last executing test programs: 1m51.639951552s ago: executing program 2 (id=195): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="65660f559246000000642e2e10c1f30fc292d86bfa12000f01c80f01cfb8010000000f01c1b96d020000b8d05d0000ba000000000f30b9a7090000b82c000000ba000000000f30b9800000c00f3235000400000f30c4c1fe166155", 0x5b}], 0x1, 0x11, &(0x7f0000000100)=[@cr0={0x0, 0x2}], 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000540)={0x3, 0x40, 0x380, &(0x7f0000000140)=[0x8, 0xdb0, 0x5c, 0x5, 0x5, 0x5, 0x8, 0x5, 0xa48, 0x8, 0x5, 0x1, 0x2b25, 0x9, 0x7, 0x5, 0x7fff, 0x6, 0x2, 0x4, 0x8, 0x5, 0xfffffffffffff031, 0x9, 0x9, 0x8, 0x80000001, 0x3, 0x4, 0x3ff, 0x8000000000000000, 0x6, 0x3, 0xa, 0x4, 0xffffffffffffffff, 0x3, 0x9, 0x5, 0xb, 0x5, 0x7, 0xe, 0x6, 0x6, 0x5, 0x5117903d, 0xe, 0x3, 0x2, 0x7, 0x80000000, 0x70, 0x5, 0x5, 0x2c6f, 0x2, 0x5b3c, 0x7, 0xe865, 0x7346, 0x400, 0x8000000000000000, 0x0, 0x3e, 0x81, 0x5, 0x401, 0x3ff, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x80000001, 0x7ff, 0x5, 0x3, 0x6, 0xfffffffffffffff9, 0x6, 0xa00000000000000, 0x9, 0xeb2, 0x6, 0x9, 0x5, 0x2, 0x2, 0xffffffffffffffc0, 0x8, 0x1b9, 0x0, 0xfffffffffffffe01, 0x0, 0x200, 0x9, 0x1, 0x7, 0xffffffff, 0xd3, 0x8585e79, 0xa, 0x1000, 0x80, 0x7, 0x6, 0xfffffffffffffffb, 0x100000001, 0x3, 0x5, 0x3, 0x4, 0x8001, 0x7, 0x1ff, 0x28, 0x4, 0x9, 0x0, 0x60, 0xd, 0x3, 0x7fffffffffffffff, 0x7ff, 0x95, 0x0, 0x0, 0x2]}) setxattr$trusted_overlay_nlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)={'U+', 0xc}, 0x16, 0x1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000680)=@userptr={0x1000, 0x1, 0x4, 0x200, 0x52d, {0x77359400}, {0x5, 0x0, 0x9, 0x10, 0x6, 0x2, "3a8464d1"}, 0x2, 0x2, {&(0x7f0000000640)}, 0x5, 0x0, r0}) r1 = openat(r0, &(0x7f0000000700)='./file0\x00', 0x0, 0x20) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe8, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3b7e657b93cfb7ce}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x40010) mkdirat(r0, &(0x7f00000009c0)='./file0\x00', 0x24) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000850}, 0x40040) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000000b40)) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd4, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x60, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xcedd}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x7}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc480}, 0x4040000) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000000d80)) syz_open_dev$dri(&(0x7f0000000e00), 0x9, 0x50d000) statx(r1, &(0x7f0000000f00)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x20801, &(0x7f0000001040)={'trans=unix,', {[{@noextend}], [{@euid_gt={'euid>', r7}}, {@subj_user={'subj_user', 0x3d, 'vxcan0\x00'}}, {@dont_appraise}, {@measure}, {@fsname={'fsname', 0x3d, 'U+'}}]}}) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000010c0)={0x5, "2aeb0b7c0f1f6b57c3bea3c23a846c548b6c95b42ebbc38524fc4de83525d5ea1a7b44e1c96c83875153fba255b53b24cca12f251ff51a5da1ed7306e10b44b31f0a189706e0fbc6110236b63bc580469b8cece8c2e99f6ed7049918163772fa0ca1f40e99b7bb27232aec7a3cc599e99348219cac9c1f4257e62efcd3f148f51bda71ad608b8582c67960492a04be4ea8ee4d7a89ed0bd1cfde45a4e3b18189c44454d2f9d44f50b4bc0b79c8741bef7e7bfb2b74d19e00c133ef0a87bb72cff5f6b1e7186694470fc283d63f2786d4ea6f0242ecb3306e7a136f55144c1df562ead94d63b74087f34e2f9a624afcf582fcedb01d1e5d8e2e9bf742b1a9493d"}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r5) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x20044091) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000001340)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001380)) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000002440)={0xa1c6, 0xb7b, &(0x7f00000013c0)="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", &(0x7f00000023c0)="a75714d2faacbdebadff033fb6e083079e4d116e88f6630bb8dcfbf890645624ca55d993b4bb84420242f866d143a3270536420ad5beded63c7cfd0e7341fbbd1a177b5ae40bd8a8815e05417d0415925f91c5ef2b55f5b0c4059984694acbd7abb906e928", 0x1000, 0x65}) syz_genetlink_get_family_id$devlink(&(0x7f0000002480), r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000024c0)={0x2, 'macvlan0\x00', {0x10000}, 0x80}) 1m51.589445469s ago: executing program 2 (id=196): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46", 0xa1}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000140)='R\x10rust\xe3c*sgrVid:De', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x23a, 0x800) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m51.248478608s ago: executing program 2 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x6, 0x5, 0x5, 0x8, 0x8, 0xcd, 0x7, 0x1, 0x3, 0x80, 0xc, 0x3, 0xac, 0x9c, 0x80}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async, rerun: 64) bind$can_raw(r3, &(0x7f0000000500), 0x10) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="40e9cd99005d315b1a8d7a9bb64bd9b0c2e7864cb90951cbca29fe1b65fb4a01177a6c20d2c464c5a916c8eb58057831e4486f1e6d7afc6fec6bb6fc4a3105ec2f34a96b74cccb61d25a63c3eff96c621ee3a65527e8df59579e833e0454c93b0c15d63b3acd1c7aa3e6604dfb752cfe6b482ff22bc4412964f046aa776288d13f7ad498955e28318bfeb731fbfbf9af243d18df737bee151adc622f4fc020646adb57ed2eb27d8357ec82", @ANYRES16=r5, @ANYBLOB="01002bbd7000000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c481fde2c8c744240000000000c74424020e00000064410f01c40f101c2436430fc76f00c744240001cac93fc744240602000000939393240600000000c441fc2fa20b0000483e440f01c9c46119f3660066450fc7b30000000065410f0636660f3881450c", 0x65}], 0xaaaaaaaaaaaaa8a, 0x4d, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0xfc, 0x53, 0x5, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) (async) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x55, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0x33, 0x0, &(0x7f0000000180)="b907ef19edfff007049e0ff0888e72020017e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r7 = socket(0x22, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x72bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xf}]}}]}, 0x44}}, 0x20004055) r8 = syz_clone(0x10100100, &(0x7f0000000440)="6a68920f6cae125ea817141ce3b6ced757d2532612e6cc99856ce62e5c8ef1f056cd374730ae302a0e64efe2480b3ddcc14f0db456325f5938fb5b49aba3b26b1e8a8af60437ebb9ba1aef7c7b4a936747447d77f2801e7de89756f0d948b5ed4dad38ecf0f11d51aed87a98e8f28e3cc1df9b7aa665ee65ec8259c1216ad1c3c6a220660a86574ccf0d806f39ce16febeaa68f5511997de5891d6f06384985d6ee62ac277bc8ee1375185f010da6f1a789cf201d5c14b09a1e9d389b75adb6ad614bd913a5142c1bcbd2cf2f85c6d84c880514c3257441df2dac3770616c5", 0xdf, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="faafd3cddd870e44376b199b4ab760a1402593631bee02a7") (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000140003801000008008000340"], 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) (async) r10 = syz_open_dev$evdev(&(0x7f0000001e00), 0x1, 0x80) ioctl$EVIOCGVERSION(r10, 0x80044501, &(0x7f0000001e40)=""/161) (async, rerun: 32) syz_open_procfs$namespace(r8, &(0x7f0000000600)='ns/mnt\x00') (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m51.190435906s ago: executing program 2 (id=206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b40), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="4a89b3415659d6dfc647efa19959cb8ec51388cf9ce9919f5a0090bafba92bbb6b280cf6b8a4b7e0e20caced231593d8316b85e362af08d3e5a3597fbe5ffbbdc13b2898cad4e3e494b8ba3a449b622ed6cd671f7ac7cf759a2d6a47514854ebf5d807f71fb64b1dc0dc02c7c2151ba9a4ae714e8fef6a6c6d87f89b97cf03dc9afa5acdcac313d0b23326de7ee9fc37bca72deb3be78ef9d2fcb85d5d69f880fcfba9a72f8521122cb0d427b5caea94934147cb129a1bfaf6a806f4b91120a9e33a4df902c093ae4c70def7bc15af6df17a3da1bf7d8f0539b077"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x24000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003c00)=ANY=[@ANYBLOB="38000010", @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf251d0000000c000600010000000100000018002f8008000100090000000c0002000201aaaaaaaaaaaa"], 0x38}}, 0x40) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000020000000000001800000018003080140001800500020000000000080001000100000008000300", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 1m51.069462795s ago: executing program 2 (id=208): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x1, 0x4, 0xdc7c, 0xf800, 0x8, 0x7}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x3e) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) 1m50.810356961s ago: executing program 2 (id=211): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) 1m50.786232503s ago: executing program 32 (id=211): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) 1m14.158560801s ago: executing program 0 (id=680): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) wait4(r0, 0x0, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r5, 0x105, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "fb390df4c19d6077161ea9ba9f67d39d"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c811}, 0x4000004) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r9, 0x3, 0x1) getdents64(r9, 0x0, 0x0) getdents(r9, &(0x7f0000000180)=""/152, 0x98) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3, 0x7fffffff, 0x449, 0xf, 0x42000, r9, 0xfffffff9, '\x00', r10, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000000000)={0x100, @multicast}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES8=r1, @ANYBLOB="0386000000000000140012800b0001006970766c616e0080", @ANYRES32, @ANYBLOB="08001b"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1m14.1143916s ago: executing program 0 (id=682): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0c9271509866fc2fc919dcd1e42ab246"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fdf09e2897e1d3d6ca1397d2aaac5e04"}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x40) (async) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000180)='\xb3^*:}#(\\%\xbb\x00', 0x0, r0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000100)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) 1m14.112817621s ago: executing program 0 (id=683): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m11.049679516s ago: executing program 0 (id=705): mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount(0x0, 0x0, &(0x7f0000000240)='devpts\x00', 0x100000, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 1m11.00009719s ago: executing program 0 (id=706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000006c00)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002940)=""/133, 0x85}], 0x1}, 0xea2}], 0x1, 0x2043, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB="0080000080c581bb786a1987d3f25dc2916616910c3bfa824eb091046f1bf5d89d0634ef1ac923a0c69131ad649d559f951f6b8fedae4af3320fee459b61aa5c4042b397d149f2e1bee82ea313d0bbf1df78ad4eaa3c46fc9cce2dd5d2c3b56fa9f2e15e40d539331c62c4a55812c571cdf5a1f74fd817c6d5106a42b401b3360988bc40402bc4734887f3ace0f721fe04ed46914812272268a0a2872bbd103f58fe21aa1b1b2db0d0d4c0e7776b01604066199b7c548652fbbfc7fb74bf6341c076e77e854305053f34cdf6027572673e26e12326788c63009cbe2fc3057687daf4cd9f2d", @ANYRES16=r3, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018004000300080001000300000004000180"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x3000c011, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x1, r4, &(0x7f0000000000), 0xfffffffefffffffd) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000200)={0x1, @capture={0x0, 0x0, {0x101, 0x2f88}, 0x4, 0x6}}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m10.929672136s ago: executing program 0 (id=707): syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 55.851180358s ago: executing program 33 (id=707): syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.860029038s ago: executing program 4 (id=1344): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000180001002bbd7000fddbdf25022080040002ff00001a00000a53aa861730d6323a2033612d8aad753da850da240bd247e5a06bdd0d2ef6ebf0f6222e12c5"], 0x1c}}, 0x0) 3.859158495s ago: executing program 4 (id=1345): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1ae) chown(0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x168) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (rerun: 32) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x1, 0x400000000, 0x80000001, 0xfffffffffffffff4, 0x0, 0x2004c8, 0x8000000, 0x4, 0x2, 0x7, 0x400, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x100000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x1fffe, 0x9, 0x0, 0x80000005, 0x1], 0xe000, 0x41981}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000800) 3.719982935s ago: executing program 4 (id=1346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9e, 0x3, 0x81, 0xf, 0x0, 0x0, 0xf9, 0x1, 0x7f}, {0x94a0a44099bb8ca2, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x67, 0xc5, 0x7, 0x5, 0x40}, {0x1, 0xdddd1000, 0xc, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0x1c, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7d, 0x0, 0x0, 0xc, 0x7f, 0x5, 0x9, 0x1}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x5, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7c, 0xd}, {0xffff1000, 0x80a0000, 0x8, 0x2, 0x8, 0x3, 0x3, 0x0, 0x9, 0xb, 0xe, 0x7}, {0x74000, 0xdddd0000, 0x3, 0x6, 0x0, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x59}, {0xffffffff, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0xfff, 0x1]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.629067262s ago: executing program 4 (id=1347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000840)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r10, 0x4141, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) 2.327832869s ago: executing program 1 (id=1358): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) epoll_create1(0x0) socket(0x10, 0x80002, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000180)=0x4, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000019100)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x5c}, 0xff00) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x189000, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x104, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x104, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40440, 0x1c1) setrlimit(0x1, &(0x7f0000000140)={0xbfffffffffffffff, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000140)={0xbfffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) (async) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) finit_module(r5, 0x0, 0x1) r6 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/163, 0xa3}], 0x4, &(0x7f0000001780)=""/27, 0x1b}, 0x40002000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0x08\n\x00', 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.279757206s ago: executing program 1 (id=1359): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r7, 0xfd3bb000) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r6], 0x1000000000000002, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r6, 0x100000001, 0xd, 0x3}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r8, 0x89ec, &(0x7f0000000080)={0x4, 0x8}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 2.279396812s ago: executing program 3 (id=1360): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, 0x0}) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r4, 0xc0104d08, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x9}) mmap(&(0x7f0000e67000/0x1000)=nil, 0x1000, 0x1, 0x13, r4, 0x5123000) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d02, 0x0, 0x6}]}) 2.209774902s ago: executing program 1 (id=1361): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000000bbbbbbbbbbbb08004500001c100000008002907c00000e00e00003000800907800060003"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.159273946s ago: executing program 1 (id=1362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) mlock(&(0x7f0000667000/0x2000)=nil, 0x2000) (async, rerun: 64) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000004400010029bd7000040000000200000004004880900001"], 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x4008094) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103240, 0x0) (async, rerun: 64) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) sigaltstack(&(0x7f0000000240)={&(0x7f0000001c00)=""/4095, 0x80000000, 0xfff}, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}]}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRES16=r9, @ANYBLOB="010224bd7000f8dbdf25210000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4040000) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000000)={&(0x7f0000205000/0x2000)=nil}) 2.029737339s ago: executing program 3 (id=1363): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x2000000) 2.028132824s ago: executing program 1 (id=1364): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x4, 0x6, 0xb, 0x6, 0x19, "c6c67d63ebb71896"}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f00000000c0)=0xb, 0x4) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) 2.026835679s ago: executing program 3 (id=1365): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000", @ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r1, &(0x7f0000000340)=""/25, 0x19, 0x2, &(0x7f0000000380)=@rc={0x1f, @none, 0xbb}, 0x80) close(r0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r6, 0x0, 0x17, 0x0, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='0\n', 0x2) write(r7, &(0x7f00000001a0)='1', 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r9 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x0, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x25, 