][ T6129] fuse: fd is not a fuse device [ 60.546878][ T6133] FAULT_INJECTION: forcing a failure. [ 60.546878][ T6133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.552489][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.1.79 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.552506][ T6133] Tainted: [L]=SOFTLOCKUP [ 60.552510][ T6133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.552516][ T6133] Call Trace: [ 60.552520][ T6133] [ 60.552525][ T6133] dump_stack_lvl+0x100/0x190 [ 60.552543][ T6133] should_fail_ex.cold+0x5/0xa [ 60.552557][ T6133] ? prepare_alloc_pages+0x16d/0x5f0 [ 60.552571][ T6133] should_fail_alloc_page+0xeb/0x140 [ 60.552585][ T6133] prepare_alloc_pages+0x1f0/0x5f0 [ 60.552599][ T6133] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 60.552616][ T6133] ? stack_depot_save_flags+0x27/0x9d0 [ 60.552634][ T6133] ? stack_depot_save_flags+0x27/0x9d0 [ 60.552652][ T6133] ? kasan_save_stack+0x3f/0x50 [ 60.552668][ T6133] ? kasan_save_stack+0x30/0x50 [ 60.552683][ T6133] ? kasan_save_track+0x14/0x30 [ 60.552698][ T6133] ? __kasan_kmalloc+0xaa/0xb0 [ 60.552713][ T6133] ? __kvmalloc_node_noprof+0x360/0xa00 [ 60.552728][ T6133] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 60.552740][ T6133] ? mmu_topup_memory_caches+0xbc/0x170 [ 60.552755][ T6133] ? kvm_mmu_load+0xd6/0x23e0 [ 60.552767][ T6133] ? vcpu_run+0x39f4/0x5ca0 [ 60.552787][ T6133] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 60.552801][ T6133] ? kvm_vcpu_ioctl+0x730/0x1720 [ 60.552811][ T6133] ? __x64_sys_ioctl+0x18e/0x210 [ 60.552826][ T6133] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 60.552856][ T6133] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.552871][ T6133] ? policy_nodemask+0xed/0x4f0 [ 60.552884][ T6133] alloc_pages_mpol+0x1fb/0x540 [ 60.552896][ T6133] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 60.552908][ T6133] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 60.552923][ T6133] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 60.552938][ T6133] alloc_pages_noprof+0x1a/0x160 [ 60.552951][ T6133] get_free_pages_noprof+0x10/0xb0 [ 60.552962][ T6133] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 60.552978][ T6133] mmu_topup_memory_caches+0xbc/0x170 [ 60.552993][ T6133] kvm_mmu_load+0xd6/0x23e0 [ 60.553007][ T6133] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 60.553017][ T6133] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 60.553029][ T6133] ? __pfx_kvm_mmu_load+0x10/0x10 [ 60.553042][ T6133] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 60.553055][ T6133] ? kvm_check_and_inject_events+0x961/0x1070 [ 60.553070][ T6133] ? record_steal_time+0x3d0/0xbc0 [ 60.553082][ T6133] vcpu_run+0x39f4/0x5ca0 [ 60.553102][ T6133] ? __pfx_vcpu_run+0x10/0x10 [ 60.553121][ T6133] ? rcu_is_watching+0x12/0xc0 [ 60.553140][ T6133] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 60.553155][ T6133] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 60.553175][ T6133] kvm_vcpu_ioctl+0x730/0x1720 [ 60.553187][ T6133] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 60.553199][ T6133] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.553212][ T6133] ? do_vfs_ioctl+0x226/0x13e0 [ 60.553222][ T6133] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 60.553233][ T6133] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 60.553252][ T6133] ? __fget_files+0x215/0x3d0 [ 60.553264][ T6133] ? hook_file_ioctl_common+0x149/0x410 [ 60.553283][ T6133] ? selinux_file_ioctl+0x13b/0x290 [ 60.553295][ T6133] ? selinux_file_ioctl+0xb6/0x290 [ 60.553309][ T6133] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 60.553321][ T6133] __x64_sys_ioctl+0x18e/0x210 [ 60.553332][ T6133] do_syscall_64+0x10b/0xf80 [ 60.553344][ T6133] ? clear_bhb_loop+0x40/0x90 [ 60.553357][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.553367][ T6133] RIP: 0033:0x7fdd54f9cdd9 [ 60.553377][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.553412][ T6133] RSP: 002b:00007fdd55dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.553423][ T6133] RAX: ffffffffffffffda RBX: 00007fdd55215fa0 RCX: 00007fdd54f9cdd9 [ 60.553429][ T6133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 60.553435][ T6133] RBP: 00007fdd55dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 60.553441][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.553447][ T6133] R13: 00007fdd55216038 R14: 00007fdd55215fa0 R15: 00007ffee3ebd198 [ 60.553460][ T6133] [ 60.933140][ T6147] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 60.937884][ T6147] SELinux: failed to load policy [ 60.984273][ T6155] fuse: Bad value for 'fd' [ 61.057933][ T6165] team0: Device gtp0 is up. Set it down before adding it as a team port [ 61.162946][ T6174] tmpfs: Bad value for 'mpol' [ 61.321911][ T6182] random: crng reseeded on system resumption [ 61.324887][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.425830][ T5731] Bluetooth: hci2: command tx timeout [ 61.434737][ T5731] Bluetooth: hci3: command tx timeout [ 61.504810][ T5731] Bluetooth: hci0: command tx timeout [ 61.517020][ T5731] Bluetooth: hci1: command tx timeout [ 61.594704][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.747393][ T58] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.750489][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.753196][ T58] usb 7-1: Product: syz [ 61.754779][ T58] usb 7-1: Manufacturer: syz [ 61.756331][ T58] usb 7-1: SerialNumber: syz [ 61.761146][ T58] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.333636][ T6229] FAULT_INJECTION: forcing a failure. [ 62.333636][ T6229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.339761][ T6229] CPU: 3 UID: 0 PID: 6229 Comm: syz.3.103 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.339791][ T6229] Tainted: [L]=SOFTLOCKUP [ 62.339797][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.339806][ T6229] Call Trace: [ 62.339812][ T6229] [ 62.339818][ T6229] dump_stack_lvl+0x100/0x190 [ 62.339843][ T6229] should_fail_ex.cold+0x5/0xa [ 62.339863][ T6229] ? prepare_alloc_pages+0x16d/0x5f0 [ 62.339885][ T6229] should_fail_alloc_page+0xeb/0x140 [ 62.339903][ T6229] prepare_alloc_pages+0x1f0/0x5f0 [ 62.339925][ T6229] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 62.339950][ T6229] ? stack_depot_save_flags+0x27/0x9d0 [ 62.339981][ T6229] ? kasan_save_stack+0x3f/0x50 [ 62.340004][ T6229] ? kasan_save_stack+0x30/0x50 [ 62.340026][ T6229] ? kasan_save_track+0x14/0x30 [ 62.340047][ T6229] ? __kasan_kmalloc+0xaa/0xb0 [ 62.340069][ T6229] ? __kvmalloc_node_noprof+0x360/0xa00 [ 62.340093][ T6229] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 62.340112][ T6229] ? mmu_topup_memory_caches+0xbc/0x170 [ 62.340134][ T6229] ? kvm_mmu_load+0xd6/0x23e0 [ 62.340152][ T6229] ? vcpu_run+0x39f4/0x5ca0 [ 62.340171][ T6229] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 62.340192][ T6229] ? kvm_vcpu_ioctl+0x730/0x1720 [ 62.340207][ T6229] ? __x64_sys_ioctl+0x18e/0x210 [ 62.340222][ T6229] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 62.340262][ T6229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.340284][ T6229] ? policy_nodemask+0xed/0x4f0 [ 62.340302][ T6229] alloc_pages_mpol+0x1fb/0x540 [ 62.340321][ T6229] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 62.340340][ T6229] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 62.340362][ T6229] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 62.340383][ T6229] alloc_pages_noprof+0x1a/0x160 [ 62.340402][ T6229] get_free_pages_noprof+0x10/0xb0 [ 62.340418][ T6229] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 62.340442][ T6229] mmu_topup_memory_caches+0xbc/0x170 [ 62.340465][ T6229] kvm_mmu_load+0xd6/0x23e0 [ 62.340485][ T6229] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 62.340501][ T6229] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 62.340520][ T6229] ? __pfx_kvm_mmu_load+0x10/0x10 [ 62.340539][ T6229] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 62.340558][ T6229] ? kvm_check_and_inject_events+0x961/0x1070 [ 62.340580][ T6229] ? record_steal_time+0x3d0/0xbc0 [ 62.340598][ T6229] vcpu_run+0x39f4/0x5ca0 [ 62.340629][ T6229] ? __pfx_vcpu_run+0x10/0x10 [ 62.340658][ T6229] ? rcu_is_watching+0x12/0xc0 [ 62.340686][ T6229] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 62.340708][ T6229] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 62.340754][ T6229] kvm_vcpu_ioctl+0x730/0x1720 [ 62.340780][ T6229] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.340798][ T6229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.340817][ T6229] ? do_vfs_ioctl+0x226/0x13e0 [ 62.340833][ T6229] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.340850][ T6229] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.340878][ T6229] ? __fget_files+0x215/0x3d0 [ 62.340896][ T6229] ? hook_file_ioctl_common+0x149/0x410 [ 62.340926][ T6229] ? selinux_file_ioctl+0x13b/0x290 [ 62.340944][ T6229] ? selinux_file_ioctl+0xb6/0x290 [ 62.340965][ T6229] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.340984][ T6229] __x64_sys_ioctl+0x18e/0x210 [ 62.341001][ T6229] do_syscall_64+0x10b/0xf80 [ 62.341018][ T6229] ? clear_bhb_loop+0x40/0x90 [ 62.341038][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.341054][ T6229] RIP: 0033:0x7f7efc79cdd9 [ 62.341067][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.341081][ T6229] RSP: 002b:00007f7efd728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.341097][ T6229] RAX: ffffffffffffffda RBX: 00007f7efca15fa0 RCX: 00007f7efc79cdd9 [ 62.341107][ T6229] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 62.341116][ T6229] RBP: 00007f7efd728090 R08: 0000000000000000 R09: 0000000000000000 [ 62.341125][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.341134][ T6229] R13: 00007f7efca16038 R14: 00007f7efca15fa0 R15: 00007ffdfffe1ee8 [ 62.341156][ T6229] [ 62.376590][ T6232] raw_sendmsg: syz.0.104 forgot to set AF_INET. Fix it! [ 62.647959][ T6252] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 62.654275][ T6251] SELinux: truncated policydb string identifier [ 62.658405][ T6251] SELinux: failed to load policy [ 62.688845][ T6255] comedi: valid board names for 8255 driver are: [ 62.691734][ T6255] 8255 [ 62.692655][ T6255] comedi: valid board names for vmk80xx driver are: [ 62.694998][ T6255] vmk80xx [ 62.696063][ T6255] comedi: valid board names for usbduxsigma driver are: [ 62.696078][ T6255] usbduxsigma [ 62.696082][ T6255] comedi: valid board names for usbduxfast driver are: [ 62.696088][ T6255] usbduxfast [ 62.696092][ T6255] comedi: valid board names for usbdux driver are: [ 62.696097][ T6255] usbdux [ 62.696101][ T6255] comedi: valid board names for ni6501 driver are: [ 62.696106][ T6255] ni6501 [ 62.717397][ T6255] comedi: valid board names for dt9812 driver are: [ 62.720234][ T6255] dt9812 [ 62.722186][ T6255] comedi: valid board names for ni_labpc_cs driver are: [ 62.727883][ T6255] ni_labpc_cs [ 62.729474][ T6255] comedi: valid board names for ni_daq_700 driver are: [ 62.732387][ T6255] ni_daq_700 [ 62.733694][ T6255] comedi: valid board names for labpc_pci driver are: [ 62.736720][ T6255] labpc_pci [ 62.737903][ T6255] comedi: valid board names for adl_pci9118 driver are: [ 62.740255][ T6255] pci9118dg [ 62.741390][ T6255] pci9118hg [ 62.742444][ T6255] pci9118hr [ 62.743562][ T6255] comedi: valid board names for 8255_pci driver are: [ 62.747758][ T6255] 8255_pci [ 62.748799][ T6255] comedi: valid board names for s526 driver are: [ 62.750846][ T6255] s526 [ 62.751821][ T6255] comedi: valid board names for multiq3 driver are: [ 62.753907][ T6255] multiq3 [ 62.755583][ T6255] comedi: valid board names for pcmuio driver are: [ 62.757694][ T6255] pcmuio48 [ 62.758776][ T6255] pcmuio96 [ 62.759800][ T6255] comedi: valid board names for pcmmio driver are: [ 62.761856][ T6255] pcmmio [ 62.762857][ T6255] comedi: valid board names for pcmda12 driver are: [ 62.765023][ T6255] pcmda12 [ 62.766128][ T6255] comedi: valid board names for pcmad driver are: [ 62.768421][ T6255] pcmad12 [ 62.769828][ T6255] pcmad16 [ 62.770923][ T6255] comedi: valid board names for ni_labpc driver are: [ 62.773107][ T6255] lab-pc-1200 [ 62.774241][ T6255] lab-pc-1200ai [ 62.775625][ T6255] lab-pc+ [ 62.776625][ T6255] comedi: valid board names for atmio16 driver are: [ 62.779228][ T6255] atmio16 [ 62.780372][ T6255] atmio16d [ 62.780389][ T6260] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 62.780389][ T6260] The task syz.1.113 (6260) triggered the difference, watch for misbehavior. [ 62.781432][ T6255] comedi: valid board names for ni_at_ao driver are: [ 62.790130][ T6255] at-ao-6 [ 62.791156][ T6255] at-ao-10 [ 62.791162][ T6255] comedi: valid board names for ni_at_a2150 driver are: [ 62.791167][ T6255] ni_at_a2150 [ 62.791172][ T6255] comedi: valid board names for adq12b driver are: [ 62.791177][ T6255] adq12b [ 62.791181][ T6255] comedi: valid board names for mpc624 driver are: [ 62.791186][ T6255] mpc624 [ 62.791190][ T6255] comedi: valid board names for c6xdigio driver are: [ 62.804138][ T6255] c6xdigio [ 62.805306][ T6255] comedi: valid board names for aio_iiro_16 driver are: [ 62.807516][ T6255] aio_iiro_16 [ 