last executing test programs: 1m25.959738324s ago: executing program 1 (id=6254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 1m25.959413749s ago: executing program 1 (id=6255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x11b) fdatasync(r2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000001", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1m25.906399986s ago: executing program 1 (id=6257): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935", 0x6e}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m25.795857468s ago: executing program 1 (id=6259): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, 0x0, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r5) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m25.611683636s ago: executing program 1 (id=6264): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x2440, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x42) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x10000) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3703", 0x2, 0x4000800, 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000640)={0x0, 0x7, 0x0, [0x4, 0x0, 0xe, 0x7fff, 0xfff], [0x3, 0x2, 0x1, 0x247, 0x3, 0x6, 0x6, 0xdd52, 0x7, 0x6, 0xca6e, 0x9, 0x3, 0x6300000000000, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x6, 0x4, 0xde, 0x0, 0x7ff, 0x81, 0x4, 0x9, 0x7fff, 0x0, 0x1, 0xf, 0x6, 0x0, 0x1, 0x0, 0x5, 0x9, 0xc02, 0x54c, 0x5, 0x2, 0x1, 0x2, 0x7f, 0x100, 0x5, 0x7, 0x100000001, 0x9, 0x4, 0x9, 0x2, 0x2, 0x3, 0x3, 0x5, 0x6, 0x0, 0x9, 0x2, 0x5, 0x9, 0xfff, 0x5, 0x2, 0x1, 0xfffffffffffff5c8, 0xd364, 0x2, 0xd3, 0x4, 0x4, 0x7, 0x5374a617, 0x7, 0xffff, 0x2, 0x6, 0x2, 0x86, 0x8000000000000000, 0x8, 0x9, 0x1, 0x6, 0x8000000000000000, 0x8, 0x1, 0xe0c, 0x1, 0x9, 0x3, 0x7, 0x9, 0x247, 0x0, 0x5038a2a9, 0x4, 0x10001, 0xffffffffffffffff, 0xd, 0xa0c, 0x8, 0x2, 0x4, 0x1, 0x3, 0x100000000, 0x3, 0xfb4d, 0x7f, 0x5, 0x6, 0x3ff, 0x9, 0x101, 0x100000001, 0x5fe, 0x9, 0x1ff, 0x6, 0x8000000000000001]}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f00000015c0)={{r10}, r11, 0x1a, @inherit={0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000070000000000000010000000000000000200000000aa9e001500000000000000000000000100000002000000000000000900000000000000100000000000000009000000000000000000000000000001010000000000000008000000000000002d0700000000000029000000000000000500000000000000"]}, @devid=r12}) syz_ublk_setup_queues(r0, r8, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x5, 0x21b}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4488, 0x10002, 0x40200401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x8002, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x4, 0x48b, 0x0, 0x0}}, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54a6beef915d564c90c200", 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r14 = accept4(r13, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r10) 1m25.436059745s ago: executing program 1 (id=6267): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935", 0x6e}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m10.395893525s ago: executing program 32 (id=6267): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935", 0x6e}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.614230944s ago: executing program 0 (id=7694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3.54441128s ago: executing program 0 (id=7696): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000140)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000007f1affd5020000800900014073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073793a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x1) r7 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000000)={0x195, [0x20, 0x100, 0xe19e, 0x1, 0xffff, 0x401, 0x7, 0x8, 0xe, 0x94, 0x358, 0x9000, 0x20, 0x5, 0x5, 0x8, 0x3, 0x7, 0x41, 0x8001, 0x3ff, 0x3, 0x2, 0x2, 0x5, 0x3, 0x7, 0x3ff, 0x4, 0x1, 0x0, 0x3, 0xf1de, 0xdca, 0x3, 0x6, 0x2, 0x5, 0x3, 0x4, 0x5dc7, 0xfff8, 0xa804, 0x3, 0x400, 0x2, 0x101, 0x400], 0x6}) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001) write(r4, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x149) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x2a, 0x7, 0x1, 0x0, "d94ee1439eb7ac27b032a3cf4581a7321636a50ba6a8465af497390c5856bc13b6a486960529"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 3.315155764s ago: executing program 4 (id=7701): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000001180), &(0x7f00000011c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000140)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010028bd7040fedbdf250f00000008000300", @ANYRESDEC=r4, @ANYBLOB="0578a200fe4c0000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4084888) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x8035}, @void, @llc={@snap={0x0, 0x0, 'l', "e5275c", 0xd, "c710d597ef0ad6d5b666c623675ef70950cd13e9bd8b62d9cd09b9afcd2088cf8c11bdcf268175777aa81b2a3f0395289b218509975a5b32fc29016b1b31843d647d3c3b705d0932a6e30231b4d73cbebc47947c72bf6801002d8981deb7e533dbc43629d63b7478abc7957b1f4ee470f19208483e49e17e91d1b99f4581cc566ffe50cc57307dafa638dd2bfb9739c1711a6d5529b25187a38e8258340de51c363abb560a755515c97bf9340aa061120e6092f8ec8dae41c6f84dd94a09f3a5a5585a3487d54d0c46964dc6fdb81c53ca2ce9083b1b03b23bada861ee6f582d8a4eced80cc6d1d9ae191570bf77c4"}}}, 