0x0, r8, &(0x7f0000004000)="def6186d515e2042062040a108c68080a4c015c6b9784686586bddd5051183f298290bb5d0d113fd7a6d9b0285508a6f0aa6a25fcde16e743b339be25180ff967ee51ed4348bc59872f3d9814d071909f6b92fadc7ed9d9022c79fef93a04722962339f2d154434e58e997576f14b6dc82380a9009c6c223f0d7ca2ec636eb3b31d5cb31c4ae7a3f4c582e40a9f6aa727735ede738ede7d7e5f1f39207f5f70117fa9ca4268ae82b53cf14400142ff59ab7e6633f8beb60dc7e22b34f2b76a514de1bd9476dd4825c7cfcee2e25b4ed4b20b1d5774adb3fe89261e909556cd11560ce31929f9b9674912c3d763bc6b8a65855e04136f5ca07cc12fc894dfabaf7c3354a487cf80719e8d28ee2b3661c9095d581d2c1e60d128c3b6b6202793d8e6d0ac40445cbff5df5ac326f594828a800c35b9a695598c8a19ebc15ee2f83bc438a51db5145a647b39e81dcc6afd16e33fdaeee6e15d7a8ba9d31a6528e562801e611d4ea0589394b5b412b6b3ce7dce37ae0c07bed00137fdce9b0a459cbc0a488689bdd089725a3b4c04441211354d3827240e1a174d723f834099df411acc09fa140b225e55130a36b343928ffa5f74c4dd7728a26cf713aa30aa724dfa7b79175b9a1d1a1f5e16a8622eb60a23f21b1f06019a06fc68bb79467d4e109e11abb8b8f25c4b400e17e4822cf7a65d318c7e1afb1e2a7b7f00a09fcea9c9e16990e1a6a42cd46f4f8fcd068af2103541a3eaf24d030bafac9c0390c0479327c6f7e901a63241fc2d5f943354e96615917d7bb2c65cad91871e2c6243f3f4b6c248752628e7e9003ae8f36a79f67aa17c84708d5b586a35f5b4bdb0f759c4db0cfbac2b4c0723649acb4adce0e6a8892296e51b969526b1ff718ab92339a566a7daec7fde1bbc4b6ed2ff54ec95b4a663ada8536a2b44c5a5f51e9d8544a88f1a6b0d5bb0d4b389404cc1d148b2e937d4fbb6c201a8b2811db2fac9538bb5261d98669532ba76fa558e6b1945604ed033860921225c400af729456f981af13cf8be4ce4b57cd9525596fb223c28c188d3ff92f1a6d933313101aaeb7723f9bd57cd30a5a4e34a7e4b9340a2e1ce027560d0c4da645b399c527bc3c0bef5445d17fe3860d09628d37f7a7ee6eb0f1c4533e34e5daf5a31cb224cef298a21fbbd217597a4ac7fc4f7a34af6901faf7d593c204d8996848865c269b1874a24a5f6d5d029f85cdcc909c21ea3e8e65822cd396519d94aacd84c2751826b0374be8e59cfd62977568a050cc2977f4da6c42573dc94921537a8476459945e37e4d078de09cb5d67c590bffe8e13ea07825a8bcef559f33d0e4e3e33146627f92d156956351905625a3c4636d1c5b07c2108835dcca56e5403bbadf8242a755ee11d5918b90fc7f1accf9b46442d8981aa4f3f741fe35bffcdca4c92d9d795027e438e92ce149e14052f463b67b5ee7e061e58321caba8cd47504291f5c4ea142fc87dee772c5ef77f7b98b3fbddf276c818377937053afad693918ef8c1fc35fcad2df0ec9c41b9fa9a3fe306ce1c21307f2d49a09092c3d7fb44f743e9c439e990e7ea1ec7f2b56af4d7f490703b7a5a5ae69abfc376fb688c76a5c6ae632f7980e9c42267bf0b8ca806abbb84d6556a89500cd5819c8625e712243825db73425d866ee903bc7afe38e22f57c40e54b1864cfd4f9626b5d2fa8674bb3f0b43cb5e67877b21a6fa6172e90a7df0460da2b737ff3b50b09b880c3cb8c18ae8ea2288af5e494b8489114e2980f778160a13878006c00d79f23671759064e1b3ce29396aaa817b932fb2570b9854aa2047ebb5178a49901646c6864cf936300879332d3cf199b2dd634342a5d1fc0e0a4b62fffc04f8994fbb388a72c1f86a760c680511f5c51bbab7d429e8278a1bfd24f784812c83dd431bed2ccc418df245401aeed7fa7a4635760d5546d837e5cb933c5ef1b8aef82c4def074652b8502e30beb872e5d320930d233b0bf123ad99724cbfb3cc1380161a3c57cb529ae40ef85027abc5a3792d1c4b1d8a5c1ac9458af09b99a7bb7399400264fa4be0de0f32faa85b1d2647f2027fdbbda417a42564669997cca0556b52d3ad993b8ce8f3bacc301006d565c806268e18ff4f41d88fae47fc8cf3dc60bb3158b3831556affbda8c6689d11d743f83f56f04a44ee83528b5085f0475b8a17ef08a1fff7ba44d5c550c4ca44ef370830dbd1dbee6ad2a82b78b08960707e11ef13acafb726deb68bb18b613bf8afb8ad3d0b7ef82ec205ba77a31d8201a888121bbc1ff1f1d7c6785174f4121f2484a336834f67b714c5f7320f3a622137cc74fe73b9d22fafb5cba4d69e50defabc887bb4230abc7f749f531a9ea0e1b6aa0b4ca03b21fe2952079b09f68543911b57c3ad120b7053f777d704b56363d04178f14ce46df022e1bd886b76eae290434da598abc1c586a8de1431ae19d425b8ff68084527bd49fe44f5eba336061f7fbd95855bf633e5e441c3de68872eceeee38b351242ab41aec34b6e68faf565ff413870a4823ab61812789b61ff8d3473a096a2b43af92b4938f3d8480aa70191368fa070f468946049455489d54ea7b7dbfc57ea8a7d0cfb33216d4541a91182f48713242127c8173e9c2d8c38db1c06d00643598a2501659c552fbad6c50ccdf8dba106c1f6709317e0f60e05768b8cf962d9e65fff5a57a9b64baa6848557bf6c20e349a76d5cfb58be450234c828363b48b3aca6b72ffc5bebf7c5a5c5f09489dc541eb043d91aa1a6347dac6f273d82bdc8c466f7202d4e78eb918bad4a5a5d674cb412723e8d0d9035af9afb190b7b2d12dbea4d1723ffc6163b74aa66979ae7a432ecee205f981b713a497b9e4ec62cf339ce5b8e85efe2e060b58e370b7994ce1a6ab5a5b685db725a28f059c3ee5f68e95756a509dd44affd12fb5322f8ae82cf6913f94d2b5cded9ebfd43c7aca387f003015677159b2aad665b100a95be15bf81377f17afbf09b1b5d6c371e2cc8689f20d560eda7394f638cc35b6dc04098381d879cc62255671660dcebd6aacb98b116cc45f3ecbb3afd3c8ecc68cb4ec851329785d05a4fbc1ae65a448fa371c56b792d618130ed1048c2f53fb06f2383599c713d7768dc417e02d47114f4bdb733c2cab5f31f1e75670f4ba5ba5b7b44336b356934e421f0ea508749a4198046fae0dcef8db7675429f45c4a0c6bd5dbda2e1970c55a9b02456df4b1b619d99c315820e9a0f3784c6745b301a89984daa3f0dd30cf63b38179dbaa5c71f47dbae1c99d17d3d3d4920832c25331c791b8542c2e3864cf8254c406e8a49a37c01fda309f848ace68f3e3ae3f91d1f0162ea2e614572b4fb239c9a544948bde6e340749c23b3ce964fb90814cad6f8ed14aa34538f7e9790938cc97f063e210847b816356b0909e6a501e1802036b772bc0015587158b4866808994f45ac8b0b5d9456e3ddaa74daf91653c794edb92d792ed23806bfdbebd15fb64d9c53603c8ada86b021d829723a3068ad0dd4cb60b8fbda465e296e91d13fbe29c45088441cb339dc2df2f808e9a394fcc7e1bb25e2abdc0b0927b72078a90bc77bffe97a6a0474d2def2f84c6f56ea4673d5f8b6bc4a07ef9cb04043b530369b98b2d8515db3a2603a2285e2cdc4c4e815032e6cfced215b26de0d72ede41b9c38a0602e5406d25ae5e34d63339af7a706243047afedebc46890641d21d9b9d832bf49123b3046bde73455955bd92bd25fc2dd8b014df51953a98f40f077a961d7b93661d66c00d95d6cc2478da6881ca2feeca3d7b1cc0f839765e7c091ff2547cdd93f63c0016bcf87f3de34cf63a959db6ba1cadecbd5fb8d6a7d8baeec163876b940b66c3b2947e0336fe2092ceb04795869c00cb2ff7c83fe80e4a03d366a778085ebc9689ea59cf52241a507abef500575c930ddb1393297f3c998083944c218d77b9a3eb3241c35892505d95fc382f121b004cb87aa557fbc644f833157c320d429f976b34ecea128992525f0f73e698c959366f9f38865a4f072cc3882569c33dbabfbf054015483b58c29df3dff5ebeebf7e869663a8dfe88897a43c268c2ca0bc46ffa5e77c8e9e49534eaf3bb5896bd7b3e1acade6f8eacf994d19a7f0ab8391ee6c79690e6d86074a4ce94f43252e7192fe460aa64e894ce141266457beda17bbac4572f7ef526fb74f84266cf3c29912247de8483167bce23adf116c14fe13e7bee88c923b93693c2b7ed3164ceeaebc0caa7de71c6fcab89332a2581a022d6411e08856aa381c5205e6d22ea3d860121d9f759225d2adaf44c587b5c62091f13ba5cad0c90091c5f9d26feef91064dd34472ff0807e8db5376b323be7cfb36b4ed60d3c7baedccfc91052323d8cf043fd4ddbd607367584eea407f838640ce6f94ebec904e47856f93193e7c7edfb8b604170b22cd2dc154a5df2779c8c260cac65c5f87fc5472cfed18bb1e7f1513b30caa9fba7e1a1a31cd9ccb0cb5495fdb783c4fc03c5270e1a9d4c8eb06a55a790da5a402d4bd7c10dd6ff5238758b97314c7ae0e97828c751b37978c2bdb8c3f2255bc4d9fcedfd3a7b78b790b6d704f097c3319dfefa7a1836fcea2c39dd658ce9817091430e0f59a7023933b3beac51d376a26ff6c85c82b3117c95951efe6c5b66e6c2a3580ea682c47614dfd876cf161ea38562d8e844e27c31c2641d4f40f48c62b983ef6339814df3fa6fe42771a25a56fea1114c657f00b8d7e88ae3530705e54ab5a2a03660886a90fa237a3e571d2dfa1196f033e3b46f44cb71d7fa9c783e05ae650beb3553116f7181e6bda214d9447d206201728d14829cc8ee8741bdb1beb4bd8a327b1388f48788bc602db4cc854a4400a280c0657a249b058cf01a1f3b1af1ea8640070fcc7b1a14ace0ffa27b860e65c4edccdb30f7e4023da4f55ac9620fdcf3883fa6297ef4b879d9a1da5313403cac76210213686ab8a19e8ebc1c6d884783b037987dbe1839eee5e7ff06a88d5af898ea3767a546acf26c89b52bbcd80972f70ad056ad40cb43ef534639225aa782ccffb848bdf1fcf4a75e401b325503b7665e912fd65bdc37dd86b7f622b01ad20c978ae2991be0c1ef9966c6c969a48f17d72acaf55cacc3eb5da02d6717b897189f2c32f10c4119b3e93300a7c0ebb5bb997a9fe6ccbd8dc56d414ea7746ede4b245c31c45ec62deda29547d22257dd43be74d4460807b4848e39508b84869a84ad5115e4db860a3bf3bc030acf22a4ba88f8d9770b94544bb92f03b361eb1c2a27cefdc7f68a662d932c75579b48c3b755696766f48077f39d6510108f0ebe7f3a17977aba358323d559bbf4c66d166926fc56b966224c669a8281337b92d4c04ee802d365a9144936153ade699b21e7fb12ace33c87f97d4d633d547429ccec6fdd8e0f7142e09fa43d33172f95130b84807f1fb2e294b7e8fc3f15ac7d4aa4407acb0d4bd8b5b95e180b042219b1e435db3e91456dc44881f95d8f15fc6790846cbfd9e3b9082ac220537575ce3b5b8ea40c0b77cb5728676ea5d98005ce31fd6beebd261da20a2826c53e0aade01c3f1ebc15ebc06888449146692e97d6ddfc966d6f396b1eca69c8ff033bbaf712ef4e4b396f09dd1759fddda9fb03165919ddc44b5f0630cc79cecd68bf4d207f3b87308faea43c7af6e799a5b9accb50cbe80630557bd235a55c19dd9ac179c2083eaf20271a5337f05a93fff568edd6dea110f1cee3125685d59d832df1d2dbc01b632ce8129a13ebb19b4", 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r5, 0x3e}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getdents64(r8, &(0x7f0000002080)=""/4108, 0x100c) ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x100) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) 1.928273882s ago: executing program 1 (id=1366): r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.799193061s ago: executing program 5 (id=1368): mkdir(&(0x7f00000000c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000240)="ffffffff00"/24) nanosleep(&(0x7f0000000280)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40982f00, &(0x7f0000000300)="ffffffff0100000000001000000000000300040000000000766f6c3000"/148) mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, &(0x7f00000004c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x4000, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0x23}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write(r5, &(0x7f0000000540)='1\x00', 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='ubi0_0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ubifs\x00', 0x0, &(0x7f0000000680)) 1.11726933s ago: executing program 3 (id=1369): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084523, &(0x7f0000001f40)=""/231) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x881400, &(0x7f0000000240)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x2d, 0x2d]}}]}) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') write$char_usb(r2, &(0x7f0000000800)='(', 0x1) r3 = socket$alg(0x26, 0x5, 0x0) r4 = gettid() kcmp(r4, r4, 0x0, r3, r3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000540)={0x7, [[0x9, 0x4, 0x1, 0x6, 0x8a56, 0x4, 0x8, 0x7], [0x0, 0x0, 0x4000009, 0xff, 0x6, 0x5e8d, 0x2000000], [0x6, 0x40, 0x15, 0x80, 0x2, 0x40, 0x9]], '\x00', [{0x9, 0xffff, 0x0, 0x0, 0x1}, {0x80000001, 0xc26d, 0x1, 0x0, 0x1, 0x1}, {0xfd, 0x77, 0x0, 0x1}, {0x17b, 0x8d, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}, {0xf, 0x210f, 0x1}, {0x580000, 0x9, 0x0, 0x1, 0x1}, {0x2, 0x56, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0x9, 0x48af80, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1}, {0x7fffffff, 0xa, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 919.906844ms ago: executing program 3 (id=1370): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x201, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)}, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, &(0x7f0000000080)) 919.431227ms ago: executing program 5 (id=1371): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x406361, 0x5, 0xfffffffd, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r4, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000800)={0x28, 0x3, r4, 0x0, &(0x7f0000000700)="d5", 0x1, 0x10000}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, &(0x7f0000002500)="94", 0x1, 0x80001}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000000440)="ad5609", 0x3, 0x4d8000000000}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000240)={0x18, r4, 0x9, 0x27}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x6, 0x3849dd, 0x27838c}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x40000000002) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 778.515305ms ago: executing program 5 (id=1372): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000d9f200000100000000009500"/40], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x205, 0x62}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0xc080) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@tim={0x5, 0x3, {0x5, 0x9, 0x4}}]}, @NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0xc00) (async) recvfrom(r0, &(0x7f0000000040)=""/21, 0x15, 0x20040, &(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80) 778.319684ms ago: executing program 5 (id=1373): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req={0x1000, 0x103, 0x4, 0x9e7}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40a00a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000010705ce17041f033231f38bc7c4ffc6aa1d00000000000000bea410d500000c0006400000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x894}, 0x20008004) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0012000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 709.765935ms ago: executing program 5 (id=1374): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 588.972469ms ago: executing program 4 (id=1375): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000001c0)={0x4300, 0x0, 0x3003, 0x6, 0x81, 0x6, 0x1, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r3, 0x4}}, 0x48) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) r6 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x402, 0x20) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)="8757a291"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000480)={0x30, r7, 0x0, 0x0, 0x5, 0x3ff, 0x4, &(0x7f0000000380)=""/249}) 529.499264ms ago: executing program 4 (id=1376): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r1, 0x0, 0x0) r2 = socket(0x29, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x7, 0x4, 0xfffffffa, 0x1, 0x5, 0x1000000, 0x6}) close(r4) r6 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0xc880) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001002abd70ffff07000000", @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4c90) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) write$sysctl(r8, &(0x7f0000000140)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r6], 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) chdir(&(0x7f0000000080)='./file0\x00') 145.724739ms ago: executing program 5 (id=1377): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) listen(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) write$yama_ptrace_scope(r0, &(0x7f0000000500)='2\x00', 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffd, 0x1000, 0x40002, 0x91}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r14 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r14, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r14, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r14, 0x7b1, &(0x7f0000000200)={0xfffffffffffffffc, 0x1, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r15 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r15, 0x20, &(0x7f0000000000)=[r15], 0x1) syz_ublk_setup_queues(r6, r11, &(0x7f0000000200)={0x0, 0x3d1e, 0x10700, 0x2, 0xb5}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x90244, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021d, 0x0, r6}}], 0x4, &(0x7f0000000480)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r10, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005040), 0x44600, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 0s ago: executing program 3 (id=1378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff4a, 0xfa00, {0x3, &(0x7f0000000380), 0x13f}}, 0xffffffd4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x19, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8) (async) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59b400", 0x83, 0xffffffffffffffff) 0s ago: executing program 4 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x2}, 0xaa}}}, 0x7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000a40)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x161841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "b6a04f1bb4e3a33805c0240284054753afc5f0e68292e85065a4e99abb092fa1729f4755d39cd1b85b3a30bbc3547bb4991d589d6066bfb7362c765795a7f8a4", 0x38}, 0x48, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x8, 0x9, 0x2be91d48ff6236f5, @mcast1, @remote, 0x7, 0x10, 0xf9bf, 0x69}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x20, 0x40, 0x80, 0x1, {{0x2a, 0x4, 0x2, 0x9, 0xa8, 0x67, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x94, 0x9, "f000ec97a8b27d"}, @generic={0x83, 0xe, "dbdcb94e887e163852b45235"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x2b, 0x7b, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @empty, @private=0xa010101, @local, @empty, @private=0xa010102]}, @generic={0x82, 0x8, "33d56c96354b"}, @timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0x1, [{@multicast2, 0x5}, {@multicast1, 0x7}]}, @rr={0x7, 0xb, 0xdc, [@dev={0xac, 0x14, 0x14, 0x24}, @broadcast]}, @lsrr={0x83, 0x27, 0x46, [@loopback, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @multicast2, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, @broadcast]}]}}}}}) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x400, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x582cd293, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x8, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x1, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x1000040, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x807ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0xfffffffc, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x3, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x2, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0xff, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x2, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x200, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, 0x0, 0x720, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x13c}}, 0x100) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r11 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): mass_storage.usb0" dev="configfs" ino=27814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.567422][ T8511] binder: 8509:8511 ioctl 400c620e 200000000340 returned -22 [ 127.577241][ T8511] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 127.614742][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.333676][ T2321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.377738][ T56] usb 9-1: USB disconnect, device number 18 [ 128.666562][ T2321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.682705][ T8521] libceph: resolve '0' (ret=-3): failed [ 128.687498][ T8521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.691797][ T8521] FAULT_INJECTION: forcing a failure. [ 128.691797][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.694999][ T8522] libceph: resolve '0' (ret=-3): failed [ 128.698580][ T8521] CPU: 3 UID: 0 PID: 8521 Comm: syz.4.