62.808612][ T6255] comedi: valid board names for aio_aio12_8 driver are: [ 62.810778][ T6255] aio_aio12_8 [ 62.811904][ T6255] aio_ai12_8 [ 62.812959][ T6255] aio_ao12_4 [ 62.814039][ T6255] comedi: valid board names for fl512 driver are: [ 62.816462][ T6255] fl512 [ 62.817413][ T6255] comedi: valid board names for dmm32at driver are: [ 62.819551][ T6255] dmm32at [ 62.820544][ T6255] comedi: valid board names for dt282x driver are: [ 62.822592][ T6255] dt2821 [ 62.823542][ T6255] dt2821-f [ 62.824675][ T6255] dt2821-g [ 62.825749][ T6255] dt2823 [ 62.826717][ T6255] dt2824-pgh [ 62.827789][ T6255] dt2824-pgl [ 62.828872][ T6255] dt2825 [ 62.829837][ T6255] dt2827 [ 62.830795][ T6255] dt2828 [ 62.831724][ T6255] dt2829 [ 62.832695][ T6255] dt21-ez [ 62.833719][ T6255] dt23-ez [ 62.834798][ T6255] dt24-ez [ 62.835793][ T6255] dt24-ez-pgl [ 62.836884][ T6255] comedi: valid board names for dt2817 driver are: [ 62.838970][ T6255] dt2817 [ 62.839922][ T6255] comedi: valid board names for dt2815 driver are: [ 62.841974][ T6255] dt2815 [ 62.842933][ T6255] comedi: valid board names for dt2814 driver are: [ 62.845251][ T6255] dt2814 [ 62.846242][ T6255] comedi: valid board names for dt2811 driver are: [ 62.849063][ T6255] dt2811-pgh [ 62.850154][ T6255] dt2811-pgl [ 62.851267][ T6255] comedi: valid board names for dt2801 driver are: [ 62.853339][ T6255] dt2801 [ 62.854307][ T6255] comedi: valid board names for das6402 driver are: [ 62.856802][ T6255] das6402-12 [ 62.858098][ T6255] das6402-16 [ 62.859232][ T6255] comedi: valid board names for das1800 driver are: [ 62.861293][ T6255] das-1701st [ 62.862382][ T6255] das-1701st-da [ 62.863642][ T6255] das-1702st [ 62.864827][ T6255] das-1702st-da [ 62.866048][ T6255] das-1702hr [ 62.867135][ T6255] das-1702hr-da [ 62.868329][ T6255] das-1701ao [ 62.869413][ T6255] das-1702ao [ 62.870519][ T6255] das-1801st [ 62.871599][ T6255] das-1801st-da [ 62.872754][ T6255] das-1802st [ 62.873870][ T6255] das-1802st-da [ 62.875285][ T6255] das-1802hr [ 62.876533][ T6255] das-1802hr-da [ 62.877999][ T6255] das-1801hc [ 62.879093][ T6255] das-1802hc [ 62.880171][ T6255] das-1801ao [ 62.881253][ T6255] das-1802ao [ 62.882385][ T6255] comedi: valid board names for das800 driver are: [ 62.884463][ T6255] das-800 [ 62.885762][ T6255] cio-das800 [ 62.886840][ T6255] das-801 [ 62.887870][ T6255] cio-das801 [ 62.888942][ T6255] das-802 [ 62.889952][ T6255] cio-das802 [ 62.891029][ T6255] cio-das802/16 [ 62.892184][ T6255] comedi: valid board names for isa-das08 driver are: [ 62.894330][ T6255] isa-das08 [ 62.896529][ T6255] das08-pgm [ 62.897765][ T6255] das08-pgh [ 62.899179][ T6255] das08-pgl [ 62.900717][ T6255] das08-aoh [ 62.902284][ T6255] das08-aol [ 62.903852][ T6255] das08-aom [ 62.905575][ T6255] das08/jr-ao [ 62.907149][ T6255] das08jr-16-ao [ 62.908809][ T6255] pc104-das08 [ 62.910420][ T6255] das08jr/16 [ 62.911929][ T6255] comedi: valid board names for das16m1 driver are: [ 62.914994][ T6255] das16m1 [ 62.916232][ T6255] comedi: valid board names for dac02 driver are: [ 62.918523][ T6255] dac02 [ 62.919501][ T6255] comedi: valid board names for rti802 driver are: [ 62.921670][ T6255] rti802 [ 62.922680][ T6255] comedi: valid board names for rti800 driver are: [ 62.924979][ T6255] rti800 [ 62.926068][ T6255] rti815 [ 62.927278][ T6255] comedi: valid board names for pcm3724 driver are: [ 62.929804][ T6255] pcm3724 [ 62.930918][ T6255] comedi: valid board names for pcl818 driver are: [ 62.933571][ T6255] pcl818l [ 62.935069][ T6255] pcl818h [ 62.936415][ T6255] pcl818hd [ 62.937895][ T6255] pcl818hg [ 62.939279][ T6255] pcl818 [ 62.940545][ T6255] pcl718 [ 62.941870][ T6255] pcm3718 [ 62.943153][ T6255] comedi: valid board names for pcl816 driver are: [ 62.945724][ T6255] pcl816 [ 62.946868][ T6255] pcl814b [ 62.947877][ T6255] comedi: valid board names for pcl812 driver are: [ 62.950478][ T6255] pcl812 [ 62.951486][ T6255] pcl812pg [ 62.952551][ T6255] acl8112pg [ 62.953672][ T6255] acl8112dg [ 62.954863][ T6255] acl8112hg [ 62.956125][ T6255] a821pgl [ 62.957481][ T6255] a821pglnda [ 62.958944][ T6255] a821pgh [ 62.960292][ T6255] a822pgl [ 62.961659][ T6255] a822pgh [ 62.962998][ T6255] a823pgl [ 62.964342][ T6255] a823pgh [ 62.965883][ T6255] pcl813 [ 62.967198][ T6255] pcl813b [ 62.968577][ T6255] acl8113 [ 62.969905][ T6255] iso813 [ 62.971173][ T6255] acl8216 [ 62.972503][ T6255] a826pg [ 62.973788][ T6255] comedi: valid board names for pcl730 driver are: [ 62.976249][ T6255] pcl730 [ 62.977250][ T6255] iso730 [ 62.978286][ T6255] acl7130 [ 62.979382][ T6255] pcm3730 [ 62.980493][ T6255] pcl725 [ 62.981658][ T6255] p8r8dio [ 62.983020][ T6255] acl7225b [ 62.984403][ T6255] p16r16dio [ 62.985956][ T6255] pcl733 [ 62.987241][ T6255] pcl734 [ 62.988525][ T6255] opmm-1616-xt [ 62.990042][ T6255] pearl-mm-p [ 62.991472][ T6255] ir104-pbf [ 62.992855][ T6255] comedi: valid board names for pcl726 driver are: [ 62.995753][ T6255] pcl726 [ 62.997079][ T6255] pcl727 [ 62.998356][ T6255] pcl728 [ 62.999643][ T6255] acl6126 [ 63.001969][ T6255] acl6128 [ 63.003016][ T6255] comedi: valid board names for pcl724 driver are: [ 63.005993][ T6255] pcl724 [ 63.008259][ T6255] pcl722 [ 63.009614][ T6255] pcl731 [ 63.010868][ T6255] acl7122 [ 63.012190][ T6255] acl7124 [ 63.013514][ T6255] pet48dio [ 63.015040][ T6255] pcmio48 [ 63.016633][ T6255] onyx-mm-dio [ 63.018319][ T6255] comedi: valid board names for pcl711 driver are: [ 63.021168][ T6255] pcl711 [ 63.024092][ T6255] pcl711b [ 63.025621][ T6255] acl8112hg [ 63.027220][ T6255] acl8112dg [ 63.028642][ T6255] comedi: valid board names for amplc_pc263 driver are: [ 63.031577][ T6255] pc263 [ 63.032816][ T6255] comedi: valid board names for amplc_pc236 driver are: [ 63.035988][ T6255] pc36at [ 63.037274][ T6255] comedi: valid board names for amplc_dio200 driver are: [ 63.040265][ T6255] pc212e [ 63.041553][ T6255] pc214e [ 63.042821][ T6255] pc215e [ 63.044096][ T6255] pc218e [ 63.045558][ T6255] pc272e [ 63.046832][ T6255] comedi: valid board names for comedi_parport driver are: [ 63.049925][ T6255] comedi_parport [ 63.051504][ T6255] comedi: valid board names for comedi_test driver are: [ 63.054414][ T6255] comedi_test [ 63.056194][ T6255] comedi: valid board names for comedi_bond driver are: [ 63.059389][ T6255] comedi_bond [ 63.130180][ T41] kauditd_printk_skb: 85 callbacks suppressed [ 63.130192][ T41] audit: type=1400 audit(1777609739.485:289): avc: denied { firmware_load } for pid=5834 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 63.135723][ T6264] FAULT_INJECTION: forcing a failure. [ 63.135723][ T6264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.145038][ T6264] CPU: 2 UID: 0 PID: 6264 Comm: syz.0.115 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.145064][ T6264] Tainted: [L]=SOFTLOCKUP [ 63.145070][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.145081][ T6264] Call Trace: [ 63.145086][ T6264] [ 63.145093][ T6264] dump_stack_lvl+0x100/0x190 [ 63.145121][ T6264] should_fail_ex.cold+0x5/0xa [ 63.145143][ T6264] ? prepare_alloc_pages+0x16d/0x5f0 [ 63.145167][ T6264] should_fail_alloc_page+0xeb/0x140 [ 63.145189][ T6264] prepare_alloc_pages+0x1f0/0x5f0 [ 63.145214][ T6264] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 63.145242][ T6264] ? stack_depot_save_flags+0x27/0x9d0 [ 63.145269][ T6264] ? stack_depot_save_flags+0x27/0x9d0 [ 63.145298][ T6264] ? kasan_save_stack+0x3f/0x50 [ 63.145324][ T6264] ? kasan_save_stack+0x30/0x50 [ 63.145364][ T6264] ? kasan_save_track+0x14/0x30 [ 63.145391][ T6264] ? __kasan_kmalloc+0xaa/0xb0 [ 63.145414][ T6264] ? __kvmalloc_node_noprof+0x360/0xa00 [ 63.145440][ T6264] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 63.145460][ T6264] ? mmu_topup_memory_caches+0xbc/0x170 [ 63.145483][ T6264] ? kvm_mmu_load+0xd6/0x23e0 [ 63.145502][ T6264] ? vcpu_run+0x39f4/0x5ca0 [ 63.145531][ T6264] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.145559][ T6264] ? kvm_vcpu_ioctl+0x730/0x1720 [ 63.145575][ T6264] ? __x64_sys_ioctl+0x18e/0x210 [ 63.145595][ T6264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 63.145640][ T6264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.145664][ T6264] ? policy_nodemask+0xed/0x4f0 [ 63.145686][ T6264] alloc_pages_mpol+0x1fb/0x540 [ 63.145707][ T6264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 63.145728][ T6264] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 63.145754][ T6264] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 63.145776][ T6264] alloc_pages_noprof+0x1a/0x160 [ 63.145799][ T6264] get_free_pages_noprof+0x10/0xb0 [ 63.145817][ T6264] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 63.145845][ T6264] mmu_topup_memory_caches+0xbc/0x170 [ 63.145871][ T6264] kvm_mmu_load+0xd6/0x23e0 [ 63.145894][ T6264] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 63.145912][ T6264] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 63.145934][ T6264] ? __pfx_kvm_mmu_load+0x10/0x10 [ 63.145956][ T6264] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 63.145977][ T6264] ? kvm_check_and_inject_events+0x961/0x1070 [ 63.146002][ T6264] ? record_steal_time+0x3d0/0xbc0 [ 63.146023][ T6264] vcpu_run+0x39f4/0x5ca0 [ 63.146058][ T6264] ? __pfx_vcpu_run+0x10/0x10 [ 63.146091][ T6264] ? rcu_is_watching+0x12/0xc0 [ 63.146123][ T6264] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.146146][ T6264] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.146178][ T6264] kvm_vcpu_ioctl+0x730/0x1720 [ 63.146200][ T6264] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.146220][ T6264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.146242][ T6264] ? do_vfs_ioctl+0x226/0x13e0 [ 63.146260][ T6264] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.146279][ T6264] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.146311][ T6264] ? __fget_files+0x215/0x3d0 [ 63.146331][ T6264] ? hook_file_ioctl_common+0x149/0x410 [ 63.146364][ T6264] ? selinux_file_ioctl+0x13b/0x290 [ 63.146384][ T6264] ? selinux_file_ioctl+0xb6/0x290 [ 63.146407][ T6264] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.146428][ T6264] __x64_sys_ioctl+0x18e/0x210 [ 63.146448][ T6264] do_syscall_64+0x10b/0xf80 [ 63.146466][ T6264] ? clear_bhb_loop+0x40/0x90 [ 63.146487][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.146511][ T6264] RIP: 0033:0x7efc75d9cdd9 [ 63.146527][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.146543][ T6264] RSP: 002b:00007efc76ce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.146559][ T6264] RAX: ffffffffffffffda RBX: 00007efc76015fa0 RCX: 00007efc75d9cdd9 [ 63.146571][ T6264] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 63.146580][ T6264] RBP: 00007efc76ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 63.146591][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.146600][ T6264] R13: 00007efc76016038 R14: 00007efc76015fa0 R15: 00007ffc1cede4c8 [ 63.146625][ T6264] [ 63.151253][ T5834] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.365478][ T58] usb 7-1: USB disconnect, device number 2 [ 63.585908][ T6193] random: crng reseeded on system resumption [ 63.587903][ T41] audit: type=1400 audit(1777609739.945:290): avc: denied { read } for pid=6192 comm="syz.2.97" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.608106][ T41] audit: type=1400 audit(1777609739.945:291): avc: denied { ioctl } for pid=6192 comm="syz.2.97" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.625532][ T6289] trusted_key: encrypted_key: key trusted:syz not found [ 63.628085][ T41] audit: type=1400 audit(1777609739.985:292): avc: denied { mounton } for pid=6290 comm="syz.1.123" path="/27/file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.637822][ T41] audit: type=1400 audit(1777609739.985:293): avc: denied { setopt } for pid=6290 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.696403][ T6289] __nla_validate_parse: 4 callbacks suppressed [ 63.696414][ T6289] netlink: 5 bytes leftover after parsing attributes in process `syz.3.122'. [ 63.704665][ T6289] netlink: 116 bytes leftover after parsing attributes in process `syz.3.122'. [ 63.708040][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.3.122'. [ 63.759443][ T41] audit: type=1400 audit(1777609740.115:294): avc: denied { connect } for pid=6299 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.776825][ T6298] FAULT_INJECTION: forcing a failure. [ 63.776825][ T6298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.782125][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.1.