last executing test programs: 18.902116907s ago: executing program 3 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e33, 0x0, @mcast2, 0x9}, 0x1c) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, r0, 0x2}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2ec, 0x12, 0x200, 0x70bd29, 0x25dfdbfb, {0x11, 0xf4, 0x9, 0x5, {0x4e20, 0x4e21, [0x40, 0x101, 0x5, 0x9], [0x8000, 0x2, 0x4, 0x8], 0x0, [0x101, 0x10001]}, 0x200, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "27b8cdb460a9d37a467749d439880886558460c15f01c0c9bc74dc1b7d082c9ea5555ec0399f4a99b9a71939c984613a2138c1256ef307ea6bd8d03d89ef9eb710f5be9a0ae1425e4b409ebb572649eb1d0a3b535886fce587c2cbb8fde16678543c9eda597ef047cd1d3669240c787e1bf188f5fdb93f78cb162d1033cea3f0a3113dbd96ffd44e02b814109643c7f0baeb5fa45ca86f9a223965fd338020d4020b3a535dc01fc912a564002f84d22434add535cd90f1b0f73ccaa37a7cbf83fcce5203fb59f8295f269b4d622835"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "668d704b278cbd3f047bd56f6a35cdb80e794185016844d51d2cb1911a0c84d68315272c045d29984af54d7faa27a531e56221e741ae74e43fa3a5d5edadc8baf684eda11461ce72fb7660adf411dde773b6a7770778d24d7bf02271d003295c88ac477cc8bc39f4258de38bed299d96ecf39ae6f3380c841e9de6b52eb310c1ca50cdd2e6156165378a523a8995c361646d598f824daa66dfb39bc4655c9b550be9550636a2b65262224e6b61272539656ecaf90d44b78be459dcbafc267818507a7d11840d9c9f7cbd83ac6314"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "e175a5483fe6b51568ac0b39b17ece23159cbeb4c516464e8d114bea8c35df8391d1a8a3e9db16894b78979a0b7171cfaa52690efd7612b4ec29e352c78b8e1c094a608e5cb908b9a2f96a49d659c26a1e2bd13af801f0d79472c0944f46656636a2128ba3c6191f6924c4cbf9ae6b5738095229ef429fc2b1b92d57e8395391cdf813ce1ef772c8b78ff59bc966a365f39c2d54436436ac79f8f2f1f99407c66ee2618353464a"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "a4800c99e080f17beec59e82e313ba954496441cba4fe96ebee0d69b4af5c4212d29cd6b9dcab3937d58f02225953a9fa5a2fd1f6f6c3bb49c43872d869619414fd9"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x8000}, 0x48804) (async) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000dc0)="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", 0x353}, {&(0x7f0000000a00)="46b179971d5d3440bd08ecbdbf3838fd130f6438a5daf746b3a443371163ed18fe11e63233d2df82593e47bd501c195459d573df1e9a061b1a19ab087226ae4b6f39a25213a50f59d5589e9e333f0fc7d692c6672200baa2adfba880add28d0bfd980ccb9a26652db96cdbb2074131b7b7e00912678bf7d92bdb32b02606f842a321b612bc7939834e1ed1fad14aeac70b65ae6c19ff13c749763ad318af18fc31d98c551e84ec0269458e051c0dd727c10872505100cef828f6c6d0b4ee17d9f5a65cced7820aad44130bff17cc25809ecb89dc3d399eefdb12510da9d6c210e151faa5ffef5d2626a45a1259609de87c188127e4ec31c2388fbd582c5f83e766b7c0c710672ca3f77f89323d619bc22c1c80d5ff714d805bb39b54c3e0472c6a23a3b11633ff16705f23744caa5b6820a21f91ee89e8828f356f43f238c668c9bbd96c62ba5ef928ccf6560b94c14b0f7234b7", 0x154}, {&(0x7f0000000700)="dd8ad35a05f68247883f33637734e01a1ea22d623005c50c3ff46bbed74a12cf717914cb4a307931a5fe143b9a14445961406bdbadf61009fde24fccf2021d7aeae1d6425bb23c6303", 0x49}, {&(0x7f0000000780)="cef630eda921cbed97adbad453556e05899dd1984423a16217f977b0af37470370048991ae14603d70eaa8f41e4863a52c13bacf4e0330e321cb87d66d3e2f0aa47fdd9dede1b5852a39188358e6d77e3ad6bbecbf31b457a2bb1ef2b7ff421ffd0e1f75516a9b7eb795bc91fde42169ad5c0c4d393e3d8e4ac81db2580a9684683ffafa1209c65c2701", 0x8a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 18.899364116s ago: executing program 3 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c) getrandom(&(0x7f0000000540)=""/196, 0xc4, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @private1, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18.762322895s ago: executing program 2 (id=155): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 18.13310317s ago: executing program 0 (id=162): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000000c0)={0x4, &(0x7f0000000580)=[{0x35, '\x00', @buffer={"5fa53b9f10fc4333eed52dedf38737e1ebe61d96cf6a2ab700", 0x20}, 0x87}, {0x15, '\x00', @st={0x4, [{0x1, @uvalue=0x2400000000000000}, {0x2, @uvalue=0x1a89}, {0x0, @svalue=0x3}, {0x1, @svalue=0xab2c}]}, 0x6}, {0x18, '\x00', @data=0x7, 0x6}, {0x1d, '\x00', @data=0xa, 0x2b1d}]}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0xf6}, @val={0x0, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x66, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast}}}, 0x22) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000005c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "0b1b357d754f78f131f66e5508401126d3f653b6b3073a988a2f6e8da07f0517", "14b3398f88adbb61b86f41fb59ccb661", {"4a0291d69c1cc4f9f2fb3a6730b50053", "04dd8f4a1ba86a7d4d3a0447ac8ca407"}}}}}}}}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 17.942844106s ago: executing program 0 (id=163): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknodat(r0, &(0x7f00000001c0)='./dev/../file0\x00', 0x220, 0x8) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)=0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x407, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './dev/sda1'}}, {@redirect_dir_nofollow}, {@redirect_dir_on}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r1}}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000f43de9259290ecfafceb923d3eacf894b999c95fc4f9319e64d3b4bb7f7dc5011c147b533d11f381ab39af6d11138aa7a5badffd86eef3bcb5ff24ea5ffd1d6b1541a130767a300efccffd752d476c07f0390288700dc9c87d24965609692f2f9adf30e7733074ece40764297d9e82757718493a5af505dd4e310c600af26e3d7186cd0948d9baae3d9d712d99df432f222cbddd7314fee69847e87728ae966932a027336d3c", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677265001c00028006000e0001000000060003008000000008000700ac1414bb"], 0x48}}, 0x0) 17.942530637s ago: executing program 0 (id=164): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') lseek(r0, 0x2004, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000fd70000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000900be0063cee81340000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000020c0), 0x802, 0x0) write$vga_arbiter(r5, &(0x7f0000002100)=@unlock_all, 0xb) listen(r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000000c0)="93a5e1f99854ff3ee43efc23813d4d11", &(0x7f0000000180)=@udp=r4}, 0x20) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f00000003c0)={0x0, &(0x7f0000000340)="a988e279a49d755274d550e8a4f703642a89128d47ed7ec055224392df6dcc4b8ac93058a37b3b4b9a807dd494981acce36bc84fb634c789727409322f4f03b511ec88", 0x43}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) recvfrom$inet6(r4, &(0x7f0000000040)=""/62, 0x3e, 0x40010100, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) setresuid(0x0, 0xee00, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_getoverrun(r8) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) socket$kcm(0x2, 0x3, 0x2) epoll_create(0x2) 17.702967217s ago: executing program 0 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffff7ffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000140)={'nr0\x00'}) write(r2, &(0x7f0000000300)='p:_est/_vent1 ./file0:0x0 _rg2=+b', 0x21) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$CDROMREADALL(r5, 0x5318, &(0x7f0000000880)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="67d134c51801ad2f840c29d0c7e7e3eb64d2d98a91bd073bda8230bd63e1d0492812b7ee9d42b162cde33f339a2161b1fa511a06", 0x34) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100feffffff00010000ac1e0101000000000000000021000000fc010000000000000000000000000001000107170d9200050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x844) 17.462152182s ago: executing program 0 (id=166): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 17.102211068s ago: executing program 0 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r4, 0xaea3) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x4780}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 17.063687698s ago: executing program 32 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r4, 0xaea3) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x4780}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 16.633062007s ago: executing program 2 (id=173): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) 16.632846839s ago: executing program 3 (id=174): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) 16.632203234s ago: executing program 2 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180"], 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28eaaa1c00e600", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf256d00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x800) 16.562509541s ago: executing program 3 (id=177): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) shutdown(r0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x3, 0x8, 0x8, 0x8}, 0x50) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='securityfs\x00', 0x20010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x480, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x20005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000,hard\x00') mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x4, 0x0, 0x0) sync() mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r7, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) signalfd4(r2, &(0x7f0000000240)={[0x1]}, 0x8, 0x80000) 16.378964747s ago: executing program 2 (id=180): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) (fail_nth: 4) 16.377989473s ago: executing program 2 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010126bd7000030000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400c4000000080026006c0900002400518020000080090001"], 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='1', 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r7) r8 = socket$inet(0x2, 0x2, 0x0) syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1, 0x0, 0x34}, 0xfc) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x1e}, 'sys/class/net/bridge0/bridge/multicast_querier/file0\x00'}) sendmsg$inet(r10, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x4008010) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x7, 0x4, 0x7f, 0x4ac, 0x200}]}) 16.326122102s ago: executing program 3 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40048c5}, 0x8000) 16.131467818s ago: executing program 2 (id=184): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50}}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x400, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x1}, {0xb, 0x10}, {0x4, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4c040) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000700"/28], 0x30}, 0x200040c4) 16.00299364s ago: executing program 3 (id=185): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) 15.921673569s ago: executing program 33 (id=185): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) 2.412398276s ago: executing program 5 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) sigaltstack(0x0, &(0x7f00000015c0)={0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000020c0), 0x2000482, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.542507467s ago: executing program 4 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x9, 0xfffffffc}]}, 0xc, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0900000004000000080000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0xffffffffffffff38, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="30e0cb00", @ANYRES16=r5, @ANYBLOB="010025bd70000300000007000000050013000500000014000800"/42], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x80001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) waitid(0x1, r7, 0x0, 0x21000006, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b280063301"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) r8 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x7, @raw_data="39af8bf3c770adece5c8d6fecd3d8720e9b48992c6663d02993508edf1ad6409043bb76fe39d2de33fce0e23c395b707f7d28686cd562d4b15101cdcde3ae6a580cf69861998a08ebd74a2201290eae1ccd9b130a7b227c9c28d9de7e2125890b0019c8e18bd7731e48deefee6dfed125b95edfc496f573d653183c9a6911cb3eff78b7473c1e4ea7e136b770ccf97667f5a0cb9687b3bded830d002acfef84d36f2a3c03f7166bdb1d526b3ca7ab8b78df811ec2913d289dc02329af561683105678e5cd3874e7a"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x90, r12, 0x1, 0x70bd26, 0xffffffff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@broadcast, {0xf, 0x5}}, 0xffffffffffffffff, @random=0x4, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x3f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2008, r1, 0x300000000000000}, 0x38) 1.541316647s ago: executing program 5 (id=280): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000100)=0x1) mkdir(&(0x7f0000000140)='./bus\x00', 0x5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.4018397s ago: executing program 4 (id=281): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) (fail_nth: 14) 1.401630036s ago: executing program 5 (id=282): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000009b80)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@ocfs2={0xc, 0xfe, {0x203, 0x20, 0x7}}, 0x6080) 1.400572667s ago: executing program 4 (id=283): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x6) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 32) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) (async, rerun: 32) listen(r1, 0x5) (async, rerun: 32) setsockopt$inet_buf(r1, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) (async) r2 = accept$inet(r1, 0x0, 0x0) read(r2, &(0x7f0000000100), 0x4) (async) read(r2, &(0x7f0000000304), 0x4) write(r2, &(0x7f0000000300), 0x100) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 1.330771598s ago: executing program 5 (id=284): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 1.271460583s ago: executing program 1 (id=285): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async, rerun: 64) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) read$FUSE(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 64) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)}) 1.271045783s ago: executing program 4 (id=286): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8, 0x1, 0x2, 0x2}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x2, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x9, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2, r6}}, './file0\x00'}) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r13, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.082206229s ago: executing program 4 (id=287): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r4, 0x100) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="3be25852893a60b3a59823c00ca0d299180000000700000084000000070000000a00024e0fdd0a780000"], 0x18}, 0x8050) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') preadv(r6, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x4}}, 0x3, 0x7}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={r7, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x2}}, 0x0, 0x81, 0x43e, 0x547f1dd0, 0x0, 0x4, 0x26}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.050315331s ago: executing program 34 (id=184): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50}}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x400, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x1}, {0xb, 0x10}, {0x4, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4c040) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000700"/28], 0x30}, 0x200040c4) 921.602343ms ago: executing program 1 (id=289): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x50d480, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2008, r0, 0x300000000000000}, 0x38) 772.811509ms ago: executing program 1 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0x0, 0x0, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r3 = shmget(0x2, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000000000001000000018000180140002007665746830000000000000000000000008000c00b9"], 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x20) splice(r2, &(0x7f0000000040)=0x1, r5, 0x0, 0x807, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x40, {0x2, 0x4e22, @multicast2}, 'team0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r12, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 612.15329ms ago: executing program 1 (id=291): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) (async) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 299.884036ms ago: executing program 1 (id=292): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0xf5ff, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) (fail_nth: 15) 299.55925ms ago: executing program 1 (id=293): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 