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.698607][ T8521] Tainted: [L]=SOFTLOCKUP [ 128.698613][ T8521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.698623][ T8521] Call Trace: [ 128.698629][ T8521] [ 128.698635][ T8521] dump_stack_lvl+0x100/0x190 [ 128.698665][ T8521] should_fail_ex.cold+0x5/0xa [ 128.698689][ T8521] _copy_from_iter+0x1f4/0x1690 [ 128.698758][ T8521] ? __pfx__copy_from_iter+0x10/0x10 [ 128.698779][ T8521] ? trace_kmalloc+0xeb/0x110 [ 128.698797][ T8521] ? __kasan_kmalloc+0xaa/0xb0 [ 128.698817][ T8521] ? __kmalloc_noprof+0x343/0x820 [ 128.698842][ T8521] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 128.698871][ T8521] kernfs_fop_write_iter+0x186/0x5f0 [ 128.698890][ T8521] vfs_write+0x6ac/0x1050 [ 128.698917][ T8521] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 128.698941][ T8521] ? __pfx_vfs_write+0x10/0x10 [ 128.698974][ T8521] ksys_write+0x12a/0x250 [ 128.698998][ T8521] ? __pfx_ksys_write+0x10/0x10 [ 128.699030][ T8521] do_syscall_64+0x115/0x870 [ 128.699050][ T8521] ? clear_bhb_loop+0x40/0x90 [ 128.699068][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.699085][ T8521] RIP: 0033:0x7f2e0f99e019 [ 128.699099][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.699116][ T8521] RSP: 002b:00007f2e10902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.699134][ T8521] RAX: ffffffffffffffda RBX: 00007f2e0fc25fa0 RCX: 00007f2e0f99e019 [ 128.699141][ T8521] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 128.699151][ T8521] RBP: 00007f2e10902090 R08: 0000000000000000 R09: 0000000000000000 [ 128.699160][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.699170][ T8521] R13: 00007f2e0fc26038 R14: 00007f2e0fc25fa0 R15: 00007ffe2431f088 [ 128.699194][ T8521] [ 128.750513][ T8523] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.785259][ T5749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.790872][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.794557][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.798622][ T5749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.802527][ T5749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.842053][ T8522] md: could not open device unknown-block(7,0). [ 128.941847][ T8537] libceph: resolve '0' (ret=-3): failed [ 128.992083][ T8537] md: could not open device unknown-block(7,0). [ 129.020505][ T5819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.142957][ T5819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.161486][ T56] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 129.169102][ T8524] vcan0 speed is unknown, defaulting to 1000 [ 129.263605][ T5819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.269474][ T8546] netlink: 3 bytes leftover after parsing attributes in process `syz.1.815'. [ 129.305138][ T8524] lo speed is unknown, defaulting to 1000 [ 129.322962][ T56] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.327307][ T56] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 129.330887][ T56] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.334593][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 4 [ 129.338838][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13368, setting to 1023 [ 129.344934][ T56] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.347965][ T56] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.350600][ T56] usb 9-1: Product: syz [ 129.352179][ T56] usb 9-1: Manufacturer: syz [ 129.362767][ T5819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.631538][ T5819] bridge0: port 3(team_slave_1) entered disabled state [ 129.637039][ T5819] bridge_slave_1: left allmulticast mode [ 129.639421][ T5819] bridge_slave_1: left promiscuous mode [ 129.642122][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.647847][ T5819] bridge_slave_0: left allmulticast mode [ 129.650214][ T5819] bridge_slave_0: left promiscuous mode [ 129.653072][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.676756][ T5819] batman_adv: batadv0: Interface deactivated: gretap1 [ 129.798075][ T5819] batman_adv: batadv0: Removing interface: gretap1 [ 129.817695][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.822471][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.826262][ T5819] bond0 (unregistering): Released all slaves [ 129.834032][ T5819] bond1 (unregistering): Released all slaves [ 129.840822][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.843782][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.846748][ T8524] bridge_slave_0: entered allmulticast mode [ 129.851581][ T8524] bridge_slave_0: entered promiscuous mode [ 129.859937][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 129.864196][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.866614][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.868922][ T8524] bridge_slave_1: entered allmulticast mode [ 129.872126][ T8524] bridge_slave_1: entered promiscuous mode [ 129.889604][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.895590][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.925344][ T1354] usb 8-1: USB disconnect, device number 25 [ 129.925981][ T8524] team0: Port device team_slave_0 added [ 129.932058][ T8524] team0: Port device team_slave_1 added [ 130.014620][ T8566] hfsplus: unable to find HFS+ superblock [ 130.071625][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.073976][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.082400][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.084606][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 130.118757][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 130.123113][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.125523][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.133696][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.174152][ T8524] hsr_slave_0: entered promiscuous mode [ 130.177898][ T8524] hsr_slave_1: entered promiscuous mode [ 130.180794][ T8524] debugfs: 'hsr0' already exists in 'hsr' [ 130.183182][ T8524] Cannot create hsr debugfs directory [ 130.349475][ T8582] libceph: resolve '0' (ret=-3): failed [ 130.373044][ T8582] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.421582][ T8582] FAULT_INJECTION: forcing a failure. [ 130.421582][ T8582] name failslab, interval 1, probability 0, space 0, times 0 [ 130.425681][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.3.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.425700][ T8582] Tainted: [L]=SOFTLOCKUP [ 130.425704][ T8582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.425711][ T8582] Call Trace: [ 130.425725][ T8582] [ 130.425730][ T8582] dump_stack_lvl+0x100/0x190 [ 130.425783][ T8582] should_fail_ex.cold+0x5/0xa [ 130.425800][ T8582] should_failslab+0xc2/0x120 [ 130.425822][ T8582] __kmalloc_cache_noprof+0x91/0x6c0 [ 130.425840][ T8582] ? simple_strntoull+0xdf/0x170 [ 130.425873][ T8582] ? md_import_device+0x51/0x360 [ 130.425899][ T8582] md_import_device+0x51/0x360 [ 130.425912][ T8582] new_dev_store+0x3c8/0x760 [ 130.425928][ T8582] ? __pfx_new_dev_store+0x10/0x10 [ 130.425944][ T8582] ? md_attr_store+0x195/0x330 [ 130.425954][ T8582] ? md_attr_store+0x195/0x330 [ 130.425967][ T8582] md_attr_store+0x1c5/0x330 [ 130.425978][ T8582] ? __pfx_md_attr_store+0x10/0x10 [ 130.425989][ T8582] sysfs_kf_write+0xf2/0x150 [ 130.426013][ T8582] kernfs_fop_write_iter+0x3e0/0x5f0 [ 130.426027][ T8582] ? __pfx_sysfs_kf_write+0x10/0x10 [ 130.426044][ T8582] vfs_write+0x6ac/0x1050 [ 130.426062][ T8582] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 130.426078][ T8582] ? __pfx_vfs_write+0x10/0x10 [ 130.426104][ T8582] ksys_write+0x12a/0x250 [ 130.426120][ T8582] ? __pfx_ksys_write+0x10/0x10 [ 130.426141][ T8582] do_syscall_64+0x115/0x870 [ 130.426154][ T8582] ? clear_bhb_loop+0x40/0x90 [ 130.426168][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.426184][ T8582] RIP: 0033:0x7fe766d9e019 [ 130.426195][ T8582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.426206][ T8582] RSP: 002b:00007fe767bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.426224][ T8582] RAX: ffffffffffffffda RBX: 00007fe767025fa0 RCX: 00007fe766d9e019 [ 130.426231][ T8582] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 130.426237][ T8582] RBP: 00007fe767bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 130.426243][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.426249][ T8582] R13: 00007fe767026038 R14: 00007fe767025fa0 R15: 00007ffd2d5fef18 [ 130.426264][ T8582] [ 130.445899][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 130.535083][ T5819] hsr_slave_0: left promiscuous mode [ 130.539119][ T5819] hsr_slave_1: left promiscuous mode [ 130.556371][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.560081][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.567969][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.570664][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.580819][ T5819] veth1_macvtap: left promiscuous mode [ 130.584535][ T5819] veth0_macvtap: left promiscuous mode [ 130.587173][ T5819] veth1_vlan: left promiscuous mode [ 130.589152][ T5819] veth0_vlan: left promiscuous mode [ 130.782736][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 130.861661][ T8591] libceph: resolve '0' (ret=-3): failed [ 130.869705][ T8591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.899952][ T5744] Bluetooth: hci4: command tx timeout [ 130.919794][ T8524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.931754][ T8591] md: could not open device unknown-block(7,0). [ 130.939705][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.943776][ T8524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.966464][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.974235][ T8524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.990875][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.996027][ T8524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.001756][ T8524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.010976][ T8594] libceph: resolve '0' (ret=-3): failed [ 131.023713][ T8594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.039923][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 131.039942][ T42] audit: type=1400 audit(1785604792.078:733): avc: denied { write } for pid=8595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.091535][ T8594] md: could not open device unknown-block(7,0). [ 131.100723][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.121148][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.147136][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.150274][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.161893][ T42] audit: type=1400 audit(1785604792.208:734): avc: denied { write } for pid=8609 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.176969][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.179410][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.229704][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 131.239787][ T8614] xfrm1: entered promiscuous mode [ 131.243773][ T8614] xfrm1: entered allmulticast mode [ 131.248340][ T42] audit: type=1400 audit(1785604792.288:735): avc: denied { create } for pid=8612 comm="syz.3.826" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.248606][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 131.257169][ T42] audit: type=1400 audit(1785604792.308:736): avc: denied { map } for pid=8612 comm="syz.3.826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.275007][ T42] audit: type=1400 audit(1785604792.308:737): avc: denied { read write } for pid=8612 comm="syz.3.826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.391341][ T1354] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 131.509822][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.521376][ T1354] usb 6-1: device descriptor read/64, error -71 [ 131.665836][ T8524] veth0_vlan: entered promiscuous mode [ 131.673274][ T8524] veth1_vlan: entered promiscuous mode [ 131.707724][ T8524] veth0_macvtap: entered promiscuous mode [ 131.713290][ T8524] veth1_macvtap: entered promiscuous mode [ 131.726270][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.735536][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.783293][ T1354] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 131.783486][ T5817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.789474][ T5817] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.792754][ T5817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.801652][ T5817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.827794][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.830845][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.854753][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.857744][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.864694][ T42] audit: type=1400 audit(1785604792.908:738): avc: denied { mounton } for pid=8524 comm="syz-executor" path="/syzkaller.wWQm5a/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 131.905333][ T2321] usb 9-1: USB disconnect, device number 19 [ 131.931326][ T1354] usb 6-1: device descriptor read/64, error -71 [ 132.024850][ T8645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.059574][ T42] audit: type=1400 audit(1785604793.098:739): avc: denied { remount } for pid=8644 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.062580][ T1354] usb usb6-port1: attempt power cycle [ 132.118931][ T8647] libceph: resolve '0' (ret=-3): failed [ 132.123565][ T8647] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.171380][ T8647] FAULT_INJECTION: forcing a failure. [ 132.171380][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 132.175356][ T8647] CPU: 3 UID: 0 PID: 8647 Comm: syz.3.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.175376][ T8647] Tainted: [L]=SOFTLOCKUP [ 132.175380][ T8647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.175388][ T8647] Call Trace: [ 132.175405][ T8647] [ 132.175409][ T8647] dump_stack_lvl+0x100/0x190 [ 132.175510][ T8647] should_fail_ex.cold+0x5/0xa [ 132.175541][ T8647] should_failslab+0xc2/0x120 [ 132.175576][ T8647] __kmalloc_cache_noprof+0x91/0x6c0 [ 132.175601][ T8647] ? lockdep_init_map_type+0x5c/0x250 [ 132.175635][ T8647] ? __badblocks_init+0x1cf/0x270 [ 132.175680][ T8647] __badblocks_init+0x1cf/0x270 [ 132.175694][ T8647] md_import_device+0x6a/0x360 [ 132.175719][ T8647] new_dev_store+0x3c8/0x760 [ 132.175736][ T8647] ? __pfx_new_dev_store+0x10/0x10 [ 132.175751][ T8647] ? md_attr_store+0x195/0x330 [ 132.175761][ T8647] ? md_attr_store+0x195/0x330 [ 132.175774][ T8647] md_attr_store+0x1c5/0x330 [ 132.175785][ T8647] ? __pfx_md_attr_store+0x10/0x10 [ 132.175795][ T8647] sysfs_kf_write+0xf2/0x150 [ 132.175824][ T8647] kernfs_fop_write_iter+0x3e0/0x5f0 [ 132.175838][ T8647] ? __pfx_sysfs_kf_write+0x10/0x10 [ 132.175855][ T8647] vfs_write+0x6ac/0x1050 [ 132.175879][ T8647] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 132.175894][ T8647] ? __pfx_vfs_write+0x10/0x10 [ 132.175920][ T8647] ksys_write+0x12a/0x250 [ 132.175936][ T8647] ? __pfx_ksys_write+0x10/0x10 [ 132.175957][ T8647] do_syscall_64+0x115/0x870 [ 132.175983][ T8647] ? clear_bhb_loop+0x40/0x90 [ 132.175998][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.176009][ T8647] RIP: 0033:0x7fe766d9e019 [ 132.176020][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.176031][ T8647] RSP: 002b:00007fe767bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.176047][ T8647] RAX: ffffffffffffffda RBX: 00007fe767025fa0 RCX: 00007fe766d9e019 [ 132.176054][ T8647] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 132.176060][ T8647] RBP: 00007fe767bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 132.176066][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.176073][ T8647] R13: 00007fe767026038 R14: 00007fe767025fa0 R15: 00007ffd2d5fef18 [ 132.176092][ T8647] [ 132.225497][ T8653] libceph: resolve '0' (ret=-3): failed [ 132.264067][ T8653] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.311908][ T8653] md: could not open device unknown-block(7,0). [ 132.424944][ T1354] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 132.451756][ T1354] usb 6-1: device descriptor read/8, error -71 [ 132.541472][ T5839] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 132.681510][ T5839] usb 9-1: device descriptor read/64, error -71 [ 132.711458][ T29] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 132.711504][ T1354] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 132.741915][ T1354] usb 6-1: device descriptor read/8, error -71 [ 132.814276][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816850][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.861380][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 132.861690][ T1354] usb usb6-port1: unable to enumerate USB device [ 132.864529][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.868835][ T29] usb 8-1: config 0 has no interfaces? [ 132.870524][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 132.873573][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.921343][ T5839] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 132.981554][ T5744] Bluetooth: hci4: command tx timeout [ 133.051453][ T5839] usb 9-1: device descriptor read/64, error -71 [ 133.161625][ T5839] usb usb9-port1: attempt power cycle [ 133.501513][ T5839] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 133.522793][ T5839] usb 9-1: device descriptor read/8, error -71 [ 133.761380][ T5839] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 133.792095][ T5839] usb 9-1: device descriptor read/8, error -71 [ 133.911725][ T5839] usb usb9-port1: unable to enumerate USB device [ 134.541371][ T5848] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 134.701341][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 134.705196][ T5848] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 134.709447][ T5848] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 134.713981][ T5848] usb 6-1: config 1 interface 0 has no altsetting 0 [ 134.718925][ T5848] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.722720][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.725992][ T5848] usb 6-1: Product: syz [ 134.727712][ T5848] usb 6-1: Manufacturer: syz [ 134.729620][ T5848] usb 6-1: SerialNumber: syz [ 135.051480][ T5744] Bluetooth: hci4: command tx timeout [ 135.319290][ T8679] netlink: 'syz.4.842': attribute type 10 has an invalid length. [ 135.323157][ T8679] syz_tun: entered promiscuous mode [ 135.332339][ T8679] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.348534][ T42] audit: type=1400 audit(1785604796.388:740): avc: denied { lock } for pid=8678 comm="syz.4.842" path="socket:[29472]" dev="sockfs" ino=29472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 135.424704][ T5848] usb 8-1: USB disconnect, device number 26 [ 135.721531][ T8688] libceph: resolve '0' (ret=-3): failed [ 135.724838][ T8688] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.771482][ T8688] md: could not open device unknown-block(7,0). [ 135.826950][ T8692] libceph: resolve '0' (ret=-3): failed [ 135.832542][ T8692] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.891653][ T8692] md: could not open device unknown-block(7,0). [ 135.936877][ T8695] XFS (loop3): SB validate failed with error -5. [ 135.975416][ T8701] xt_hashlimit: size too large, truncated to 1048576 [ 136.120118][ T8704] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 136.371492][ T9] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 