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.782142][ T6298] Tainted: [L]=SOFTLOCKUP [ 63.782145][ T6298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.782151][ T6298] Call Trace: [ 63.782157][ T6298] [ 63.782161][ T6298] dump_stack_lvl+0x100/0x190 [ 63.782233][ T6298] should_fail_ex.cold+0x5/0xa [ 63.782287][ T6298] ? prepare_alloc_pages+0x16d/0x5f0 [ 63.782333][ T6298] should_fail_alloc_page+0xeb/0x140 [ 63.782386][ T6298] prepare_alloc_pages+0x1f0/0x5f0 [ 63.782401][ T6298] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 63.782418][ T6298] ? stack_depot_save_flags+0x27/0x9d0 [ 63.782442][ T6298] ? stack_depot_save_flags+0x27/0x9d0 [ 63.782461][ T6298] ? kasan_save_stack+0x3f/0x50 [ 63.782477][ T6298] ? kasan_save_stack+0x30/0x50 [ 63.782496][ T6298] ? kasan_save_track+0x14/0x30 [ 63.782511][ T6298] ? __kasan_kmalloc+0xaa/0xb0 [ 63.782526][ T6298] ? __kvmalloc_node_noprof+0x360/0xa00 [ 63.782542][ T6298] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 63.782589][ T6298] ? mmu_topup_memory_caches+0xbc/0x170 [ 63.782671][ T6298] ? kvm_mmu_load+0xd6/0x23e0 [ 63.782683][ T6298] ? vcpu_run+0x39f4/0x5ca0 [ 63.782697][ T6298] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.782712][ T6298] ? kvm_vcpu_ioctl+0x730/0x1720 [ 63.782721][ T6298] ? __x64_sys_ioctl+0x18e/0x210 [ 63.782767][ T6298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 63.782794][ T6298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.782840][ T6298] ? policy_nodemask+0xed/0x4f0 [ 63.782852][ T6298] alloc_pages_mpol+0x1fb/0x540 [ 63.782864][ T6298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 63.782876][ T6298] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 63.782892][ T6298] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 63.782906][ T6298] alloc_pages_noprof+0x1a/0x160 [ 63.782919][ T6298] get_free_pages_noprof+0x10/0xb0 [ 63.782930][ T6298] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 63.782946][ T6298] mmu_topup_memory_caches+0xbc/0x170 [ 63.782961][ T6298] kvm_mmu_load+0xd6/0x23e0 [ 63.782975][ T6298] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 63.783001][ T6298] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 63.783013][ T6298] ? __pfx_kvm_mmu_load+0x10/0x10 [ 63.783026][ T6298] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 63.783039][ T6298] ? kvm_check_and_inject_events+0x961/0x1070 [ 63.783054][ T6298] ? record_steal_time+0x3d0/0xbc0 [ 63.783066][ T6298] vcpu_run+0x39f4/0x5ca0 [ 63.783086][ T6298] ? __pfx_vcpu_run+0x10/0x10 [ 63.783106][ T6298] ? rcu_is_watching+0x12/0xc0 [ 63.783154][ T6298] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.783169][ T6298] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.783189][ T6298] kvm_vcpu_ioctl+0x730/0x1720 [ 63.783201][ T6298] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.783213][ T6298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.783226][ T6298] ? do_vfs_ioctl+0x226/0x13e0 [ 63.783236][ T6298] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.783247][ T6298] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.783265][ T6298] ? __fget_files+0x215/0x3d0 [ 63.783278][ T6298] ? hook_file_ioctl_common+0x149/0x410 [ 63.783297][ T6298] ? selinux_file_ioctl+0x13b/0x290 [ 63.783310][ T6298] ? selinux_file_ioctl+0xb6/0x290 [ 63.783324][ T6298] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.783336][ T6298] __x64_sys_ioctl+0x18e/0x210 [ 63.783347][ T6298] do_syscall_64+0x10b/0xf80 [ 63.783382][ T6298] ? clear_bhb_loop+0x40/0x90 [ 63.783395][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.783406][ T6298] RIP: 0033:0x7fdd54f9cdd9 [ 63.783416][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.783426][ T6298] RSP: 002b:00007fdd55dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.783467][ T6298] RAX: ffffffffffffffda RBX: 00007fdd55215fa0 RCX: 00007fdd54f9cdd9 [ 63.783474][ T6298] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 63.783479][ T6298] RBP: 00007fdd55dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 63.783488][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.783494][ T6298] R13: 00007fdd55216038 R14: 00007fdd55215fa0 R15: 00007ffee3ebd198 [ 63.783508][ T6298] [ 63.831047][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 64.207125][ T41] audit: type=1400 audit(1777609740.565:295): avc: denied { create } for pid=6310 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.224659][ T41] audit: type=1400 audit(1777609740.565:296): avc: denied { ioctl } for pid=6310 comm="syz.2.128" path="socket:[12532]" dev="sockfs" ino=12532 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.226694][ T6311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'. [ 64.232725][ T41] audit: type=1400 audit(1777609740.585:297): avc: denied { create } for pid=6310 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.232756][ T41] audit: type=1400 audit(1777609740.585:298): avc: denied { write } for pid=6310 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.317750][ T5834] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 64.320518][ T5834] ath9k_htc: Failed to initialize the device [ 64.324108][ T58] usb 7-1: ath9k_htc: USB layer deinitialized [ 64.473897][ T6328] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 64.476604][ T6328] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 64.561806][ T6332] FAULT_INJECTION: forcing a failure. [ 64.561806][ T6332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.567400][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.1.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.567419][ T6332] Tainted: [L]=SOFTLOCKUP [ 64.567423][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.567430][ T6332] Call Trace: [ 64.567434][ T6332] [ 64.567438][ T6332] dump_stack_lvl+0x100/0x190 [ 64.567457][ T6332] should_fail_ex.cold+0x5/0xa [ 64.567477][ T6332] ? prepare_alloc_pages+0x16d/0x5f0 [ 64.567493][ T6332] should_fail_alloc_page+0xeb/0x140 [ 64.567523][ T6332] prepare_alloc_pages+0x1f0/0x5f0 [ 64.567540][ T6332] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 64.567558][ T6332] ? stack_depot_save_flags+0x27/0x9d0 [ 64.567577][ T6332] ? stack_depot_save_flags+0x27/0x9d0 [ 64.567597][ T6332] ? kasan_save_stack+0x3f/0x50 [ 64.567613][ T6332] ? kasan_save_stack+0x30/0x50 [ 64.567630][ T6332] ? kasan_save_track+0x14/0x30 [ 64.567647][ T6332] ? __kasan_kmalloc+0xaa/0xb0 [ 64.567663][ T6332] ? __kvmalloc_node_noprof+0x360/0xa00 [ 64.567680][ T6332] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 64.567693][ T6332] ? mmu_topup_memory_caches+0xbc/0x170 [ 64.567709][ T6332] ? kvm_mmu_load+0xd6/0x23e0 [ 64.567722][ T6332] ? vcpu_run+0x39f4/0x5ca0 [ 64.567737][ T6332] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 64.567753][ T6332] ? kvm_vcpu_ioctl+0x730/0x1720 [ 64.567763][ T6332] ? __x64_sys_ioctl+0x18e/0x210 [ 64.567775][ T6332] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.567804][ T6332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.567819][ T6332] ? policy_nodemask+0xed/0x4f0 [ 64.567833][ T6332] alloc_pages_mpol+0x1fb/0x540 [ 64.567846][ T6332] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 64.567859][ T6332] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 64.567876][ T6332] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 64.567891][ T6332] alloc_pages_noprof+0x1a/0x160 [ 64.567906][ T6332] get_free_pages_noprof+0x10/0xb0 [ 64.567918][ T6332] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 64.567935][ T6332] mmu_topup_memory_caches+0xbc/0x170 [ 64.567951][ T6332] kvm_mmu_load+0xd6/0x23e0 [ 64.567966][ T6332] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 64.567977][ T6332] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 64.567991][ T6332] ? __pfx_kvm_mmu_load+0x10/0x10 [ 64.568005][ T6332] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 64.568019][ T6332] ? kvm_check_and_inject_events+0x961/0x1070 [ 64.568035][ T6332] ? record_steal_time+0x3d0/0xbc0 [ 64.568048][ T6332] vcpu_run+0x39f4/0x5ca0 [ 64.568070][ T6332] ? __pfx_vcpu_run+0x10/0x10 [ 64.568091][ T6332] ? rcu_is_watching+0x12/0xc0 [ 64.568111][ T6332] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 64.568128][ T6332] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 64.568148][ T6332] kvm_vcpu_ioctl+0x730/0x1720 [ 64.568162][ T6332] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.568175][ T6332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.568189][ T6332] ? do_vfs_ioctl+0x226/0x13e0 [ 64.568201][ T6332] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.568213][ T6332] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.568233][ T6332] ? __fget_files+0x215/0x3d0 [ 64.568246][ T6332] ? hook_file_ioctl_common+0x149/0x410 [ 64.568267][ T6332] ? selinux_file_ioctl+0x13b/0x290 [ 64.568281][ T6332] ? selinux_file_ioctl+0xb6/0x290 [ 64.568296][ T6332] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.568309][ T6332] __x64_sys_ioctl+0x18e/0x210 [ 64.568321][ T6332] do_syscall_64+0x10b/0xf80 [ 64.568332][ T6332] ? clear_bhb_loop+0x40/0x90 [ 64.568346][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.568357][ T6332] RIP: 0033:0x7fdd54f9cdd9 [ 64.568367][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.568377][ T6332] RSP: 002b:00007fdd55dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.568388][ T6332] RAX: ffffffffffffffda RBX: 00007fdd55215fa0 RCX: 00007fdd54f9cdd9 [ 64.568395][ T6332] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 64.568401][ T6332] RBP: 00007fdd55dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 64.568408][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.568414][ T6332] R13: 00007fdd55216038 R14: 00007fdd55215fa0 R15: 00007ffee3ebd198 [ 64.568428][ T6332] [ 64.758478][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.138'. [ 64.995521][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 65.107536][ T6355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6355 comm=syz.1.139 [ 65.842778][ T6360] 9p: Invalid gid '0x00000000ffffffff' [ 66.105011][ T5157] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.148512][ T6379] FAULT_INJECTION: forcing a failure. [ 66.148512][ T6379] name failslab, interval 1, probability 0, space 0, times 1 [ 66.152663][ T6379] CPU: 2 UID: 0 PID: 6379 Comm: syz.1.148 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.152679][ T6379] Tainted: [L]=SOFTLOCKUP [ 66.152682][ T6379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.152688][ T6379] Call Trace: [ 66.152692][ T6379] [ 66.152697][ T6379] dump_stack_lvl+0x100/0x190 [ 66.152714][ T6379] should_fail_ex.cold+0x5/0xa [ 66.152729][ T6379] should_failslab+0xc2/0x120 [ 66.152741][ T6379] __kvmalloc_node_noprof+0xfa/0xa00 [ 66.152757][ T6379] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 66.152774][ T6379] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 66.152790][ T6379] mmu_topup_memory_caches+0x11a/0x170 [ 66.152806][ T6379] kvm_mmu_load+0xd6/0x23e0 [ 66.152820][ T6379] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 66.152830][ T6379] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 66.152843][ T6379] ? __pfx_kvm_mmu_load+0x10/0x10 [ 66.152856][ T6379] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 66.152868][ T6379] ? kvm_check_and_inject_events+0x961/0x1070 [ 66.152883][ T6379] ? record_steal_time+0x3d0/0xbc0 [ 66.152895][ T6379] vcpu_run+0x39f4/0x5ca0 [ 66.152916][ T6379] ? __pfx_vcpu_run+0x10/0x10 [ 66.152935][ T6379] ? rcu_is_watching+0x12/0xc0 [ 66.152954][ T6379] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 66.152969][ T6379] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 66.152988][ T6379] kvm_vcpu_ioctl+0x730/0x1720 [ 66.153000][ T6379] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.153012][ T6379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.153026][ T6379] ? do_vfs_ioctl+0x226/0x13e0 [ 66.153037][ T6379] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.153047][ T6379] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.153066][ T6379] ? __fget_files+0x215/0x3d0 [ 66.153078][ T6379] ? hook_file_ioctl_common+0x149/0x410 [ 66.153097][ T6379] ? selinux_file_ioctl+0x13b/0x290 [ 66.153110][ T6379] ? selinux_file_ioctl+0xb6/0x290 [ 66.153124][ T6379] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.153136][ T6379] __x64_sys_ioctl+0x18e/0x210 [ 66.153147][ T6379] do_syscall_64+0x10b/0xf80 [ 66.153158][ T6379] ? clear_bhb_loop+0x40/0x90 [ 66.153171][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.153182][ T6379] RIP: 0033:0x7fdd54f9cdd9 [ 66.153190][ T6379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.153200][ T6379] RSP: 002b:00007fdd55dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.153210][ T6379] RAX: ffffffffffffffda RBX: 00007fdd55215fa0 RCX: 00007fdd54f9cdd9 [ 66.153217][ T6379] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 66.153222][ T6379] RBP: 00007fdd55dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 66.153228][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.153234][ T6379] R13: 00007fdd55216038 R14: 00007fdd55215fa0 R15: 00007ffee3ebd198 [ 66.153247][ T6379] [ 66.249578][ T6385] xt_CONNSECMARK: invalid mode: 0 [ 66.324711][ T5157] usb 7-1: Using ep0 maxpacket: 8 [ 66.327520][ T5157] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.330672][ T5157] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 66.334333][ T5157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.339831][ T5157] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 66.342712][ T5157] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 66.345723][ T5157] usb 7-1: Product: syz [ 66.347072][ T5157] usb 7-1: Manufacturer: syz [ 66.348539][ T5157] usb 7-1: SerialNumber: syz [ 66.351937][ T5157] usb 7-1: config 0 descriptor?? [ 66.415024][ T5157] rc_core: IR keymap rc-imon-rsc not found [ 66.416966][ T5157] Registered IR keymap rc-empty [ 66.420749][ T5157] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 66.425242][ T5157] input: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 66.495036][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.561836][ T6397] xt_CONNSECMARK: invalid mode: 0 [ 66.568201][ T6359] can0: slcan on ttynull. [ 66.607828][ T6404] syz.1.155 uses obsolete (PF_INET,SOCK_PACKET) [ 66.642938][ T6404] syzkaller1: entered promiscuous mode [ 66.644851][ T6404] syzkaller1: entered allmulticast mode [ 66.655078][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 66.658889][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.663770][ T5834] usb 5-1: config 0 has no interfaces? [ 66.671060][ T5834] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 66.675340][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.678720][ T5834] usb 5-1: Product: syz [ 66.680567][ T5834] usb 5-1: Manufacturer: syz [ 66.682692][ T5834] usb 5-1: SerialNumber: syz [ 66.688669][ T5834] usb 5-1: config 0 descriptor?? [ 66.696048][ T6359] can0 (unregistered): slcan off ttynull. [ 66.702001][ T5157] usb 7-1: USB disconnect, device number 3 [ 66.821156][ T6421] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 66.823665][ T6421] netlink: 88 bytes leftover after parsing attributes in process `syz.2.158'. [ 66.827420][ T6421] netlink: 1 bytes leftover after parsing attributes in process `syz.2.158'. [ 66.830806][ T6421] netlink: 658 bytes leftover after parsing attributes in process `syz.2.158'. [ 66.911165][ T6433] FAULT_INJECTION: forcing a failure. [ 66.911165][ T6433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.915667][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.3.