182.593336ms ago: executing program 4 (id=294): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="83950c007866b9800000c00f326635008000000f30f2e63dba2100b80f00efc3d0040f01cb660fedef0f20c06635010000000f22c02ef7160600", 0x3a}], 0x1, 0x42, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="03c8006937580408fc45721aa1c88024628f447ea3cc8d0bb4012e115c0cc09f5999dad98c5c9c62c3813336bee061808e1b6f893b2326b56f583782f23ff913615908f12b8aa97f7c56ab504eb908390d25893aa9e40da7143d454aaca2b7d6d25f733ae93aa285574e9e66760b126806247e7cd54079a3f6c339330870bb2e79b4a5c3fc496f6a59eaf16be6586bd6e0dfb4aab9df02b91cb42089ed07a412ab29448213748ce35e318f04ec32f81c818282bde3c9d2b1218ea63dbd42a85e16dc75439d02cd923ece4a5de0a15ba01ac6d3087c3e1774845c0ca230741e18459c4593000000000000"], 0x6d) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xff3f}, {0x8, 0x2, {0x4, 0x3ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40888) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x1000000000000003, 0xf1, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c53c5}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0xfd, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x8000000000000000, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x103, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x3, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x3, 0x4, 0x10001, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x104, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) recvmsg$unix(r6, &(0x7f0000003380)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x2, &(0x7f0000003340)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) 52.430003ms ago: executing program 5 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f0000000080)=""/100, &(0x7f0000000180)=""/174, &(0x7f0000000240)=""/251, 0xffc}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c0000330001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c32504006704000280040003"], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8001) 0s ago: executing program 5 (id=296): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = socket(0x2, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 r', 0x6d) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) socket(0x2, 0x5, 0x0) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) pipe(&(0x7f0000000080)) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) (async) write(r5, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 r', 0x6d) (async) kernel console output (not intermixed with test programs): udit(1790131917.353:344): avc: denied { search } for pid=6152 comm="syz.0.82" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.514611][ T6164] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 60.542460][ T6166] [U] [ 60.542481][ T6166] [U] [ 60.542496][ T6166] [U] [ 60.542522][ T6166] [U] [ 60.542638][ T6166] [U] [ 60.542654][ T6166] [U] [ 60.542669][ T6166] [U] [ 60.542695][ T6166] [U] [ 60.542816][ T6166] [U] [ 60.542833][ T6166] [U] [ 60.542861][ T6166] [U] [ 60.542880][ T6166] [U] [ 60.542988][ T6166] [U] [ 60.543004][ T6166] [U] [ 60.543019][ T6166] [U] [ 60.543033][ T6166] [U] [ 60.546040][ T6167] FAULT_INJECTION: forcing a failure. [ 60.546040][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.546067][ T6167] CPU: 3 UID: 0 PID: 6167 Comm: syz.3.87 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.546091][ T6167] Tainted: [L]=SOFTLOCKUP [ 60.546098][ T6167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.546108][ T6167] Call Trace: [ 60.546113][ T6167] [ 60.546119][ T6167] dump_stack_lvl+0x100/0x190 [ 60.546149][ T6167] should_fail_ex.cold+0x5/0xa [ 60.546175][ T6167] _copy_to_user+0x32/0xd0 [ 60.546197][ T6167] simple_read_from_buffer+0xcb/0x170 [ 60.546222][ T6167] proc_fail_nth_read+0x1af/0x230 [ 60.546246][ T6167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.546270][ T6167] ? rw_verify_area+0xce/0x6d0 [ 60.546297][ T6167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.546319][ T6167] vfs_read+0x1e4/0xb40 [ 60.546337][ T6167] ? lock_acquire+0x1d1/0x380 [ 60.546356][ T6167] ? __fget_files+0x34/0x3d0 [ 60.546378][ T6167] ? __pfx_vfs_read+0x10/0x10 [ 60.546395][ T6167] ? find_held_lock+0x2b/0x80 [ 60.546420][ T6167] ? __fget_files+0x215/0x3d0 [ 60.546447][ T6167] ? __fget_files+0x21f/0x3d0 [ 60.546475][ T6167] ksys_read+0x12a/0x250 [ 60.546493][ T6167] ? __pfx_ksys_read+0x10/0x10 [ 60.546519][ T6167] do_syscall_64+0x123/0x790 [ 60.546548][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.546567][ T6167] RIP: 0033:0x7ff8eb35e98e [ 60.546581][ T6167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.546597][ T6167] RSP: 002b:00007ff8ec23dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.546615][ T6167] RAX: ffffffffffffffda RBX: 00007ff8ec23e6c0 RCX: 00007ff8eb35e98e [ 60.546626][ T6167] RDX: 000000000000000f RSI: 00007ff8ec23e0a0 RDI: 0000000000000004 [ 60.546636][ T6167] RBP: 00007ff8ec23e090 R08: 0000000000000000 R09: 0000000000000000 [ 60.546646][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.546656][ T6167] R13: 00007ff8eb626038 R14: 00007ff8eb625fa0 R15: 00007fff949ec978 [ 60.546680][ T6167] [ 60.596235][ T6152] [U] [ 60.596419][ T5907] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 60.601426][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.601450][ T5907] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 60.601462][ T5907] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 60.601473][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 60.601492][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.610059][ T6148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.610113][ T6148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.616325][ T5907] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 60.623414][ T5907] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 60.623449][ T5907] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 60.625378][ T5907] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 60.626594][ T5907] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 60.626627][ T5907] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 60.628980][ T5907] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 60.781276][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 60.819351][ T6148] binder: 6147:6148 ioctl c0306201 200000000040 returned -14 [ 60.819604][ T6148] binder: 6147:6148 ioctl c0306201 200000000640 returned -22 [ 60.821273][ T5834] usb 6-1: USB disconnect, device number 7 [ 60.828080][ T5834] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 60.843520][ T5834] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 60.844493][ T5834] keyspan 6-1:1.0: device disconnected [ 60.897412][ T6193] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 60.941950][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 60.996609][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 61.015443][ T5083] Bluetooth: Unexpected continuation frame (len 18) [ 61.169338][ T6206] FAULT_INJECTION: forcing a failure. [ 61.169338][ T6206] name fail_futex, interval 1, probability 0, space 0, times 1 [ 61.169432][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.3.101 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.169458][ T6206] Tainted: [L]=SOFTLOCKUP [ 61.169464][ T6206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.169475][ T6206] Call Trace: [ 61.169481][ T6206] [ 61.169488][ T6206] dump_stack_lvl+0x100/0x190 [ 61.169520][ T6206] should_fail_ex.cold+0x5/0xa [ 61.169560][ T6206] get_futex_key+0x1d0/0x14f0 [ 61.169588][ T6206] ? __pfx_get_futex_key+0x10/0x10 [ 61.169629][ T6206] ? crypto_create_tfm_node+0x171/0x3b0 [ 61.169654][ T6206] ? skcipher_bind+0x67/0x90 [ 61.169679][ T6206] ? alg_bind+0x206/0x490 [ 61.169699][ T6206] ? __sys_bind+0x1a9/0x260 [ 61.169716][ T6206] ? __x64_sys_bind+0x72/0xb0 [ 61.169733][ T6206] ? do_syscall_64+0x123/0x790 [ 61.169759][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.169783][ T6206] futex_wait_setup+0x91/0x540 [ 61.169808][ T6206] __futex_wait+0x19f/0x300 [ 61.169827][ T6206] ? __pfx___futex_wait+0x10/0x10 [ 61.169844][ T6206] ? futex_hash+0x311/0x400 [ 61.169868][ T6206] ? __pfx_futex_wake_mark+0x10/0x10 [ 61.169900][ T6206] ? __pfx_futex_hash+0x10/0x10 [ 61.169920][ T6206] ? __lock_acquire+0x5c0/0x1f40 [ 61.169941][ T6206] ? __lock_acquire+0x5c0/0x1f40 [ 61.169964][ T6206] futex_wait+0xe6/0x370 [ 61.169985][ T6206] ? __pfx_futex_wait+0x10/0x10 [ 61.169999][ T6206] ? release_sock+0x21/0x280 [ 61.170026][ T6206] ? alg_bind+0x30c/0x490 [ 61.170047][ T6206] ? find_held_lock+0x2b/0x80 [ 61.170071][ T6206] ? alg_bind+0x30c/0x490 [ 61.170092][ T6206] ? alg_bind+0x30c/0x490 [ 61.170117][ T6206] do_futex+0x265/0x440 [ 61.170141][ T6206] ? __pfx_do_futex+0x10/0x10 [ 61.170165][ T6206] ? __sys_bind+0x1c7/0x260 [ 61.170193][ T6206] __x64_sys_futex+0x34f/0x4d0 [ 61.170220][ T6206] ? __pfx___x64_sys_futex+0x10/0x10 [ 61.170253][ T6206] do_syscall_64+0x123/0x790 [ 61.170282][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.170301][ T6206] RIP: 0033:0x7ff8eb39e159 [ 61.170317][ T6206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.170333][ T6206] RSP: 002b:00007ff8ec23e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 61.170352][ T6206] RAX: ffffffffffffffda RBX: 00007ff8eb625fa8 RCX: 00007ff8eb39e159 [ 61.170363][ T6206] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8eb625fa8 [ 61.170374][ T6206] RBP: 00007ff8eb625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 61.170385][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.170395][ T6206] R13: 00007ff8eb626038 R14: 00007fff949ec890 R15: 00007fff949ec978 [ 61.170419][ T6206] [ 61.404979][ T6217] xt_time: unknown flags 0x78 [ 61.494693][ T6217] wg2 speed is unknown, defaulting to 1000 [ 61.495831][ T6217] wg2 speed is unknown, defaulting to 1000 [ 61.498109][ T6217] wg2 speed is unknown, defaulting to 1000 [ 61.671296][ T6217] infiniband syz0: set active [ 61.672030][ T5907] wg2 speed is unknown, defaulting to 1000 [ 61.672458][ T6217] infiniband syz0: added wg2 [ 61.691256][ T6217] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 61.691288][ T6217] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 61.691323][ T6217] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 61.696768][ T6227] netlink: 'syz.0.105': attribute type 12 has an invalid length. [ 61.696786][ T6227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.105'. [ 61.721917][ T5907] usb 7-1: USB disconnect, device number 3 [ 61.752378][ T5907] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 61.754662][ T6217] RDS/IB: syz0: added [ 61.755657][ T6217] smc: adding ib device syz0 with port count 1 [ 61.755764][ T6217] smc: ib device syz0 port 1 has no pnetid [ 61.755766][ T5907] oti6858 7-1:1.0: device disconnected [ 61.785374][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'. [ 61.831075][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 61.846403][ T6233] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 61.851140][ T50] wg2 speed is unknown, defaulting to 1000 [ 61.852010][ T6217] wg2 speed is unknown, defaulting to 1000 [ 61.881159][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 61.969266][ T6241] capability: warning: `syz.0.112' uses deprecated v2 capabilities in a way that may be insecure [ 62.067542][ T6217] wg2 speed is unknown, defaulting to 1000 [ 62.175539][ T6249] GUP no longer grows the stack in syz.0.116 (6249): 200000007000-20000000a000 (200000004000) [ 62.175570][ T6249] CPU: 2 UID: 0 PID: 6249 Comm: syz.0.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.175595][ T6249] Tainted: [L]=SOFTLOCKUP [ 62.175602][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.175612][ T6249] Call Trace: [ 62.175619][ T6249] [ 62.175625][ T6249] dump_stack_lvl+0x100/0x190 [ 62.175657][ T6249] gup_vma_lookup.cold+0x83/0x96 [ 62.175685][ T6249] __get_user_pages+0x252/0x2c30 [ 62.175712][ T6249] ? check_noncircular+0x97/0x160 [ 62.175736][ T6249] ? __pfx___get_user_pages+0x10/0x10 [ 62.175758][ T6249] ? __pfx_down_read_killable+0x10/0x10 [ 62.175786][ T6249] __gup_longterm_locked+0x279/0x16f0 [ 62.175815][ T6249] ? __pfx___gup_longterm_locked+0x10/0x10 [ 62.175837][ T6249] ? __get_pfnblock_flags_mask+0x128/0x240 [ 62.175857][ T6249] ? find_held_lock+0x2b/0x80 [ 62.175879][ T6249] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 62.175916][ T6249] gup_fast_fallback+0x16dc/0x2790 [ 62.175949][ T6249] ? __pfx_gup_fast_fallback+0x10/0x10 [ 62.175971][ T6249] ? rcu_is_watching+0x13/0xc0 [ 62.175997][ T6249] pin_user_pages_fast+0xa7/0xf0 [ 62.176016][ T6249] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 62.176036][ T6249] ? kasan_save_track+0x14/0x30 [ 62.176055][ T6249] ? frame_vector_create+0x61/0x110 [ 62.176077][ T6249] get_vaddr_frames+0x89/0x190 [ 62.176099][ T6249] vb2_create_framevec+0x64/0xd0 [ 62.176133][ T6249] vb2_vmalloc_get_userptr+0x137/0x510 [ 62.176157][ T6249] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 62.176182][ T6249] __prepare_userptr.constprop.0+0x3a7/0x1560 [ 62.176207][ T6249] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 62.176227][ T6249] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.176274][ T6249] ? __kasan_slab_free+0x5f/0x80 [ 62.176298][ T6249] ? lock_acquire+0x1d1/0x380 [ 62.176315][ T6249] ? __video_do_ioctl+0x50f/0xdf0 [ 62.176342][ T6249] __buf_prepare+0x352/0x790 [ 62.176359][ T6249] ? vb2_queue_or_prepare_buf+0x593/0x21c0 [ 62.176383][ T6249] vb2_core_qbuf+0xc4b/0x1340 [ 62.176402][ T6249] ? __video_do_ioctl+0x50f/0xdf0 [ 62.176432][ T6249] vb2_qbuf+0x246/0x340 [ 62.176452][ T6249] ? __pfx_vb2_qbuf+0x10/0x10 [ 62.176477][ T6249] v4l2_m2m_qbuf+0x150/0x890 [ 62.176498][ T6249] ? check_fmt+0x230/0x900 [ 62.176522][ T6249] v4l_qbuf+0x93/0xc0 [ 62.176543][ T6249] __video_do_ioctl+0xb2a/0xdf0 [ 62.176573][ T6249] ? __might_fault+0xc5/0x140 [ 62.176601][ T6249] ? __pfx___video_do_ioctl+0x10/0x10 [ 62.176636][ T6249] video_usercopy+0x47a/0x1730 [ 62.176664][ T6249] ? __pfx___video_do_ioctl+0x10/0x10 [ 62.176694][ T6249] ? __pfx_video_usercopy+0x10/0x10 [ 62.176738][ T6249] v4l2_ioctl+0x1bd/0x250 [ 62.176765][ T6249] ? __pfx_v4l2_ioctl+0x10/0x10 [ 62.176794][ T6249] __x64_sys_ioctl+0x18e/0x210 [ 62.176817][ T6249] do_syscall_64+0x123/0x790 [ 62.176847][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.176866][ T6249] RIP: 0033:0x7fa55eb9e159 [ 62.176883][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.176900][ T6249] RSP: 002b:00007fa55fa81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.176919][ T6249] RAX: ffffffffffffffda RBX: 00007fa55ee25fa0 RCX: 00007fa55eb9e159 [ 62.176931][ T6249] RDX: 00002000000000c0 RSI: 00000000c058560f RDI: 0000000000000006 [ 62.176943][ T6249] RBP: 00007fa55ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 62.176954][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.176966][ T6249] R13: 00007fa55ee26038 R14: 00007fa55ee25fa0 R15: 00007ffd5ccbe448 [ 62.176992][ T6249] [ 62.215183][ T6217] wg2 speed is unknown, defaulting to 1000 [ 62.256187][ T5907] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.355449][ T6217] wg2 speed is unknown, defaulting to 1000 [ 62.426788][ T5907] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 62.429297][ T5907] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.429336][ T5907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 62.429354][ T5907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 62.429371][ T5907] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 62.429400][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.440289][ T6237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.440382][ T6237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.445246][ T5907] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 62.446436][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 62.446470][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 62.447231][ T5907] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 62.448206][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 62.448263][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 62.451489][ T5907] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 62.507191][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 62.542750][ T6217] wg2 speed is unknown, defaulting to 1000 [ 62.547318][ T5740] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 62.623854][ T6265] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 62.656678][ T6237] binder: 6236:6237 ioctl c0306201 200000000040 returned -22 [ 62.656837][ T6237] binder: 6236:6237 ioctl c0306201 200000000640 returned -22 [ 62.768607][ T851] usb 