136.533078][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.535981][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.540187][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.543407][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.548448][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.551301][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.553752][ T9] usb 8-1: Product: syz [ 136.555293][ T9] usb 8-1: Manufacturer: syz [ 137.131333][ T5744] Bluetooth: hci4: command tx timeout [ 137.193616][ T6703] usb 6-1: USB disconnect, device number 29 [ 137.291630][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.531552][ T6703] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 137.661350][ T6703] usb 6-1: device descriptor read/64, error -71 [ 137.921686][ T6703] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 138.051431][ T6703] usb 6-1: device descriptor read/64, error -71 [ 138.162366][ T6703] usb usb6-port1: attempt power cycle [ 138.439811][ T42] audit: type=1400 audit(1785604799.478:741): avc: denied { cmd } for pid=8711 comm="syz.4.851" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 138.471929][ T8714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.501433][ T6703] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 138.522127][ T6703] usb 6-1: device descriptor read/8, error -71 [ 138.675340][ T8718] libceph: resolve '0' (ret=-3): failed [ 138.679944][ T8718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.733262][ T8718] FAULT_INJECTION: forcing a failure. [ 138.733262][ T8718] name failslab, interval 1, probability 0, space 0, times 0 [ 138.738279][ T8718] CPU: 1 UID: 0 PID: 8718 Comm: syz.4.854 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.738299][ T8718] Tainted: [L]=SOFTLOCKUP [ 138.738303][ T8718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.738310][ T8718] Call Trace: [ 138.738315][ T8718] [ 138.738321][ T8718] dump_stack_lvl+0x100/0x190 [ 138.738342][ T8718] should_fail_ex.cold+0x5/0xa [ 138.738358][ T8718] should_failslab+0xc2/0x120 [ 138.738373][ T8718] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 138.738388][ T8718] ? __d_alloc+0x35/0xa50 [ 138.738423][ T8718] __d_alloc+0x35/0xa50 [ 138.738445][ T8718] d_alloc_pseudo+0x1c/0xc0 [ 138.738471][ T8718] alloc_file_pseudo_noaccount+0x118/0x290 [ 138.738496][ T8718] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 138.738520][ T8718] ? iput+0x3a/0x40 [ 138.738550][ T8718] bdev_file_open_by_dev+0x13a/0x210 [ 138.738590][ T8718] md_import_device+0x120/0x360 [ 138.738611][ T8718] new_dev_store+0x3c8/0x760 [ 138.738638][ T8718] ? __pfx_new_dev_store+0x10/0x10 [ 138.738663][ T8718] ? md_attr_store+0x195/0x330 [ 138.738682][ T8718] ? md_attr_store+0x195/0x330 [ 138.738704][ T8718] md_attr_store+0x1c5/0x330 [ 138.738721][ T8718] ? __pfx_md_attr_store+0x10/0x10 [ 138.738737][ T8718] sysfs_kf_write+0xf2/0x150 [ 138.738764][ T8718] kernfs_fop_write_iter+0x3e0/0x5f0 [ 138.738784][ T8718] ? __pfx_sysfs_kf_write+0x10/0x10 [ 138.738810][ T8718] vfs_write+0x6ac/0x1050 [ 138.738838][ T8718] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 138.738863][ T8718] ? __pfx_vfs_write+0x10/0x10 [ 138.738906][ T8718] ksys_write+0x12a/0x250 [ 138.738934][ T8718] ? __pfx_ksys_write+0x10/0x10 [ 138.738965][ T8718] do_syscall_64+0x115/0x870 [ 138.738987][ T8718] ? clear_bhb_loop+0x40/0x90 [ 138.739008][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.739025][ T8718] RIP: 0033:0x7f2e0f99e019 [ 138.739042][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.739059][ T8718] RSP: 002b:00007f2e10902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.739076][ T8718] RAX: ffffffffffffffda RBX: 00007f2e0fc25fa0 RCX: 00007f2e0f99e019 [ 138.739086][ T8718] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 138.739095][ T8718] RBP: 00007f2e10902090 R08: 0000000000000000 R09: 0000000000000000 [ 138.739110][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.739120][ T8718] R13: 00007f2e0fc26038 R14: 00007f2e0fc25fa0 R15: 00007ffe2431f088 [ 138.739146][ T8718] [ 138.739157][ T8718] md: could not open device unknown-block(7,0). [ 138.791331][ T6703] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 138.854402][ T42] audit: type=1400 audit(1785604799.898:742): avc: denied { append } for pid=8719 comm="syz.4.855" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.862380][ T6703] usb 6-1: device descriptor read/8, error -71 [ 138.909481][ T8720] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.981846][ T6703] usb usb6-port1: unable to enumerate USB device [ 139.142583][ T29] usb 8-1: USB disconnect, device number 27 [ 139.165143][ T8727] libceph: resolve '0' (ret=-3): failed [ 139.177427][ T8727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.251826][ T8727] md: could not open device unknown-block(7,0). [ 139.281052][ T42] audit: type=1400 audit(1785604800.318:743): avc: denied { name_connect } for pid=8728 comm="syz.4.859" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 139.374795][ T8743] libceph: resolve '0' (ret=-3): failed [ 139.379940][ T8743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.431742][ T8743] FAULT_INJECTION: forcing a failure. [ 139.431742][ T8743] name failslab, interval 1, probability 0, space 0, times 0 [ 139.435715][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.4.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.435734][ T8743] Tainted: [L]=SOFTLOCKUP [ 139.435738][ T8743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.435745][ T8743] Call Trace: [ 139.435750][ T8743] [ 139.435755][ T8743] dump_stack_lvl+0x100/0x190 [ 139.435775][ T8743] should_fail_ex.cold+0x5/0xa [ 139.435791][ T8743] should_failslab+0xc2/0x120 [ 139.435806][ T8743] kmem_cache_alloc_noprof+0x91/0x6a0 [ 139.435819][ T8743] ? d_instantiate+0x8a/0xb0 [ 139.435834][ T8743] ? d_instantiate+0x8a/0xb0 [ 139.435846][ T8743] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 139.435865][ T8743] alloc_empty_file_noaccount+0x2b/0xd0 [ 139.435880][ T8743] alloc_file_pseudo_noaccount+0x183/0x290 [ 139.435901][ T8743] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 139.435918][ T8743] ? iput+0x3a/0x40 [ 139.435933][ T8743] bdev_file_open_by_dev+0x13a/0x210 [ 139.435951][ T8743] md_import_device+0x120/0x360 [ 139.435967][ T8743] new_dev_store+0x3c8/0x760 [ 139.435983][ T8743] ? __pfx_new_dev_store+0x10/0x10 [ 139.435999][ T8743] ? md_attr_store+0x195/0x330 [ 139.436009][ T8743] ? md_attr_store+0x195/0x330 [ 139.436022][ T8743] md_attr_store+0x1c5/0x330 [ 139.436033][ T8743] ? __pfx_md_attr_store+0x10/0x10 [ 139.436044][ T8743] sysfs_kf_write+0xf2/0x150 [ 139.436062][ T8743] kernfs_fop_write_iter+0x3e0/0x5f0 [ 139.436076][ T8743] ? __pfx_sysfs_kf_write+0x10/0x10 [ 139.436093][ T8743] vfs_write+0x6ac/0x1050 [ 139.436111][ T8743] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 139.436127][ T8743] ? __pfx_vfs_write+0x10/0x10 [ 139.436156][ T8743] ksys_write+0x12a/0x250 [ 139.436172][ T8743] ? __pfx_ksys_write+0x10/0x10 [ 139.436193][ T8743] do_syscall_64+0x115/0x870 [ 139.436207][ T8743] ? clear_bhb_loop+0x40/0x90 [ 139.436220][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.436232][ T8743] RIP: 0033:0x7f2e0f99e019 [ 139.436242][ T8743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.436254][ T8743] RSP: 002b:00007f2e10902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.436265][ T8743] RAX: ffffffffffffffda RBX: 00007f2e0fc25fa0 RCX: 00007f2e0f99e019 [ 139.436272][ T8743] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 139.436278][ T8743] RBP: 00007f2e10902090 R08: 0000000000000000 R09: 0000000000000000 [ 139.436285][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.436291][ T8743] R13: 00007f2e0fc26038 R14: 00007f2e0fc25fa0 R15: 00007ffe2431f088 [ 139.436305][ T8743] [ 139.436411][ T8743] md: could not open device unknown-block(7,0). [ 139.626536][ T8752] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 139.722982][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.755439][ T8758] overlayfs: failed to resolve './file1': -2 [ 139.976208][ T8764] IPVS: length: 120 != 24 [ 139.993492][ T6703] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 140.109264][ T8772] libceph: resolve '0' (ret=-3): failed [ 140.114279][ T8772] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.152998][ T6703] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.156852][ T6703] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.161113][ T6703] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.165008][ T6703] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.169557][ T6703] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.175334][ T6703] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.179243][ T6703] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.182885][ T6703] usb 9-1: Product: syz [ 140.184704][ T6703] usb 9-1: Manufacturer: syz [ 140.191620][ T8772] FAULT_INJECTION: forcing a failure. [ 140.191620][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 140.197418][ T8772] CPU: 0 UID: 0 PID: 8772 Comm: syz.3.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.197447][ T8772] Tainted: [L]=SOFTLOCKUP [ 140.197453][ T8772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.197463][ T8772] Call Trace: [ 140.197470][ T8772] [ 140.197476][ T8772] dump_stack_lvl+0x100/0x190 [ 140.197507][ T8772] should_fail_ex.cold+0x5/0xa [ 140.197531][ T8772] should_failslab+0xc2/0x120 [ 140.197555][ T8772] kmem_cache_alloc_noprof+0x91/0x6a0 [ 140.197576][ T8772] ? trace_kmem_cache_alloc+0xdd/0x100 [ 140.197599][ T8772] ? security_file_alloc+0x34/0x2c0 [ 140.197656][ T8772] security_file_alloc+0x34/0x2c0 [ 140.197674][ T8772] init_file+0x95/0x480 [ 140.197698][ T8772] alloc_empty_file_noaccount+0x45/0xd0 [ 140.197724][ T8772] alloc_file_pseudo_noaccount+0x183/0x290 [ 140.197750][ T8772] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 140.197776][ T8772] ? iput+0x3a/0x40 [ 140.197803][ T8772] bdev_file_open_by_dev+0x13a/0x210 [ 140.197833][ T8772] md_import_device+0x120/0x360 [ 140.197855][ T8772] new_dev_store+0x3c8/0x760 [ 140.197883][ T8772] ? __pfx_new_dev_store+0x10/0x10 [ 140.197908][ T8772] ? md_attr_store+0x195/0x330 [ 140.197925][ T8772] ? md_attr_store+0x195/0x330 [ 140.197948][ T8772] md_attr_store+0x1c5/0x330 [ 140.197967][ T8772] ? __pfx_md_attr_store+0x10/0x10 [ 140.197985][ T8772] sysfs_kf_write+0xf2/0x150 [ 140.198014][ T8772] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.198053][ T8772] ? __pfx_sysfs_kf_write+0x10/0x10 [ 140.198088][ T8772] vfs_write+0x6ac/0x1050 [ 140.198117][ T8772] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 140.198143][ T8772] ? __pfx_vfs_write+0x10/0x10 [ 140.198188][ T8772] ksys_write+0x12a/0x250 [ 140.198215][ T8772] ? __pfx_ksys_write+0x10/0x10 [ 140.198250][ T8772] do_syscall_64+0x115/0x870 [ 140.198272][ T8772] ? clear_bhb_loop+0x40/0x90 [ 140.198294][ T8772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.198313][ T8772] RIP: 0033:0x7fe766d9e019 [ 140.198329][ T8772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.198347][ T8772] RSP: 002b:00007fe767bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.198366][ T8772] RAX: ffffffffffffffda RBX: 00007fe767025fa0 RCX: 00007fe766d9e019 [ 140.198377][ T8772] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 140.198388][ T8772] RBP: 00007fe767bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 140.198398][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.198409][ T8772] R13: 00007fe767026038 R14: 00007fe767025fa0 R15: 00007ffd2d5fef18 [ 140.198435][ T8772] [ 140.198568][ T8772] md: could not open device unknown-block(7,0). [ 140.526345][ T42] audit: type=1400 audit(1785604801.568:744): avc: denied { ioctl } for pid=8784 comm="syz.1.877" path="socket:[31280]" dev="sockfs" ino=31280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.539609][ T5848] libceph: connect (1)[c::]:6789 error -22 [ 140.545146][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 140.577147][ T8798] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 140.580939][ T42] audit: type=1400 audit(1785604801.618:745): avc: denied { mounton } for pid=8784 comm="syz.1.877" path="/245/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.816429][ T5848] libceph: connect (1)[c::]:6789 error -22 [ 140.823528][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 140.941523][ T9] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 141.081377][ T9] usb 10-1: device descriptor read/64, error -71 [ 141.173367][ T5848] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 141.303403][ T8785] ceph: No mds server is up or the cluster is laggy [ 141.323096][ T5848] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.334852][ T9] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 141.335368][ T5848] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.343744][ T5848] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.346841][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.396094][ T42] audit: type=1400 audit(1785604802.438:746): avc: denied { write } for pid=8811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.483227][ T42] audit: type=1400 audit(1785604802.528:747): avc: denied { write } for pid=8816 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.501413][ T9] usb 10-1: device descriptor read/64, error -71 [ 141.574555][ T42] audit: type=1400 audit(1785604802.618:748): avc: denied { write } for pid=8819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.589469][ T8823] libceph: resolve '0' (ret=-3): failed [ 141.595207][ T8823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.611971][ T9] usb usb10-port1: attempt power cycle [ 141.638721][ T42] audit: type=1400 audit(1785604802.678:749): avc: denied { write } for pid=8824 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.642113][ T8823] md: could not open device unknown-block(7,0). [ 141.732326][ T42] audit: type=1400 audit(1785604802.778:750): avc: denied { write } for pid=8829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.765553][ T8832] syzkaller0: entered promiscuous mode [ 141.767295][ T8832] syzkaller0: entered allmulticast mode [ 141.951426][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 141.982427][ T9] usb 10-1: device descriptor read/8, error -71 [ 142.244539][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 142.262752][ T9] usb 10-1: device descriptor read/8, error -71 [ 142.372726][ T9] usb usb10-port1: unable to enumerate USB device [ 142.738002][ T56] usb 9-1: USB disconnect, device number 24 [ 142.777692][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.889'. [ 143.383743][ T8842] program syz.4.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.801408][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 143.946115][ T5828] usb 8-1: USB disconnect, device number 28 [ 143.950395][ T8864] libceph: resolve '0' (ret=-3): failed [ 143.954377][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 143.964970][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 143.965350][ T8864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.968347][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.971673][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 143.971684][ T42] audit: type=1400 audit(1785604805.008:758): avc: denied { append } for pid=8865 comm="syz.3.898" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 143.985498][ T42] audit: type=1400 audit(1785604805.028:759): avc: denied { ioctl } for pid=8865 comm="syz.3.898" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 143.986850][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.998493][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.002856][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.008330][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.012100][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.031129][ T8868] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.035706][ T8864] md: could not open device unknown-block(7,0). [ 144.038059][ T8864] FAULT_INJECTION: forcing a failure. [ 144.038059][ T8864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.051394][ T8864] CPU: 2 UID: 0 PID: 8864 Comm: syz.5.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.051416][ T8864] Tainted: [L]=SOFTLOCKUP [ 144.051421][ T8864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.051434][ T8864] Call Trace: [ 144.051452][ T8864] [ 144.051457][ T8864] dump_stack_lvl+0x100/0x190 [ 144.051561][ T8864] should_fail_ex.cold+0x5/0xa [ 144.051589][ T8864] _copy_to_user+0x32/0xd0 [ 144.051633][ T8864] simple_read_from_buffer+0xcb/0x170 [ 144.051667][ T8864] proc_fail_nth_read+0x1af/0x230 [ 144.051694][ T8864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.051711][ T8864] ? rw_verify_area+0xce/0x6d0 [ 144.051736][ T8864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.051752][ T8864] vfs_read+0x1e4/0xb40 [ 144.051770][ T8864] ? __pfx_vfs_read+0x10/0x10 [ 144.051786][ T8864] ? __fget_files+0x215/0x3d0 [ 144.051801][ T8864] ? __fget_files+0x21f/0x3d0 [ 144.051815][ T8864] ksys_read+0x12a/0x250 [ 144.051831][ T8864] ? __pfx_ksys_read+0x10/0x10 [ 144.051851][ T8864] do_syscall_64+0x115/0x870 [ 144.051883][ T8864] ? clear_bhb_loop+0x40/0x90 [ 144.051898][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.051909][ T8864] RIP: 0033:0x7f544fb5e84e [ 144.051918][ T8864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.051930][ T8864] RSP: 002b:00007f54509a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.051948][ T8864] RAX: ffffffffffffffda RBX: 00007f54509a36c0 RCX: 00007f544fb5e84e [ 144.051955][ T8864] RDX: 000000000000000f RSI: 00007f54509a30a0 RDI: 0000000000000006 [ 144.051961][ T8864] RBP: 00007f54509a3090 R08: 0000000000000000 R09: 0000000000000000 [ 144.051968][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.051974][ T8864] R13: 00007f544fe26038 R14: 00007f544fe25fa0 R15: 00007ffdc7946408 [ 144.051988][ T8864] [ 144.135165][ T42] audit: type=1400 audit(1785604805.178:760): avc: denied { bind } for pid=8873 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.142562][ T8875] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 144.432141][ T5828] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 144.561619][ T5828] usb 9-1: device descriptor read/64, error -71 [ 144.803452][ T5828] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 144.941563][ T5828] usb 9-1: device descriptor read/64, error -71 [ 145.051830][ T5828] usb usb9-port1: attempt power cycle [ 145.179070][ T42] audit: type=1400 audit(1785604806.218:761): avc: denied { create } for pid=8906 comm="syz.3.906" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.218185][ T8911] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 145.226337][ T8911] CIFS mount error: No usable UNC path provided in device string! [ 145.226337][ T8911] [ 145.230814][ T8911] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 145.234503][ T8911] libceph: resolve '0' (ret=-3): failed [ 145.238932][ T8911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.294944][ T42] audit: type=1400 audit(1785604806.338:762): avc: denied { mounton } for pid=8912 comm="syz.5.908" path="/15/file0" dev="hugetlbfs" ino=31776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 145.294979][ T8913] overlay: Bad value for 'redirect_dir' [ 145.338049][ T42] audit: type=1400 audit(1785604806.378:763): avc: denied { create } for pid=8915 comm="syz.5.