0xfb) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe0f) inotify_init() ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x13, 0x1, 0x40000000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a40)={0x0, "3b6c1514f185eacf4ea21788fcab882f"}) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000001a40)={r7, 0x5, 0x1, [0xffffffffffff0557, 0x20000000000004, 0x3, 0x8, 0x6], [0x346741ce, 0x2, 0x4, 0x8, 0xbc1, 0x2, 0x7f, 0x100000001, 0x7ff, 0xbe, 0x6f, 0x5, 0x4cc, 0x0, 0x5, 0xc17c, 0x8, 0xffffffffffffffff, 0x7, 0x8, 0x9, 0x10002, 0x5, 0x2000000000, 0x1, 0x0, 0xab79, 0x0, 0xced0000000000000, 0x2, 0x5, 0x2, 0x58, 0x5f, 0x9, 0x3, 0xffffffff, 0x6, 0x8, 0x2, 0xf8, 0x3, 0xd34, 0x7, 0x9, 0xe043234, 0x2, 0x7ff7, 0xfffffffffffffff9, 0x80000001, 0x443ad5c6, 0x80, 0x1, 0x100, 0x8, 0xfffffffffffff99f, 0xffffffffffffff01, 0x1000, 0x6, 0x7, 0x40, 0x4, 0x7, 0x6, 0xf7f, 0xfffffffffffffffd, 0x9, 0x3, 0x1ff, 0x1, 0x401, 0x1, 0xea, 0xd4ce, 0x80, 0xd, 0x8000000000000001, 0xaa8, 0x80000000, 0x1, 0xfffffffffffff349, 0x0, 0x6, 0x3, 0xe, 0x5, 0x7, 0x88e, 0x31, 0x4e8f662e, 0x401, 0x9, 0x9, 0x6, 0x5, 0x3, 0x8000000000000001, 0xb, 0x80000000, 0x3, 0x7, 0x71fb, 0xf2e3, 0x5, 0x9, 0x16b1a12b, 0xffffffff80000000, 0x9, 0x3, 0x8000, 0x7, 0x7fffffff, 0x3, 0x94d2, 0xc1, 0x0, 0x3, 0xb, 0x4e8b, 0x9, 0x3]}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.314849944s ago: executing program 0 (id=7702): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x8, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000340)={0x7, 0x6, 0x3, 0x0, r4}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x74, 0x10, 0x403, 0x380, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2166, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xfffffff9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x74}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000020000000000000000003f2900000000009afc"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r10, 0x58}, 0x10) r11 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r11, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.261688486s ago: executing program 4 (id=7703): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (fail_nth: 5) 3.12495425s ago: executing program 0 (id=7704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x27}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="82", 0x1}], 0x1}, 0x4040015) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="ba", 0x11, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 3.124766045s ago: executing program 4 (id=7705): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3.055217729s ago: executing program 4 (id=7706): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1b, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$nl_generic(r6, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000b00)={0x59c, 0x21, 0x400, 0x70bd29, 0x25dfdbfc, {0x18}, [@typed={0x41, 0x156, 0x0, 0x0, @binary="f59f2f01b2686aaa21a4db3bc5de0adbfd5f9ffac0d12920e4e0ed6f2c2b298a7f0da152b955176a0281a4bcf3af90b19a6ff213447db76400fbdb7a2b"}, @nested={0xe7, 0x11b, 0x0, 0x1, [@typed={0x4, 0x7a}, @nested={0x4, 0x147}, @generic="b0bdd9e37774f6b97e29eca924317ed76d273331469828ecfda967b3c76fb53a08c75f4794aa5a9e0498eca374c3da2cccff59f17f5090c86d5483410e57fe661d12b69fc9d555acfde60532ca646313ea0a1a0d70d50aa355ca5911a40ec1e91d71bd4d7e57bdbf13bde57df4d5886c4ff767c4c93288d2cd8b9a86321331f63e1fc0994498dd6c3f1a3a679febdbab057c5bbb1c25726ea3fc5a065f46cf4c6240512f20ffee", @nested={0x34, 0x60, 0x0, 0x1, [@typed={0x17, 0x16a, 0x0, 0x0, @str='./binderfs/binder0\x00'}, @nested={0x18, 0x101, 0x0, 0x1, [@nested={0x4, 0xa6}, @typed={0xc, 0x79, 0x0, 0x0, @str='macvlan\x00'}, @nested={0x4, 0x15a}]}]}]}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r6}, @nested={0x115, 0x96, 0x0, 0x1, [@typed={0x8, 0x16b, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x113}, @generic="06d884ef6fe8eee312cfb2c5d5230e0d72bd5da927f838c4d5cf2191589e2133371a189d5767530d282ae6e5b1cd724db15aba7de16350093fe4a57943b282d7ac53b7b666cb474f4626e204e9e439db20187e8ed84007c83f623f60bf70537bbe57b8dffdf0dbe4696f85f8916558c5607d6e5a5afaf0acfddc60be8e06b53e1fa9bce9263cde56a4ddbd6cbb2268c8d5716489f9df2f43b3fd2c0dd7ee80a4642d917e9e60e4872d31c4c8fbf978d96997fcd5d80e1a015926a8734c4c9b6a8089c6d0d35a4e5a3768a35ea38f911026689723b54cc7d67ae154c85b417cc86f9b1ffe9527be540243b3928373f91f30fc495484ef513339", @nested={0x4, 0x96}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x80000000}]}, @generic="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"]}, 0x59c}, 0x1, 0x0, 0x0, 0x4}, 0x44034) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1001, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x14003, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xf6ff, 0x0) 3.054942537s ago: executing program 4 (id=7707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="36c5fcf21ade144e585407868c5ef1dd95fb306912ce6938ccbed06265494c50919091acc08e360ce216c000c723c0730a3437c3d458e3350ca07e14b01953061fa7d76c21928e5f7d5d7fd0be4887e3b7efa7a8f311b49184c142868c2cc0d1161850f5618c2321bba1eb9d022b53456cb9c3617b07b23f3f1300688da2fda8f75a2cc429bf3728886574f270b25c685c2c26be23e0909fe50aed3d6ca17c449dd869ce8f45ae4959051b2856b319913033c6b1e938d9e16b910593b33439d7cda8e9754df43fa7f4c52acb666b5db098fc0f06b51e394400cfc97471684d9867d9f40a5e3a4a4caba807", @ANYBLOB="cdd8293595d0f7d894e6c7f98c68df17738ffd301302ecb2f0578390bf5ceb0c2b7631fc17e4a304b02f7fdbb2ce39403455da4a491ade701bd764ea88de753decdf4787e919026075ee6d176de712936e468e77179113593b2b6fa050790b739399ce565de2d1357631c6554dbff8287d6a0a71ecb68fad5287d8c8c73bccf9f557ae3c66e1dbbcabe4086cb5a67537f6736f6aeb30764597f0f875a846910844ad59af307a278b9ca6479832fac644c53e6814720ce76dde1f2ffc9af34812ec4b5b45a552ff8d289832d4c0f37f0179a1084b793e646fba11f9faebd2087f569b5c4b02cb32e8cc0d4bb9f927478dee75ce31968dfb46028d789f4e7e86444be2cbe84c4585be640739fee99adc293053ca5a42befe8bbd6ea51febdea97f8139fb0f61c6b2085e00166cc37a50f59289e45141debc10aaaf9ee1f0fe4fc1a8a49123c8985a81ff3e17d93ff3c7f1a2709a37ed7c23ac61f95828187a1e3bef45eb79d6365d12a53671e803083ae05eca5fcb4878c1e583ce85cddcd91ee90512663bdbff85f8e51f46a92a2c85184a87e740e8267011c98dfbc86c7cc935aa00a7a72dbf89597ba3917789585fe40f6454301c520db5ea1904c768f1434e287c2e0fbd661d9bfe62e17282271f09e40264ac3a06de22afe3391d72c21ed246e55bcbacf54517aefa24f963797506274ef5880f2c8a69115472bfab69daa3f64aa1f5f0b96d8be5e79865dcbb1f0289e8ba35b7dc8a3308be0d5527404ef6ba6086910c2bf7d86c2800aab29e13e2564fe2e484aebaf1b052c641372ae6ada52b86f458f7fdf654ab7f685561669d5a0f7e862d27d2a5ceabe71ff9e3ba95cacba62f07e455b89228f3e591f89291caec75fe7bc2e84e6a28c63045ef1466578fc677afeb7c711503aa389b161a533fe05cb056b96fa1cf4a09ce889f6972f8920ed059eb87e50036a569b07f0f387c3978be394118c484eb44e1f195cbf37edebab212ed8783e6b06f52866019c0b833ee1ac64d137023d72aa8ad4e201560933eca8e15c38907b750eec3e7f91445b64f46fc223bdc07a66fcd3ff581bab381fd250337b7261059eca5ba72ae9fe25e5f1401d8264cab15e3325825cd0b4ee52d6087b669b2cb3a92cd48a641c897c3ac00cf709ab2e96623ec7dbb1e697db39ae4b0b69787fefb0bc0697fb7d423735d1c81533dff83cc4acee6dba6b17f26f8cacbb2e537ac08aad0bad60cebe99426e8ee066f12273748dec33a7714cbc6fbd7c42eca464f819589ab95e4a7f03ce107556cfc2720b4e49a36ebd8c2f7d0032548b13b6ee0e72349c24f910ce392c9fc4d7d97e8df585fbde3cebbff7d68b24ef49653bdfbf5d447ea2b762abddea9022ad3d30b516c7e4c2ca4491fd31e6fc9194c45f98f6a8055d533676b9c47d327f0fe278d17027fbc6a8d1da415ed5e7d05857cb680981ef9259fda901e07b1197810eca14015205496fdc0d71c106d1c7b1f7425ae8d876659782eb20eb291686766d918960558048f677888aef38f59f5158748ac0d608765f2c146b8723caa103a20a9db71bab7294323ae1fc4694dd6efdf23e61b32278906dd2f993a5bafa655e5eef5b95ed11008ccc74c70253313e5dedc3b28e2fb7cd61dce63adab80857f207b9915c3cdb3924289d2763039fe526251d3a01c39fc9c8832d27557304c1b560a1ac7061c2c7de55bd889c1d1e1a2362a11d23ef0b5755f86ebf2672e10dde5bee6c1261937fe91cdba835659eea744e80efca41a6246f788ff2fcfc58388ee1543993908f43fa65ffdab182d1378e427c3bc6b2f3c7ac59add8dab97be1e4a01a1c47a0f8ff192586fd8b9c306ff94d352b067a6b5b0bd790b0a2b34698f9097fcd93635b47a8d8e454d7c207e2befe1cfe6f41bec897bbe3ffd3a8c7c31f28fef1cdaa07de7ac74c7b5983fe1c7613102c716752ad8e3060c7fd96b25fd3b8b38ca4e8b4c57122c15c79ae3661008b1298787a67751d1648af871f5a3ae97c7435f145fb69a409b81fe915b371c061e76a5d52d4c6b6766fd3093b28d3c52e61d1e6e0314a24e0758ca4022e232520312c497c0f33968cfefff72afd751b55d6259b1012a2d892a4ce7c92c5cdb2334407b4bd2ae1ba681099c8babc6eacf659df296da053a08ef5903551777bff7cefc67e3fb58854b89f1c6a765aaab60c38023794ffef779420390dba02e12dc45f7760c643a051c503719dbe497da0ae640d1fc934bfed090987bd44480af891f027c2e0b691ce529d619756d1ea5b806e34fa35ea80a2d90ab9d7a4012f8e773280e1500405778cb7c78cf1150ce69a246221cad72ebb0ff167a9b548b9922ea18c030a7037b0920dfa72f02493f289fb6818c160df0da7f581a51660b2bf744d5a3e7795278e1f90ebda9a29658c5e290315cff70701a862a677d69a26d5f38025045f70af2d2e741b47ae778c82148bd7095a7c9c000b43f15328695b62ef08544552ed848fbecd8f7684fac7c56bc490349ff64f1a579f73ad68afe293ba205ba2b93778e6ddb65b033a133cdc91195038310783de02313b3978808e1d57296be132fc45e7d65356abeec7d13d0c2071d8f4463ccd2d7d48d72c98bdbc218e2e4ec5ed94387d0c0674057cd6ec5cdb93b85234a0f7be2d4ef4688e503cd7cc34f7fe0d96da40b1e5734395e5cf98938a31da4f2d3b0e7a3353cd510e5a2bc52aec9d15d3064bb0a41af05e31b311fc34ff6e52190094f6e5bc7ad2d3920f886ab9c789f89af197c92a6cd97fdbbe760af436460ffeca8aea7fd8a6af789c8a9a6a687d75476270503d2a267ddf8980350dc924e1c1fe7afdb98e0f781794ad044170df99a248badb00bd6342c7e71509aa40cc819e37deb69529f6cb39bcd611e31966bcb57a3a98bec63c7500f59c073bd4035c695c5a6a5d316d486d1dcd62cc37749e10cd02285636fd9bd3f37cc47c03e5d4e88ca4dff961bc8a147113e52ef3d5f0a4ddc73603839b45a41600b79bff299e233e1d3157fb816c43cc1349d37dda896996da87c54f13346c64e9f3c9e7dd753b0a79bfaf8624b3aa2f1ff440858a90e23e7007e19d3b01bcbe38e4e4115d02ec1fc36de862fb56c3b339cf25a5f0107bae068e3c9e653e54004482a094582cd1a5ab7f7d2b8c67f70e4f576af84bbd9ca68217db84e59d399d0eac654197287548da2a1575d3c8ac8105834f8e00d583dfe8ededde120202030cc5c5a25fed4197ca5fe1716022b7153153713f784aa12f13b940be8f732952cfebe1da1068552820a27f48ed0268911aa066bc83308add67a208c4bdef5ce8e4d6cd48d3749954ce6550bf82507aec57c21759986593b60c1b54e42981f5d90158751542f0583451649ea3762effc471a370c378006be989107b7b286e0d6d2c4b8adb01b89b9ac2040045dd309b85c0db26c63db55b8e5115ae675751bfda90e8f896b247ce6f7747348a5af7234adc87aac1b5958fe82647736539e7a39f46f2115a56f7de98fcfaf6cafe921