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.915683][ T6433] Tainted: [L]=SOFTLOCKUP [ 66.915686][ T6433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.915692][ T6433] Call Trace: [ 66.915696][ T6433] [ 66.915700][ T6433] dump_stack_lvl+0x100/0x190 [ 66.915717][ T6433] should_fail_ex.cold+0x5/0xa [ 66.915731][ T6433] ? prepare_alloc_pages+0x16d/0x5f0 [ 66.915746][ T6433] should_fail_alloc_page+0xeb/0x140 [ 66.915758][ T6433] prepare_alloc_pages+0x1f0/0x5f0 [ 66.915773][ T6433] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 66.915790][ T6433] ? stack_depot_save_flags+0x27/0x9d0 [ 66.915806][ T6433] ? stack_depot_save_flags+0x27/0x9d0 [ 66.915825][ T6433] ? kasan_save_stack+0x3f/0x50 [ 66.915840][ T6433] ? kasan_save_stack+0x30/0x50 [ 66.915855][ T6433] ? kasan_save_track+0x14/0x30 [ 66.915870][ T6433] ? __kasan_kmalloc+0xaa/0xb0 [ 66.915885][ T6433] ? __kvmalloc_node_noprof+0x360/0xa00 [ 66.915900][ T6433] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 66.915912][ T6433] ? mmu_topup_memory_caches+0xbc/0x170 [ 66.915927][ T6433] ? kvm_mmu_load+0xd6/0x23e0 [ 66.915939][ T6433] ? vcpu_run+0x39f4/0x5ca0 [ 66.915953][ T6433] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 66.915967][ T6433] ? kvm_vcpu_ioctl+0x730/0x1720 [ 66.915977][ T6433] ? __x64_sys_ioctl+0x18e/0x210 [ 66.915987][ T6433] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 66.916013][ T6433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.916027][ T6433] ? policy_nodemask+0xed/0x4f0 [ 66.916039][ T6433] alloc_pages_mpol+0x1fb/0x540 [ 66.916051][ T6433] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 66.916063][ T6433] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 66.916079][ T6433] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 66.916092][ T6433] alloc_pages_noprof+0x1a/0x160 [ 66.916106][ T6433] get_free_pages_noprof+0x10/0xb0 [ 66.916116][ T6433] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 66.916132][ T6433] mmu_topup_memory_caches+0xbc/0x170 [ 66.916147][ T6433] kvm_mmu_load+0xd6/0x23e0 [ 66.916161][ T6433] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 66.916171][ T6433] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 66.916183][ T6433] ? __pfx_kvm_mmu_load+0x10/0x10 [ 66.916196][ T6433] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 66.916209][ T6433] ? kvm_check_and_inject_events+0x961/0x1070 [ 66.916223][ T6433] ? record_steal_time+0x3d0/0xbc0 [ 66.916236][ T6433] vcpu_run+0x39f4/0x5ca0 [ 66.916256][ T6433] ? __pfx_vcpu_run+0x10/0x10 [ 66.916275][ T6433] ? rcu_is_watching+0x12/0xc0 [ 66.916293][ T6433] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 66.916321][ T6433] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 66.916342][ T6433] kvm_vcpu_ioctl+0x730/0x1720 [ 66.916355][ T6433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.916366][ T6433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.916379][ T6433] ? do_vfs_ioctl+0x226/0x13e0 [ 66.916390][ T6433] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.916400][ T6433] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.916419][ T6433] ? __fget_files+0x215/0x3d0 [ 66.916431][ T6433] ? hook_file_ioctl_common+0x149/0x410 [ 66.916450][ T6433] ? selinux_file_ioctl+0x13b/0x290 [ 66.916467][ T6433] ? selinux_file_ioctl+0xb6/0x290 [ 66.916481][ T6433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.916493][ T6433] __x64_sys_ioctl+0x18e/0x210 [ 66.916504][ T6433] do_syscall_64+0x10b/0xf80 [ 66.916516][ T6433] ? clear_bhb_loop+0x40/0x90 [ 66.916528][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.916539][ T6433] RIP: 0033:0x7f7efc79cdd9 [ 66.916548][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.916557][ T6433] RSP: 002b:00007f7efd728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.916568][ T6433] RAX: ffffffffffffffda RBX: 00007f7efca15fa0 RCX: 00007f7efc79cdd9 [ 66.916574][ T6433] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 66.916580][ T6433] RBP: 00007f7efd728090 R08: 0000000000000000 R09: 0000000000000000 [ 66.916586][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.916591][ T6433] R13: 00007f7efca16038 R14: 00007f7efca15fa0 R15: 00007ffdfffe1ee8 [ 66.916605][ T6433] [ 67.358503][ T6490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6490 comm=syz.3.178 [ 67.457551][ T6491] capability: warning: `syz.1.177' uses 32-bit capabilities (legacy support in use) [ 67.514656][ T40] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.669955][ T40] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.673020][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.675835][ T40] usb 7-1: Product: syz [ 67.677326][ T40] usb 7-1: Manufacturer: syz [ 67.679113][ T40] usb 7-1: SerialNumber: syz [ 67.686322][ T40] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 67.698881][ T34] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 67.905835][ T9] usb 7-1: USB disconnect, device number 4 [ 68.119010][ T6482] random: crng reseeded on system resumption [ 68.327030][ T6499] FAULT_INJECTION: forcing a failure. [ 68.327030][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 68.330949][ T6499] CPU: 2 UID: 0 PID: 6499 Comm: syz.3.181 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.330967][ T6499] Tainted: [L]=SOFTLOCKUP [ 68.330970][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.330976][ T6499] Call Trace: [ 68.330982][ T6499] [ 68.330987][ T6499] dump_stack_lvl+0x100/0x190 [ 68.331006][ T6499] should_fail_ex.cold+0x5/0xa [ 68.331022][ T6499] should_failslab+0xc2/0x120 [ 68.331033][ T6499] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 68.331049][ T6499] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 68.331066][ T6499] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 68.331082][ T6499] mmu_topup_memory_caches+0x11a/0x170 [ 68.331098][ T6499] kvm_mmu_load+0xd6/0x23e0 [ 68.331112][ T6499] ? vmx_flush_tlb_guest+0x113/0x560 [ 68.331124][ T6499] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 68.331134][ T6499] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.331147][ T6499] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.331160][ T6499] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.331172][ T6499] ? kvm_check_and_inject_events+0x961/0x1070 [ 68.331187][ T6499] ? record_steal_time+0x3d0/0xbc0 [ 68.331200][ T6499] vcpu_run+0x39f4/0x5ca0 [ 68.331220][ T6499] ? __pfx_vcpu_run+0x10/0x10 [ 68.331239][ T6499] ? rcu_is_watching+0x12/0xc0 [ 68.331258][ T6499] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 68.331273][ T6499] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 68.331292][ T6499] kvm_vcpu_ioctl+0x730/0x1720 [ 68.331305][ T6499] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.331317][ T6499] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.331331][ T6499] ? do_vfs_ioctl+0x226/0x13e0 [ 68.331342][ T6499] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.331352][ T6499] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.331372][ T6499] ? __fget_files+0x215/0x3d0 [ 68.331384][ T6499] ? hook_file_ioctl_common+0x149/0x410 [ 68.331403][ T6499] ? selinux_file_ioctl+0x13b/0x290 [ 68.331415][ T6499] ? selinux_file_ioctl+0xb6/0x290 [ 68.331433][ T6499] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.331446][ T6499] __x64_sys_ioctl+0x18e/0x210 [ 68.331457][ T6499] do_syscall_64+0x10b/0xf80 [ 68.331470][ T6499] ? clear_bhb_loop+0x40/0x90 [ 68.331482][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.331494][ T6499] RIP: 0033:0x7f7efc79cdd9 [ 68.331504][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.331514][ T6499] RSP: 002b:00007f7efd728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.331524][ T6499] RAX: ffffffffffffffda RBX: 00007f7efca15fa0 RCX: 00007f7efc79cdd9 [ 68.331531][ T6499] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 68.331536][ T6499] RBP: 00007f7efd728090 R08: 0000000000000000 R09: 0000000000000000 [ 68.331542][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.331548][ T6499] R13: 00007f7efca16038 R14: 00007f7efca15fa0 R15: 00007ffdfffe1ee8 [ 68.331561][ T6499] [ 68.474558][ T6505] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 68.477874][ T6505] veth1_to_team: entered promiscuous mode [ 68.593077][ T6515] netlink: 'syz.1.188': attribute type 4 has an invalid length. [ 68.610603][ T41] kauditd_printk_skb: 37 callbacks suppressed [ 68.610615][ T41] audit: type=1400 audit(1777609744.965:336): avc: granted { setsecparam } for pid=6516 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 68.677115][ T41] audit: type=1400 audit(1777609745.035:337): avc: denied { write } for pid=6527 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.705404][ T6529] xt_CONNSECMARK: invalid mode: 0 [ 68.717768][ T41] audit: type=1400 audit(1777609745.075:338): avc: denied { read append } for pid=6530 comm="syz.3.193" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.728995][ T41] audit: type=1400 audit(1777609745.075:339): avc: denied { open } for pid=6530 comm="syz.3.193" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.729036][ T41] audit: type=1400 audit(1777609745.075:340): avc: denied { ioctl } for pid=6530 comm="syz.3.193" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.729070][ T41] audit: type=1400 audit(1777609745.075:341): avc: denied { write } for pid=6530 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.762158][ T41] audit: type=1400 audit(1777609745.115:342): avc: denied { setopt } for pid=6530 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.770975][ T41] audit: type=1400 audit(1777609745.115:343): avc: denied { getopt } for pid=6530 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.779639][ T41] audit: type=1400 audit(1777609745.115:344): avc: denied { read } for pid=6530 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.789345][ T34] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 68.791531][ T6515] __nla_validate_parse: 5 callbacks suppressed [ 68.791541][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'. [ 68.793125][ T34] ath9k_htc: Failed to initialize the device [ 68.803402][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 68.911777][ T6537] FAULT_INJECTION: forcing a failure. [ 68.911777][ T6537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.917569][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.1.