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 145.346607][ T42] audit: type=1400 audit(1785604806.388:764): avc: denied { write } for pid=8915 comm="syz.5.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 145.395401][ T8918] Failed to get privilege flags for destination (handle=0x2:0x0) [ 145.401703][ T5828] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 145.422142][ T5828] usb 9-1: device descriptor read/8, error -71 [ 145.433495][ T8918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8918 comm=syz.5.910 [ 145.508702][ T42] audit: type=1400 audit(1785604806.548:765): avc: denied { ioctl } for pid=8924 comm="syz.5.912" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31362 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.671358][ T5828] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 145.702648][ T5828] usb 9-1: device descriptor read/8, error -71 [ 145.761487][ T29] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 145.812551][ T5828] usb usb9-port1: unable to enumerate USB device [ 145.913108][ T29] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.917202][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.922935][ T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.926770][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.934274][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 335, setting to 64 [ 145.941987][ T56] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 145.943310][ T29] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.949670][ T29] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.953142][ T29] usb 10-1: Product: syz [ 145.954947][ T29] usb 10-1: Manufacturer: syz [ 146.071374][ T56] usb 9-1: device descriptor read/64, error -71 [ 146.321384][ T56] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 146.451375][ T56] usb 9-1: device descriptor read/64, error -71 [ 146.491344][ T1354] usb 6-1: USB disconnect, device number 34 [ 146.561688][ T56] usb usb9-port1: attempt power cycle [ 146.759505][ T8933] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 146.763274][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.916'. [ 146.767095][ T8933] team_slave_1: entered promiscuous mode [ 146.768907][ T42] audit: type=1400 audit(1785604807.808:766): avc: denied { load_policy } for pid=8932 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 146.769252][ T8934] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 146.769299][ T8934] SELinux: failed to load policy [ 146.769476][ T8933] team_slave_1: entered allmulticast mode [ 146.789451][ T8933] team0: Port device team_slave_1 removed [ 146.794394][ T8933] bridge0: port 4(team_slave_1) entered blocking state [ 146.797238][ T8933] bridge0: port 4(team_slave_1) entered disabled state [ 146.834491][ T8938] libceph: resolve '0' (ret=-3): failed [ 146.838392][ T8938] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.891584][ T8938] md: could not open device unknown-block(7,0). [ 146.901491][ T56] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 146.932731][ T56] usb 9-1: device descriptor read/8, error -71 [ 146.964551][ T8940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8940 comm=syz.1.918 [ 147.181495][ T56] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 147.204469][ T56] usb 9-1: device descriptor read/8, error -71 [ 147.322046][ T56] usb usb9-port1: unable to enumerate USB device [ 147.350416][ T42] audit: type=1400 audit(1785604808.388:767): avc: denied { unlink } for pid=5738 comm="syz-executor" name="file0" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.446017][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.924'. [ 147.449000][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 147.451972][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.924'. [ 147.467114][ T8962] libceph: resolve '0' (ret=-3): failed [ 147.470933][ T8962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.561531][ T8962] md: could not open device unknown-block(7,0). [ 147.594987][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 147.650263][ T8969] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 147.657016][ T8969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.676981][ T8971] macvlan0: entered promiscuous mode [ 147.767807][ T8969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.877489][ T8969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.950848][ T8969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.981459][ T56] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 148.091491][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.095009][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.098211][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.101418][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.131472][ T56] usb 6-1: device descriptor read/64, error -71 [ 148.235954][ T8983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.933'. [ 148.239090][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.933'. [ 148.265082][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 148.381374][ T56] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 148.420265][ T8994] libceph: resolve '0' (ret=-3): failed [ 148.425020][ T8994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.441052][ T8991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 148.501626][ T8994] md: could not open device unknown-block(7,0). [ 148.521449][ T56] usb 6-1: device descriptor read/64, error -71 [ 148.523749][ T6968] usb 10-1: USB disconnect, device number 6 [ 148.548994][ T8996] loop8: detected capacity change from 0 to 4194304 [ 148.567149][ T9001] netlink: 52 bytes leftover after parsing attributes in process `syz.5.939'. [ 148.632616][ T56] usb usb6-port1: attempt power cycle [ 148.648939][ T9008] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 148.740035][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.744169][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.981508][ T2321] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 148.991626][ T56] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 149.012057][ T56] usb 6-1: device descriptor read/8, error -71 [ 149.131378][ T2321] usb 10-1: Using ep0 maxpacket: 8 [ 149.134357][ T2321] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 149.137117][ T2321] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.140529][ T2321] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.143580][ T2321] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.146732][ T2321] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.150991][ T2321] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.153994][ T2321] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.251696][ T56] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 149.282114][ T56] usb 6-1: device descriptor read/8, error -71 [ 149.403932][ T56] usb usb6-port1: unable to enumerate USB device [ 149.478500][ T9028] libceph: resolve '0' (ret=-3): failed [ 149.488914][ T9028] program syz.3.946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.508679][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 149.508701][ T42] audit: type=1400 audit(1785604810.548:770): avc: denied { setopt } for pid=9029 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.511828][ T9028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.531532][ T42] audit: type=1400 audit(1785604810.548:771): avc: denied { write } for pid=9029 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.571741][ T9028] md: could not open device unknown-block(7,0). [ 149.674529][ T9035] hpfs: hpfs_map_sector(): read error [ 149.686078][ T42] audit: type=1400 audit(1785604810.728:772): avc: denied { remount } for pid=9034 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.800891][ T9043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9043 comm=syz.4.952 [ 149.807938][ T9043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=9043 comm=syz.4.952 [ 149.821634][ T9043] netlink: 'syz.4.952': attribute type 13 has an invalid length. [ 149.861326][ T56] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 149.880277][ T9] lo speed is unknown, defaulting to 1000 [ 149.901851][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.958737][ T42] audit: type=1400 audit(1785604810.998:773): avc: denied { read } for pid=9044 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.032922][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 150.036242][ T56] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.040044][ T42] audit: type=1400 audit(1785604811.078:774): avc: denied { setattr } for pid=9048 comm="syz.4.955" name="sequencer2" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 150.049580][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.054210][ T56] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.058214][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.063479][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.069306][ T56] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.072801][ T56] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.075994][ T56] usb 8-1: Product: syz [ 150.077729][ T56] usb 8-1: Manufacturer: syz [ 150.249635][ T9053] libceph: resolve '0' (ret=-3): failed [ 150.388595][ T9059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.959'. [ 150.432200][ T42] audit: type=1400 audit(1785604811.478:775): avc: denied { setattr } for pid=9060 comm="syz.4.960" path="socket:[30625]" dev="sockfs" ino=30625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.474924][ T9063] cgroup: Invalid name [ 150.475618][ T42] audit: type=1400 audit(1785604811.518:776): avc: denied { mounton } for pid=9062 comm="syz.4.961" path="/181/file3" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 150.476827][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 150.500910][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 150.511409][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.651357][ T42] audit: type=1400 audit(1785604811.688:777): avc: denied { recv } for pid=5725 comm="syz-executor" saddr=127.0.0.1 src=35840 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 150.703498][ T42] audit: type=1400 audit(1785604811.748:778): avc: denied { recv } for pid=0 comm="swapper/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=35840 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 150.749490][ T42] audit: type=1400 audit(1785604811.788:779): avc: denied { read append } for pid=9077 comm="syz.1.966" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 150.749856][ T9078] netlink: 'syz.1.966': attribute type 2 has an invalid length. [ 150.762297][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 150.803926][ T9081] libceph: resolve '0' (ret=-3): failed [ 150.811086][ T9081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.217304][ T9098] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.511413][ T2321] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 151.641373][ T2321] usb 9-1: device descriptor read/64, error -71 [ 151.725594][ T5848] usb 10-1: USB disconnect, device number 7 [ 151.881528][ T2321] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 151.961903][ T9102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=9102 comm=syz.1.975 [ 151.967385][ T9103] sock: sock_timestamping_bind_phc: sock not bind to device [ 152.011433][ T2321] usb 9-1: device descriptor read/64, error -71 [ 152.121850][ T2321] usb usb9-port1: attempt power cycle [ 152.185204][ T9114] libceph: resolve '0' (ret=-3): failed [ 152.195504][ T9114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.262845][ T9114] md: could not open device unknown-block(7,0). [ 152.340956][ T9133] binder: 9132:9133 ioctl 40186f02 200000000240 returned -22 [ 152.409555][ T9135] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.471386][ T2321] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 152.635595][ T9] usb 8-1: USB disconnect, device number 29 [ 153.004333][ T9160] libceph: resolve '0' (ret=-3): failed [ 153.012993][ T9160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.071847][ T9160] md: could not open device unknown-block(7,0). [ 153.109873][ T2321] usb 9-1: device descriptor read/8, error -71 [ 153.421591][ T2321] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 153.442093][ T2321] usb 9-1: device descriptor read/8, error -71 [ 153.541356][ T29] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 153.561540][ T2321] usb usb9-port1: unable to enumerate USB device [ 153.714471][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.717249][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.720728][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.723704][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.727046][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.731676][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.734697][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.737291][ T29] usb 8-1: Product: syz [ 153.738786][ T29] usb 8-1: Manufacturer: syz [ 153.941481][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.975447][ T5744] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 154.247338][ T9182] __nla_validate_parse: 6 callbacks suppressed [ 154.247360][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.999'. [ 154.320059][ T9186] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1001'. [ 154.378847][ T9188] libceph: resolve '0' (ret=-3): failed [ 154.488422][ T9197] bridge0: port 3(syz_tun) entered blocking state [ 154.492727][ T9197] bridge0: port 3(syz_tun) entered disabled state [ 154.496769][ T9197] syz_tun: entered allmulticast mode [ 154.499752][ T9197] syz_tun: entered promiscuous mode [ 154.503332][ T9197] bridge0: port 3(syz_tun) entered blocking state [ 154.506263][ T9197] bridge0: port 3(syz_tun) entered forwarding state [ 154.544857][ T9204] veth1_macvtap: Device is already in use. [ 154.552213][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 154.557588][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 154.557603][ T42] audit: type=1400 audit(1785604815.598:790): avc: denied { write } for pid=9203 comm="syz.4.1008" name="functions" dev="configfs" ino=17444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.637929][ T42] audit: type=1400 audit(1785604815.678:791): avc: denied { shutdown } for pid=9213 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.761478][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 154.795492][ T9221] libceph: resolve '0' (ret=-3): failed [ 154.831577][ T1354] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 154.921657][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 154.926275][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 154.928989][ T9] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.932657][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.936375][ T9] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.940541][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.944386][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.947353][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 154.948080][ T9] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.957625][ T9] usb 10-1: config 168 interface 0 has no altsetting 0 [ 154.961705][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 154.964232][ T9] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.967847][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.972847][ T9] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.977149][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.980760][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.984561][ T9] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.985742][ T1354] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.988592][ T9] usb 10-1: config 168 interface 0 has no altsetting 0 [ 154.991598][ T1354] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 154.993977][ T9233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52270 sclass=netlink_route_socket pid=9233 comm=syz.4.1017 [ 154.994432][ T9] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 154.994451][ T9] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.994471][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.994485][ T9] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.994498][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.994512][ T9] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.994526][ T9] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.994540][ T9] usb 10-1: config 168 interface 0 has no altsetting 0 [ 154.996735][ T9] usb 10-1: string descriptor 0 read error: -22 [ 154.996794][ T9] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.996806][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.996931][ T1354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.044626][ T1354] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.050216][ T1354] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.053508][ T1354] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.056058][ T1354] usb 6-1: Product: syz [ 155.057549][ T1354] usb 6-1: Manufacturer: syz [ 155.081075][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 155.084488][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 155.120110][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 155.124573][ T9237] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.541556][ T2321] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 155.703066][ T2321] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.707749][ T2321] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.711924][ T2321] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.715698][ T2321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.306160][ T848] usb 8-1: USB disconnect, device number 30 [ 156.502696][ T42] audit: type=1400 audit(1785604817.548:792): avc: denied { append } for pid=9254 comm="syz.3.1025" name="video5" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.637824][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 156.646675][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 157.031331][ T2321] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 157.193681][ T2321] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.197788][ T2321] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.201889][ T2321] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.205446][ T2321] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 157.214255][ T2321] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.218098][ T2321] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.221476][ T2321] usb 8-1: Product: syz [ 157.223203][ T2321] usb 8-1: Manufacturer: syz [ 157.495270][ T1354] usb 10-1: USB disconnect, device number 8 [ 157.601759][ T9] usb 6-1: USB disconnect, device number 39 [ 157.686339][ T9282] libceph: resolve '0' (ret=-3): failed [ 157.690033][ T9282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.725147][ T9282] md: could not open device unknown-block(7,0). [ 157.764015][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 157.829413][ T9293] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 157.831872][ T9293] netlink: 'syz.1.1041': attribute type 4 has an invalid length. [ 157.835536][ T9293] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 157.838180][ T9293] netlink: 'syz.1.1041': attribute type 4 has an invalid length. [ 157.867186][ T42] audit: type=1400 audit(1785604818.908:793): avc: denied { map } for pid=9291 comm="syz.1.1041" path="socket:[33579]" dev="sockfs" ino=33579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.867611][ T9293] nvme_fabrics: unknown parameter or missing value 'nqsn{^AOn=nqn.201' in ctrl creation request [ 157.874471][ T42] audit: type=1400 audit(1785604818.908:794): avc: denied { read } for pid=9291 comm="syz.1.1041" path="socket:[33579]" dev="sockfs" ino=33579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.062488][ T9] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 158.118193][ T9300] syzkaller0: entered promiscuous mode [ 158.120457][ T9300] syzkaller0: entered allmulticast mode [ 158.213233][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.216260][ T9] usb 10-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 158.220190][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.223412][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.229761][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.233238][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.236335][ T9] usb 10-1: Product: syz [ 158.237978][ T9] usb 10-1: Manufacturer: syz [ 158.265445][ T9307] bridge0: port 4(team_slave_1) entered disabled state [ 158.269791][ T9307] syz_tun: left allmulticast mode [ 158.271703][ T9307] syz_tun: left promiscuous mode [ 158.273475][ T9307] bridge0: port 3(syz_tun) entered disabled state [ 158.276479][ T9307] bridge_slave_1: left allmulticast mode [ 158.278300][ T9307] bridge_slave_1: left promiscuous mode [ 158.280395][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.285107][ T9307] bridge_slave_0: left allmulticast mode [ 158.287530][ T9307] bridge_slave_0: left promiscuous mode [ 158.290081][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.317986][ T1354] usb 9-1: USB disconnect, device number 37 [ 158.347802][ T9310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.391696][ T9310] md: could not open device unknown-block(7,0). [ 158.470009][ T42] audit: type=1400 audit(1785604819.508:795): avc: denied { accept } for pid=9315 comm="syz.1.1048" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.472810][ T9316] xt_hashlimit: size too large, truncated to 1048576 [ 158.492712][ T9316] --map-set only usable from mangle table [ 158.613488][ T9325] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 159.804425][ T56] usb 8-1: USB disconnect, device number 31 [ 159.913152][ T9352] __nla_validate_parse: 9 callbacks suppressed [ 159.913172][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 159.918770][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 159.922085][ T9352] netlink: 'syz.3.1055': attribute type 7 has an invalid length. [ 159.933329][ T9351] netlink: 'syz.3.1055': attribute type 4 has an invalid length. [ 160.839386][ T56] usb 10-1: USB disconnect, device number 9 [ 160.906855][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 160.944998][ T9360] libceph: resolve '0' (ret=-3): failed [ 160.948660][ T9360] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.986022][ T42] audit: type=1400 audit(1785604822.028:796): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 160.995196][ T42] audit: type=1400 audit(1785604822.028:797): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 161.517500][ T9320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.541400][ T2321] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 161.574783][ T9370] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1063'. [ 161.641972][ T9374] bond3: invalid ARP target 0.0.0.0 specified for addition [ 161.644368][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 161.644969][ T9374] bond3: option arp_ip_target: invalid value (0) [ 161.652124][ T9374] bond3 (unregistering): Released all slaves [ 161.703025][ T2321] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.707468][ T2321] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.713859][ T2321] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.717612][ T2321] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.722263][ T2321] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.727979][ T2321] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.736446][ T2321] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.742022][ T2321] usb 10-1: Product: syz [ 161.743771][ T2321] usb 10-1: Manufacturer: syz [ 161.770428][ T9383] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 161.785119][ T9383] bond3: entered promiscuous mode [ 161.788233][ T9383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.804476][ T9383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.807089][ T9383] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 161.810228][ T9383] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 161.816616][ T9383] bond3: (slave ip6gre2): making interface the new active one [ 161.819724][ T9383] ip6gre2: entered promiscuous mode [ 161.821519][ T5826] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 161.824948][ T9383] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 161.844423][ T42] audit: type=1400 audit(1785604822.888:798): avc: denied { getopt } for pid=9382 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.973048][ T5826] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.977677][ T5826] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 161.982456][ T5826] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.986001][ T5826] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.993418][ T5826] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.996859][ T5826] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.999985][ T5826] usb 9-1: Product: syz [ 162.001879][ T5826] usb 9-1: Manufacturer: syz [ 162.130140][ T9389] libceph: resolve '0' (ret=-3): failed [ 162.136444][ T9389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.145788][ T9389] netlink: 'syz.1.1070': attribute type 2 has an invalid length. [ 162.149004][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 162.201614][ T9389] md: could not open device unknown-block(7,0). [ 162.247080][ T42] audit: type=1400 audit(1785604823.288:799): avc: denied { module_load } for pid=9390 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 162.247174][ T9391] Invalid ELF header type: 0 != 1 [ 162.268184][ T42] audit: type=1400 audit(1785604823.308:800): avc: denied { connect } for pid=9390 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.409104][ T9393] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1072'. [ 162.558832][ T9395] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 162.560997][ T9395] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.567144][ T9395] vhci_hcd vhci_hcd.0: Device attached [ 162.573990][ T42] audit: type=1400 audit(1785604823.618:801): avc: denied { accept } for pid=9394 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.586080][ T9397] vhci_hcd: connection closed [ 162.593228][ T5817] vhci_hcd vhci_hcd.3: stop threads [ 162.598074][ T5817] vhci_hcd vhci_hcd.3: release socket [ 162.598104][ T5817] vhci_hcd vhci_hcd.3: disconnect device [ 162.610775][ T9405] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1075'. [ 162.647184][ T9405] qrtr: Invalid version 0 [ 162.897873][ T9414] libceph: resolve '0' (ret=-3): failed [ 162.962216][ T9414] md: could not open device unknown-block(7,0). [ 163.195048][ T9424] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1082'. [ 163.511438][ T2321] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 163.627277][ T42] audit: type=1400 audit(1785604824.668:802): avc: denied { getopt } for pid=9437 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.671329][ T2321] usb 8-1: Using ep0 maxpacket: 16 [ 163.675279][ T2321] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 163.683664][ T2321] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.687609][ T2321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.690826][ T2321] usb 8-1: Product: syz [ 163.692820][ T2321] usb 8-1: Manufacturer: syz [ 163.694808][ T2321] usb 8-1: SerialNumber: syz [ 163.837380][ T9445] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1091'. [ 163.840503][ T9445] openvswitch: netlink: Flow key attr not present in new flow. [ 164.283991][ T9] usb 10-1: USB disconnect, device number 10 [ 164.597779][ T2321] usb 9-1: USB disconnect, device number 38 [ 164.675994][ T42] audit: type=1400 audit(1785604825.718:803): avc: denied { mount } for pid=9465 comm="syz.5.1099" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 164.692242][ T42] audit: type=1807 audit(1785604825.728:804): action=measure func=FILE_CHECK res=1 [ 165.120689][ T9468] overlayfs: statfs failed on './file0' [ 165.208908][ T9465] ima: policy update completed [ 165.213609][ T42] audit: type=1802 audit(1785604826.258:805): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.5.1099" res=1 errno=0 [ 165.433772][ T9490] netlink: 'syz.5.1109': attribute type 1 has an invalid length. [ 165.436301][ T9490] __nla_validate_parse: 2 callbacks suppressed [ 165.436310][ T9490] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1109'. [ 165.527750][ T9475] kvm: user requested TSC rate below hardware speed [ 165.558791][ T9500] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1112'. [ 165.609903][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1113'. [ 165.614422][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.621498][ T56] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 165.722820][ T9513] comedi comedi3: comedi_config --init_data is deprecated [ 165.794598][ T56] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.798073][ T56] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 165.801079][ T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.804879][ T56] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.812816][ T56] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.816152][ T56] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.818911][ T56] usb 6-1: Product: syz [ 165.820401][ T56] usb 6-1: Manufacturer: syz [ 166.014805][ T42] kauditd_printk_skb: 670 callbacks suppressed [ 166.014824][ T42] audit: type=1800 audit(1785604827.058:1476): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 166.036048][ T42] audit: type=1400 audit(1785604827.078:1477): avc: denied { open } for pid=9530 comm="syz.4.1121" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 166.092706][ T42] audit: type=1400 audit(1785604827.138:1478): avc: denied { ioctl } for pid=9530 comm="syz.4.1121" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 166.260755][ T2321] usb 8-1: USB disconnect, device number 32 [ 166.264272][ T42] audit: type=1800 audit(1785604827.308:1479): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35455 res=0 errno=0 [ 166.281324][ T42] audit: type=1800 audit(1785604827.318:1480): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35478 res=0 errno=0 [ 166.289984][ T42] audit: type=1800 audit(1785604827.318:1481): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 166.300957][ T42] audit: type=1800 audit(1785604827.328:1482): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 166.310448][ T42] audit: type=1400 audit(1785604827.328:1483): avc: denied { create } for pid=9534 comm="syz.5.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.349852][ T42] audit: type=1400 audit(1785604827.388:1484): avc: denied { ioctl } for pid=9538 comm="syz.3.1123" path="socket:[36865]" dev="sockfs" ino=36865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.386033][ T42] audit: type=1800 audit(1785604827.428:1485): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 166.811751][ T9577] can: request_module (can-proto-0) failed. [ 166.904235][ T9590] FAULT_INJECTION: forcing a failure. [ 166.904235][ T9590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.909726][ T9590] CPU: 1 UID: 0 PID: 9590 Comm: syz.3.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.909755][ T9590] Tainted: [L]=SOFTLOCKUP [ 166.909761][ T9590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.909779][ T9590] Call Trace: [ 166.909803][ T9590] [ 166.909811][ T9590] dump_stack_lvl+0x100/0x190 [ 166.909963][ T9590] should_fail_ex.cold+0x5/0xa [ 166.910003][ T9590] _copy_from_user+0x2e/0xd0 [ 166.910060][ T9590] copy_msghdr_from_user+0x9f/0x4c0 [ 166.910098][ T9590] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 166.910127][ T9590] ___sys_sendmsg+0x106/0x1e0 [ 166.910146][ T9590] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.910161][ T9590] ? __lock_acquire+0x49f/0x1a40 [ 166.910219][ T9590] ? get_pid_task+0x106/0x250 [ 166.910274][ T9590] __sys_sendmsg+0x160/0x210 [ 166.910299][ T9590] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.910335][ T9590] do_syscall_64+0x115/0x870 [ 166.910379][ T9590] ? clear_bhb_loop+0x40/0x90 [ 166.910402][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.910419][ T9590] RIP: 0033:0x7fe766d9e019 [ 166.910436][ T9590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.910453][ T9590] RSP: 002b:00007fe767bf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.910480][ T9590] RAX: ffffffffffffffda RBX: 00007fe767025fa0 RCX: 00007fe766d9e019 [ 166.910492][ T9590] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 166.910503][ T9590] RBP: 00007fe767bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.910513][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.910524][ T9590] R13: 00007fe767026038 R14: 00007fe767025fa0 R15: 00007ffd2d5fef18 [ 166.910548][ T9590] [ 166.923348][ T9592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1139'. [ 167.070907][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'. [ 167.115583][ T9613] nicvf0: renamed from team0 (while UP) [ 167.123025][ T9613] nicvf0: Cannot enslave team device to itself [ 167.125002][ T9613] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 167.192213][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 167.192515][ T9621] FAULT_INJECTION: forcing a failure. [ 167.192515][ T9621] name failslab, interval 1, probability 0, space 0, times 0 [ 167.202408][ T9621] CPU: 2 UID: 0 PID: 9621 Comm: syz.5.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.202426][ T9621] Tainted: [L]=SOFTLOCKUP [ 167.202430][ T9621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.202437][ T9621] Call Trace: [ 167.202441][ T9621] [ 167.202445][ T9621] dump_stack_lvl+0x100/0x190 [ 167.202465][ T9621] should_fail_ex.cold+0x5/0xa [ 167.202481][ T9621] should_failslab+0xc2/0x120 [ 167.202522][ T9621] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 167.202544][ T9621] ? __alloc_skb+0x5b7/0x710 [ 167.202557][ T9621] ? __alloc_skb+0x140/0x710 [ 167.202572][ T9621] __alloc_skb+0x140/0x710 [ 167.202583][ T9621] ? __alloc_skb+0x5b7/0x710 [ 167.202603][ T9621] ? __pfx___alloc_skb+0x10/0x10 [ 167.202615][ T9621] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 167.202649][ T9621] ? sock_has_perm+0x25a/0x2f0 [ 167.202664][ T9621] ? __pfx_sock_has_perm+0x10/0x10 [ 167.202680][ T9621] netlink_alloc_large_skb+0x69/0x150 [ 167.202694][ T9621] netlink_sendmsg+0x680/0xda0 [ 167.202708][ T9621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.202721][ T9621] ? selinux_socket_sendmsg+0x198/0x2f0 [ 167.202739][ T9621] ____sys_sendmsg+0xa4d/0xbe0 [ 167.202755][ T9621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.202767][ T9621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.202790][ T9621] ___sys_sendmsg+0x190/0x1e0 [ 167.202802][ T9621] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.202811][ T9621] ? __lock_acquire+0x49f/0x1a40 [ 167.202826][ T9621] ? get_pid_task+0x106/0x250 [ 167.202850][ T9621] __sys_sendmsg+0x160/0x210 [ 167.202864][ T9621] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.202885][ T9621] do_syscall_64+0x115/0x870 [ 167.202898][ T9621] ? clear_bhb_loop+0x40/0x90 [ 167.202912][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.202923][ T9621] RIP: 0033:0x7f544fb9e019 [ 167.202934][ T9621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.202944][ T9621] RSP: 002b:00007f54509a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.202957][ T9621] RAX: ffffffffffffffda RBX: 00007f544fe25fa0 RCX: 00007f544fb9e019 [ 167.202963][ T9621] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 167.202970][ T9621] RBP: 00007f54509a3090 R08: 0000000000000000 R09: 0000000000000000 [ 167.202976][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.202982][ T9621] R13: 00007f544fe26038 R14: 00007f544fe25fa0 R15: 00007ffdc7946408 [ 167.202996][ T9621] [ 167.259366][ T9626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1151'. [ 167.461739][ T9643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 168.077165][ T9708] FAULT_INJECTION: forcing a failure. [ 168.077165][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.083233][ T9708] CPU: 1 UID: 0 PID: 9708 Comm: syz.3.