610354c70ae3b227d838b2eb303115c009a887121aa2576bc06d9e5d53c933fc90ec7eb498b249d7435ecf51a73b796da98c5f4f191a7017a8ac5a558c0b1b4119a6db69d4faaeadee960f4bccaf14bd12d102599b74f67152c099381f75e081fa3fd3a545f5f67cac5885dcc95c6cc9bf8c628698b9e552ef5cb2120184cd573f9fd36479ce275bd543fcf12b3f25a379fe5f212e3eb26ad626ca1454baf534ecbfaf461ebd2086a82dd003adb2877149bcbad87742fd15cb643e641d8b3857bcacff882ff7912859dc3183afde1b124185a3cdf0c9b1641f05e4a875af17bd2d3bfcfecce97672585957adacfcfff1d33f27876d45fe8c39d297e32f4d18db3c6e92a6ffbe3b09ea920b24a19ff5af6f0040f345e23663ce7432aa4e7b6bb7b109ed8f6ac4b07a52c0ecb83103e4fedf1f3abfc968e00bd47a3d55805da8b4a1467ebaaf1b212bf8118f233cdff05b4562d0e5ae57c8c908a58de104932f85a20747b2dd574dc1da733e518679497a51e50527beb87d4a0a4efadd3a05e634d918c05a66a61223507e3b90f422a5ed880cfb2e8a77a240d87a4114082d6b96f68e357318b2e8c45c12bad6fd4cec8a60eb7dcce824427308b254c5917ed81183f3c325a0aa4aabec4685cab0fb8007e60918d4156640277440313d7cd5e6c9d7bea619677722ecc5e1bb32ea0dce744d42c34e53fbeef9b76ea342e40eecfc38ed7633bfed4bbc25cbd94f96b62deead00263f571a47f5b50ad3108174a9ae0c7db3ac562137ef48e0ce1920c4976961c09877fb8f419771c734345de17618aca79ae7db22c1df8d38f274a91fd7e1a91067945f1f980abac7c0fbd22500525f9a2adbc8617ea002ba90be121954382e291a625434c20e2f79d1921ab975da66cf999ed9088fc1a9d99fa218b47390c13967da74d7bebacfaad4c79b1063bf946475d028392490d7e8c60ec31cea7d68f9e7d1e70f243a85f54bd94cdecde7ca3390c3c2dea1efcc8e8f1e21fe47989de57a5cdf85fd3a089f58874f7d53c0a6b96e92a23cc2166a71315c7ca2795fc736dfd55719e2f91290f60fede041bb34fc88e10b73829627887250f46c8035b9f3c5ee75bd031720632ff6dacf0de99bad895536e842a1d2e78e82ef9c87ea33b04ba476088657f42c8843c83781c4a45dbe6560710199f0c974e0315cd24958d32f072dd9affab1251c22c1c1fa13503bb766529b28829dc6eb629bc8d570539f8d6fbdffc44d153464df3a7ed105411cb9852705ae15cf1b310396ffb855f9a08f6306ba13633be72f20ffc06814d63ff416f69502b6cc5ece10a78c6ba92164492428f0022c3664c9caa2f2a28d85b0abc42835d0ffaec447d25395581ecccf5a4f7c3f28ab3ec66bca24083321b05e3fe002f2a84db9432f4da9f46bdbcca2e7f80a457d9b90ac85398ae8396feefdaaf8883fde3e0bcd66f35bda6ba1a6b2c970064de68a497c4d03cfcd7d03297c196598c068ef5ea62ee0f15bd6f4f2b4819ebc7710b7e104240b58d5665ea8dac9b21c99f44b38af5f735197accf0668ab12604e6bb808940b58ef1d580b37cf06eff47996d4c58a74b2d8eeafa714767a0e819991dd8d70d66dd74477e1ed074ce491f5ee0c2ee34e85a3d1e732c6da93b514689c20dd03508fe40c1864fd93886a86c899a19c2d5bd83fd7a211243ed354358ea0bd7d8d5aa136a7dfca434b401285a69104e7c723dce4f62bd0b79f1300f9eb43ff787f56618bc870bfee666d34570b00d285de69847e9799f45b1739b3b8c0ad78f88d0bcb5d0db3ff3f427210312fd6548356bb49567565a169d6ce9108ac7a633456a7b2d128c135d537758b4ea73db318d89a6f0216651be8a4d8f9eb96fa718eb72d7d5e451b7dad614623db7e8d7a291361a1add1352e9588af20cbfe9307db2ebf4d539252e0cc8f4ab685e3e592407ae500c56f5311fefcbd7cacf891b738f5814f81e6d74a559dccb1f7c43b63c51cf3c50a5e2fab9239abc3ec174ce339b72616bc25968c8f843ff32716028de951e482ebb75670372c9ab54435c24ac7b8501d993aeaf24cdca526ef5e113d8369eff6690b18336ad1bbfd124af4a6394ca65d5ab5fc6ded70253b05a701131ba982ec61441e6a5f7dc974ee6b6f3cb9b4fe6845e7ac6f334f2e2f49bb7779d7c69eb258c9b6d56489669a01345c0cb94d215d3cf802eb52149bf7c7d9ab28287b28fa482a478e052f86f2cb77537b7a84"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000140)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000040)=0x2) ioctl$TIOCCONS(r4, 0x541d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f00000000c0)) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)=""/103) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000a00000005000100060000e3b3b5be04d772c920e81f9500050004000000000011000300686173683a69702c706f727400000000050005000a0000000900020073797a3100000000"], 0x4c}}, 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r10, &(0x7f0000000140)=""/87, 0x57) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r7, 0x80045500, &(0x7f0000000000)) 3.054667569s ago: executing program 0 (id=7708): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x8000) ppoll(&(0x7f0000000000)=[{r2, 0x4000}], 0x1, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0281, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9", 0x4e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e9967", 0x72}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001680)={0x0, @in6={{0xa, 0x4e20, 0xa, @local, 0x4}}, 0x2040000, 0x80000001, 0x9, 0x80000000, 0x2}, &(0x7f0000001740)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001780)={r6, 0x9}, 0x8) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r7) getsockopt$inet6_tcp_buf(r5, 0x6, 0x0, &(0x7f0000001080)=""/96, &(0x7f0000001840)=0x60) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)}, 0x10000) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000001400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000001640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@gettaction={0x58, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xac2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x58}}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 630.33003ms ago: executing program 2 (id=7728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d", 0x8c}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12e", 0x63}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 