7-1: USB disconnect, device number 4 [ 62.797282][ T851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 62.815722][ T851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 62.818420][ T851] keyspan 7-1:1.0: device disconnected [ 62.936996][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 62.962918][ T6284] FAULT_INJECTION: forcing a failure. [ 62.962918][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 62.962939][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.1.130 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.962954][ T6284] Tainted: [L]=SOFTLOCKUP [ 62.962958][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.962964][ T6284] Call Trace: [ 62.962968][ T6284] [ 62.962972][ T6284] dump_stack_lvl+0x100/0x190 [ 62.963001][ T6284] should_fail_ex.cold+0x5/0xa [ 62.963017][ T6284] should_failslab+0xc2/0x120 [ 62.963035][ T6284] __kmalloc_noprof+0xfc/0x840 [ 62.963047][ T6284] ? __register_sysctl_table+0xbc8/0x1650 [ 62.963065][ T6284] ? __register_sysctl_table+0xbe4/0x1650 [ 62.963084][ T6284] __register_sysctl_table+0xbe4/0x1650 [ 62.963105][ T6284] ? __pfx___register_sysctl_table+0x10/0x10 [ 62.963122][ T6284] ? register_pidns_sysctls+0x48/0x1c0 [ 62.963140][ T6284] ? __asan_memcpy+0x3c/0x60 [ 62.963152][ T6284] register_pidns_sysctls+0x11d/0x1c0 [ 62.963168][ T6284] ? __ns_common_init+0x299/0x4b0 [ 62.963183][ T6284] copy_pid_ns+0x680/0x10a0 [ 62.963199][ T6284] ? __pfx_copy_pid_ns+0x10/0x10 [ 62.963214][ T6284] ? __pfx_copy_mnt_ns+0x10/0x10 [ 62.963233][ T6284] ? create_new_namespaces+0x30/0xac0 [ 62.963248][ T6284] create_new_namespaces+0x2aa/0xac0 [ 62.963264][ T6284] unshare_nsproxy_namespaces+0xf2/0x220 [ 62.963285][ T6284] ksys_unshare+0x4a2/0xa70 [ 62.963299][ T6284] ? __pfx_ksys_unshare+0x10/0x10 [ 62.963312][ T6284] ? ksys_write+0x1ac/0x250 [ 62.963327][ T6284] __x64_sys_unshare+0x31/0x40 [ 62.963341][ T6284] do_syscall_64+0x123/0x790 [ 62.963361][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.963373][ T6284] RIP: 0033:0x7f230a39e159 [ 62.963382][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.963392][ T6284] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 62.963403][ T6284] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 62.963410][ T6284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 62.963416][ T6284] RBP: 00007f230a43506b R08: 0000000000000000 R09: 0000000000000000 [ 62.963422][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.963428][ T6284] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 62.963441][ T6284] [ 62.963446][ T6284] sysctl could not get directory: /kernel -12 [ 62.983919][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 62.985651][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.002805][ T6286] wg2 speed is unknown, defaulting to 1000 [ 63.230684][ T6299] wg2 speed is unknown, defaulting to 1000 [ 63.257914][ T6302] dlm: no locking on control device [ 63.556030][ T5907] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.643185][ T6328] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 63.728174][ T5907] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 63.729146][ T5907] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.729168][ T5907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 63.729180][ T5907] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.729190][ T5907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.729203][ T5907] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 63.729224][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.733798][ T6308] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.734828][ T5907] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 63.735650][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 63.735683][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 63.740649][ T5907] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 63.745263][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 63.745298][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 63.752295][ T5907] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 63.771931][ T6333] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 63.937676][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 63.944283][ T6308] binder: 6307:6308 ioctl c0306201 200000000040 returned -14 [ 63.944486][ T6308] binder: 6307:6308 ioctl c0306201 200000000640 returned -22 [ 64.064851][ T5907] usb 7-1: USB disconnect, device number 5 [ 64.079709][ T6352] CIFS: VFS: bad security option: krb5iý [ 64.094440][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 64.098953][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 64.099337][ T5907] keyspan 7-1:1.0: device disconnected [ 64.107394][ T50] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 64.108606][ T50] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 64.108631][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.109593][ T50] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 64.109606][ T50] usb 6-1: Manufacturer: syz [ 64.132702][ T50] usb 6-1: config 0 descriptor?? [ 64.145389][ T6352] netlink: 'syz.3.146': attribute type 2 has an invalid length. [ 64.146285][ T851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.206888][ T50] rc_core: IR keymap rc-hauppauge not found [ 64.206905][ T50] Registered IR keymap rc-empty [ 64.209268][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 64.210146][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 64.308619][ T851] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 64.309606][ T851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.309630][ T851] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 64.309643][ T851] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 64.309654][ T851] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 64.309675][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.314655][ T6349] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.314706][ T6349] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.316088][ T851] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 64.320040][ T851] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 64.320075][ T851] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 64.323899][ T851] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 64.325067][ T851] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 64.325118][ T851] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 64.327616][ T851] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 64.339772][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.342360][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.350719][ T851] usb 6-1: USB disconnect, device number 8 [ 64.524259][ T6349] binder: 6348:6349 ioctl c0306201 200000000040 returned -22 [ 64.524405][ T6349] binder: 6348:6349 ioctl c0306201 200000000640 returned -22 [ 64.616581][ T43] kauditd_printk_skb: 83 callbacks suppressed [ 64.616598][ T43] audit: type=1400 audit(1790131921.493:428): avc: denied { create } for pid=6357 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.618649][ T43] audit: type=1400 audit(1790131921.493:429): avc: denied { bind } for pid=6357 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.619803][ T43] audit: type=1400 audit(1790131921.493:430): avc: denied { write } for pid=6357 comm="syz.2.147" path="socket:[12099]" dev="sockfs" ino=12099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.626528][ T5907] usb 5-1: USB disconnect, device number 8 [ 64.633551][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 64.634909][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 64.635247][ T5907] keyspan 5-1:1.0: device disconnected [ 64.679810][ T6360] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 64.828396][ T43] audit: type=1400 audit(1790131921.703:431): avc: denied { create } for pid=6370 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.831121][ T43] audit: type=1400 audit(1790131921.703:432): avc: denied { bind } for pid=6370 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.837642][ T43] audit: type=1400 audit(1790131921.713:433): avc: denied { listen } for pid=6370 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.838429][ T43] audit: type=1400 audit(1790131921.713:434): avc: denied { connect } for pid=6370 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.851612][ T43] audit: type=1400 audit(1790131921.723:435): avc: denied { accept } for pid=6370 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.944068][ T6377] syz_tun: entered promiscuous mode [ 64.944673][ T6377] syz_tun: left promiscuous mode [ 64.999875][ T6378] syz_tun: entered promiscuous mode [ 65.000517][ T6378] syz_tun: left promiscuous mode [ 65.036632][ T5813] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.126083][ T5907] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.145291][ T43] audit: type=1400 audit(1790131922.013:436): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.187468][ T5813] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 65.188466][ T5813] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.189668][ T5813] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.191962][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.191984][ T5813] usb 8-1: Product: syz [ 65.191995][ T5813] usb 8-1: Manufacturer: syz [ 65.192006][ T5813] usb 8-1: SerialNumber: syz [ 65.197340][ T5813] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 65.202738][ T5813] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 65.211203][ T5813] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 65.306504][ T5907] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 65.307303][ T5907] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.307325][ T5907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 65.307337][ T5907] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.307347][ T5907] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.307358][ T5907] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 65.307376][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.330699][ T6373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 65.332850][ T5907] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 65.334264][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 65.334299][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 65.335051][ T5907] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 65.343537][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 65.343613][ T5907] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 65.348745][ T5907] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 65.531509][ T6404] syzkaller1: entered promiscuous mode [ 65.531521][ T6404] syzkaller1: entered allmulticast mode [ 65.542552][ T43] audit: type=1400 audit(1790131922.413:437): avc: denied { mount } for pid=6372 comm="syz.2.155" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.605695][ T6410] binder: 6372:6410 ioctl c0306201 200000000040 returned -14 [ 65.625955][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 65.700778][ T6416] overlayfs: failed to resolve './dev/sda1': -2 [ 65.786607][ T5834] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 65.787563][ T5834] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.787579][ T5834] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.787591][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 65.789197][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 65.789209][ T5834] usb 6-1: Product: syz [ 65.789216][ T5834] usb 6-1: Manufacturer: syz [ 65.789224][ T5834] usb 6-1: SerialNumber: syz [ 65.791412][ T5834] usb 6-1: config 0 descriptor?? [ 65.795672][ T5834] usb 6-1: selecting invalid altsetting 0 [ 66.013171][ T5834] usb 6-1: USB disconnect, device number 9 [ 66.467397][ T6369] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 66.468819][ T6369] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 66.468840][ T6369] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 66.468969][ T6369] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 66.469334][ T6373] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32 [ 66.469478][ T6373] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 66.469495][ T6373] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 66.470441][ T6373] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 66.472504][ T1040] usb 7-1: USB disconnect, device number 6 [ 66.472798][ T6353] usb 8-1: USB disconnect, device number 3 [ 66.484616][ T6353] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 66.493428][ T6353] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 66.494119][ T6353] ti_usb_3410_5052 8-1:2.0: device disconnected [ 66.513871][ T1040] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 66.520358][ T1040] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 66.520686][ T1040] keyspan 7-1:1.0: device disconnected [ 66.549635][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.630594][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.670625][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.672423][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.672944][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.673804][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.674285][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.702224][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.740833][ T6444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6444 comm=syz.1.168 [ 66.769102][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.822226][ T6452] FAULT_INJECTION: forcing a failure. [ 66.822226][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 66.822255][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.1.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.822277][ T6452] Tainted: [L]=SOFTLOCKUP [ 66.822283][ T6452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.822292][ T6452] Call Trace: [ 66.822297][ T6452] [ 66.822304][ T6452] dump_stack_lvl+0x100/0x190 [ 66.822332][ T6452] should_fail_ex.cold+0x5/0xa [ 66.822355][ T6452] should_failslab+0xc2/0x120 [ 66.822376][ T6452] __kmalloc_noprof+0xfc/0x840 [ 66.822393][ T6452] ? __import_iovec+0x1d2/0x640 [ 66.822412][ T6452] ? sock_kmalloc+0x111/0x170 [ 66.822450][ T6452] sock_kmalloc+0x111/0x170 [ 66.822474][ T6452] ____sys_sendmsg+0x569/0xbe0 [ 66.822500][ T6452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.822529][ T6452] ? lock_acquire+0x1d1/0x380 [ 66.822546][ T6452] ? get_pid_task+0x2a/0x250 [ 66.822569][ T6452] ___sys_sendmsg+0x190/0x1e0 [ 66.822586][ T6452] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.822602][ T6452] ? get_pid_task+0x106/0x250 [ 66.822631][ T6452] ? find_held_lock+0x2b/0x80 [ 66.822666][ T6452] __sys_sendmsg+0x160/0x210 [ 66.822687][ T6452] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.822719][ T6452] do_syscall_64+0x123/0x790 [ 66.822751][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.822768][ T6452] RIP: 0033:0x7f230a39e159 [ 66.822782][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.822796][ T6452] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.822813][ T6452] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 66.822823][ T6452] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 66.822834][ T6452] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 66.822843][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.822852][ T6452] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 66.822874][ T6452] [ 66.928985][ T13] bridge_slave_1: left allmulticast mode [ 66.929014][ T13] bridge_slave_1: left promiscuous mode [ 66.929552][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.932085][ T13] bridge_slave_0: left allmulticast mode [ 66.932097][ T13] bridge_slave_0: left promiscuous mode [ 66.932776][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.987635][ T6459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48934 sclass=netlink_route_socket pid=6459 comm=syz.1.172 [ 67.072931][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.075468][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.076495][ T13] bond0 (unregistering): Released all slaves [ 67.088124][ T6438] wg2 speed is unknown, defaulting to 1000 [ 67.093678][ T6467] CIFS: Attempting to mount //127.0.0.1/share [ 67.099816][ T6467] CIFS: VFS: Error connecting to socket. Aborting operation. [ 67.099864][ T6467] CIFS: VFS: cifs_mount failed w/return code = -101 [ 67.173011][ T13] tipc: Disabling bearer [ 67.175043][ T13] tipc: Left network mode [ 67.262877][ T6478] FAULT_INJECTION: forcing a failure. [ 67.262877][ T6478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.262897][ T6478] CPU: 2 UID: 0 PID: 6478 Comm: syz.2.