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.083254][ T9708] Tainted: [L]=SOFTLOCKUP [ 168.083257][ T9708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.083264][ T9708] Call Trace: [ 168.083281][ T9708] [ 168.083286][ T9708] dump_stack_lvl+0x100/0x190 [ 168.083338][ T9708] should_fail_ex.cold+0x5/0xa [ 168.083354][ T9708] _copy_from_iter+0x1f4/0x1690 [ 168.083377][ T9708] ? __asan_memset+0x23/0x50 [ 168.083396][ T9708] ? __pfx__copy_from_iter+0x10/0x10 [ 168.083411][ T9708] ? __pfx___alloc_skb+0x10/0x10 [ 168.083434][ T9708] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 168.083458][ T9708] ? sock_has_perm+0x25a/0x2f0 [ 168.083473][ T9708] ? __pfx_sock_has_perm+0x10/0x10 [ 168.083489][ T9708] netlink_sendmsg+0x808/0xda0 [ 168.083504][ T9708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.083516][ T9708] ? selinux_socket_sendmsg+0x198/0x2f0 [ 168.083534][ T9708] ____sys_sendmsg+0xa4d/0xbe0 [ 168.083550][ T9708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.083563][ T9708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.083587][ T9708] ___sys_sendmsg+0x190/0x1e0 [ 168.083599][ T9708] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.083608][ T9708] ? __lock_acquire+0x49f/0x1a40 [ 168.083629][ T9708] ? get_pid_task+0x106/0x250 [ 168.083653][ T9708] __sys_sendmsg+0x160/0x210 [ 168.083667][ T9708] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.083687][ T9708] do_syscall_64+0x115/0x870 [ 168.083715][ T9708] ? clear_bhb_loop+0x40/0x90 [ 168.083729][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.083741][ T9708] RIP: 0033:0x7fe766d9e019 [ 168.083751][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.083762][ T9708] RSP: 002b:00007fe767bf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.083778][ T9708] RAX: ffffffffffffffda RBX: 00007fe767025fa0 RCX: 00007fe766d9e019 [ 168.083785][ T9708] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 168.083792][ T9708] RBP: 00007fe767bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 168.083798][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.083804][ T9708] R13: 00007fe767026038 R14: 00007fe767025fa0 R15: 00007ffd2d5fef18 [ 168.083818][ T9708] [ 168.142967][ T9710] 9p: Could not find request transport: virtiU [ 168.187395][ T9712] i2c i2c-0: new_device: Instantiated device stusb160x at 0x48 [ 168.196418][ T9710] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 168.201759][ T9710] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 168.221178][ T9710] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 168.380506][ T56] usb 6-1: USB disconnect, device number 40 [ 168.419145][ T9718] overlayfs: maximum fs stacking depth exceeded [ 168.537406][ T9667] Bluetooth: (null): Invalid header checksum [ 168.658294][ T9680] Bluetooth: (null): Invalid header checksum [ 168.773246][ T9681] Bluetooth: (null): Invalid header checksum [ 168.834626][ T9732] libceph: resolve '0' (ret=-3): failed [ 168.839071][ T9732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.885598][ T9681] Bluetooth: (null): Invalid header checksum [ 168.911682][ T9732] md: could not open device unknown-block(7,0). [ 168.967666][ T9735] FAULT_INJECTION: forcing a failure. [ 168.967666][ T9735] name failslab, interval 1, probability 0, space 0, times 0 [ 168.971862][ T9735] CPU: 3 UID: 0 PID: 9735 Comm: syz.5.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.971881][ T9735] Tainted: [L]=SOFTLOCKUP [ 168.971885][ T9735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.971899][ T9735] Call Trace: [ 168.971910][ T9735] [ 168.971914][ T9735] dump_stack_lvl+0x100/0x190 [ 168.971991][ T9735] should_fail_ex.cold+0x5/0xa [ 168.972027][ T9735] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 168.972071][ T9735] should_failslab+0xc2/0x120 [ 168.972101][ T9735] kmem_cache_alloc_noprof+0x91/0x6a0 [ 168.972123][ T9735] ? skb_clone+0x190/0x400 [ 168.972143][ T9735] skb_clone+0x190/0x400 [ 168.972157][ T9735] netlink_deliver_tap+0xaed/0xcc0 [ 168.972177][ T9735] netlink_unicast+0x62b/0x850 [ 168.972190][ T9735] ? __pfx_netlink_unicast+0x10/0x10 [ 168.972201][ T9735] ? __pfx_sock_has_perm+0x10/0x10 [ 168.972231][ T9735] netlink_sendmsg+0x8b0/0xda0 [ 168.972244][ T9735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.972257][ T9735] ? selinux_socket_sendmsg+0x198/0x2f0 [ 168.972275][ T9735] ____sys_sendmsg+0xa4d/0xbe0 [ 168.972291][ T9735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.972303][ T9735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.972326][ T9735] ___sys_sendmsg+0x190/0x1e0 [ 168.972337][ T9735] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.972346][ T9735] ? __lock_acquire+0x49f/0x1a40 [ 168.972376][ T9735] ? get_pid_task+0x106/0x250 [ 168.972407][ T9735] __sys_sendmsg+0x160/0x210 [ 168.972421][ T9735] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.972442][ T9735] do_syscall_64+0x115/0x870 [ 168.972455][ T9735] ? clear_bhb_loop+0x40/0x90 [ 168.972470][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.972481][ T9735] RIP: 0033:0x7f544fb9e019 [ 168.972490][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.972501][ T9735] RSP: 002b:00007f54509a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.972517][ T9735] RAX: ffffffffffffffda RBX: 00007f544fe25fa0 RCX: 00007f544fb9e019 [ 168.972524][ T9735] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 168.972530][ T9735] RBP: 00007f54509a3090 R08: 0000000000000000 R09: 0000000000000000 [ 168.972536][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.972542][ T9735] R13: 00007f544fe26038 R14: 00007f544fe25fa0 R15: 00007ffdc7946408 [ 168.972555][ T9735] [ 169.064808][ T9681] Bluetooth: (null): Invalid header checksum [ 169.144410][ T9714] overlayfs: statfs failed on './file0' [ 169.162944][ T9683] Bluetooth: (null): Invalid header checksum [ 169.272220][ T9667] Bluetooth: (null): Invalid header checksum [ 169.331468][ T56] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 169.494287][ T56] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.498007][ T56] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 169.501062][ T56] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.504823][ T56] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.511765][ T56] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.515726][ T56] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.519068][ T56] usb 10-1: Product: syz [ 169.520525][ T56] usb 10-1: Manufacturer: syz [ 170.036748][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 170.553748][ T9771] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 170.577960][ T9773] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1196'. [ 170.767438][ T9778] overlayfs: missing 'lowerdir' [ 170.771352][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 170.775222][ T9774] openvswitch: netlink: Missing key (keys=40, expected=100) [ 170.911674][ T9786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9786 comm=syz.4.1200 [ 170.912598][ T9788] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 171.025249][ T9794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.038712][ T42] kauditd_printk_skb: 194 callbacks suppressed [ 171.038744][ T42] audit: type=1800 audit(1785604832.078:1680): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177056 res=0 errno=0 [ 171.055055][ T42] audit: type=1800 audit(1785604832.098:1681): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177067 res=0 errno=0 [ 171.100470][ T42] audit: type=1800 audit(1785604832.138:1682): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 171.246954][ T42] audit: type=1800 audit(1785604832.288:1683): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 171.266707][ T42] audit: type=1400 audit(1785604832.308:1684): avc: denied { setopt } for pid=9799 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.300401][ T42] audit: type=1800 audit(1785604832.338:1685): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 171.341107][ T42] audit: type=1800 audit(1785604832.378:1686): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 171.376113][ T42] audit: type=1800 audit(1785604832.418:1687): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 171.416940][ T42] audit: type=1800 audit(1785604832.458:1688): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 171.433783][ T42] audit: type=1400 audit(1785604832.478:1689): avc: denied { read } for pid=9808 comm="syz.4.1208" name="nullb" dev="configfs" ino=4802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.898216][ T9826] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 171.918708][ T9826] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.937073][ T9826] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1214'. [ 172.083110][ T6968] usb 10-1: USB disconnect, device number 11 [ 172.115445][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 172.128321][ T9831] bridge0: port 1(macvlan3) entered blocking state [ 172.131485][ T9831] bridge0: port 1(macvlan3) entered disabled state [ 172.134452][ T9831] macvlan3: entered allmulticast mode [ 172.141165][ T9831] macvlan3: left allmulticast mode [ 172.166418][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1218'. [ 172.170144][ T9836] netlink: zone id is out of range [ 172.172475][ T9836] netlink: zone id is out of range [ 172.174627][ T9836] netlink: zone id is out of range [ 172.176770][ T9836] netlink: zone id is out of range [ 172.178553][ T9836] netlink: zone id is out of range [ 172.180277][ T9836] netlink: del zone limit has 8 unknown bytes [ 172.357004][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'. [ 172.702886][ T848] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 172.855269][ T848] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.858601][ T848] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 172.861712][ T848] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.865003][ T848] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.871032][ T848] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.874651][ T848] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.877178][ T848] usb 9-1: Product: syz [ 172.878679][ T848] usb 9-1: Manufacturer: syz [ 173.066949][ T9889] Mass Storage Function, version: 2009/09/11 [ 173.070428][ T9889] LUN: removable file: (no medium) [ 173.131440][ T5749] Bluetooth: hci3: command 0x1003 tx timeout [ 173.138035][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 173.142584][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 173.151543][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 173.174497][ T5817] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.183279][ T5817] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.186548][ T5817] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.189706][ T5817] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.630665][ T9917] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 173.685486][ T9920] x_tables: duplicate underflow at hook 2 [ 173.711570][ T6968] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 173.881369][ T6968] usb 6-1: Using ep0 maxpacket: 32 [ 173.887047][ T6968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 173.890293][ T6968] usb 6-1: config 14 has an invalid descriptor of length 105, skipping remainder of the config [ 173.893827][ T6968] usb 6-1: config 14 has 0 interfaces, different from the descriptor's value: 2 [ 173.898178][ T6968] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 173.901076][ T6968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.904090][ T6968] usb 6-1: Product: syz [ 173.905564][ T6968] usb 6-1: Manufacturer: syz [ 173.907103][ T6968] usb 6-1: SerialNumber: syz [ 173.937238][ T9938] xt_l2tp: v2 doesn't support IP mode [ 173.999697][ T9942] netlink: 'syz.3.1251': attribute type 11 has an invalid length. [ 174.379046][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1253'. [ 174.776030][ T9962] FAULT_INJECTION: forcing a failure. [ 174.776030][ T9962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.781993][ T9962] CPU: 2 UID: 0 PID: 9962 Comm: syz.5.1257 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.782012][ T9962] Tainted: [L]=SOFTLOCKUP [ 174.782016][ T9962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.782029][ T9962] Call Trace: [ 174.782048][ T9962] [ 174.782053][ T9962] dump_stack_lvl+0x100/0x190 [ 174.782171][ T9962] should_fail_ex.cold+0x5/0xa [ 174.782200][ T9962] _copy_to_user+0x32/0xd0 [ 174.782243][ T9962] simple_read_from_buffer+0xcb/0x170 [ 174.782277][ T9962] proc_fail_nth_read+0x1af/0x230 [ 174.782304][ T9962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.782322][ T9962] ? rw_verify_area+0xce/0x6d0 [ 174.782349][ T9962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.782365][ T9962] vfs_read+0x1e4/0xb40 [ 174.782383][ T9962] ? __pfx_vfs_read+0x10/0x10 [ 174.782399][ T9962] ? __fget_files+0x215/0x3d0 [ 174.782414][ T9962] ? __fget_files+0x21f/0x3d0 [ 174.782429][ T9962] ksys_read+0x12a/0x250 [ 174.782444][ T9962] ? __pfx_ksys_read+0x10/0x10 [ 174.782465][ T9962] do_syscall_64+0x115/0x870 [ 174.782496][ T9962] ? clear_bhb_loop+0x40/0x90 [ 174.782510][ T9962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.782522][ T9962] RIP: 0033:0x7f544fb5e84e [ 174.782532][ T9962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.782543][ T9962] RSP: 002b:00007f54509a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.782560][ T9962] RAX: ffffffffffffffda RBX: 00007f54509a36c0 RCX: 00007f544fb5e84e [ 174.782567][ T9962] RDX: 000000000000000f RSI: 00007f54509a30a0 RDI: 0000000000000004 [ 174.782573][ T9962] RBP: 00007f54509a3090 R08: 0000000000000000 R09: 0000000000000000 [ 174.782580][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.782586][ T9962] R13: 00007f544fe26038 R14: 00007f544fe25fa0 R15: 00007ffdc7946408 [ 174.782601][ T9962] [ 174.805176][ T9964] ceph: No mds server is up or the cluster is laggy [ 174.857324][ T848] libceph: connect (1)[c::]:6789 error -101 [ 174.859353][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 174.932965][ T9971] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1259'. [ 175.417548][ T9989] loop5: detected capacity change from 0 to 7 [ 175.423675][ T9989] Dev loop5: unable to read RDB block 7 [ 175.425765][ T9989] loop5: unable to read partition table [ 175.427870][ T9989] loop5: partition table beyond EOD, truncated [ 175.430130][ T9989] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 175.460624][ T9] usb 9-1: USB disconnect, device number 39 [ 175.485518][ T9993] Cannot find del_set index 1 as target [ 175.490490][ T5744] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 175.749133][T10013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.754469][T10013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.787082][ T5744] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 175.791153][ T5744] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 176.022734][ T56] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 176.051716][ T9] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 176.057786][ T42] kauditd_printk_skb: 152 callbacks suppressed [ 176.057806][ T42] audit: type=1800 audit(1785604837.098:1842): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1278" name="new_id" dev="sysfs" ino=28931 res=0 errno=0 [ 176.068788][ T42] audit: type=1800 audit(1785604837.098:1843): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1278" name="/" dev="fuse" ino=1 res=0 errno=0 [ 176.088327][ T42] audit: type=1800 audit(1785604837.128:1844): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 176.099612][ T42] audit: type=1400 audit(1785604837.148:1845): avc: denied { create } for pid=10022 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.107021][ T42] audit: type=1400 audit(1785604837.148:1846): avc: denied { getopt } for pid=10022 comm="syz.5.