422.86236ms ago: executing program 2 (id=7730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc36", 0x9a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 338.665153ms ago: executing program 2 (id=7733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3cf20000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00400000000000001c00128009000100626f6e64000000000c00028008000a0001000000"], 0x3c}}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r1, 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x1, 0x12, r10, 0x0) write$binfmt_misc(r10, &(0x7f0000000b00), 0x91) vmsplice(r9, &(0x7f0000000540)=[{&(0x7f00000000c0)="cbea22d969", 0x5}], 0x1, 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r13, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="200026bd7000000000000000000708000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x12000000) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x1dc, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffe0}, {0xfff2}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfb, 0xe, 0x7, 0x0, 0x3, 0xfa, 0x8}}, {0x14, 0x2, [0x8, 0x40, 0x4, 0x2, 0x3, 0x2, 0x5, 0x6]}}, {{0x1c, 0x1, {0xfa, 0x34, 0x6, 0x9, 0x0, 0xae, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0x4d9]}}, {{0x1c, 0x1, {0x4, 0xb, 0x40e, 0x6, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0x7, 0xfffd, 0xffffffc3, 0x1, 0x9, 0x9a, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0xd, 0x6, 0x6, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x101, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x8, 0x6, 0x1000, 0x8001, 0x0, 0x3, 0x3, 0x8}}, {0x14, 0x2, [0x7, 0x4, 0x5, 0x2, 0x40, 0x9, 0x97b, 0x3]}}, {{0x1c, 0x1, {0x8, 0x6, 0x250, 0x8000, 0x1, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x7, 0x5, 0x8, 0x4, 0xfff7, 0x81, 0x4, 0x9, 0x7]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x997f, 0x0, 0x0, 0x3, 0x6, 0xe, 0x80}}}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0xf2, 0xabe1, 0xa9bc, 0x1, 0x7577, 0x2, 0x4}}, {0xc, 0x2, [0xff, 0x4, 0x9, 0x2]}}, {{0x1c, 0x1, {0x2, 0x1, 0x3c09, 0x1, 0x2, 0xe92, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40048d1}, 0x8040) 194.519742ms ago: executing program 2 (id=7737): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc36", 0x9a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 194.266919ms ago: executing program 3 (id=7738): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07ad25bd70000000000001"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb14a1119400020000000008000000000000000089bd0000000500006a4962af87ea74dc6e0bc5a2ccdd44a1219e31c3f166ca05f54b3e2e8d5f828d4aebe6768572d39f68230fa69407000000a015bb6bf5665e833c800326e6aece2c7c6c6cf5d6a9031e4b7337066925e8fcdbb8a88a6dd01ac6599e999117d708be6a00c105d0e1044844805ab3ded6b68897aa282004fe1ed18e4c9b8a948084e1e4652faac665ef52"], 0x0, 0x2a, 0x0, 0x1}, 0x28) 193.968115ms ago: executing program 3 (id=7739): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) writev(r0, 0x0, 0x0) 145.011765ms ago: executing program 3 (id=7740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x14}, {0xc000400000000001}], 0x1, 0x2}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0x48) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000100)='./file0\x00', r3, 0x4000, r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r6 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x20842, 0x71) write$P9_RLERRORu(r6, 0x0, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'veth1_vlan\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfff1, 0x8}, {0x5, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb82}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x407, 0x8, 0x7f, 0xd09d}, 0xa6, 0x1, 0x1bb6}}, @TCA_TBF_PTAB={0x404, 0x3, [0xe, 0x7, 0xa, 0x8000, 0xe, 0x5, 0xfffffffe, 0x860, 0x9, 0x7, 0x6, 0x0, 0x7, 0x48d4, 0x79306d00, 0x3, 0xc, 0x3ff, 0x4, 0x0, 0x8, 0x7, 0x1, 0xa, 0xd, 0xc, 0x2, 0xd, 0x8, 0x6, 0xca, 0x8, 0x8000, 0x3, 0x6, 0x7, 0x3, 0x1, 0x2, 0x800, 0x4, 0x1c40, 0x10, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x1f, 0x7, 0x2, 0x2, 0xfffffff7, 0xe2, 0x2, 0x5, 0xcaa, 0x1, 0x7fff, 0xd, 0x7, 0xf737, 0x2ed3, 0x10001, 0x0, 0xfffffffb, 0x200, 0x9, 0xfffff000, 0x5, 0x4, 0x80000001, 0xeed, 0xc, 0x9, 0x9e5, 0x7, 0x6, 0xc6, 0x80000000, 0x4, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x84, 0xfffffff7, 0x5, 0x7, 0x9, 0x76000000, 0x8, 0xf2aa417, 0x27, 0x6, 0x5c4, 0x4, 0x7c94, 0x100, 0x5, 0x4, 0x7f, 0x7, 0x2, 0x6, 0x5, 0x882c, 0xffff8001, 0x2f86, 0x9, 0x7, 0xf, 0x7, 0x8, 0xb, 0x2246, 0x0, 0xffffffff, 0x9, 0x308, 0x6, 0x9, 0x2, 0x6, 0xfffffffc, 0x101, 0x3ff, 0x739a44f0, 0x8, 0x0, 0x9, 0x6, 0xce53, 0x5, 0x200, 0x6, 0x0, 0x5, 0x4, 0xfffffa6c, 0x7, 0x3, 0xa0000000, 0xf, 0x4, 0xfffffffc, 0x9, 0x0, 0x3, 0x4dc, 0x0, 0x2, 0x2, 0x10001, 0x80000000, 0x1, 0x3, 0x17e5, 0x4, 0x3a80, 0x6, 0x7, 0x1000, 0xa, 0xfffffffd, 0xffffc7ec, 0xe, 0x7, 0x1, 0x6, 0x7f, 0xad4, 0x5, 0x800, 0x1000, 0x3, 0xc, 0xfffffff5, 0x6, 0x6, 0x2, 0x20000, 0x2, 0x9, 0x81, 0x80000000, 0x666, 0x400, 0x16b, 0x6, 0x6, 0x49, 0x72, 0x5, 0x5, 0x7fffffff, 0x9, 0xffffffff, 0x80, 0x924b, 0x1, 0x9e, 0x4, 0xbf9c, 0x6, 0x6, 0xd, 0x4, 0x3ff, 0x0, 0x1, 0x3, 0x80, 0x9, 0x6a, 0x3, 0x0, 0x9, 0x1, 0x3, 0x3, 0xce31, 