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.262912][ T6478] Tainted: [L]=SOFTLOCKUP [ 67.262916][ T6478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.262922][ T6478] Call Trace: [ 67.262926][ T6478] [ 67.262930][ T6478] dump_stack_lvl+0x100/0x190 [ 67.262950][ T6478] should_fail_ex.cold+0x5/0xa [ 67.262966][ T6478] _copy_from_user+0x2e/0xd0 [ 67.262979][ T6478] ____sys_sendmsg+0x1d1/0xbe0 [ 67.262998][ T6478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.263019][ T6478] ? lock_acquire+0x1d1/0x380 [ 67.263030][ T6478] ? get_pid_task+0x2a/0x250 [ 67.263047][ T6478] ___sys_sendmsg+0x190/0x1e0 [ 67.263058][ T6478] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.263069][ T6478] ? get_pid_task+0x106/0x250 [ 67.263089][ T6478] ? find_held_lock+0x2b/0x80 [ 67.263112][ T6478] __sys_sendmsg+0x160/0x210 [ 67.263127][ T6478] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.263148][ T6478] do_syscall_64+0x123/0x790 [ 67.263166][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.263177][ T6478] RIP: 0033:0x7fb26459e159 [ 67.263186][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.263197][ T6478] RSP: 002b:00007fb2653a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.263208][ T6478] RAX: ffffffffffffffda RBX: 00007fb264825fa0 RCX: 00007fb26459e159 [ 67.263215][ T6478] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 67.263221][ T6478] RBP: 00007fb2653a0090 R08: 0000000000000000 R09: 0000000000000000 [ 67.263227][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.263233][ T6478] R13: 00007fb264826038 R14: 00007fb264825fa0 R15: 00007fff8dc252d8 [ 67.263247][ T6478] [ 67.315255][ T6483] __nla_validate_parse: 6 callbacks suppressed [ 67.315271][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 67.403759][ T6486] autofs4:pid:6486:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 67.405436][ T6486] ipt_ah: unknown flags FF [ 67.505990][ T1040] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 67.508162][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.668257][ T1040] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 67.669883][ T1040] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.669906][ T1040] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 67.669919][ T1040] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.669929][ T1040] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.669940][ T1040] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 67.669958][ T1040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.685127][ T6480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.686776][ T1040] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 67.687563][ T1040] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 67.687596][ T1040] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 67.690453][ T1040] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 67.700246][ T1040] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 67.700281][ T1040] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 67.703631][ T1040] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 67.770718][ T13] hsr_slave_0: left promiscuous mode [ 67.773524][ T13] hsr_slave_1: left promiscuous mode [ 67.774170][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.774201][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.797640][ T13] veth1_macvtap: left promiscuous mode [ 67.797688][ T13] veth0_macvtap: left promiscuous mode [ 67.797766][ T13] veth1_vlan: left promiscuous mode [ 67.797830][ T13] veth0_vlan: left promiscuous mode [ 67.858174][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.858741][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.859625][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.860416][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.860729][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.910385][ T6480] binder: 6479:6480 ioctl c0306201 200000000040 returned -14 [ 68.024142][ T13] team0 (unregistering): Port device team_slave_1 removed [ 68.033114][ T5834] usb 6-1: USB disconnect, device number 10 [ 68.051310][ T13] team0 (unregistering): Port device team_slave_0 removed [ 68.066882][ T5834] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 68.078695][ T5834] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 68.079490][ T5834] keyspan 6-1:1.0: device disconnected [ 68.188726][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.327453][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.327541][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.327605][ T6438] bridge_slave_0: entered allmulticast mode [ 68.328494][ T6438] bridge_slave_0: entered promiscuous mode [ 68.340750][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.340798][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.340876][ T6438] bridge_slave_1: entered allmulticast mode [ 68.342950][ T6438] bridge_slave_1: entered promiscuous mode [ 68.383395][ T6501] wg2 speed is unknown, defaulting to 1000 [ 68.407047][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.414704][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.415661][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.442040][ T6438] team0: Port device team_slave_0 added [ 68.445035][ T6438] team0: Port device team_slave_1 added [ 68.471574][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.471584][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.471597][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.473300][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.473309][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.473322][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.521090][ T6438] hsr_slave_0: entered promiscuous mode [ 68.521662][ T6438] hsr_slave_1: entered promiscuous mode [ 68.662398][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.704101][ T5438] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.708210][ T5740] Bluetooth: hci1: command tx timeout [ 68.808284][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.885011][ T6542] FAULT_INJECTION: forcing a failure. [ 68.885011][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 68.885043][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.1.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.885068][ T6542] Tainted: [L]=SOFTLOCKUP [ 68.885087][ T6542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.885097][ T6542] Call Trace: [ 68.885103][ T6542] [ 68.885111][ T6542] dump_stack_lvl+0x100/0x190 [ 68.885142][ T6542] should_fail_ex.cold+0x5/0xa [ 68.885169][ T6542] should_failslab+0xc2/0x120 [ 68.885194][ T6542] __kmalloc_noprof+0xfc/0x840 [ 68.885212][ T6542] ? ip_options_get+0xa4/0x4f0 [ 68.885238][ T6542] ip_options_get+0xa4/0x4f0 [ 68.885265][ T6542] ? __pfx_ip_options_get+0x10/0x10 [ 68.885286][ T6542] ? snprintf+0xc7/0x100 [ 68.885318][ T6542] ip_cmsg_send+0x86f/0xbc0 [ 68.885344][ T6542] raw_sendmsg+0xe30/0x3770 [ 68.885372][ T6542] ? __pfx_raw_sendmsg+0x10/0x10 [ 68.885393][ T6542] ? avc_has_perm+0x135/0x1e0 [ 68.885420][ T6542] ? __pfx_avc_has_perm+0x10/0x10 [ 68.885447][ T6542] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 68.885499][ T6542] ? __pfx_raw_sendmsg+0x10/0x10 [ 68.885519][ T6542] inet_sendmsg+0x11c/0x140 [ 68.885539][ T6542] ____sys_sendmsg+0x9c9/0xbe0 [ 68.885589][ T6542] ? __pfx_inet_sendmsg+0x10/0x10 [ 68.885608][ T6542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.885642][ T6542] ? lock_acquire+0x1d1/0x380 [ 68.885663][ T6542] ? get_pid_task+0x2a/0x250 [ 68.885690][ T6542] ___sys_sendmsg+0x190/0x1e0 [ 68.885718][ T6542] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.885736][ T6542] ? get_pid_task+0x106/0x250 [ 68.885771][ T6542] ? find_held_lock+0x2b/0x80 [ 68.885813][ T6542] __sys_sendmsg+0x160/0x210 [ 68.885839][ T6542] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.885875][ T6542] do_syscall_64+0x123/0x790 [ 68.885920][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.885940][ T6542] RIP: 0033:0x7f230a39e159 [ 68.885958][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.885974][ T6542] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.885994][ T6542] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 68.886006][ T6542] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 68.886019][ T6542] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 68.886029][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.886041][ T6542] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 68.886066][ T6542] [ 68.939187][ T6544] loop0: detected capacity change from 0 to 2049 [ 68.950700][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.970658][ T6544] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 68.970681][ T6544] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 68.970730][ T6544] loop0: [ 69.046694][ T6438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.057325][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.057800][ T6438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.064605][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.082366][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.102273][ T6438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.104519][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.128501][ T6438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.132657][ T6438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.209082][ T6562] netlink: Unknown conntrack attr (0) [ 69.209105][ T6562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.325537][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.325647][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.325808][ T6501] bridge_slave_0: entered allmulticast mode [ 69.329476][ T6501] bridge_slave_0: entered promiscuous mode [ 69.352247][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.352334][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.352627][ T6501] bridge_slave_1: entered allmulticast mode [ 69.356337][ T6501] bridge_slave_1: entered promiscuous mode [ 69.395588][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.404526][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.452815][ T13] bridge_slave_1: left allmulticast mode [ 69.452841][ T13] bridge_slave_1: left promiscuous mode [ 69.453476][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.460842][ T13] bridge_slave_0: left allmulticast mode [ 69.460868][ T13] bridge_slave_0: left promiscuous mode [ 69.461108][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.536160][ T5907] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 69.663391][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.671049][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.673003][ T13] bond0 (unregistering): Released all slaves [ 69.682307][ T6501] team0: Port device team_slave_0 added [ 69.686437][ T6501] team0: Port device team_slave_1 added [ 69.696715][ T5907] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 69.697720][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.697756][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.697777][ T5907] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 69.697797][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.699553][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.699567][ T5907] usb 6-1: Product: syz [ 69.699575][ T5907] usb 6-1: Manufacturer: syz [ 69.699583][ T5907] usb 6-1: SerialNumber: syz [ 69.707813][ T5907] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 69.707825][ T5907] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 69.707843][ T5907] usbserial_generic 6-1:1.0: generic converter detected [ 69.711959][ T5907] usb 6-1: generic converter now attached to ttyUSB0 [ 69.757938][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.757949][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.757962][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.763587][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.763599][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.763611][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.788400][ T43] kauditd_printk_skb: 233 callbacks suppressed [ 69.788415][ T43] audit: type=1400 audit(1790131926.663:671): avc: denied { write } for pid=6577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.855105][ T6501] hsr_slave_0: entered promiscuous mode [ 69.855566][ T6501] hsr_slave_1: entered promiscuous mode [ 69.855866][ T6501] debugfs: 'hsr0' already exists in 'hsr' [ 69.855878][ T6501] Cannot create hsr debugfs directory [ 69.861426][ T43] audit: type=1400 audit(1790131926.733:672): avc: denied { write } for pid=6580 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.884797][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.907996][ T5740] Bluetooth: hci0: command tx timeout [ 69.924377][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.938468][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 69.976487][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.976534][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.998349][ T5907] usb 6-1: USB disconnect, device number 11 [ 70.004851][ T5907] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 70.005123][ T5907] usbserial_generic 6-1:1.0: device disconnected [ 70.030597][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.030644][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.235396][ T13] hsr_slave_0: left promiscuous mode [ 70.243595][ T43] audit: type=1400 audit(1790131927.113:673): avc: denied { write } for pid=6585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.244357][ T13] hsr_slave_1: left promiscuous mode [ 70.248133][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.248151][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.258478][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.258494][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.276898][ T13] veth1_macvtap: left promiscuous mode [ 70.276950][ T13] veth0_macvtap: left promiscuous mode [ 70.277023][ T13] veth1_vlan: left promiscuous mode [ 70.277076][ T13] veth0_vlan: left promiscuous mode [ 70.298693][ T43] audit: type=1400 audit(1790131927.173:674): avc: denied { write } for pid=6588 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.501229][ T13] team0 (unregistering): Port device team_slave_1 removed [ 70.518293][ T13] team0 (unregistering): Port device team_slave_0 removed [ 70.622487][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 70.624678][ T6501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.630706][ T6501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.631139][ T6501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.635690][ T6501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.642910][ T6501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.648824][ T6501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.649311][ T6501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.663058][ T6501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.737274][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.750779][ T6501] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.755455][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.755533][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.770024][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.770110][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.788438][ T5740] Bluetooth: hci1: command tx timeout [ 70.842934][ T43] audit: type=1400 audit(1790131927.713:675): avc: denied { write } for pid=6605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.953755][ T43] audit: type=1400 audit(1790131927.823:676): avc: denied { write } for pid=6611 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.051500][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.099442][ T6624] FAULT_INJECTION: forcing a failure. [ 71.099442][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 71.099472][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.1.