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.917591][ T6537] Tainted: [L]=SOFTLOCKUP [ 68.917596][ T6537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.917604][ T6537] Call Trace: [ 68.917609][ T6537] [ 68.917614][ T6537] dump_stack_lvl+0x100/0x190 [ 68.917637][ T6537] should_fail_ex.cold+0x5/0xa [ 68.917654][ T6537] ? prepare_alloc_pages+0x16d/0x5f0 [ 68.917680][ T6537] should_fail_alloc_page+0xeb/0x140 [ 68.917697][ T6537] prepare_alloc_pages+0x1f0/0x5f0 [ 68.917717][ T6537] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 68.917739][ T6537] ? stack_depot_save_flags+0x27/0x9d0 [ 68.917762][ T6537] ? stack_depot_save_flags+0x27/0x9d0 [ 68.917786][ T6537] ? kasan_save_stack+0x3f/0x50 [ 68.917806][ T6537] ? kasan_save_stack+0x30/0x50 [ 68.917825][ T6537] ? kasan_save_track+0x14/0x30 [ 68.917845][ T6537] ? __kasan_kmalloc+0xaa/0xb0 [ 68.917865][ T6537] ? __kvmalloc_node_noprof+0x360/0xa00 [ 68.917887][ T6537] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 68.917906][ T6537] ? mmu_topup_memory_caches+0xbc/0x170 [ 68.917929][ T6537] ? kvm_mmu_load+0xd6/0x23e0 [ 68.917949][ T6537] ? vcpu_run+0x39f4/0x5ca0 [ 68.917972][ T6537] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 68.917995][ T6537] ? kvm_vcpu_ioctl+0x730/0x1720 [ 68.918011][ T6537] ? __x64_sys_ioctl+0x18e/0x210 [ 68.918029][ T6537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 68.918076][ T6537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.918100][ T6537] ? policy_nodemask+0xed/0x4f0 [ 68.918121][ T6537] alloc_pages_mpol+0x1fb/0x540 [ 68.918142][ T6537] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 68.918163][ T6537] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 68.918189][ T6537] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 68.918210][ T6537] alloc_pages_noprof+0x1a/0x160 [ 68.918231][ T6537] get_free_pages_noprof+0x10/0xb0 [ 68.918247][ T6537] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 68.918271][ T6537] mmu_topup_memory_caches+0xbc/0x170 [ 68.918292][ T6537] kvm_mmu_load+0xd6/0x23e0 [ 68.918312][ T6537] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 68.918327][ T6537] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.918358][ T6537] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.918379][ T6537] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.918398][ T6537] ? kvm_check_and_inject_events+0x961/0x1070 [ 68.918420][ T6537] ? record_steal_time+0x3d0/0xbc0 [ 68.918439][ T6537] vcpu_run+0x39f4/0x5ca0 [ 68.918471][ T6537] ? __pfx_vcpu_run+0x10/0x10 [ 68.918504][ T6537] ? rcu_is_watching+0x12/0xc0 [ 68.918535][ T6537] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 68.918560][ T6537] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 68.918591][ T6537] kvm_vcpu_ioctl+0x730/0x1720 [ 68.918613][ T6537] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.918632][ T6537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.918654][ T6537] ? do_vfs_ioctl+0x226/0x13e0 [ 68.918679][ T6537] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.918698][ T6537] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.918730][ T6537] ? __fget_files+0x215/0x3d0 [ 68.918751][ T6537] ? hook_file_ioctl_common+0x149/0x410 [ 68.918785][ T6537] ? selinux_file_ioctl+0x13b/0x290 [ 68.918806][ T6537] ? selinux_file_ioctl+0xb6/0x290 [ 68.918830][ T6537] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.918851][ T6537] __x64_sys_ioctl+0x18e/0x210 [ 68.918871][ T6537] do_syscall_64+0x10b/0xf80 [ 68.918891][ T6537] ? clear_bhb_loop+0x40/0x90 [ 68.918914][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.918932][ T6537] RIP: 0033:0x7fdd54f9cdd9 [ 68.918948][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.918966][ T6537] RSP: 002b:00007fdd55dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.918983][ T6537] RAX: ffffffffffffffda RBX: 00007fdd55215fa0 RCX: 00007fdd54f9cdd9 [ 68.918995][ T6537] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 68.919006][ T6537] RBP: 00007fdd55dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 68.919016][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.919025][ T6537] R13: 00007fdd55216038 R14: 00007fdd55215fa0 R15: 00007ffee3ebd198 [ 68.919050][ T6537] [ 68.955573][ T41] audit: type=1400 audit(1777609745.295:345): avc: denied { read } for pid=6533 comm="syz.3.194" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.194435][ T5157] usb 5-1: USB disconnect, device number 4 [ 69.305220][ T6552] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 69.309480][ T6552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.201'. [ 69.316101][ T6552] netlink: 156 bytes leftover after parsing attributes in process `syz.1.201'. [ 69.431243][ T6557] xt_CONNSECMARK: invalid mode: 0 [ 69.438003][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 69.493603][ T6567] loop5: detected capacity change from 0 to 128 [ 69.584280][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 69.588146][ T6576] netlink: 'syz.3.210': attribute type 30 has an invalid length. [ 69.598823][ T6578] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 69.606123][ T6578] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 69.738415][ T6586] xt_CONNSECMARK: invalid mode: 0 [ 69.770666][ T6591] xt_CONNSECMARK: invalid mode: 0 [ 70.534731][ T58] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 70.674824][ T58] usb 5-1: device descriptor read/64, error -71 [ 70.770924][ T6626] xt_CONNSECMARK: invalid mode: 0 [ 70.887042][ T6638] comedi: valid board names for 8255 driver are: [ 70.889225][ T6638] 8255 [ 70.890153][ T6638] comedi: valid board names for vmk80xx driver are: [ 70.892205][ T6638] vmk80xx [ 70.893177][ T6638] comedi: valid board names for usbduxsigma driver are: [ 70.896019][ T6638] usbduxsigma [ 70.897483][ T6638] comedi: valid board names for usbduxfast driver are: [ 70.900266][ T6638] usbduxfast [ 70.901679][ T6638] comedi: valid board names for usbdux driver are: [ 70.904903][ T6638] usbdux [ 70.906117][ T6638] comedi: valid board names for ni6501 driver are: [ 70.908628][ T6638] ni6501 [ 70.909829][ T6638] comedi: valid board names for dt9812 driver are: [ 70.912155][ T6638] dt9812 [ 70.913353][ T6638] comedi: valid board names for ni_labpc_cs driver are: [ 70.914895][ T58] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 70.917002][ T6638] ni_labpc_cs [ 70.920191][ T6638] comedi: valid board names for ni_daq_700 driver are: [ 70.922571][ T6638] ni_daq_700 [ 70.923834][ T6638] comedi: valid board names for labpc_pci driver are: [ 70.926525][ T6638] labpc_pci [ 70.927592][ T6638] comedi: valid board names for adl_pci9118 driver are: [ 70.930278][ T6638] pci9118dg [ 70.931484][ T6638] pci9118hg [ 70.932746][ T6638] pci9118hr [ 70.933946][ T6638] comedi: valid board names for 8255_pci driver are: [ 70.936305][ T6638] 8255_pci [ 70.937451][ T6638] comedi: valid board names for s526 driver are: [ 70.939441][ T6638] s526 [ 70.940368][ T6638] comedi: valid board names for multiq3 driver are: [ 70.942442][ T6638] multiq3 [ 70.943434][ T6638] comedi: valid board names for pcmuio driver are: [ 70.945882][ T6638] pcmuio48 [ 70.947117][ T6638] pcmuio96 [ 70.948401][ T6638] comedi: valid board names for pcmmio driver are: [ 70.950478][ T6638] pcmmio [ 70.951448][ T6638] comedi: valid board names for pcmda12 driver are: [ 70.953561][ T6638] pcmda12 [ 70.954758][ T6638] comedi: valid board names for pcmad driver are: [ 70.956859][ T6638] pcmad12 [ 70.957956][ T6638] pcmad16 [ 70.958896][ T6638] comedi: valid board names for ni_labpc driver are: [ 70.960888][ T6638] lab-pc-1200 [ 70.961979][ T6638] lab-pc-1200ai [ 70.963114][ T6638] lab-pc+ [ 70.964180][ T6638] comedi: valid board names for atmio16 driver are: [ 70.966697][ T6638] atmio16 [ 70.967743][ T6638] atmio16d [ 70.968814][ T6638] comedi: valid board names for ni_at_ao driver are: [ 70.970962][ T6638] at-ao-6 [ 70.971966][ T6638] at-ao-10 [ 70.973045][ T6638] comedi: valid board names for ni_at_a2150 driver are: [ 70.975353][ T6638] ni_at_a2150 [ 70.976466][ T6638] comedi: valid board names for adq12b driver are: [ 70.978616][ T6638] adq12b [ 70.979574][ T6638] comedi: valid board names for mpc624 driver are: [ 70.981617][ T6638] mpc624 [ 70.982572][ T6638] comedi: valid board names for c6xdigio driver are: [ 70.984750][ T6638] c6xdigio [ 70.985807][ T6638] comedi: valid board names for aio_iiro_16 driver are: [ 70.988034][ T6638] aio_iiro_16 [ 70.989279][ T6638] comedi: valid board names for aio_aio12_8 driver are: [ 70.991471][ T6638] aio_aio12_8 [ 70.992585][ T6638] aio_ai12_8 [ 70.993725][ T6638] aio_ao12_4 [ 70.995020][ T6638] comedi: valid board names for fl512 driver are: [ 70.997064][ T6638] fl512 [ 70.998296][ T6638] comedi: valid board names for dmm32at driver are: [ 71.000396][ T6638] dmm32at [ 71.001379][ T6638] comedi: valid board names for dt282x driver are: [ 71.003422][ T6638] dt2821 [ 71.004378][ T6638] dt2821-f [ 71.005710][ T6638] dt2821-g [ 71.006730][ T6638] dt2823 [ 71.007715][ T6638] dt2824-pgh [ 71.008820][ T6638] dt2824-pgl [ 71.009886][ T6638] dt2825 [ 71.010837][ T6638] dt2827 [ 71.011787][ T6638] dt2828 [ 71.012699][ T6638] dt2829 [ 71.013658][ T6638] dt21-ez [ 71.014691][ T6638] dt23-ez [ 71.015659][ T6638] dt24-ez [ 71.016641][ T6638] dt24-ez-pgl [ 71.017753][ T6638] comedi: valid board names for dt2817 driver are: [ 71.019858][ T6638] dt2817 [ 71.020814][ T6638] comedi: valid board names for dt2815 driver are: [ 71.022879][ T6638] dt2815 [ 71.023872][ T6638] comedi: valid board names for dt2814 driver are: [ 71.026310][ T6638] dt2814 [ 71.027269][ T6638] comedi: valid board names for dt2811 driver are: [ 71.029329][ T6638] dt2811-pgh [ 71.030391][ T6638] dt2811-pgl [ 71.031467][ T6638] comedi: valid board names for dt2801 driver are: [ 71.033595][ T6638] dt2801 [ 71.034555][ T6638] comedi: valid board names for das6402 driver are: [ 71.036798][ T6638] das6402-12 [ 71.037844][ T6638] das6402-16 [ 71.039250][ T6638] comedi: valid board names for das1800 driver are: [ 71.041330][ T6638] das-1701st [ 71.042398][ T6638] das-1701st-da [ 71.043596][ T6638] das-1702st [ 71.044705][ T6638] das-1702st-da [ 71.044707][ T58] usb 5-1: device descriptor read/64, error -71 [ 71.045939][ T6638] das-1702hr [ 71.045949][ T6638] das-1702hr-da [ 71.045956][ T6638] das-1701ao [ 71.045961][ T6638] das-1702ao [ 71.045966][ T6638] das-1801st [ 71.045970][ T6638] das-1801st-da [ 71.045974][ T6638] das-1802st [ 71.045979][ T6638] das-1802st-da [ 71.056894][ T6638] das-1802hr [ 71.057968][ T6638] das-1802hr-da [ 71.059138][ T6638] das-1801hc [ 71.060314][ T6638] das-1802hc [ 71.061470][ T6638] das-1801ao [ 71.062643][ T6638] das-1802ao [ 71.063795][ T6638] comedi: valid board names for das800 driver are: [ 71.066111][ T6638] das-800 [ 71.067500][ T6638] cio-das800 [ 71.068981][ T6638] das-801 [ 71.070460][ T6638] cio-das801 [ 71.071898][ T6638] das-802 [ 71.073340][ T6638] cio-das802 [ 71.074953][ T6638] cio-das802/16 [ 71.076528][ T6638] comedi: valid board names for isa-das08 driver are: [ 71.079312][ T6638] isa-das08 [ 71.080836][ T6638] das08-pgm [ 71.082367][ T6638] das08-pgh [ 71.083854][ T6638] das08-pgl [ 71.085420][ T6638] das08-aoh [ 71.086791][ T6638] das08-aol [ 71.088133][ T6638] das08-aom [ 71.089488][ T6638] das08/jr-ao [ 71.091413][ T6638] das08jr-16-ao [ 71.092974][ T6638] pc104-das08 [ 71.094494][ T6638] das08jr/16 [ 71.096011][ T6638] comedi: valid board names for das16m1 driver are: [ 71.098729][ T6638] das16m1 [ 71.100027][ T6638] comedi: valid board names for dac02 driver are: [ 71.102755][ T6638] dac02 [ 71.104053][ T6638] comedi: valid board names for rti802 driver are: [ 71.106561][ T6638] rti802 [ 71.107635][ T6638] comedi: valid board names for rti800 driver are: [ 71.109881][ T6638] rti800 [ 71.110934][ T6638] rti815 [ 71.111975][ T6638] comedi: valid board names for pcm3724 driver are: [ 71.114421][ T6638] pcm3724 [ 71.115622][ T6638] comedi: valid board names for pcl818 driver are: [ 71.117801][ T6638] pcl818l [ 71.118789][ T6638] pcl818h [ 71.119762][ T6638] pcl818hd [ 71.120737][ T6638] pcl818hg [ 71.121819][ T6638] pcl818 [ 71.122887][ T6638] pcl718 [ 71.123974][ T6638] pcm3718 [ 71.125054][ T6638] comedi: valid board names for pcl816 driver are: [ 71.127033][ T6638] pcl816 [ 71.128004][ T6638] pcl814b [ 71.128987][ T6638] comedi: valid board names for pcl812 driver are: [ 71.130988][ T6638] pcl812 [ 71.131910][ T6638] pcl812pg [ 71.132896][ T6638] acl8112pg [ 71.133973][ T6638] acl8112dg [ 71.135050][ T6638] acl8112hg [ 71.136121][ T6638] a821pgl [ 71.137076][ T6638] a821pglnda [ 71.138130][ T6638] a821pgh [ 71.139145][ T6638] a822pgl [ 71.140168][ T6638] a822pgh [ 71.141128][ T6638] a823pgl [ 71.142085][ T6638] a823pgh [ 71.143046][ T6638] pcl813 [ 71.143959][ T6638] pcl813b [ 71.145020][ T6638] acl8113 [ 71.146039][ T6638] iso813 [ 71.147030][ T6638] acl8216 [ 71.147969][ T6638] a826pg [ 71.148871][ T6638] comedi: valid board names for pcl730 driver are: [ 71.150988][ T6638] pcl730 [ 71.151914][ T6638] iso730 [ 71.152839][ T6638] acl7130 [ 71.153856][ T6638] pcm3730 [ 71.154970][ T6638] pcl725 [ 71.155931][ T6638] p8r8dio [ 71.156940][ T6638] acl7225b [ 71.158037][ T6638] p16r16dio [ 71.159098][ T6638] pcl733 [ 71.160055][ T6638] pcl734 [ 71.161015][ T6638] opmm-1616-xt [ 71.162148][ T6638] pearl-mm-p [ 71.163228][ T6638] ir104-pbf [ 71.164298][ T6638] comedi: valid board names for pcl726 driver are: [ 71.166011][ T58] usb usb5-port1: attempt power cycle [ 71.166478][ T6638] pcl726 [ 71.169556][ T6638] pcl727 [ 71.170509][ T6638] pcl728 [ 71.171490][ T6638] acl6126 [ 71.172525][ T6638] acl6128 [ 71.173536][ T6638] comedi: valid board names for pcl724 driver are: [ 71.175641][ T6638] pcl724 [ 71.176594][ T6638] pcl722 [ 71.177563][ T6638] pcl731 [ 71.178557][ T6638] acl7122 [ 71.179557][ T6638] acl7124 [ 71.180623][ T6638] pet48dio [ 71.181659][ T6638] pcmio48 [ 71.182663][ T6638] onyx-mm-dio [ 71.183816][ T6638] comedi: valid board names for pcl711 driver are: [ 71.187590][ T6638] pcl711 [ 71.188590][ T6638] pcl711b [ 71.189614][ T6638] acl8112hg [ 71.190722][ T6638] acl8112dg [ 71.191769][ T6638] comedi: valid board names for amplc_pc263 driver are: [ 71.194248][ T6638] pc263 [ 71.195242][ T6638] comedi: valid board names for amplc_pc236 driver are: [ 