0x69, 0x0, 0x0, 0xc, 0x100, 0x0, 0x221, 0x7, 0x7, 0x2, 0x4, 0x17, 0x97, 0x8, 0x10000, 0x2, 0x9, 0x4, 0xffffffb5, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8, 0x1000, 0x8, 0x3, 0x7, 0x9d, 0xffff, 0x80000000, 0x8]}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 144.785057ms ago: executing program 3 (id=7741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc36", 0x9a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 93.928965ms ago: executing program 2 (id=7742): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc36", 0x9a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.031838ms ago: executing program 3 (id=7743): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x610, 0x278, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x540, 0xffffffff, 0xffffffff, 0x540, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x278, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x5b, 0x1e, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x50}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0x8994, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'ip6erspan0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19a41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b72461200"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x670) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r5, r4, 0x0, 0x2000000000006) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x5, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r7}, 0x20) open_tree(r5, &(0x7f0000000680)='./file0\x00', 0x80801) 4.773557ms ago: executing program 4 (id=7744): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 4.352643ms ago: executing program 3 (id=7745): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000c80)={&(0x7f0000000600), 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x34, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x90a5a23bcebf6a51}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x42}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d6", 0x6f}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}, {&(0x7f0000000840)="67afc93e41b4b8a76fbd7c9ddf25217b833ce0ece2702e957bd402e2ce3b68f3251174da39d967660b2faf5936ca7141ef4f52ef2a228fcd5ff9ca4716e76a635ae3e185e3130b9326944a9332ee3d240691ba96282a", 0x56}], 0x5, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = socket(0x25, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010005bd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01030000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.966265ms ago: executing program 0 (id=7746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) 0s ago: executing program 2 (id=7747): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de", 0x9b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26", 0x6c}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 74179][T23708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.180847][T23708] CPU: 1 UID: 0 PID: 23708 Comm: syz.3.6986 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.180877][T23708] Tainted: [L]=SOFTLOCKUP [ 377.180886][T23708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.180897][T23708] Call Trace: [ 377.180912][T23708] [ 377.180921][T23708] dump_stack_lvl+0x100/0x190 [ 377.180961][T23708] should_fail_ex.cold+0x5/0xa [ 377.180986][T23708] _copy_to_user+0x32/0xd0 [ 377.181024][T23708] simple_read_from_buffer+0xcb/0x170 [ 377.181069][T23708] proc_fail_nth_read+0x1af/0x230 [ 377.181096][T23708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.181120][T23708] ? security_file_permission+0x76/0x210 [ 377.181143][T23708] ? rw_verify_area+0xce/0x6d0 [ 377.181167][T23708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.181192][T23708] vfs_read+0x1e4/0xb40 [ 377.181219][T23708] ? __pfx_vfs_read+0x10/0x10 [ 377.181243][T23708] ? rcu_is_watching+0x12/0xc0 [ 377.181272][T23708] ? __fget_files+0x21f/0x3d0 [ 377.181293][T23708] ksys_read+0x12a/0x250 [ 377.181318][T23708] ? __pfx_ksys_read+0x10/0x10 [ 377.181344][T23708] ? rcu_is_watching+0x12/0xc0 [ 377.181371][T23708] do_syscall_64+0x115/0x870 [ 377.181406][T23708] ? clear_bhb_loop+0x40/0x90 [ 377.181427][T23708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.181445][T23708] RIP: 0033:0x7fabbaf5d68e [ 377.181461][T23708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.181478][T23708] RSP: 002b:00007fabbbe0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.181497][T23708] RAX: ffffffffffffffda RBX: 00007fabbbe0f6c0 RCX: 00007fabbaf5d68e [ 377.181511][T23708] RDX: 000000000000000f RSI: 00007fabbbe0f0a0 RDI: 0000000000000004 [ 377.181523][T23708] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.181536][T23708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.181549][T23708] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 377.181568][T23708] [ 377.340902][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6989'. [ 377.358889][ T42] audit: type=1400 audit(1782211813.911:1561): avc: denied { write } for pid=23711 comm="syz.3.6989" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.474167][T23721] FAULT_INJECTION: forcing a failure. [ 377.474167][T23721] name failslab, interval 1, probability 0, space 0, times 0 [ 377.477980][T23721] CPU: 2 UID: 0 PID: 23721 