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.112940][ T42] audit: type=1400 audit(1785604837.148:1847): avc: denied { read } for pid=10022 comm="syz.5.1279" path="socket:[41022]" dev="sockfs" ino=41022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.152985][ T42] audit: type=1400 audit(1785604837.198:1848): avc: denied { ioctl } for pid=10022 comm="syz.5.1279" path="mnt:[4026532839]" dev="nsfs" ino=4026532839 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.183217][ T56] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.187257][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 176.191938][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.196501][ T56] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.201853][ T56] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.202978][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.205423][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.208885][ T9] usb 8-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 176.214848][ T42] audit: type=1800 audit(1785604837.258:1849): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178176 res=0 errno=0 [ 176.221293][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.224586][ T42] audit: type=1800 audit(1785604837.258:1850): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=178205 res=0 errno=0 [ 176.232856][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.238345][ T42] audit: type=1800 audit(1785604837.258:1851): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=178183 res=0 errno=0 [ 176.248158][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.251863][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.255116][ T9] usb 8-1: Product: syz [ 176.256848][ T9] usb 8-1: Manufacturer: syz [ 176.452082][ T6968] usb 6-1: USB disconnect, device number 41 [ 176.645427][T10035] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 176.657296][T10035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.672660][T10035] bond5: (slave gretap1): making interface the new active one [ 176.676328][T10035] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 176.689712][T10035] bond5 (unregistering): (slave gretap1): Releasing active interface [ 176.694684][T10035] bond5 (unregistering): Released all slaves [ 176.975529][T10049] xt_ipcomp: unknown flags 1D [ 176.977757][T10048] xt_ipcomp: unknown flags 1D [ 177.226883][T10056] trusted_key: syz.1.1291 sent an empty control message without MSG_MORE. [ 177.262948][T10063] netlink: 'syz.1.1292': attribute type 6 has an invalid length. [ 177.335217][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 457 [ 177.458604][T10083] could not allocate digest TFM handle cmac(twofish-asm) [ 177.870345][T10100] overlayfs: failed to get index nlink (file0/file1, err=-61) 2[ 177.947104][T10102] vcan0 speed is unknown, defaulting to 1000 [ 177.961970][T10105] loop6: detected capacity change from 0 to 2640 [ 177.980733][ T5744] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 177.980784][ T5744] Bluetooth: hci4: Malformed LE Event: 0x0d [ 178.011698][T10105] Invalid logical block size (6) [ 178.019796][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.028981][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.034202][T10102] lo speed is unknown, defaulting to 1000 [ 178.034282][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.044725][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.048114][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.176437][T10118] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1307'. [ 178.214735][T10122] tipc: Started in network mode [ 178.216656][T10122] tipc: Node identity ac141441, cluster identity 4711 [ 178.222857][T10122] tipc: Enabled bearer , priority 10 [ 178.281951][T10126] overlayfs: conflicting options: nfs_export=on,index=off [ 178.294532][T10127] overlayfs: conflicting options: nfs_export=on,index=off [ 178.319999][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 178.338487][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 178.711408][ T5848] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 178.780319][T10161] xt_cgroup: invalid path, errno=-2 [ 178.783988][ T848] usb 9-1: USB disconnect, device number 40 [ 178.808609][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.815414][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.819271][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.823310][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.827199][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.830310][ T29] usb 8-1: USB disconnect, device number 33 [ 178.831039][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.844125][T10163] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1324'. [ 178.871383][ T5848] usb 10-1: Using ep0 maxpacket: 8 [ 178.874497][ T5848] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.877927][ T5848] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.881026][ T5848] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.884488][ T5848] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.887452][T10172] binder: BC_ATTEMPT_ACQUIRE not supported [ 178.888576][ T5848] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.890526][T10172] binder: 10171:10172 ioctl c0306201 200000000000 returned -22 [ 178.895725][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.014141][T10186] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.017628][T10186] overlayfs: failed to set xattr on upper [ 179.019980][T10186] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.024393][T10186] overlayfs: ...falling back to index=off. [ 179.026858][T10186] overlayfs: ...falling back to uuid=null. [ 179.029399][T10186] overlayfs: maximum fs stacking depth exceeded [ 179.215821][ T29] tipc: Node number set to 2886997057 [ 179.351311][ T5848] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 179.523034][ T5848] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.526772][ T5848] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 179.530948][ T5848] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.534725][ T5848] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.542785][ T5848] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.546255][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.548808][ T5848] usb 6-1: Product: syz [ 179.550138][ T5848] usb 6-1: Manufacturer: syz [ 179.833103][T10197] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 179.835664][T10197] team_slave_1: entered allmulticast mode [ 179.844166][T10197] team0: Port device team_slave_1 removed [ 179.846398][T10197] bridge0: port 3(team_slave_1) entered blocking state [ 179.848667][T10197] bridge0: port 3(team_slave_1) entered disabled state [ 180.106044][T10211] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 180.110528][T10210] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 180.207300][T10215] bond6: entered promiscuous mode [ 180.874192][T10237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10237 comm=syz.4.1347 [ 181.008968][T10243] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 181.362984][ T42] kauditd_printk_skb: 134 callbacks suppressed [ 181.363021][ T42] audit: type=1800 audit(1785604842.408:1986): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 181.391173][ T5848] usb 10-1: USB disconnect, device number 12 [ 181.424882][ T42] audit: type=1800 audit(1785604842.468:1987): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 181.439496][ T42] audit: type=1400 audit(1785604842.478:1988): avc: denied { bind } for pid=10249 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.476488][ T42] audit: type=1800 audit(1785604842.518:1989): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 181.491771][T10252] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.494522][T10252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.499030][T10252] IPv6: NLM_F_CREATE should be set when creating new route [ 181.503631][T10252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.506546][T10252] IPv6: NLM_F_CREATE should be set when creating new route [ 181.527467][ T42] audit: type=1804 audit(1785604842.568:1990): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1350" name="/newroot/361/file0" dev="tmpfs" ino=1987 res=1 errno=0 [ 181.536366][ T42] audit: type=1800 audit(1785604842.578:1991): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 181.550535][ T42] audit: type=1400 audit(1785604842.588:1992): avc: denied { write } for pid=10254 comm="syz.5.1353" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 181.551409][T10255] program syz.5.1353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.594630][ T42] audit: type=1800 audit(1785604842.638:1993): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 181.624467][ T42] audit: type=1400 audit(1785604842.668:1994): avc: denied { mounton } for pid=10257 comm="syz.5.1354" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 181.624534][T10258] btrfs: Unknown parameter 'barrierȦЏL`P1' [ 181.667853][ T42] audit: type=1800 audit(1785604842.708:1995): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 181.712007][T10262] netlink: 'syz.5.1356': attribute type 1 has an invalid length. [ 182.128270][ T9] usb 6-1: USB disconnect, device number 42 [ 182.161943][T10268] i2c i2c-0: delete_device: Can't find device in list [ 182.259349][T10275] bond3: entered allmulticast mode [ 182.261690][T10275] ip6gre2: entered allmulticast mode [ 182.266954][T10274] bond3: left allmulticast mode [ 182.270762][T10274] ip6gre2: left allmulticast mode [ 182.720880][T10295] ubi0: attaching mtd0 [ 182.728416][T10295] ubi0: scanning is finished [ 182.731136][T10295] ubi0: empty MTD device detected [ 182.781453][ T5848] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 182.827269][T10297] binder: 10294:10297 ioctl c0306201 200000000080 returned -14 [ 182.832592][T10297] binder: 10294:10297 ioctl c0306201 2000000003c0 returned -14 [ 182.837184][T10297] UBIFS error (pid: 10297): cannot open "ubi0_0", error -19 [ 182.912959][T10295] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 182.919070][T10295] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 182.922248][T10295] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 182.925266][T10295] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 182.928403][T10295] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 182.932115][T10295] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 182.932852][ T5848] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.935641][T10295] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2367313082 [ 182.938482][ T5848] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 182.942428][T10295] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 182.947355][T10298] ubi0: background thread "ubi_bgt0d" started, PID 10298 [ 182.949157][ T5848] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.955411][ T5848] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.960784][ T5848] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.964202][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.966993][ T5848] usb 6-1: Product: syz [ 182.968635][ T5848] usb 6-1: Manufacturer: syz [ 183.957070][T10323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10323 comm=syz.4.1376 [ 184.520026][T10330] Option ''MO' to dns_resolver key: bad/missing value [ 184.560869][T10332] xt_cgroup: xt_cgroup: no path or classid specified [ 184.568343][ T5744] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 184.585189][T10332] BUG: unable to handle page fault for address: fffffffffffffc10 [ 184.588475][T10332] #PF: supervisor read access in kernel mode [ 184.591427][T10332] #PF: error_code(0x0000) - not-present page [ 184.595217][T10332] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 184.597767][T10332] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 184.600108][T10332] CPU: 2 UID: 0 PID: 10332 Comm: syz.4.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.604610][T10332] Tainted: [L]=SOFTLOCKUP [ 184.606431][T10332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.610608][T10332] RIP: 0010:strnlen+0x4b/0x80 [ 184.612661][T10332] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 184.620590][T10332] RSP: 0018:ffffc9000611f1c0 EFLAGS: 00010246 [ 184.623172][T10332] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 184.626483][T10332] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 184.629798][T10332] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 184.633097][T10332] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 184.636459][T10332] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 184.639774][T10332] FS: 00007f2e109026c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 184.643347][T10332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.646087][T10332] CR2: fffffffffffffc10 CR3: 0000000035f0f000 CR4: 0000000000352ef0 [ 184.649422][T10332] Call Trace: [ 184.650873][T10332] [ 184.652150][T10332] ? look_up_lock_class+0x64/0x120 [ 184.654316][T10332] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 184.657066][T10332] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 184.660160][T10332] ? __pfx___might_resched+0x10/0x10 [ 184.662486][T10332] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 184.664727][T10332] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 184.667317][T10332] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 184.669838][T10332] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 184.672520][T10332] ? __pfx_down_write+0x10/0x10 [ 184.674606][T10332] tcf_block_get_ext+0x7ed/0x1950 [ 184.676743][T10332] ingress_init+0x259/0x780 [ 184.678705][T10332] ? __pfx_ingress_init+0x10/0x10 [ 184.680828][T10332] qdisc_create+0x47b/0x1060 [ 184.682823][T10332] tc_modify_qdisc+0x1350/0x2120 [ 184.684901][T10332] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 184.687164][T10332] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 184.689392][T10332] rtnetlink_rcv_msg+0x3c9/0xe90 [ 184.691505][T10332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.693816][T10332] ? ref_tracker_free+0x37e/0x6c0 [ 184.695972][T10332] netlink_rcv_skb+0x159/0x420 [ 184.698035][T10332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.700318][T10332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.702568][T10332] ? netlink_deliver_tap+0x1ae/0xcc0 [ 184.704814][T10332] netlink_unicast+0x585/0x850 [ 184.706848][T10332] ? __pfx_netlink_unicast+0x10/0x10 [ 184.709076][T10332] netlink_sendmsg+0x8b0/0xda0 [ 184.711132][T10332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.713363][T10332] ? selinux_socket_sendmsg+0x198/0x2f0 [ 184.715744][T10332] ____sys_sendmsg+0xa4d/0xbe0 [ 184.717778][T10332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.719984][T10332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.722219][T10332] ___sys_sendmsg+0x190/0x1e0 [ 184.724133][T10332] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.726287][T10332] ? __lock_acquire+0x49f/0x1a40 [ 184.728307][T10332] __sys_sendmsg+0x160/0x210 [ 184.730222][T10332] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.732339][T10332] do_syscall_64+0x115/0x870 [ 184.734288][T10332] ? clear_bhb_loop+0x40/0x90 [ 184.736231][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.738639][T10332] RIP: 0033:0x7f2e0f99e019 [ 184.740435][T10332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.748354][T10332] RSP: 002b:00007f2e10902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.751783][T10332] RAX: ffffffffffffffda RBX: 00007f2e0fc25fa0 RCX: 00007f2e0f99e019 [ 184.755064][T10332] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 184.758266][T10332] RBP: 00007f2e0fa3500c R08: 0000000000000000 R09: 0000000000000000 [ 184.761327][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.764558][T10332] R13: 00007f2e0fc26038 R14: 00007f2e0fc25fa0 R15: 00007ffe2431f088 [ 184.767640][T10332] [ 184.768927][T10332] Modules linked in: [ 184.770535][T10332] CR2: fffffffffffffc10 [ 184.772292][T10332] ---[ end trace 0000000000000000 ]--- [ 184.774581][T10332] RIP: 0010:strnlen+0x4b/0x80 [ 184.776634][T10332] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 184.784601][T10332] RSP: 0018:ffffc9000611f1c0 EFLAGS: 00010246 [ 184.787179][T10332] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 184.790501][T10332] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 184.793794][T10332] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 184.797132][T10332] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 184.800451][T10332] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 184.803790][T10332] FS: 00007f2e109026c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 184.807101][T10332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.809213][T10332] CR2: fffffffffffffc10 CR3: 0000000035f0f000 CR4: 0000000000352ef0 [ 184.811867][T10332] Kernel panic - not syncing: Fatal exception [ 184.814358][T10332] Kernel Offset: disabled [ 184.815749][T10332] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:20:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000031d230b5 RBX=0000000000000001 RCX=000000004ff6c263 RDX=000000000000000e RSI=ffffc9000012796c RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900001278c0 R8 =000000001dd1d75a R9 =0000000049381729 R10=ffffc900001277e8 R11=000000000000758b R12=ffffc90000127918 R13=000000000000000e R14=ffffffff82615e25 R15=0000000000000000 RIP=ffffffff85535b53 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2e10901ff8 CR3=0000000036637000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc79468f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc79468f6 00007ffdc79468fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff800000807 00000000000081bf 00000000fff08a7b 00000000000008b7 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080700000000 000081bf00000000 fff08a7b00000000 000008b700000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8ebe8200 RCX=ffffffff91d2e401 RDX=ffffc9000d837af0 RSI=ffffffff81b866be RDI=ffffffff8ebe8200 RBP=ffffffff81b866be RSP=ffffc9000d837628 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000d8376e0 R11=0000000000016f4c R12=ffffc9000d837730 R13=ffffc9000d8376e0 R14=ffffc9000d837ae8 R15=ffffc9000d837714 RIP=ffffffff81e5fa78 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe767bd3ff8 CR3=0000000026e5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ae99b00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32be5f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32be5f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ae9fd08 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746c696601ffffff ffffffffffbf081e 8003000800021000 141000060074a23c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001ec00300000000 0000000000000000 0000000000000000 0000000000007265 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcc9f361145745d3 490babd6194d0bf5 c403f2dd3470bb2d 9c080cd0060f4a7d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 227a5fbd84e561d7 f0d5699d2e1177b0 927f33c65f9bcd61 4e5797232516e02b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101080002861000 1380040fffffffff ffff041180040a01 3e00b459dc306d87 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ef743b0fcbf3e53 980a1c0c67a6894c 173d19404733aa22 7a5fbd84e561d7f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5699d2e1177b092 7f33c65f9bcd614e 5797232516e02bbc c9f361145745d349 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0babd6194d0bf5c4 03f2dd3470bb2d9c 080cd0060f4a7df6 a57bfb2c7ca95f26 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc9000611ea20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000046 R14=ffffffff9b6fe1f9 R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f2e109026c0 ffffffff 00c01300 GS =0000 ffff8880d5fd8000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000035f0f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2431f576 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2431f576 00007ffe2431f57c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e0fa355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e0fa3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e0fa35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e0fa35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e0fbf25f8 00007f2e0fbf25c8 00007f2e0fbf2600 00007f2e0fbf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000007ffff RBX=ffff88803855f606 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff8bb42616 RDI=ffff88802e148000 RBP=0000000000000000 RSP=ffffc90006837810 R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88801c728200 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff820a6234 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f54509a36c0 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000009000 CR3=0000000036637000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fda3b69a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc79468f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc79468f6 00007ffdc79468fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fc35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f544fdf25f8 00007f544fdf25c8 00007f544fdf2600 00007f544fdf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000