71.197549][ T6638] pc36at [ 71.198516][ T6638] comedi: valid board names for amplc_dio200 driver are: [ 71.200771][ T6638] pc212e [ 71.201740][ T6638] pc214e [ 71.202696][ T6638] pc215e [ 71.203713][ T6638] pc218e [ 71.204745][ T6638] pc272e [ 71.205712][ T6638] comedi: valid board names for comedi_parport driver are: [ 71.207970][ T6638] comedi_parport [ 71.209139][ T6638] comedi: valid board names for comedi_test driver are: [ 71.211370][ T6638] comedi_test [ 71.212503][ T6638] comedi: valid board names for comedi_bond driver are: [ 71.214764][ T6638] comedi_bond [ 71.504769][ T58] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 71.535553][ T58] usb 5-1: device descriptor read/8, error -71 [ 71.774834][ T58] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 71.795444][ T58] usb 5-1: device descriptor read/8, error -71 [ 71.831510][ T5731] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 71.906140][ T58] usb usb5-port1: unable to enumerate USB device [ 71.977367][ T6654] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.072161][ T6658] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.074775][ T6659] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.079776][ T6658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6658 comm=syz.3.236 [ 72.126674][ T6661] xt_CONNSECMARK: invalid mode: 0 [ 73.599750][ T6668] FAULT_INJECTION: forcing a failure. [ 73.599750][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 73.603631][ T6668] CPU: 2 UID: 0 PID: 6668 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.603647][ T6668] Tainted: [L]=SOFTLOCKUP [ 73.603651][ T6668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.603657][ T6668] Call Trace: [ 73.603662][ T6668] [ 73.603666][ T6668] dump_stack_lvl+0x100/0x190 [ 73.603683][ T6668] should_fail_ex.cold+0x5/0xa [ 73.603699][ T6668] should_failslab+0xc2/0x120 [ 73.603711][ T6668] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 73.603727][ T6668] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.603743][ T6668] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.603759][ T6668] mmu_topup_memory_caches+0x11a/0x170 [ 73.603775][ T6668] kvm_mmu_load+0xd6/0x23e0 [ 73.603789][ T6668] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 73.603800][ T6668] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.603812][ T6668] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.603825][ T6668] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 73.603838][ T6668] ? kvm_check_and_inject_events+0x961/0x1070 [ 73.603853][ T6668] ? record_steal_time+0x3d0/0xbc0 [ 73.603865][ T6668] vcpu_run+0x39f4/0x5ca0 [ 73.603885][ T6668] ? __pfx_vcpu_run+0x10/0x10 [ 73.603904][ T6668] ? rcu_is_watching+0x12/0xc0 [ 73.603923][ T6668] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 73.603938][ T6668] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 73.603958][ T6668] kvm_vcpu_ioctl+0x730/0x1720 [ 73.603970][ T6668] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.603982][ T6668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.603995][ T6668] ? do_vfs_ioctl+0x226/0x13e0 [ 73.604006][ T6668] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.604017][ T6668] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.604036][ T6668] ? __fget_files+0x215/0x3d0 [ 73.604047][ T6668] ? hook_file_ioctl_common+0x149/0x410 [ 73.604067][ T6668] ? selinux_file_ioctl+0x13b/0x290 [ 73.604079][ T6668] ? selinux_file_ioctl+0xb6/0x290 [ 73.604093][ T6668] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.604105][ T6668] __x64_sys_ioctl+0x18e/0x210 [ 73.604117][ T6668] do_syscall_64+0x10b/0xf80 [ 73.604129][ T6668] ? clear_bhb_loop+0x40/0x90 [ 73.604141][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.604152][ T6668] RIP: 0033:0x7efc75d9cdd9 [ 73.604162][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.604172][ T6668] RSP: 002b:00007efc76ce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.604183][ T6668] RAX: ffffffffffffffda RBX: 00007efc76015fa0 RCX: 00007efc75d9cdd9 [ 73.604189][ T6668] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 73.604195][ T6668] RBP: 00007efc76ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 73.604201][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.604207][ T6668] R13: 00007efc76016038 R14: 00007efc76015fa0 R15: 00007ffc1cede4c8 [ 73.604220][ T6668] [ 73.819681][ T6632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.864410][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 73.919711][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 74.005128][ T41] kauditd_printk_skb: 22 callbacks suppressed [ 74.005147][ T41] audit: type=1400 audit(1777609750.355:368): avc: denied { mount } for pid=6697 comm="syz.1.249" name="/" dev="pstore" ino=5779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 74.011177][ T6699] netlink: 36 bytes leftover after parsing attributes in process `syz.1.249'. [ 74.118219][ T6706] xt_CONNSECMARK: invalid mode: 0 [ 74.174685][ T5157] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 74.231251][ T6717] program syz.1.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.232505][ T41] audit: type=1400 audit(1777609750.585:369): avc: denied { append } for pid=6710 comm="syz.1.255" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.334693][ T5157] usb 5-1: Using ep0 maxpacket: 8 [ 74.338136][ T5157] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.342941][ T5157] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.346460][ T41] audit: type=1400 audit(1777609750.705:370): avc: denied { bind } for pid=6720 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.347734][ T5157] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.361464][ T5157] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.366397][ T5157] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.369748][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.579277][ T5157] usb 5-1: GET_CAPABILITIES returned 0 [ 74.581105][ T5157] usbtmc 5-1:16.0: can't read capabilities [ 74.786522][ T6736] loop8: detected capacity change from 0 to 7 [ 74.789352][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.794842][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.794862][ T6736] Dev loop8: unable to read RDB block 7 [ 74.795106][ T6736] loop8: unable to read partition table [ 74.804004][ T6736] loop8: partition table beyond EOD, truncated [ 74.807024][ T6736] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 74.862191][ T9] usb 5-1: USB disconnect, device number 9 [ 74.870385][ T6743] xt_CONNSECMARK: invalid mode: 0 [ 74.928296][ T6748] netlink: 'syz.2.266': attribute type 8 has an invalid length. [ 74.930890][ T6748] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 74.996229][ T41] audit: type=1400 audit(1777609751.355:371): avc: denied { create } for pid=6754 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.021970][ T6758] xt_hashlimit: invalid interval [ 75.088350][ T41] audit: type=1400 audit(1777609751.445:372): avc: denied { create } for pid=6766 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.095489][ T41] audit: type=1400 audit(1777609751.445:373): avc: denied { write } for pid=6766 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.110925][ T6769] xt_CONNSECMARK: invalid mode: 0 [ 75.204350][ T6776] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 75.228382][ T6776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.238360][ T6774] xt_CONNSECMARK: invalid mode: 0 [ 75.246841][ T6776] bond1: (slave ip6erspan0): making interface the new active one [ 75.251919][ T6776] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 75.461599][ T6793] xt_CONNSECMARK: invalid mode: 0 [ 75.492190][ T6796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=6796 comm=syz.3.285 [ 75.535985][ T6796] veth0_to_bond: entered allmulticast mode [ 75.545557][ T6797] binder: 6795:6797 ioctl 8030942b 200000000300 returned -22 [ 75.569430][ T41] audit: type=1400 audit(1777609751.925:374): avc: denied { view } for pid=6804 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.589817][ T6801] xt_CONNSECMARK: invalid mode: 0 [ 75.654059][ T6819] : entered promiscuous mode [ 75.660729][ T6819] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.663255][ T6819] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.666206][ T6819] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.668626][ T6819] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 75.695363][ T6821] xt_CONNSECMARK: invalid mode: 0 [ 75.907916][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 75.910671][ T6825] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.946606][ T6825] block nbd2: NBD_DISCONNECT [ 75.950840][ T6825] block nbd2: Disconnected due to user request. [ 75.954062][ T6825] block nbd2: shutting down sockets [ 75.986334][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 76.166378][ T6843] xt_CONNSECMARK: invalid mode: 0 [ 76.362451][ T6849] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.438117][ T5731] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 76.439204][ T41] audit: type=1400 audit(1777609752.795:375): avc: denied { listen } for pid=6850 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.442094][ T5731] CPU: 3 UID: 0 PID: 5731 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.442113][ T5731] Tainted: [L]=SOFTLOCKUP [ 76.442117][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.442127][ T5731] Workqueue: hci0 hci_rx_work [ 76.442143][ T5731] Call Trace: [ 76.442147][ T5731] [ 76.442152][ T5731] dump_stack_lvl+0x100/0x190 [ 76.442169][ T5731] sysfs_warn_dup.cold+0x1c/0x28 [ 76.442229][ T5731] sysfs_create_dir_ns+0x24b/0x2b0 [ 76.442276][ T5731] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 76.442291][ T5731] ? find_held_lock+0x2b/0x80 [ 76.442350][ T5731] ? kobject_add_internal+0x25f/0x930 [ 76.442366][ T5731] ? kobject_add_internal+0x25f/0x930 [ 76.442383][ T5731] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.442402][ T5731] kobject_add_internal+0x2c8/0x930 [ 76.442421][ T5731] kobject_add+0x16a/0x1e0 [ 76.442437][ T5731] ? __pfx_kobject_add+0x10/0x10 [ 76.442452][ T5731] ? class_to_subsys+0x10f/0x150 [ 76.442467][ T5731] ? kobject_put+0xb9/0x640 [ 76.442480][ T5731] ? _raw_spin_unlock+0x28/0x50 [ 76.442553][ T5731] device_add+0x294/0x1950 [ 76.442566][ T5731] ? __pfx_dev_set_name+0x10/0x10 [ 76.442581][ T5731] ? __pfx_device_add+0x10/0x10 [ 76.442595][ T5731] ? mgmt_send_event_skb+0x2fb/0x460 [ 76.442651][ T5731] hci_conn_add_sysfs+0x1a3/0x260 [ 76.442668][ T5731] le_conn_complete_evt+0x11eb/0x1f60 [ 76.442685][ T5731] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 76.442702][ T5731] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 76.442717][ T5731] ? skb_pull_data+0x15f/0x1e0 [ 76.442796][ T5731] hci_le_meta_evt+0x34a/0x5f0 [ 76.442810][ T5731] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 76.442825][ T5731] hci_event_packet+0x51c/0xcd0 [ 76.442839][ T5731] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 76.442852][ T5731] ? __pfx_hci_event_packet+0x10/0x10 [ 76.442866][ T5731] ? kcov_remote_start+0x374/0x660 [ 76.442881][ T5731] ? lockdep_hardirqs_on+0x78/0x100 [ 76.442898][ T5731] hci_rx_work+0x451/0xfc0 [ 76.442912][ T5731] process_one_work+0xa0e/0x1980 [ 76.442981][ T5731] ? __pfx_process_one_work+0x10/0x10 [ 76.443001][ T5731] ? __pfx_hci_rx_work+0x10/0x10 [ 76.443014][ T5731] worker_thread+0x5ef/0xe50 [ 76.443036][ T5731] ? kthread+0x13a/0x450 [ 76.443049][ T5731] ? __pfx_worker_thread+0x10/0x10 [ 76.443063][ T5731] kthread+0x370/0x450 [ 76.443077][ T5731] ? __pfx_kthread+0x10/0x10 [ 76.443092][ T5731] ret_from_fork+0x72b/0xd50 [ 76.443108][ T5731] ? __pfx_ret_from_fork+0x10/0x10 [ 76.443123][ T5731] ? __switch_to+0x800/0x1100 [ 76.443140][ T5731] ? __pfx_kthread+0x10/0x10 [ 76.443154][ T5731] ret_from_fork_asm+0x1a/0x30 [ 76.443177][ T5731] [ 76.443193][ T5731] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.448595][ T41] audit: type=1400 audit(1777609752.795:376): avc: denied { accept } for pid=6850 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.477630][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.477681][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.480076][ T5731] Bluetooth: hci0: failed to register connection device [ 76.482267][ T5731] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 76.507745][ T41] audit: type=1400 audit(1777609752.865:377): avc: denied { write } for pid=6850 comm="syz.1.302" path="socket:[12208]" dev="sockfs" ino=12208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.719341][ T6858] xt_CONNSECMARK: invalid mode: 0 [ 76.916127][ T6863] ISOFS: Unable to identify CD-ROM format. [ 77.283898][ T6879] binder: 6878:6879 ioctl c0306201 0 returned -14 [ 77.458435][ T6891] SQUASHFS error: Failed to read block 0x0: -5 [ 77.460529][ T6891] unable to read squashfs_super_block [ 77.463597][ T6890] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.503469][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.315'. [ 77.564701][ T5821] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 77.604047][ T6901] netlink: zone id is out of range [ 77.717826][ T5821] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.720789][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.723248][ T5821] usb 8-1: Product: syz [ 77.724536][ T5821] usb 8-1: Manufacturer: syz [ 77.726332][ T5821] usb 8-1: SerialNumber: syz [ 77.732504][ T5821] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 77.745863][ T5976] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 77.751313][ T6910] Bluetooth: MGMT ver 1.23 [ 77.752788][ T6910] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 77.759396][ T6910] exFAT-fs (nullb0): invalid boot record signature [ 77.761658][ T6910] exFAT-fs (nullb0): failed to read boot sector [ 77.764176][ T6910] exFAT-fs (nullb0): failed to recognize exfat type [ 77.964137][ T5821] usb 8-1: USB disconnect, device number 2 [ 78.126624][ T6919] xt_CONNSECMARK: invalid mode: 0 [ 78.165223][ T6881] random: crng reseeded on system resumption [ 78.281327][ T6941] binder: 6940:6941 ioctl c0306201 0 returned -14 [ 78.714929][ T6945] xt_CONNSECMARK: invalid mode: 0 [ 78.784687][ T5976] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 78.787790][ T5976] ath9k_htc: Failed to initialize the device [ 78.789987][ T5821] usb 8-1: ath9k_htc: USB layer deinitialized [ 78.981007][ T6957] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 79.169714][ T6976] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 79.191386][ T6976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.212329][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 79.212340][ T41] audit: type=1400 audit(1777609755.565:383): avc: denied { ioctl } for pid=6980 comm="syz.0.348" path="cgroup:[4026532873]" dev="nsfs" ino=4026532873 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.223584][ T6976] bond1: (slave ip6erspan0): making interface the new active one [ 79.228911][ T6976] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 79.255446][ T6985] binder: 6984:6985 ioctl 4010aeab 2000000002c0 returned -22 [ 79.288652][ T6992] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 79.292262][ T6992] netlink: 224 bytes leftover after parsing attributes in process `syz.0.353'. [ 79.306330][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 79.334758][ T843] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.342317][ T41] audit: type=1400 audit(1777609755.695:384): avc: denied { setopt } for pid=6991 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.453386][ T7001] binder: 7000:7001 ioctl c0306201 0 returned -14 [ 79.501498][ T843] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.505841][ T843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.509503][ T843] usb 8-1: Product: syz [ 79.512029][ T843] usb 8-1: Manufacturer: syz [ 79.514172][ T843] usb 8-1: SerialNumber: syz [ 79.523622][ T843] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.538864][ T5157] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.570516][ T41] audit: type=1400 audit(1777609755.925:385): avc: denied { read } for pid=7009 comm="syz.1.354" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.580846][ T41] audit: type=1400 audit(1777609755.925:386): avc: denied { open } for pid=7009 comm="syz.1.354" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.666824][ T41] audit: type=1326 audit(1777609756.025:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7014 comm="syz.2.360" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90b5d9cdd9 code=0x0 [ 79.742884][ T5821] usb 8-1: USB disconnect, device number 3 [ 79.757193][ T41] audit: type=1804 audit(1777609756.115:388): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.363" name="/newroot/95/bus/file0" dev="overlay" ino=520 res=1 errno=0 [ 79.760269][ T7023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=7023 comm=syz.1.363 [ 79.815853][ T7025] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.949363][ T6969] random: crng reseeded on system resumption [ 79.961428][ T41] audit: type=1400 audit(1777609756.315:389): avc: denied { mount } for pid=7030 comm="syz.1.367" name="/" dev="hugetlbfs" ino=17456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 79.971095][ T41] audit: type=1400 audit(1777609756.325:390): avc: denied { validate_trans } for pid=7030 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.971143][ T7031] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.367'. [ 80.470509][ T41] audit: type=1400 audit(1777609756.825:391): avc: denied { execute } for pid=7050 comm="syz.0.374" name="file0" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.624984][ T5157] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 80.625209][ T5157] ath9k_htc: Failed to initialize the device [ 80.628699][ T5821] usb 8-1: ath9k_htc: USB layer deinitialized [ 80.734715][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 80.740713][ T7074] gfs2: Unknown parameter 'norecoveryard#' [ 80.772380][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 80.884707][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 80.888123][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.891280][ T10] usb 5-1: config 0 has no interface number 0 [ 80.893538][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.898022][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.902312][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.909406][ T10] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 80.924768][ T10] usb 5-1: Product: syz [ 80.928272][ T10] usb 5-1: config 0 descriptor?? [ 80.931766][ T41] audit: type=1326 audit(1777609757.285:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7088 comm="syz.3.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efc79cdd9 code=0x7ff00000 [ 80.947628][ T10] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 81.066652][ T7099] bridge1: entered promiscuous mode [ 81.069421][ T7099] bridge1: entered allmulticast mode [ 81.143572][ T7083] kvm: pic: non byte write [ 81.146289][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.147130][ T7083] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 81.155886][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.174711][ T5157] usb 5-1: USB disconnect, device number 10 [ 81.180902][ T7113] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 81.325778][ T7122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.402654][ T7122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.472383][ T7122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.532214][ T7122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.628713][ T170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.641624][ T1264] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.663416][ T1264] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.675440][ T1264] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.910315][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 81.913020][ T7153] netlink: 'syz.0.408': attribute type 4 has an invalid length. [ 81.914132][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 81.916515][ T7153] netlink: 22 bytes leftover after parsing attributes in process `syz.0.408'. [ 81.949621][ T7155] nbd: must specify a size in bytes for the device [ 82.790096][ T7201] bridge: RTM_NEWNEIGH with invalid ether address [ 82.879636][ T7208] fuse: blksize only supported for fuseblk [ 82.907497][ T7210] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.915644][ T7210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.429'. [ 83.146850][ T7217] xt_CONNSECMARK: invalid mode: 0 [ 83.304437][ T7235] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 83.310239][ T7233] macsec1: entered promiscuous mode [ 83.312114][ T7233] macsec1: entered allmulticast mode [ 83.332388][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 83.372283][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.442'. [ 83.462342][ T7255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.472830][ T7251] xt_CONNSECMARK: invalid mode: 0 [ 83.527749][ T7264] Cannot find add_set index 0 as target [ 84.018094][ T7286] xt_CONNSECMARK: invalid mode: 0 [ 84.246100][ T7308] ======================================================= [ 84.246100][ T7308] WARNING: The mand mount option has been deprecated and [ 84.246100][ T7308] and is ignored by this kernel. Remove the mand [ 84.246100][ T7308] option from the mount to silence this warning. [ 84.246100][ T7308] ======================================================= [ 84.256882][ T7308] cgroup: name respecified [ 84.259703][ T41] kauditd_printk_skb: 2547 callbacks suppressed [ 84.259713][ T41] audit: type=1400 audit(1777609760.615:2940): avc: denied { execute } for pid=7307 comm="syz.0.464" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.296757][ T7309] netlink: 'syz.3.463': attribute type 5 has an invalid length. [ 84.537001][ T7328] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 84.630173][ T7340] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.643659][ T7344] binder: 7343:7344 ioctl c0306201 2000000000c0 returned -14 [ 84.680207][ T7347] syz.3.475 (7347): /proc/7337/oom_adj is deprecated, please use /proc/7337/oom_score_adj instead. [ 85.342797][ T7392] __nla_validate_parse: 2 callbacks suppressed [ 85.342808][ T7392] netlink: 128 bytes leftover after parsing attributes in process `syz.0.488'. [ 85.406826][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.410126][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.413265][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.417655][ T7396] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 85.422583][ T7396] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 85.428273][ T7396] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 85.437220][ T7396] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.443482][ T7396] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.465821][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.469496][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.473001][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.479217][ T7396] xfrm0 speed is unknown, defaulting to 1000 [ 85.479478][ T7398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7398 comm=syz.1.491 [ 85.491067][ T7398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7398 comm=syz.1.491 [ 85.504485][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.491'. [ 85.678449][ T41] audit: type=1400 audit(1777609762.035:2941): avc: denied { mount } for pid=7413 comm="syz.0.497" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.723704][ T7415] xt_hashlimit: size too large, truncated to 1048576 [ 85.833939][ T41] audit: type=1400 audit(1777609762.185:2942): avc: denied { create } for pid=7426 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.896124][ T41] audit: type=1400 audit(1777609762.255:2943): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.929608][ T7433] syzkaller0: entered promiscuous mode [ 85.931980][ T7433] syzkaller0: entered allmulticast mode [ 85.974093][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 86.111543][ T41] audit: type=1400 audit(1777609762.465:2944): avc: denied { nlmsg_read } for pid=7442 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.250956][ T41] audit: type=1400 audit(1777609762.605:2945): avc: denied { read write } for pid=7446 comm="syz.3.508" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 86.260274][ T41] audit: type=1400 audit(1777609762.605:2946): avc: denied { open } for pid=7446 comm="syz.3.508" path="/128/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 86.270114][ T41] audit: type=1400 audit(1777609762.625:2947): avc: denied { ioctl } for pid=7446 comm="syz.3.508" path="/128/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 86.712966][ T24] cfg80211: failed to load regulatory.db [ 88.596776][ T7409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.670563][ T41] audit: type=1400 audit(1777609765.025:2948): avc: denied { read } for pid=7465 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.672277][ T7466] random: crng reseeded on system resumption [ 88.677529][ T41] audit: type=1400 audit(1777609765.025:2949): avc: denied { append } for pid=7464 comm="syz.2.512" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.691208][ T7466] 9p: Invalid uid '0x00000000ffffffff' [ 88.740281][ T7475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7475 comm=syz.1.517 [ 88.747234][ T7475] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 88.761523][ T7475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.676242][ T7532] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.531'. [ 89.677048][ T7531] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.531'. [ 89.727478][ T7529] capability: warning: `syz.0.529' uses deprecated v2 capabilities in a way that may be insecure [ 92.035886][ T7502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.041986][ T7523] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 92.044556][ T7523] netlink: 96 bytes leftover after parsing attributes in process `syz.3.528'. [ 92.047257][ T7523] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 92.049783][ T7523] netlink: 'syz.3.528': attribute type 8 has an invalid length. [ 92.052248][ T7523] netlink: 582 bytes leftover after parsing attributes