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.099496][ T6624] Tainted: [L]=SOFTLOCKUP [ 71.099502][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.099512][ T6624] Call Trace: [ 71.099518][ T6624] [ 71.099525][ T6624] dump_stack_lvl+0x100/0x190 [ 71.099554][ T6624] should_fail_ex.cold+0x5/0xa [ 71.099579][ T6624] should_failslab+0xc2/0x120 [ 71.099602][ T6624] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.099621][ T6624] ? __lock_acquire+0x5c0/0x1f40 [ 71.099640][ T6624] ? dst_alloc+0x99/0x1a0 [ 71.099665][ T6624] dst_alloc+0x99/0x1a0 [ 71.099685][ T6624] rt_dst_alloc+0x35/0x3a0 [ 71.099711][ T6624] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 71.099739][ T6624] ip_route_output_key_hash+0x118/0x2b0 [ 71.099759][ T6624] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 71.099782][ T6624] ? ip_cmsg_send+0x3b1/0xbc0 [ 71.099802][ T6624] ip_route_output_flow+0x27/0x150 [ 71.099822][ T6624] raw_sendmsg+0xb2f/0x3770 [ 71.099849][ T6624] ? __pfx_raw_sendmsg+0x10/0x10 [ 71.099869][ T6624] ? avc_has_perm+0x135/0x1e0 [ 71.099895][ T6624] ? __pfx_avc_has_perm+0x10/0x10 [ 71.099919][ T6624] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 71.099969][ T6624] ? __pfx_raw_sendmsg+0x10/0x10 [ 71.099988][ T6624] inet_sendmsg+0x11c/0x140 [ 71.100006][ T6624] ____sys_sendmsg+0x9c9/0xbe0 [ 71.100031][ T6624] ? __pfx_inet_sendmsg+0x10/0x10 [ 71.100049][ T6624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.100081][ T6624] ? lock_acquire+0x1d1/0x380 [ 71.100104][ T6624] ? get_pid_task+0x2a/0x250 [ 71.100130][ T6624] ___sys_sendmsg+0x190/0x1e0 [ 71.100148][ T6624] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.100163][ T6624] ? get_pid_task+0x106/0x250 [ 71.100214][ T6624] ? find_held_lock+0x2b/0x80 [ 71.100255][ T6624] __sys_sendmsg+0x160/0x210 [ 71.100277][ T6624] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.100311][ T6624] do_syscall_64+0x123/0x790 [ 71.100340][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.100358][ T6624] RIP: 0033:0x7f230a39e159 [ 71.100373][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.100390][ T6624] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.100407][ T6624] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 71.100418][ T6624] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 71.100429][ T6624] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 71.100440][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.100450][ T6624] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 71.100474][ T6624] [ 71.162907][ T43] audit: type=1400 audit(1790131928.033:677): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.163663][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.179788][ T43] audit: type=1400 audit(1790131928.053:678): avc: denied { connect } for pid=6630 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.248283][ T43] audit: type=1400 audit(1790131928.123:679): avc: denied { write } for pid=6636 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.285637][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.360062][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.390199][ T6438] veth0_vlan: entered promiscuous mode [ 71.398729][ T6438] veth1_vlan: entered promiscuous mode [ 71.414297][ T6438] veth0_macvtap: entered promiscuous mode [ 71.419913][ T6438] veth1_macvtap: entered promiscuous mode [ 71.428155][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.432404][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.468090][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468229][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468248][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468266][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.509924][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.509986][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.510925][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.510937][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.535596][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.535610][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.536801][ T5907] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 71.563488][ T6501] veth0_vlan: entered promiscuous mode [ 71.571868][ T6501] veth1_vlan: entered promiscuous mode [ 71.604149][ T6501] veth0_macvtap: entered promiscuous mode [ 71.608625][ T6501] veth1_macvtap: entered promiscuous mode [ 71.622463][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.629615][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.677688][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.677702][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.697959][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.697972][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.707147][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 71.707757][ T5907] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.707895][ T5805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.707928][ T5805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.707955][ T5805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.710569][ T5907] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.710596][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.710615][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.710635][ T5907] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.710666][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.713121][ T5805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.836091][ T6660] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 71.836707][ T6670] netlink: Unknown conntrack attr (0) [ 71.836722][ T6670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.934924][ T5907] usb 6-1: usb_control_msg returned -71 [ 71.934963][ T5907] usbtmc 6-1:16.0: can't read capabilities [ 71.961201][ T5907] usb 6-1: USB disconnect, device number 12 [ 71.986216][ T5740] Bluetooth: hci0: command tx timeout [ 71.991339][ T6679] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 71.998077][ T6660] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 71.999892][ T6660] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.999927][ T6660] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 71.999946][ T6660] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 71.999963][ T6660] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 71.999991][ T6660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.008969][ T6662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 72.009105][ T6662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 72.013675][ T6660] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 72.015826][ T6660] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 72.019210][ T6660] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 72.027963][ T6660] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 72.033182][ T6660] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 72.033240][ T6660] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 72.038471][ T6660] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 72.202215][ T6685] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 72.223844][ T6662] binder: 6661:6662 ioctl 4018620d 0 returned -22 [ 72.224447][ T6662] binder: 6661:6662 ioctl c0306201 200000000040 returned -22 [ 72.224566][ T6662] binder: 6661:6662 ioctl c0306201 200000000640 returned -22 [ 72.330944][ T9] usb 9-1: USB disconnect, device number 2 [ 72.337812][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 72.349388][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 72.356004][ T9] keyspan 9-1:1.0: device disconnected [ 72.474035][ T43] audit: type=1400 audit(1790131929.343:680): avc: denied { write } for pid=6691 comm="syz.5.209" name="trace_clock" dev="tracefs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.534866][ T6697] netlink: Unknown conntrack attr (0) [ 72.534896][ T6697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.867313][ T5740] Bluetooth: hci1: command tx timeout [ 72.926250][ T5834] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 72.928082][ T6711] FAULT_INJECTION: forcing a failure. [ 72.928082][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 72.928110][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.4.214 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.928126][ T6711] Tainted: [L]=SOFTLOCKUP [ 72.928131][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.928137][ T6711] Call Trace: [ 72.928141][ T6711] [ 72.928146][ T6711] dump_stack_lvl+0x100/0x190 [ 72.928166][ T6711] should_fail_ex.cold+0x5/0xa [ 72.928182][ T6711] should_failslab+0xc2/0x120 [ 72.928197][ T6711] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.928215][ T6711] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 72.928235][ T6711] ? ip_setup_cork.constprop.0+0x647/0xa20 [ 72.928253][ T6711] ip_setup_cork.constprop.0+0x647/0xa20 [ 72.928271][ T6711] ip_append_data+0x16d/0x1a0 [ 72.928287][ T6711] ? __pfx_raw_getfrag+0x10/0x10 [ 72.928306][ T6711] raw_sendmsg+0xcc0/0x3770 [ 72.928323][ T6711] ? __pfx_raw_sendmsg+0x10/0x10 [ 72.928335][ T6711] ? avc_has_perm+0x135/0x1e0 [ 72.928352][ T6711] ? __pfx_avc_has_perm+0x10/0x10 [ 72.928368][ T6711] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 72.928398][ T6711] ? __pfx_raw_sendmsg+0x10/0x10 [ 72.928409][ T6711] inet_sendmsg+0x11c/0x140 [ 72.928420][ T6711] ____sys_sendmsg+0x9c9/0xbe0 [ 72.928437][ T6711] ? __pfx_inet_sendmsg+0x10/0x10 [ 72.928453][ T6711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.928481][ T6711] ? lock_acquire+0x1d1/0x380 [ 72.928498][ T6711] ? get_pid_task+0x2a/0x250 [ 72.928515][ T6711] ___sys_sendmsg+0x190/0x1e0 [ 72.928527][ T6711] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.928541][ T6711] ? get_pid_task+0x106/0x250 [ 72.928572][ T6711] ? find_held_lock+0x2b/0x80 [ 72.928599][ T6711] __sys_sendmsg+0x160/0x210 [ 72.928622][ T6711] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.928644][ T6711] do_syscall_64+0x123/0x790 [ 72.928663][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.928674][ T6711] RIP: 0033:0x7f2e6459e159 [ 72.928684][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.928695][ T6711] RSP: 002b:00007f2e653e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.928707][ T6711] RAX: ffffffffffffffda RBX: 00007f2e64825fa0 RCX: 00007f2e6459e159 [ 72.928714][ T6711] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 72.928720][ T6711] RBP: 00007f2e653e2090 R08: 0000000000000000 R09: 0000000000000000 [ 72.928727][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.928733][ T6711] R13: 00007f2e64826038 R14: 00007f2e64825fa0 R15: 00007ffe3d526208 [ 72.928747][ T6711] [ 73.097012][ T5834] usb 10-1: Using ep0 maxpacket: 8 [ 73.097619][ T5834] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.098819][ T5834] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 73.098844][ T5834] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.098865][ T5834] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.098884][ T5834] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.098915][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.336444][ T5834] usb 10-1: GET_CAPABILITIES returned 0 [ 73.336484][ T5834] usbtmc 10-1:16.0: can't read capabilities [ 73.368676][ T6724] netlink: Unknown conntrack attr (0) [ 73.368693][ T6724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.498073][ T6734] FAULT_INJECTION: forcing a failure. [ 73.498073][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 73.498103][ T6734] CPU: 3 UID: 0 PID: 6734 Comm: syz.1.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.498127][ T6734] Tainted: [L]=SOFTLOCKUP [ 73.498133][ T6734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.498144][ T6734] Call Trace: [ 73.498150][ T6734] [ 73.498158][ T6734] dump_stack_lvl+0x100/0x190 [ 73.498187][ T6734] should_fail_ex.cold+0x5/0xa [ 73.498213][ T6734] should_failslab+0xc2/0x120 [ 73.498236][ T6734] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 73.498258][ T6734] ? __alloc_skb+0x140/0x710 [ 73.498285][ T6734] __alloc_skb+0x140/0x710 [ 73.498305][ T6734] ? __alloc_skb+0x5b7/0x710 [ 73.498325][ T6734] ? __pfx___alloc_skb+0x10/0x10 [ 73.498353][ T6734] __ip_append_data+0x2c95/0x44d0 [ 73.498385][ T6734] ? __pfx_raw_getfrag+0x10/0x10 [ 73.498422][ T6734] ? __pfx___ip_append_data+0x10/0x10 [ 73.498465][ T6734] ? __asan_memcpy+0x3c/0x60 [ 73.498489][ T6734] ip_append_data+0x10f/0x1a0 [ 73.498516][ T6734] ? __pfx_raw_getfrag+0x10/0x10 [ 73.498546][ T6734] raw_sendmsg+0xcc0/0x3770 [ 73.498574][ T6734] ? __pfx_raw_sendmsg+0x10/0x10 [ 73.498594][ T6734] ? avc_has_perm+0x135/0x1e0 [ 73.498620][ T6734] ? __pfx_avc_has_perm+0x10/0x10 [ 73.498647][ T6734] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 73.498702][ T6734] ? __pfx_raw_sendmsg+0x10/0x10 [ 73.498721][ T6734] inet_sendmsg+0x11c/0x140 [ 73.498738][ T6734] ____sys_sendmsg+0x9c9/0xbe0 [ 73.498761][ T6734] ? __pfx_inet_sendmsg+0x10/0x10 [ 73.498779][ T6734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.498808][ T6734] ? lock_acquire+0x1d1/0x380 [ 73.498826][ T6734] ? get_pid_task+0x2a/0x250 [ 73.498853][ T6734] ___sys_sendmsg+0x190/0x1e0 [ 73.498873][ T6734] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.498890][ T6734] ? get_pid_task+0x106/0x250 [ 73.498925][ T6734] ? find_held_lock+0x2b/0x80 [ 73.498966][ T6734] __sys_sendmsg+0x160/0x210 [ 73.498990][ T6734] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.499027][ T6734] do_syscall_64+0x123/0x790 [ 73.499056][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.499076][ T6734] RIP: 0033:0x7f230a39e159 [ 73.499091][ T6734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.499108][ T6734] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.499126][ T6734] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 73.499138][ T6734] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 73.499149][ T6734] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 73.499160][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.499170][ T6734] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 73.499194][ T6734] [ 73.546301][ T6707] usb 10-1: usbtmc_ioctl_clear_out_halt returned -32 [ 73.563885][ T5834] usb 10-1: USB disconnect, device number 2 [ 73.637293][ T5907] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 73.780731][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 73.791049][ T5907] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 73.792026][ T5907] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.792063][ T5907] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 73.792086][ T5907] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 73.792104][ T5907] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 73.792136][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.808832][ T6727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.808979][ T6727] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.818238][ T5907] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 73.819861][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 73.819926][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 73.825859][ T5907] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 73.833978][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 73.834052][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 73.849748][ T5907] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 73.913918][ T6751] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 74.020897][ T6727] binder: 6725:6727 ioctl 4018620d 0 returned -22 [ 74.022472][ T6727] binder: 6725:6727 ioctl c0306201 200000000040 returned -22 [ 74.022617][ T6727] binder: 6725:6727 ioctl c0306201 200000000640 returned -22 [ 74.049496][ T6753] netlink: Unknown conntrack attr (0) [ 74.049583][ T6753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.066816][ T5740] Bluetooth: hci0: command tx timeout [ 74.129108][ T9] usb 9-1: USB disconnect, device number 3 [ 74.144788][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 74.155271][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 74.156100][ T9] keyspan 9-1:1.0: device disconnected [ 74.177346][ T6756] input: syz0 as /devices/virtual/input/input7 [ 74.670934][ T6768] FAULT_INJECTION: forcing a failure. [ 74.670934][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.670956][ T6768] CPU: 2 UID: 0 PID: 6768 Comm: syz.4.238 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.670971][ T6768] Tainted: [L]=SOFTLOCKUP [ 74.670975][ T6768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.670981][ T6768] Call Trace: [ 74.670996][ T6768] [ 74.671002][ T6768] dump_stack_lvl+0x100/0x190 [ 74.671022][ T6768] should_fail_ex.cold+0x5/0xa [ 74.671038][ T6768] _copy_from_user+0x2e/0xd0 [ 74.671051][ T6768] copy_msghdr_from_user+0x9f/0x4c0 [ 74.671068][ T6768] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 74.671082][ T6768] ? lock_acquire+0x1d1/0x380 [ 74.671094][ T6768] ? get_pid_task+0x2a/0x250 [ 74.671110][ T6768] ___sys_sendmsg+0x106/0x1e0 [ 74.671122][ T6768] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.671133][ T6768] ? get_pid_task+0x106/0x250 [ 74.671153][ T6768] ? find_held_lock+0x2b/0x80 [ 74.671177][ T6768] __sys_sendmsg+0x160/0x210 [ 74.671191][ T6768] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.671213][ T6768] do_syscall_64+0x123/0x790 [ 74.671231][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.671242][ T6768] RIP: 0033:0x7f2e6459e159 [ 74.671252][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.671263][ T6768] RSP: 002b:00007f2e653e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.671275][ T6768] RAX: ffffffffffffffda RBX: 00007f2e64825fa0 RCX: 00007f2e6459e159 [ 74.671282][ T6768] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 74.671288][ T6768] RBP: 00007f2e653e2090 R08: 0000000000000000 R09: 0000000000000000 [ 74.671294][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.671301][ T6768] R13: 00007f2e64826038 R14: 00007f2e64825fa0 R15: 00007ffe3d526208 [ 74.671315][ T6768] [ 74.936050][ T6601] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 74.946118][ T5740] Bluetooth: hci1: command tx timeout [ 74.990761][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 74.990774][ T43] audit: type=1400 audit(1790131931.863:698): avc: denied { mount } for pid=6773 comm="syz.1.240" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.075994][ T6601] usb 9-1: device descriptor read/64, error -71 [ 75.085755][ T43] audit: type=1400 audit(1790131931.953:699): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.109057][ T6781] netlink: Unknown conntrack attr (0) [ 75.109082][ T6781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.142378][ T6785] FAULT_INJECTION: forcing a failure. [ 75.142378][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 75.142408][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.1.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.142430][ T6785] Tainted: [L]=SOFTLOCKUP [ 75.142436][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.142446][ T6785] Call Trace: [ 75.142451][ T6785] [ 75.142458][ T6785] dump_stack_lvl+0x100/0x190 [ 75.142486][ T6785] should_fail_ex.cold+0x5/0xa [ 75.142506][ T6785] ? nf_hook+0x223/0x670 [ 75.142528][ T6785] should_failslab+0xc2/0x120 [ 75.142549][ T6785] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.142568][ T6785] ? dst_alloc+0x99/0x1a0 [ 75.142591][ T6785] dst_alloc+0x99/0x1a0 [ 75.142612][ T6785] rt_dst_clone+0x5a/0x860 [ 75.142628][ T6785] ip_mc_finish_output+0x99/0x340 [ 75.142675][ T6785] ip_mc_output+0xb5e/0xd70 [ 75.142705][ T6785] ? __pfx_ip_mc_output+0x10/0x10 [ 75.142726][ T6785] ? __ip_make_skb+0x111e/0x1f90 [ 75.142750][ T6785] ? __pfx_dst_output+0x10/0x10 [ 75.142775][ T6785] ? __pfx_ip_mc_output+0x10/0x10 [ 75.142798][ T6785] ip_push_pending_frames+0x29e/0x300 [ 75.142824][ T6785] raw_sendmsg+0x1492/0x3770 [ 75.142848][ T6785] ? __pfx_raw_sendmsg+0x10/0x10 [ 75.142866][ T6785] ? avc_has_perm+0x135/0x1e0 [ 75.142891][ T6785] ? __pfx_avc_has_perm+0x10/0x10 [ 75.142915][ T6785] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 75.142961][ T6785] ? __pfx_raw_sendmsg+0x10/0x10 [ 75.142978][ T6785] inet_sendmsg+0x11c/0x140 [ 75.142996][ T6785] ____sys_sendmsg+0x9c9/0xbe0 [ 75.143019][ T6785] ? __pfx_inet_sendmsg+0x10/0x10 [ 75.143037][ T6785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.143066][ T6785] ? lock_acquire+0x1d1/0x380 [ 75.143084][ T6785] ? get_pid_task+0x2a/0x250 [ 75.143108][ T6785] ___sys_sendmsg+0x190/0x1e0 [ 75.143126][ T6785] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.143142][ T6785] ? get_pid_task+0x106/0x250 [ 75.143173][ T6785] ? find_held_lock+0x2b/0x80 [ 75.143209][ T6785] __sys_sendmsg+0x160/0x210 [ 75.143230][ T6785] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.143263][ T6785] do_syscall_64+0x123/0x790 [ 75.143289][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.143307][ T6785] RIP: 0033:0x7f230a39e159 [ 75.143321][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.143336][ T6785] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.143353][ T6785] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 75.143364][ T6785] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 75.143374][ T6785] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 75.143384][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.143394][ T6785] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 75.143417][ T6785] [ 75.264012][ T6790] fuse: Unknown parameter 'fowner<00000000000000000000' [ 75.325996][ T6601] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 75.368099][ T6791] netlink: 'syz.5.245': attribute type 10 has an invalid length. [ 75.368721][ T6791] syz_tun: entered promiscuous mode [ 75.372521][ T6791] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.377940][ T6791] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 75.377961][ T6791] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 75.377984][ T6791] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 75.380781][ T6791] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.384333][ T6791] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.436069][ T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 75.455975][ T6601] usb 9-1: device descriptor read/64, error -71 [ 75.578064][ T6601] usb usb9-port1: attempt power cycle [ 75.599360][ T30] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 75.600552][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.600592][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 75.600614][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.600633][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.600652][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 75.600684][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.604773][ T6787] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 75.608147][ T30] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 75.610495][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 75.610561][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 75.612419][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 75.614272][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 75.614337][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 75.618529][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 75.916025][ T6601] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 75.931702][ T30] usb 6-1: USB disconnect, device number 13 [ 75.936574][ T6601] usb 9-1: device descriptor read/8, error -71 [ 75.944947][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 75.953768][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 75.954380][ T30] keyspan 6-1:1.0: device disconnected [ 76.053986][ T43] audit: type=1400 audit(1790131932.923:700): avc: denied { unmount } for pid=6501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.146060][ T5740] Bluetooth: hci0: command tx timeout [ 76.176115][ T6601] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 76.196621][ T6601] usb 9-1: device descriptor read/8, error -71 [ 76.316316][ T6601] usb usb9-port1: unable to enumerate USB device [ 76.326062][ T5812] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 76.468103][ T6797] FAULT_INJECTION: forcing a failure. [ 76.468103][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 76.468129][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.1.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.468148][ T6797] Tainted: [L]=SOFTLOCKUP [ 76.468153][ T6797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.468161][ T6797] Call Trace: [ 76.468166][ T6797] [ 76.468172][ T6797] dump_stack_lvl+0x100/0x190 [ 76.468197][ T6797] should_fail_ex.cold+0x5/0xa [ 76.468217][ T6797] should_failslab+0xc2/0x120 [ 76.468236][ T6797] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 76.468252][ T6797] ? __alloc_skb+0x5b7/0x710 [ 76.468269][ T6797] ? __alloc_skb+0x140/0x710 [ 76.468288][ T6797] __alloc_skb+0x140/0x710 [ 76.468303][ T6797] ? __alloc_skb+0x5b7/0x710 [ 76.468319][ T6797] ? __pfx___alloc_skb+0x10/0x10 [ 76.468340][ T6797] netlink_alloc_large_skb+0x69/0x150 [ 76.468359][ T6797] netlink_sendmsg+0x680/0xda0 [ 76.468378][ T6797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.468396][ T6797] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.468416][ T6797] ____sys_sendmsg+0xa4d/0xbe0 [ 76.468436][ T6797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.468453][ T6797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.468478][ T6797] ? lock_acquire+0x1d1/0x380 [ 76.468493][ T6797] ? get_pid_task+0x2a/0x250 [ 76.468513][ T6797] ___sys_sendmsg+0x190/0x1e0 [ 76.468528][ T6797] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.468541][ T6797] ? get_pid_task+0x106/0x250 [ 76.468567][ T6797] ? find_held_lock+0x2b/0x80 [ 76.468597][ T6797] __sys_sendmsg+0x160/0x210 [ 76.468616][ T6797] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.468643][ T6797] do_syscall_64+0x123/0x790 [ 76.468666][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.468688][ T6797] RIP: 0033:0x7f230a39e159 [ 76.468700][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.468713][ T6797] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.468728][ T6797] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 76.468752][ T6797] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 76.468761][ T6797] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 76.468769][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.468777][ T6797] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 76.468803][ T6797] [ 76.517580][ T5812] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 76.519403][ T5812] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.519434][ T5812] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.519447][ T5812] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 76.519459][ T5812] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 76.519478][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.524484][ T6795] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 76.524573][ T6795] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 76.528278][ T5812] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 76.532082][ T5812] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 76.532116][ T5812] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 76.533002][ T5812] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 76.537371][ T5812] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 76.537406][ T5812] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 76.548536][ T5812] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 76.641652][ T25] cfg80211: failed to load regulatory.db [ 76.736494][ T6795] binder: 6794:6795 ioctl 4018620d 0 returned -22 [ 76.737094][ T6795] binder: 6794:6795 ioctl c0306201 200000000040 returned -22 [ 76.737241][ T6795] binder: 6794:6795 ioctl c0306201 200000000640 returned -22 [ 76.844434][ T5907] usb 10-1: USB disconnect, device number 3 [ 76.853983][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 76.862805][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 76.863440][ T5907] keyspan 10-1:1.0: device disconnected [ 77.404720][ T6805] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 77.768028][ T43] audit: type=1400 audit(1790131934.643:701): avc: denied { listen } for pid=6814 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.783814][ T6815] capability: warning: `syz.4.252' uses 32-bit capabilities (legacy support in use) [ 78.225989][ T5740] Bluetooth: hci0: command tx timeout [ 78.373672][ T43] audit: type=1400 audit(1790131935.243:702): avc: denied { mounton } for pid=6824 comm="syz.4.254" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 78.399220][ T6825] hfsplus: unable to find HFS+ superblock [ 78.407125][ T43] audit: type=1400 audit(1790131935.283:703): avc: denied { read write } for pid=6824 comm="syz.4.254" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.407671][ T43] audit: type=1400 audit(1790131935.283:704): avc: denied { open } for pid=6824 comm="syz.4.254" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.410019][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 78.791872][ T6831] block2mtd: device name too long [ 78.791930][ T6830] block2mtd: device name too long [ 78.792265][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.847268][ T6834] FAULT_INJECTION: forcing a failure. [ 78.847268][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.847301][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.1.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.847324][ T6834] Tainted: [L]=SOFTLOCKUP [ 78.847331][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.847341][ T6834] Call Trace: [ 78.847347][ T6834] [ 78.847354][ T6834] dump_stack_lvl+0x100/0x190 [ 78.847384][ T6834] should_fail_ex.cold+0x5/0xa [ 78.847409][ T6834] _copy_from_iter+0x1f4/0x1690 [ 78.847432][ T6834] ? __asan_memset+0x23/0x50 [ 78.847451][ T6834] ? __pfx__copy_from_iter+0x10/0x10 [ 78.847470][ T6834] ? __pfx___alloc_skb+0x10/0x10 [ 78.847506][ T6834] netlink_sendmsg+0x808/0xda0 [ 78.847532][ T6834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.847555][ T6834] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.847579][ T6834] ____sys_sendmsg+0xa4d/0xbe0 [ 78.847605][ T6834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.847627][ T6834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.847659][ T6834] ? lock_acquire+0x1d1/0x380 [ 78.847678][ T6834] ? get_pid_task+0x2a/0x250 [ 78.847704][ T6834] ___sys_sendmsg+0x190/0x1e0 [ 78.847723][ T6834] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.847740][ T6834] ? get_pid_task+0x106/0x250 [ 78.847773][ T6834] ? find_held_lock+0x2b/0x80 [ 78.847813][ T6834] __sys_sendmsg+0x160/0x210 [ 78.847855][ T6834] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.847890][ T6834] do_syscall_64+0x123/0x790 [ 78.847919][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.847937][ T6834] RIP: 0033:0x7f230a39e159 [ 78.847951][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.847969][ T6834] RSP: 002b:00007f230b1e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.847987][ T6834] RAX: ffffffffffffffda RBX: 00007f230a625fa0 RCX: 00007f230a39e159 [ 78.847999][ T6834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 78.848010][ T6834] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 78.848020][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.848031][ T6834] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 78.848055][ T6834] [ 79.008614][ T43] audit: type=1400 audit(1790131935.883:705): avc: denied { write } for pid=6839 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.056081][ T851] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 79.137450][ T50] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 79.207712][ T851] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.208799][ T851] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.208837][ T851] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 79.208858][ T851] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.208876][ T851] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.208896][ T851] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.208929][ T851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.211848][ T6832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 79.219955][ T851] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 79.221461][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 79.221544][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.226176][ T851] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 79.231561][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.231624][ T851] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.238270][ T851] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 79.306590][ T50] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.307670][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.307709][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 79.307733][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 79.307754][ T50] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.307787][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.318195][ T6836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.318369][ T6836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.324750][ T50] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 79.330822][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 79.330889][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 79.333734][ T50] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 79.335034][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.335097][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.342408][ T50] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 79.545415][ T9] usb 10-1: USB disconnect, device number 4 [ 79.677125][ T5812] usb 6-1: USB disconnect, device number 14 [ 79.682618][ T43] audit: type=1400 audit(1790131936.553:706): avc: denied { write } for pid=6842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.683106][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 79.689185][ T5812] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 79.693127][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 79.693754][ T9] keyspan 10-1:1.0: device disconnected [ 79.698796][ T5812] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 79.699544][ T5812] keyspan 6-1:1.0: device disconnected [ 79.752233][ T43] audit: type=1400 audit(1790131936.623:707): avc: denied { write } for pid=6845 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.880550][ T6853] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 79.880575][ T6853] CPU: 3 UID: 0 PID: 6853 Comm: syz.4.