in process `syz.3.528'. [ 92.056055][ T7523] netlink: 1 bytes leftover after parsing attributes in process `syz.3.528'. [ 92.234227][ T5834] IPVS: starting estimator thread 0... [ 92.324808][ T7570] IPVS: using max 44 ests per chain, 105600 per kthread [ 92.326933][ T7574] openvswitch: netlink: Flow key attr not present in new flow. [ 92.665625][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.188676][ T7563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.230074][ T7607] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.239121][ T7607] overlayfs: failed lookup in lower (newroot/133, name='bus', err=-40): overlapping layers [ 95.249776][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 95.249792][ T41] audit: type=1400 audit(1777609771.605:2954): avc: denied { create } for pid=7605 comm="syz.2.555" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.262854][ T41] audit: type=1400 audit(1777609771.615:2955): avc: denied { link } for pid=7605 comm="syz.2.555" name="#f" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.270504][ T7606] vlan2: entered allmulticast mode [ 95.273036][ T41] audit: type=1400 audit(1777609771.615:2956): avc: denied { rename } for pid=7605 comm="syz.2.555" name="#10" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.275093][ T7606] vlan1: entered allmulticast mode [ 95.284065][ T7606] veth0_vlan: entered allmulticast mode [ 95.320444][ T7617] bridge0: port 3(syz_tun) entered blocking state [ 95.325247][ T7617] bridge0: port 3(syz_tun) entered disabled state [ 95.332466][ T7617] syz_tun: entered allmulticast mode [ 95.336425][ T7617] syz_tun: entered promiscuous mode [ 95.340730][ T7617] bridge0: port 3(syz_tun) entered blocking state [ 95.343432][ T7617] bridge0: port 3(syz_tun) entered forwarding state [ 95.352027][ T7620] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 95.357452][ T7620] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 95.358701][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 95.371665][ T41] audit: type=1400 audit(1777609771.725:2957): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.549716][ T7631] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 95.957177][ T7647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.960321][ T7647] netem: change failed [ 96.213421][ T7652] erofs (device loop1): cannot find valid erofs superblock [ 96.219489][ T7651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.571'. [ 96.280337][ T7660] binder: 7659:7660 ioctl 4018620d 0 returned -22 [ 96.303435][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 96.307411][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 96.657729][ T7676] macvtap0: entered allmulticast mode [ 96.659804][ T7676] veth0_macvtap: entered allmulticast mode [ 96.833077][ T7679] ------------[ cut here ]------------ [ 96.835428][ T7679] !chanctx_conf [ 96.835436][ T7679] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x5c5/0x730, CPU#2: syz.3.581/7679 [ 96.841501][ T7679] Modules linked in: [ 96.842944][ T7679] CPU: 2 UID: 0 PID: 7679 Comm: syz.3.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.846661][ T7679] Tainted: [L]=SOFTLOCKUP [ 96.848158][ T7679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.851544][ T7679] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 96.853644][ T7679] Code: 48 8d 35 00 00 00 00 e8 09 4d e3 f6 e8 04 a5 ec f6 e9 20 fe ff ff e8 2a 61 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 1c 61 07 f7 90 <0f> 0b 90 eb b1 e8 11 61 07 f7 e8 5c ad eb f6 31 ff 89 c3 89 c6 e8 [ 96.860147][ T7679] RSP: 0018:ffffc900066af200 EFLAGS: 00010283 [ 96.862239][ T7679] RAX: 0000000000000731 RBX: ffff888057550000 RCX: ffffc90007882000 [ 96.864966][ T7679] RDX: 0000000000080000 RSI: ffffffff8b012a84 RDI: ffff88802b6d8000 [ 96.867645][ T7679] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 96.870497][ T7679] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802efd5fa0 [ 96.873141][ T7679] R13: ffff888058fb0f20 R14: ffff8880364e8000 R15: 0000000000000000 [ 96.875863][ T7679] FS: 00007f7efd7286c0(0000) GS:ffff8880d6576000(0000) knlGS:0000000000000000 [ 96.879252][ T7679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.881547][ T7679] CR2: 0000200000001080 CR3: 00000000005f7000 CR4: 0000000000352ef0 [ 96.884255][ T7679] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 96.887171][ T7679] DR3: 010080000000000d DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.890309][ T7679] Call Trace: [ 96.891678][ T7679] [ 96.892704][ T7679] rate_control_rate_init_all_links+0x76/0x1f0 [ 96.894874][ T7679] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 96.896988][ T7679] sta_apply_parameters+0x1234/0x2090 [ 96.899014][ T7679] ? __sta_info_alloc+0x1146/0x1cd0 [ 96.900847][ T7679] ieee80211_add_station+0x3ff/0x760 [ 96.902639][ T7679] nl80211_new_station+0x14a9/0x20f0 [ 96.904521][ T7679] ? __pfx_nl80211_new_station+0x10/0x10 [ 96.906553][ T7679] ? nl80211_pre_doit+0x19a/0xae0 [ 96.908286][ T7679] genl_family_rcv_msg_doit+0x214/0x300 [ 96.910431][ T7679] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 96.912483][ T7679] ? bpf_lsm_capable+0x9/0x10 [ 96.914108][ T7679] ? security_capable+0x80/0x260 [ 96.915851][ T7679] ? ns_capable+0xd2/0xf0 [ 96.917293][ T7679] genl_rcv_msg+0x560/0x800 [ 96.918810][ T7679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.920507][ T7679] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 96.922320][ T7679] ? __pfx_nl80211_new_station+0x10/0x10 [ 96.924228][ T7679] ? __pfx_nl80211_post_doit+0x10/0x10 [ 96.926178][ T7679] netlink_rcv_skb+0x159/0x420 [ 96.927796][ T7679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.929841][ T7679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.931654][ T7679] ? netlink_deliver_tap+0x1ae/0xcc0 [ 96.933450][ T7679] genl_rcv+0x28/0x40 [ 96.934904][ T7679] netlink_unicast+0x585/0x850 [ 96.936528][ T7679] ? __pfx_netlink_unicast+0x10/0x10 [ 96.938369][ T7679] netlink_sendmsg+0x8b0/0xda0 [ 96.939990][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.941847][ T7679] ? __might_fault+0x90/0x140 [ 96.943591][ T7679] ____sys_sendmsg+0x9e1/0xb70 [ 96.945385][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.947150][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.948999][ T7679] ? preempt_schedule_thunk+0x16/0x30 [ 96.950822][ T7679] ? try_to_wake_up+0x5f6/0x1900 [ 96.952521][ T7679] ___sys_sendmsg+0x190/0x1e0 [ 96.954122][ T7679] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.955912][ T7679] ? futex_private_hash_put+0x107/0x1c0 [ 96.957736][ T7679] __sys_sendmsg+0x170/0x220 [ 96.959178][ T7679] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.960930][ T7679] ? __x64_sys_futex+0x34f/0x4d0 [ 96.962613][ T7679] ? rcu_is_watching+0x12/0xc0 [ 96.964341][ T7679] do_syscall_64+0x10b/0xf80 [ 96.966060][ T7679] ? clear_bhb_loop+0x40/0x90 [ 96.967659][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.970002][ T7679] RIP: 0033:0x7f7efc79cdd9 [ 96.971512][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.978083][ T7679] RSP: 002b:00007f7efd728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.981066][ T7679] RAX: ffffffffffffffda RBX: 00007f7efca15fa0 RCX: 00007f7efc79cdd9 [ 96.983695][ T7679] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 96.986416][ T7679] RBP: 00007f7efc832d69 R08: 0000000000000000 R09: 0000000000000000 [ 96.989323][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.992032][ T7679] R13: 00007f7efca16038 R14: 00007f7efca15fa0 R15: 00007ffdfffe1ee8 [ 96.994768][ T7679] [ 96.995826][ T7679] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.998298][ T7679] CPU: 2 UID: 0 PID: 7679 Comm: syz.3.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.001841][ T7679] Tainted: [L]=SOFTLOCKUP [ 97.003311][ T7679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.006631][ T7679] Call Trace: [ 97.007768][ T7679] [ 97.008970][ T7679] dump_stack_lvl+0x100/0x190 [ 97.010589][ T7679] vpanic+0x552/0x970 [ 97.011949][ T7679] ? __pfx_vpanic+0x10/0x10 [ 97.013522][ T7679] panic+0xd1/0xe0 [ 97.014798][ T7679] ? __pfx_panic+0x10/0x10 [ 97.016286][ T7679] check_panic_on_warn.cold+0x19/0x34 [ 97.018110][ T7679] ? rate_control_rate_init+0x5c5/0x730 [ 97.020155][ T7679] __warn.cold+0x191/0x328 [ 97.021680][ T7679] __report_bug+0x296/0x3d0 [ 97.023252][ T7679] ? rate_control_rate_init+0x5c5/0x730 [ 97.025121][ T7679] ? __pfx___report_bug+0x10/0x10 [ 97.026813][ T7679] ? kasan_save_track+0x14/0x30 [ 97.028557][ T7679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 97.030747][ T7679] ? ieee80211_add_station+0x5f1/0x760 [ 97.032583][ T7679] ? nl80211_new_station+0x14a9/0x20f0 [ 97.034440][ T7679] ? genl_family_rcv_msg_doit+0x214/0x300 [ 97.036370][ T7679] ? netlink_rcv_skb+0x159/0x420 [ 97.038088][ T7679] ? netlink_unicast+0x585/0x850 [ 97.040065][ T7679] ? netlink_sendmsg+0x8b0/0xda0 [ 97.041773][ T7679] ? ____sys_sendmsg+0x9e1/0xb70 [ 97.043480][ T7679] ? rate_control_rate_init+0x5c5/0x730 [ 97.045343][ T7679] report_bug+0xb2/0x220 [ 97.046778][ T7679] ? rate_control_rate_init+0x5c5/0x730 [ 97.048655][ T7679] handle_bug+0x16a/0x2a0 [ 97.050132][ T7679] exc_invalid_op+0x17/0x50 [ 97.051665][ T7679] asm_exc_invalid_op+0x1a/0x20 [ 97.053323][ T7679] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 97.055380][ T7679] Code: 48 8d 35 00 00 00 00 e8 09 4d e3 f6 e8 04 a5 ec f6 e9 20 fe ff ff e8 2a 61 07 f7 90 0f 0b 90 e9 12 fe ff ff e8 1c 61 07 f7 90 <0f> 0b 90 eb b1 e8 11 61 07 f7 e8 5c ad eb f6 31 ff 89 c3 89 c6 e8 [ 97.061822][ T7679] RSP: 0018:ffffc900066af200 EFLAGS: 00010283 [ 97.063867][ T7679] RAX: 0000000000000731 RBX: ffff888057550000 RCX: ffffc90007882000 [ 97.066524][ T7679] RDX: 0000000000080000 RSI: ffffffff8b012a84 RDI: ffff88802b6d8000 [ 97.069196][ T7679] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 97.071824][ T7679] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802efd5fa0 [ 97.074482][ T7679] R13: ffff888058fb0f20 R14: ffff8880364e8000 R15: 0000000000000000 [ 97.077089][ T7679] ? rate_control_rate_init+0x5c4/0x730 [ 97.078952][ T7679] rate_control_rate_init_all_links+0x76/0x1f0 [ 97.080950][ T7679] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 97.082895][ T7679] sta_apply_parameters+0x1234/0x2090 [ 97.084702][ T7679] ? __sta_info_alloc+0x1146/0x1cd0 [ 97.086478][ T7679] ieee80211_add_station+0x3ff/0x760 [ 97.088259][ T7679] nl80211_new_station+0x14a9/0x20f0 [ 97.090246][ T7679] ? __pfx_nl80211_new_station+0x10/0x10 [ 97.092286][ T7679] ? nl80211_pre_doit+0x19a/0xae0 [ 97.094037][ T7679] genl_family_rcv_msg_doit+0x214/0x300 [ 97.095938][ T7679] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 97.098027][ T7679] ? bpf_lsm_capable+0x9/0x10 [ 97.099664][ T7679] ? security_capable+0x80/0x260 [ 97.101345][ T7679] ? ns_capable+0xd2/0xf0 [ 97.102821][ T7679] genl_rcv_msg+0x560/0x800 [ 97.104391][ T7679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.106107][ T7679] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 97.107904][ T7679] ? __pfx_nl80211_new_station+0x10/0x10 [ 97.109845][ T7679] ? __pfx_nl80211_post_doit+0x10/0x10 [ 97.111668][ T7679] netlink_rcv_skb+0x159/0x420 [ 97.113326][ T7679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.115023][ T7679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.116818][ T7679] ? netlink_deliver_tap+0x1ae/0xcc0 [ 97.118669][ T7679] genl_rcv+0x28/0x40 [ 97.120034][ T7679] netlink_unicast+0x585/0x850 [ 97.121654][ T7679] ? __pfx_netlink_unicast+0x10/0x10 [ 97.123444][ T7679] netlink_sendmsg+0x8b0/0xda0 [ 97.125070][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.126841][ T7679] ? __might_fault+0x90/0x140 [ 97.128477][ T7679] ____sys_sendmsg+0x9e1/0xb70 [ 97.130274][ T7679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.132042][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.133856][ T7679] ? preempt_schedule_thunk+0x16/0x30 [ 97.135663][ T7679] ? try_to_wake_up+0x5f6/0x1900 [ 97.137346][ T7679] ___sys_sendmsg+0x190/0x1e0 [ 97.139007][ T7679] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.140745][ T7679] ? futex_private_hash_put+0x107/0x1c0 [ 97.142763][ T7679] __sys_sendmsg+0x170/0x220 [ 97.144447][ T7679] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.146191][ T7679] ? __x64_sys_futex+0x34f/0x4d0 [ 97.147866][ T7679] ? rcu_is_watching+0x12/0xc0 [ 97.149868][ T7679] do_syscall_64+0x10b/0xf80 [ 97.151780][ T7679] ? clear_bhb_loop+0x40/0x90 [ 97.153452][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.155362][ T7679] RIP: 0033:0x7f7efc79cdd9 [ 97.156874][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.163437][ T7679] RSP: 002b:00007f7efd728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.166269][ T7679] RAX: ffffffffffffffda RBX: 00007f7efca15fa0 RCX: 00007f7efc79cdd9 [ 97.168997][ T7679] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 97.171690][ T7679] RBP: 00007f7efc832d69 R08: 0000000000000000 R09: 0000000000000000 [ 97.174393][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.177082][ T7679] R13: 00007f7efca16038 R14: 00007f7efca15fa0 R15: 00007ffdfffe1ee8 [ 97.179805][ T7679] [ 97.181891][ T7679] Kernel Offset: disabled [ 97.183538][ T7679] Rebooting in 86400 seconds..