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.880601][ T6853] Tainted: [L]=SOFTLOCKUP [ 79.880608][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.880619][ T6853] Call Trace: [ 79.880626][ T6853] [ 79.880634][ T6853] dump_stack_lvl+0x100/0x190 [ 79.880667][ T6853] sysfs_warn_dup.cold+0x1c/0x28 [ 79.880697][ T6853] sysfs_create_dir_ns+0x24b/0x2b0 [ 79.880723][ T6853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 79.880747][ T6853] ? find_held_lock+0x2b/0x80 [ 79.880774][ T6853] ? kobject_add_internal+0x25f/0x930 [ 79.880797][ T6853] ? kobject_add_internal+0x25f/0x930 [ 79.880821][ T6853] ? class_dir_child_ns_type+0xd/0x60 [ 79.880851][ T6853] kobject_add_internal+0x2c8/0x930 [ 79.880877][ T6853] kobject_add+0x16a/0x1e0 [ 79.880899][ T6853] ? __pfx_kobject_add+0x10/0x10 [ 79.880923][ T6853] ? get_device_parent+0x1b3/0x4c0 [ 79.880948][ T6853] ? kobject_put+0xb9/0x640 [ 79.880976][ T6853] device_add+0x294/0x1970 [ 79.881003][ T6853] ? lockdep_init_map_type+0x5c/0x250 [ 79.881026][ T6853] ? __pfx_device_add+0x10/0x10 [ 79.881058][ T6853] ? lockdep_init_map_type+0x5c/0x250 [ 79.881080][ T6853] ? __init_waitqueue_head+0xca/0x150 [ 79.881112][ T6853] tty_register_device_attr+0x388/0x7f0 [ 79.881137][ T6853] ? lockdep_init_map_type+0x5c/0x250 [ 79.881160][ T6853] ? __pfx_tty_register_device_attr+0x10/0x10 [ 79.881190][ T6853] ? tty_port_init+0x156/0x1c0 [ 79.881219][ T6853] gsm_activate_mux+0x155/0x2a0 [ 79.881246][ T6853] gsmld_ioctl+0xbbc/0x15c0 [ 79.881280][ T6853] ? __pfx_gsmld_ioctl+0x10/0x10 [ 79.881328][ T6853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.881353][ T6853] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 79.881376][ T6853] ? __pfx_gsmld_ioctl+0x10/0x10 [ 79.881403][ T6853] tty_ioctl+0x11b4/0x1640 [ 79.881428][ T6853] ? __pfx_tty_ioctl+0x10/0x10 [ 79.881450][ T6853] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 79.881476][ T6853] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.881526][ T6853] ? __fget_files+0x34/0x3d0 [ 79.881562][ T6853] ? selinux_file_ioctl+0x13b/0x290 [ 79.881585][ T6853] ? selinux_file_ioctl+0xb6/0x290 [ 79.881609][ T6853] ? __pfx_tty_ioctl+0x10/0x10 [ 79.881633][ T6853] __x64_sys_ioctl+0x18e/0x210 [ 79.881657][ T6853] do_syscall_64+0x123/0x790 [ 79.881689][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.881710][ T6853] RIP: 0033:0x7f2e6459e159 [ 79.881727][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.881747][ T6853] RSP: 002b:00007f2e653a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.881769][ T6853] RAX: ffffffffffffffda RBX: 00007f2e64826180 RCX: 00007f2e6459e159 [ 79.881782][ T6853] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000005 [ 79.881794][ T6853] RBP: 00007f2e6463506b R08: 0000000000000000 R09: 0000000000000000 [ 79.881806][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.881818][ T6853] R13: 00007f2e64826218 R14: 00007f2e64826180 R15: 00007ffe3d526208 [ 79.881846][ T6853] [ 79.881868][ T6853] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.233453][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 80.233472][ T43] audit: type=1400 audit(1790131937.103:710): avc: denied { mounton } for pid=6862 comm="syz.1.263" path="/syzcgroup/cpu/syz1/memory.limit_in_bytes" dev="cgroup" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 80.252485][ T43] audit: type=1400 audit(1790131937.123:711): avc: denied { write } for pid=6860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.356865][ T43] audit: type=1400 audit(1790131937.233:712): avc: denied { write } for pid=6867 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.421440][ T6872] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 80.454845][ T6877] FAULT_INJECTION: forcing a failure. [ 80.454845][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 80.454877][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.5.266 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.454901][ T6877] Tainted: [L]=SOFTLOCKUP [ 80.454907][ T6877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.454917][ T6877] Call Trace: [ 80.454923][ T6877] [ 80.454930][ T6877] dump_stack_lvl+0x100/0x190 [ 80.454961][ T6877] should_fail_ex.cold+0x5/0xa [ 80.454982][ T6877] ? __netlink_lookup+0x652/0x900 [ 80.455004][ T6877] should_failslab+0xc2/0x120 [ 80.455027][ T6877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.455047][ T6877] ? skb_clone+0x190/0x400 [ 80.455082][ T6877] skb_clone+0x190/0x400 [ 80.455105][ T6877] netlink_deliver_tap+0xaed/0xcc0 [ 80.455131][ T6877] netlink_unicast+0x62b/0x850 [ 80.455174][ T6877] ? __pfx_netlink_unicast+0x10/0x10 [ 80.455204][ T6877] netlink_sendmsg+0x8b0/0xda0 [ 80.455230][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.455254][ T6877] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.455278][ T6877] ____sys_sendmsg+0xa4d/0xbe0 [ 80.455304][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.455327][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.455361][ T6877] ? lock_acquire+0x1d1/0x380 [ 80.455380][ T6877] ? get_pid_task+0x2a/0x250 [ 80.455407][ T6877] ___sys_sendmsg+0x190/0x1e0 [ 80.455426][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.455444][ T6877] ? get_pid_task+0x106/0x250 [ 80.455479][ T6877] ? find_held_lock+0x2b/0x80 [ 80.455520][ T6877] __sys_sendmsg+0x160/0x210 [ 80.455542][ T6877] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.455577][ T6877] do_syscall_64+0x123/0x790 [ 80.455606][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.455625][ T6877] RIP: 0033:0x7f58b9b9e159 [ 80.455639][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.455654][ T6877] RSP: 002b:00007f58ba99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.455671][ T6877] RAX: ffffffffffffffda RBX: 00007f58b9e25fa0 RCX: 00007f58b9b9e159 [ 80.455682][ T6877] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 80.455694][ T6877] RBP: 00007f58ba99d090 R08: 0000000000000000 R09: 0000000000000000 [ 80.455705][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.455715][ T6877] R13: 00007f58b9e26038 R14: 00007f58b9e25fa0 R15: 00007fff6d3e0868 [ 80.455741][ T6877] [ 80.531109][ T43] audit: type=1400 audit(1790131937.403:713): avc: denied { kexec_image_load } for pid=6880 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 80.536652][ T6872] bridge1: entered promiscuous mode [ 80.544624][ T6872] bridge2: entered promiscuous mode [ 80.551118][ T6872] bridge3: entered promiscuous mode [ 80.572760][ T6872] bridge4: entered promiscuous mode [ 80.599713][ T6872] bridge5: entered promiscuous mode [ 80.614825][ T6872] bridge6: entered promiscuous mode [ 80.643014][ T6872] bridge7: entered promiscuous mode [ 80.677207][ T6872] bridge8: entered promiscuous mode [ 80.677411][ T6883] wg2 speed is unknown, defaulting to 1000 [ 80.693904][ T6872] bridge9: entered promiscuous mode [ 80.699993][ T6872] bridge10: entered promiscuous mode [ 80.713399][ T6872] bridge11: entered promiscuous mode [ 80.724035][ T6872] bridge12: entered promiscuous mode [ 80.737404][ T6872] bridge13: entered promiscuous mode [ 80.747152][ T6872] bridge14: entered promiscuous mode [ 80.751004][ T6872] bridge15: entered promiscuous mode [ 80.759816][ T6872] bridge16: entered promiscuous mode [ 80.776370][ T6872] bridge17: entered promiscuous mode [ 80.776940][ T43] audit: type=1400 audit(1790131937.653:714): avc: denied { write } for pid=6890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.784854][ T6872] bridge18: entered promiscuous mode [ 80.799391][ T6872] bridge19: entered promiscuous mode [ 80.815263][ T6872] bridge20: entered promiscuous mode [ 80.822860][ T6872] bridge21: entered promiscuous mode [ 80.833888][ T6872] bridge22: entered promiscuous mode [ 80.851555][ T43] audit: type=1400 audit(1790131937.723:715): avc: denied { write } for pid=6893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.852897][ T6872] bridge23: entered promiscuous mode [ 80.874388][ T6872] bridge24: entered promiscuous mode [ 80.896016][ T5907] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 80.897416][ T6872] bridge25: entered promiscuous mode [ 80.914011][ T6872] bridge26: entered promiscuous mode [ 80.930468][ T6872] bridge27: entered promiscuous mode [ 80.943400][ T6872] bridge28: entered promiscuous mode [ 80.957786][ T6872] bridge29: entered promiscuous mode [ 80.964364][ T6872] bridge30: entered promiscuous mode [ 80.989048][ T6872] bridge31: entered promiscuous mode [ 81.002843][ T6872] bridge32: entered promiscuous mode [ 81.019073][ T6872] bridge33: entered promiscuous mode [ 81.058782][ T5907] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 81.059796][ T5907] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.059831][ T5907] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 81.059851][ T5907] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.059869][ T5907] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.059887][ T5907] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 81.059919][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.078333][ T6889] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 81.082059][ T5907] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 81.082892][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 81.082925][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 81.086349][ T5907] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 81.091617][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 81.091678][ T5907] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 81.097745][ T5907] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 81.174543][ T43] audit: type=1400 audit(1790131938.043:716): avc: denied { write } for pid=6902 comm="syz.5.273" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.177483][ T43] audit: type=1400 audit(1790131938.053:717): avc: denied { ioctl } for pid=6902 comm="syz.5.273" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.326369][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 81.409310][ T5907] usb 9-1: USB disconnect, device number 8 [ 81.417739][ T5907] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 81.422316][ T5907] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 81.422788][ T5907] keyspan 9-1:1.0: device disconnected [ 81.482313][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 81.483255][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.483294][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 81.483316][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 81.483337][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 81.483372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.488271][ T6899] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 81.488407][ T6899] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 81.489962][ T9] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 81.497133][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 81.497206][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 81.505157][ T9] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 81.509852][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 81.509914][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 81.512851][ T9] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 81.833109][ T9] usb 6-1: USB disconnect, device number 15 [ 81.853917][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 81.867358][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 81.867783][ T9] keyspan 6-1:1.0: device disconnected [ 82.048662][ T6915] FAULT_INJECTION: forcing a failure. [ 82.048662][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 82.048693][ T6915] CPU: 3 UID: 0 PID: 6915 Comm: syz.4.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.048717][ T6915] Tainted: [L]=SOFTLOCKUP [ 82.048723][ T6915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.048734][ T6915] Call Trace: [ 82.048740][ T6915] [ 82.048748][ T6915] dump_stack_lvl+0x100/0x190 [ 82.048802][ T6915] should_fail_ex.cold+0x5/0xa [ 82.048830][ T6915] should_failslab+0xc2/0x120 [ 82.048850][ T6915] __kmalloc_noprof+0xfc/0x840 [ 82.048868][ T6915] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 82.048898][ T6915] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 82.048926][ T6915] genl_family_rcv_msg_doit+0xc7/0x300 [ 82.048953][ T6915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.048981][ T6915] ? bpf_lsm_capable+0x9/0x10 [ 82.049004][ T6915] ? security_capable+0x80/0x260 [ 82.049031][ T6915] ? ns_capable+0xd2/0xf0 [ 82.049049][ T6915] genl_rcv_msg+0x560/0x800 [ 82.049072][ T6915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.049091][ T6915] ? __lock_acquire+0x5c0/0x1f40 [ 82.049107][ T6915] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 82.049140][ T6915] netlink_rcv_skb+0x159/0x420 [ 82.049160][ T6915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.049189][ T6915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.049220][ T6915] ? netlink_deliver_tap+0x1ae/0xcc0 [ 82.049243][ T6915] genl_rcv+0x28/0x40 [ 82.049264][ T6915] netlink_unicast+0x585/0x850 [ 82.049287][ T6915] ? __pfx_netlink_unicast+0x10/0x10 [ 82.049315][ T6915] netlink_sendmsg+0x8b0/0xda0 [ 82.049340][ T6915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.049362][ T6915] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.049388][ T6915] ____sys_sendmsg+0xa4d/0xbe0 [ 82.049414][ T6915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.049437][ T6915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.049470][ T6915] ? lock_acquire+0x1d1/0x380 [ 82.049488][ T6915] ? get_pid_task+0x2a/0x250 [ 82.049537][ T6915] ___sys_sendmsg+0x190/0x1e0 [ 82.049555][ T6915] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.049574][ T6915] ? get_pid_task+0x106/0x250 [ 82.049609][ T6915] ? find_held_lock+0x2b/0x80 [ 82.049649][ T6915] __sys_sendmsg+0x160/0x210 [ 82.049673][ T6915] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.049709][ T6915] do_syscall_64+0x123/0x790 [ 82.049740][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.049759][ T6915] RIP: 0033:0x7f2e6459e159 [ 82.049774][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.049792][ T6915] RSP: 002b:00007f2e653e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.049812][ T6915] RAX: ffffffffffffffda RBX: 00007f2e64825fa0 RCX: 00007f2e6459e159 [ 82.049823][ T6915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 82.049834][ T6915] RBP: 00007f2e653e2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.049844][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.049855][ T6915] R13: 00007f2e64826038 R14: 00007f2e64825fa0 R15: 00007ffe3d526208 [ 82.049880][ T6915] [ 82.132038][ T43] audit: type=1400 audit(1790131939.003:718): avc: denied { write } for pid=6914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.178333][ T6918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.190038][ T6918] Unknown status report in ack skb [ 82.199752][ T6922] overlayfs: failed to resolve './file0': -2 [ 82.214955][ T43] audit: type=1400 audit(1790131939.083:719): avc: denied { write } for pid=6923 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.536704][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 82.687759][ T9] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 82.688681][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.688724][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 82.688745][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.688763][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.688782][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.688815][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.693849][ T6937] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 82.698350][ T9] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 82.703824][ T9] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 82.703892][ T9] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 82.705718][ T9] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 82.707873][ T9] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 82.707937][ T9] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 82.709644][ T9] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 82.765334][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.773624][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.773943][ T6966] kAFS: No cell specified [ 82.775620][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.779433][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.780020][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.032964][ T5834] usb 10-1: USB disconnect, device number 5 [ 83.039314][ T6964] wg2 speed is unknown, defaulting to 1000 [ 83.063478][ T5834] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 83.075023][ T5834] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 83.075653][ T5834] keyspan 10-1:1.0: device disconnected [ 83.119069][ T6985] kvm: apic: phys broadcast and lowest prio [ 83.128549][ T5805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.281614][ T5805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.336260][ T6993] FAULT_INJECTION: forcing a failure. [ 83.336260][ T6993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.336292][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.1.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.336317][ T6993] Tainted: [L]=SOFTLOCKUP [ 83.336323][ T6993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.336333][ T6993] Call Trace: [ 83.336338][ T6993] [ 83.336344][ T6993] dump_stack_lvl+0x100/0x190 [ 83.336376][ T6993] should_fail_ex.cold+0x5/0xa [ 83.336402][ T6993] _copy_from_user+0x2e/0xd0 [ 83.336425][ T6993] kstrtouint_from_user+0xd6/0x1d0 [ 83.336451][ T6993] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 83.336479][ T6993] ? lock_acquire+0x1d1/0x380 [ 83.336504][ T6993] proc_fail_nth_write+0x83/0x220 [ 83.336529][ T6993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.336561][ T6993] vfs_write+0x2aa/0x1050 [ 83.336582][ T6993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.336602][ T6993] ? lock_acquire+0x1d1/0x380 [ 83.336620][ T6993] ? __fget_files+0x34/0x3d0 [ 83.336643][ T6993] ? __pfx_vfs_write+0x10/0x10 [ 83.336660][ T6993] ? find_held_lock+0x2b/0x80 [ 83.336687][ T6993] ? __fget_files+0x215/0x3d0 [ 83.336715][ T6993] ? __fget_files+0x21f/0x3d0 [ 83.336741][ T6993] ksys_write+0x12a/0x250 [ 83.336761][ T6993] ? __pfx_ksys_write+0x10/0x10 [ 83.336788][ T6993] do_syscall_64+0x123/0x790 [ 83.336819][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.336838][ T6993] RIP: 0033:0x7f230a35e98e [ 83.336854][ T6993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.336869][ T6993] RSP: 002b:00007f230b1e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.336886][ T6993] RAX: ffffffffffffffda RBX: 00007f230b1e56c0 RCX: 00007f230a35e98e [ 83.336898][ T6993] RDX: 0000000000000001 RSI: 00007f230b1e50a0 RDI: 0000000000000004 [ 83.336909][ T6993] RBP: 00007f230b1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 83.336921][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.336932][ T6993] R13: 00007f230a626038 R14: 00007f230a625fa0 R15: 00007ffc0e793408 [ 83.336958][ T6993] [ 83.417444][ T5805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.470233][ T6999] netlink: 'syz.4.294': attribute type 29 has an invalid length. [ 83.497754][ T6999] netlink: 'syz.4.294': attribute type 11 has an invalid length. [ 83.514093][ T5805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.592973][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.593098][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.593196][ T6964] bridge_slave_0: entered allmulticast mode [ 83.594525][ T6964] bridge_slave_0: entered promiscuous mode [ 83.597095][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.597165][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.597227][ T6964] bridge_slave_1: entered allmulticast mode [ 83.598083][ T6964] bridge_slave_1: entered promiscuous mode [ 83.619910][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.622565][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.636122][ T5834] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 83.645667][ T6964] team0: Port device team_slave_0 added [ 83.666903][ T6964] team0: Port device team_slave_1 added [ 83.709673][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.709689][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.709712][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.714143][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.714158][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.714181][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.753808][ T5805] bridge_slave_1: left allmulticast mode [ 83.753834][ T5805] bridge_slave_1: left promiscuous mode [ 83.754023][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.758472][ T5805] bridge_slave_0: left allmulticast mode [ 83.758492][ T5805] bridge_slave_0: left promiscuous mode [ 83.758680][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.796691][ T5834] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 83.797706][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.797742][ T5834] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.797765][ T5834] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 83.797786][ T5834] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 83.797818][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.800579][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.800717][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.802985][ T5834] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 83.804571][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 83.804632][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 83.837515][ T5834] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 83.838753][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 83.838815][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 83.860334][ T5834] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 83.929711][ T5805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.932133][ T5805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.933465][ T5805] bond0 (unregistering): Released all slaves [ 83.975819][ T6964] hsr_slave_0: entered promiscuous mode [ 83.977047][ T6964] hsr_slave_1: entered promiscuous mode [ 83.977540][ T6964] debugfs: 'hsr0' already exists in 'hsr' [ 83.977555][ T6964] Cannot create hsr debugfs directory [ 83.991617][ T5805] rxrpc: Assertion failed [ 83.992187][ T5805] ------------[ cut here ]------------ [ 83.992196][ T5805] kernel BUG at net/rxrpc/conn_object.c:488! [ 83.992218][ T5805] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 83.999447][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.004665][ T5805] Tainted: [L]=SOFTLOCKUP [ 84.006196][ T5805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.009510][ T5805] Workqueue: netns cleanup_net [ 84.011136][ T5805] RIP: 0010:rxrpc_destroy_all_connections.cold+0x12/0x14 [ 84.013455][ T5805] Code: ff 90 0f 0b e8 29 99 99 00 48 c7 c7 60 6a 5d 8d e8 2d c0 af ff 90 0f 0b e8 15 99 99 00 48 c7 c7 60 6a 5d 8d e8 19 c0 af ff 90 <0f> 0b e8 01 99 99 00 49 63 d6 48 83 ce ff 48 c7 c7 40 f3 00 91 e8 [ 84.019618][ T5805] RSP: 0018:ffffc90003227970 EFLAGS: 00010286 [ 84.021566][ T5805] RAX: 0000000000000017 RBX: ffff88805250c000 RCX: 0000000000000000 [ 84.024282][ T5805] RDX: 0000000000000017 RSI: ffffffff81ea1579 RDI: fffff52000644f1f [ 84.026939][ T5805] RBP: ffff88805250c064 R08: 0000000000000007 R09: 0000000000000000 [ 84.029428][ T5805] R10: 8000000000000000 R11: 0000000000000001 R12: 1ffff92000644f30 [ 84.031971][ T5805] R13: ffff88805250c078 R14: ffff88805250c088 R15: ffff88805250c088 [ 84.034542][ T5805] FS: 0000000000000000(0000) GS:ffff8880d5c53000(0000) knlGS:0000000000000000 [ 84.037317][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.039839][ T5805] CR2: 0000560f7b67b848 CR3: 00000000354be000 CR4: 0000000000352ef0 [ 84.043119][ T5805] Call Trace: [ 84.044575][ T5805] [ 84.045944][ T5805] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 84.048822][ T5805] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 84.051355][ T5805] ? __timer_delete_sync+0x151/0x1c0 [ 84.053165][ T5805] rxrpc_exit_net+0x7b/0xc0 [ 84.054605][ T5805] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 84.056236][ T5805] ops_undo_list+0x2ee/0xab0 [ 84.057721][ T5805] ? __pfx_ops_undo_list+0x10/0x10 [ 84.059332][ T5805] ? cleanup_net+0x332/0x920 [ 84.060795][ T5805] ? idr_destroy+0x62/0x2e0 [ 84.062242][ T5805] cleanup_net+0x499/0x920 [ 84.063652][ T5805] ? __pfx_cleanup_net+0x10/0x10 [ 84.065234][ T5805] ? process_one_work+0xa2c/0x1b10 [ 84.066858][ T5805] ? process_one_work+0x906/0x1b10 [ 84.068521][ T5805] process_one_work+0xac7/0x1b10 [ 84.070089][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 84.071821][ T5805] ? lock_acquire+0x1d1/0x380 [ 84.073348][ T5805] ? __pfx_cleanup_net+0x10/0x10 [ 84.074914][ T5805] worker_thread+0x5ef/0xe50 [ 84.076379][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 84.078016][ T5805] ? kthread+0x13a/0x450 [ 84.079377][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 84.081324][ T5805] kthread+0x373/0x450 [ 84.082855][ T5805] ? __pfx_kthread+0x10/0x10 [ 84.084681][ T5805] ret_from_fork+0x730/0xd60 [ 84.086526][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 84.088233][ T5805] ? __switch_to+0x800/0x10f0 [ 84.089786][ T5805] ? __pfx_kthread+0x10/0x10 [ 84.091410][ T5805] ret_from_fork_asm+0x1a/0x30 [ 84.093067][ T5805] [ 84.094083][ T5805] Modules linked in: [ 84.095856][ T5805] ---[ end trace 0000000000000000 ]--- [ 84.100545][ T5805] RIP: 0010:rxrpc_destroy_all_connections.cold+0x12/0x14 [ 84.100563][ T5805] Code: ff 90 0f 0b e8 29 99 99 00 48 c7 c7 60 6a 5d 8d e8 2d c0 af ff 90 0f 0b e8 15 99 99 00 48 c7 c7 60 6a 5d 8d e8 19 c0 af ff 90 <0f> 0b e8 01 99 99 00 49 63 d6 48 83 ce ff 48 c7 c7 40 f3 00 91 e8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.100574][ T5805] RSP: 0018:ffffc90003227970 EFLAGS: 00010286 [ 84.100583][ T5805] RAX: 0000000000000017 RBX: ffff88805250c000 RCX: 0000000000000000 [ 84.100590][ T5805] RDX: 0000000000000017 RSI: ffffffff81ea1579 RDI: fffff52000644f1f [ 84.100597][ T5805] RBP: ffff88805250c064 R08: 0000000000000007 R09: 0000000000000000 [ 84.100603][ T5805] R10: 8000000000000000 R11: 0000000000000001 R12: 1ffff92000644f30 [ 84.100610][ T5805] R13: ffff88805250c078 R14: ffff88805250c088 R15: ffff88805250c088 [ 84.100617][ T5805] FS: 0000000000000000(0000) GS:ffff8880d5c53000(0000) knlGS:0000000000000000 [ 84.100639][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.100698][ T5805] CR2: 0000560f7b67b848 CR3: 00000000354be000 CR4: 0000000000352ef0 [ 84.100708][ T5805] Kernel panic - not syncing: Fatal exception [ 84.134366][ T5805] Kernel Offset: disabled [ 84.135732][ T5805] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:52:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff90cd3e60 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000008 RDI=0000000000000003 RBP=ffff88802ad02580 RSP=ffffc900035173a0 R8 =0000000000000000 R9 =fffffbfff219a7cc R10=ffffffff90cd3e67 R11=0000000000000000 R12=ffffed10054e24b0 R13=ffff88802a712580 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81e6412b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe8589c4780 ffffffff 00c00000 GS =0000 ffff8880d5b53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff42821fc8 CR3=000000002582e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000002efeffe0 Opmask01=000000000000001f Opmask02=00000000c0f83fdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe858b98b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b20657479622d32 3320646e61707865 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007365697261646e 6f6365735f65746f 6d6f72702f303168 74652f666e6f632f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 550a005642444943 5f4b50510a56000a 51404b0a56564449 460a565c560a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3701013563538263 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4532010001001d00 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 17216d56891e2afb 4532010001001d00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 0000000000000004 0000000000000060 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b125c5 RDI=ffffffff9bc71ea0 RBP=ffffffff9bc71e60 RSP=ffffc90003227118 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000075 R14=000000000000000d R15=ffffc90003227430 RIP=ffffffff85b125ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560f7b67b848 CR3=00000000354be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3d5266f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3d5266f6 00007ffe3d5266fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e6463564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e6463568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e646357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e64635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c03000000020009 0015000400000011 030600ac000900b0 410e600302024001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e06756d9713a5d83 2698b70d36009eca cc254ee25a160d73 75879f7cfe22d3d9 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000eb6c23 66a57b55275347ea c2c7ea48b3c55ac6 44e4dfa1366796f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1dcbd2f4557b8b6c f28a000000003743 4b95922a45933def ede4d65deecb9e2a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4e0ecff0bed81ce cae1d509d89af0e3 5c211f9563dfdc06 e06756d9713a5d83 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2698b70d36009eca cc254ee25a160d73 75879f7cfe22d3d9 e1ed30d9d6141bce ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801eeecb00 RSI=ffffffff81ff8b8e RDI=ffff88801eeecb00 RBP=ffffc90000167cd8 RSP=ffffc90000167bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733de0 R12=ffff88806a63d280 R13=ffffed100d4c7a51 R14=ffff88806a63d288 R15=0000000000000001 RIP=ffffffff81ff8b95 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f230a3eb840 CR3=0000000036e45000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffe0 Opmask01=0000000000000007 Opmask02=0000000001000037 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f7b6692a0 0000560f7b6692a0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a047a5d8 6ab33ee400020003 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f7b66b3d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe858b98b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f7b64a090 0000560f7b687390 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f7b64cac0 0000560f7b64cb70 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000002e00010000 a047a5d86ab33ee4 000200100000063c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0011000500000002 00100005000003e8 000d000800000032 316874650003000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f4659468d 000000000c4f5851 000d000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd80400ad2564918 6ab33ed800020014 0000004800000080 0008000800001a39 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c000080008 00001a4a00001a4a ffffffffffffffff 0006001428fa523a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f64641df00000000 000080fe00010014 00000026fdc0400a d25649186ab33ed8 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00001a3f00001a3f ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014aed0cea6 57fc51aa00000000 000080fe00010014 00000025fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020642020206100 6361200a34312064 64203220200a2065 200a203300303420 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000c RBX=ffff88801c7a8280 RCX=0000000000000000 RDX=ffff888066342dc0 RSI=0000000000000000 RDI=ffff888066342ec0 RBP=ffff888066342dc0 RSP=ffffc90004746f80 R8 =0000000000000001 R9 =0000000000000000 R10=ffff888066342eb0 R11=0000000000000000 R12=0000000000000015 R13=ffff888066342dc0 R14=ffffc90004746fd0 R15=0000000000000008 RIP=ffffffff827309df RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558572b500 ffffffff 00c00000 GS =0000 ffff8880d5e53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58b7d50ff8 CR3=000000005b5ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6d3e0d56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6d3e0d56 00007fff6d3e0d5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b9c3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b9c3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b9c357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b9c35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000