Comm: syz.2.6994 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.478008][T23721] Tainted: [L]=SOFTLOCKUP [ 377.478014][T23721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.478020][T23721] Call Trace: [ 377.478025][T23721] [ 377.478029][T23721] dump_stack_lvl+0x100/0x190 [ 377.478062][T23721] should_fail_ex.cold+0x5/0xa [ 377.478077][T23721] should_failslab+0xc2/0x120 [ 377.478091][T23721] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 377.478104][T23721] ? __alloc_skb+0x5b7/0x710 [ 377.478116][T23721] ? __alloc_skb+0x140/0x710 [ 377.478128][T23721] __alloc_skb+0x140/0x710 [ 377.478138][T23721] ? __alloc_skb+0x5b7/0x710 [ 377.478149][T23721] ? __pfx___alloc_skb+0x10/0x10 [ 377.478160][T23721] ? hci_sock_sendmsg+0x55b/0x2620 [ 377.478170][T23721] ? rcu_is_watching+0x12/0xc0 [ 377.478187][T23721] hci_sock_sendmsg+0x1b01/0x2620 [ 377.478198][T23721] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 377.478207][T23721] ? __file_has_perm+0x336/0x460 [ 377.478226][T23721] sock_write_iter+0x53a/0x5b0 [ 377.478240][T23721] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 377.478250][T23721] ? __pfx_sock_write_iter+0x10/0x10 [ 377.478267][T23721] ? bpf_lsm_file_permission+0x9/0x10 [ 377.478283][T23721] ? security_file_permission+0x76/0x210 [ 377.478296][T23721] ? rw_verify_area+0xce/0x6d0 [ 377.478310][T23721] vfs_write+0x6ac/0x1050 [ 377.478325][T23721] ? __pfx_sock_write_iter+0x10/0x10 [ 377.478340][T23721] ? __pfx_vfs_write+0x10/0x10 [ 377.478355][T23721] ? lock_release+0x24d/0x310 [ 377.478370][T23721] ksys_write+0x1f8/0x250 [ 377.478385][T23721] ? __pfx_ksys_write+0x10/0x10 [ 377.478401][T23721] ? rcu_is_watching+0x12/0xc0 [ 377.478417][T23721] do_syscall_64+0x115/0x870 [ 377.478433][T23721] ? clear_bhb_loop+0x40/0x90 [ 377.478445][T23721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.478456][T23721] RIP: 0033:0x7f4d5a79ce59 [ 377.478465][T23721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.478475][T23721] RSP: 002b:00007f4d589f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.478486][T23721] RAX: ffffffffffffffda RBX: 00007f4d5aa15fa0 RCX: 00007f4d5a79ce59 [ 377.478493][T23721] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 377.478500][T23721] RBP: 00007f4d589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.478506][T23721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.478512][T23721] R13: 00007f4d5aa16038 R14: 00007f4d5aa15fa0 R15: 00007ffec75e71d8 [ 377.478527][T23721] [ 377.667610][ T42] audit: type=1400 audit(1782211814.221:1562): avc: denied { name_bind } for pid=23733 comm="syz.0.6999" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 377.689439][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7000'. [ 377.710149][T23742] FAULT_INJECTION: forcing a failure. [ 377.710149][T23742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.715398][T23742] CPU: 1 UID: 0 PID: 23742 Comm: syz.0.7001 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.715424][T23742] Tainted: [L]=SOFTLOCKUP [ 377.715432][T23742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.715444][T23742] Call Trace: [ 377.715450][T23742] [ 377.715456][T23742] dump_stack_lvl+0x100/0x190 [ 377.715484][T23742] should_fail_ex.cold+0x5/0xa [ 377.715509][T23742] _copy_from_iter+0x1f4/0x1690 [ 377.715537][T23742] ? __asan_memset+0x23/0x50 [ 377.715555][T23742] ? __pfx__copy_from_iter+0x10/0x10 [ 377.715581][T23742] ? __pfx___alloc_skb+0x10/0x10 [ 377.715601][T23742] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 377.715634][T23742] netlink_sendmsg+0x808/0xda0 [ 377.715663][T23742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.715694][T23742] ____sys_sendmsg+0xa4d/0xbe0 [ 377.715718][T23742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.715745][T23742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.715773][T23742] ? kstrtouint_from_user+0x13c/0x1d0 [ 377.715796][T23742] ___sys_sendmsg+0x190/0x1e0 [ 377.715823][T23742] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.715848][T23742] ? get_pid_task+0x106/0x250 [ 377.715879][T23742] ? rcu_is_watching+0x12/0xc0 [ 377.715912][T23742] __sys_sendmsg+0x160/0x210 [ 377.715935][T23742] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.715965][T23742] ? rcu_is_watching+0x12/0xc0 [ 377.715992][T23742] do_syscall_64+0x115/0x870 [ 377.716030][T23742] ? clear_bhb_loop+0x40/0x90 [ 377.716053][T23742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.716072][T23742] RIP: 0033:0x7f337999ce59 [ 377.716087][T23742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.716111][T23742] RSP: 002b:00007f337a8b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.716131][T23742] RAX: ffffffffffffffda RBX: 00007f3379c15fa0 RCX: 00007f337999ce59 [ 377.716150][T23742] RDX: 0000000020040054 RSI: 0000200000001a40 RDI: 0000000000000004 [ 377.716163][T23742] RBP: 00007f337a8b3090 R08: 0000000000000000 R09: 0000000000000000 [ 377.716174][T23742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.716185][T23742] R13: 00007f3379c16038 R14: 00007f3379c15fa0 R15: 00007ffe1fefb238 [ 377.716202][T23742] [ 377.818409][ T42] audit: type=1400 audit(1782211814.361:1563): avc: denied { write } for pid=23739 comm="syz.4.7000" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.863004][ T42] audit: type=1400 audit(1782211814.411:1564): avc: denied { create } for pid=23746 comm="syz.2.7003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 377.865784][T23749] FAULT_INJECTION: forcing a failure. [ 377.865784][T23749] name failslab, interval 1, probability 0, space 0, times 0 [ 377.875621][T23749] CPU: 1 UID: 0 PID: 23749 Comm: syz.2.7003 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.875649][T23749] Tainted: [L]=SOFTLOCKUP [ 377.875656][T23749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.875668][T23749] Call Trace: [ 377.875674][T23749] [ 377.875682][T23749] dump_stack_lvl+0x100/0x190 [ 377.875710][T23749] should_fail_ex.cold+0x5/0xa [ 377.875733][T23749] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 377.875753][T23749] should_failslab+0xc2/0x120 [ 377.875777][T23749] kmem_cache_alloc_noprof+0x91/0x6a0 [ 377.875798][T23749] ? skb_clone+0x190/0x400 [ 377.875821][T23749] skb_clone+0x190/0x400 [ 377.875842][T23749] netlink_deliver_tap+0xaed/0xcc0 [ 377.875872][T23749] netlink_unicast+0x62b/0x850 [ 377.875899][T23749] ? __pfx_netlink_unicast+0x10/0x10 [ 377.875929][T23749] netlink_sendmsg+0x8b0/0xda0 [ 377.875958][T23749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.875994][T23749] ____sys_sendmsg+0xa4d/0xbe0 [ 377.876019][T23749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.876046][T23749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.876073][T23749] ? kstrtouint_from_user+0x13c/0x1d0 [ 377.876098][T23749] ___sys_sendmsg+0x190/0x1e0 [ 377.876125][T23749] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.876153][T23749] ? get_pid_task+0x106/0x250 [ 377.876183][T23749] ? rcu_is_watching+0x12/0xc0 [ 377.876218][T23749] __sys_sendmsg+0x160/0x210 [ 377.876238][T23749] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.876264][T23749] ? rcu_is_watching+0x12/0xc0 [ 377.876304][T23749] do_syscall_64+0x115/0x870 [ 377.876332][T23749] ? clear_bhb_loop+0x40/0x90 [ 377.876354][T23749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.876373][T23749] RIP: 0033:0x7f4d5a79ce59 [ 377.876389][T23749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.876407][T23749] RSP: 002b:00007f4d589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.876428][T23749] RAX: ffffffffffffffda RBX: 00007f4d5aa15fa0 RCX: 00007f4d5a79ce59 [ 377.876441][T23749] RDX: 0000000000048000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 377.876453][T23749] RBP: 00007f4d589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.876465][T23749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.876476][T23749] R13: 00007f4d5aa16038 R14: 00007f4d5aa15fa0 R15: 00007ffec75e71d8 [ 377.876494][T23749] [ 377.878153][ T42] audit: type=1400 audit(1782211814.411:1565): avc: denied { ioctl } for pid=23746 comm="syz.2.7003" path="socket:[163367]" dev="sockfs" ino=163367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 377.882426][T23749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7003'. [ 378.096931][T21948] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 378.101577][T23757] syzkaller0: entered promiscuous mode [ 378.103831][T23757] syzkaller0: entered allmulticast mode [ 378.226725][ T42] audit: type=1326 audit(1782211814.781:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23762 comm="syz.4.7004" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8959ce59 code=0x0 [ 378.267957][T21948] usb 5-1: config 0 has no interfaces? [ 378.269705][T21948] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.272585][T21948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.277264][T21948] usb 5-1: config 0 descriptor?? [ 378.349878][T23772] FAULT_INJECTION: forcing a failure. [ 378.349878][T23772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.354452][T23772] CPU: 0 UID: 0 PID: 23772 Comm: syz.3.7011 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.354471][T23772] Tainted: [L]=SOFTLOCKUP [ 378.354475][T23772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.354482][T23772] Call Trace: [ 378.354486][T23772] [ 378.354491][T23772] dump_stack_lvl+0x100/0x190 [ 378.354507][T23772] should_fail_ex.cold+0x5/0xa [ 378.354522][T23772] _copy_from_iter+0x1f4/0x1690 [ 378.354540][T23772] ? __asan_memset+0x23/0x50 [ 378.354550][T23772] ? __pfx__copy_from_iter+0x10/0x10 [ 378.354566][T23772] ? __pfx___alloc_skb+0x10/0x10 [ 378.354582][T23772] ? netlink_autobind.isra.0+0x160/0x370 [ 378.354601][T23772] netlink_sendmsg+0x808/0xda0 [ 378.354618][T23772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.354636][T23772] ____sys_sendmsg+0xa4d/0xbe0 [ 378.354652][T23772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.354668][T23772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.354684][T23772] ? kstrtouint_from_user+0x13c/0x1d0 [ 378.354698][T23772] ___sys_sendmsg+0x190/0x1e0 [ 378.354714][T23772] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.354730][T23772] ? get_pid_task+0x106/0x250 [ 378.354748][T23772] ? rcu_is_watching+0x12/0xc0 [ 378.354769][T23772] __sys_sendmsg+0x160/0x210 [ 378.354781][T23772] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.354795][T23772] ? __x64_sys_set_robust_list+0x6a/0xe0 [ 378.354811][T23772] ? rcu_is_watching+0x12/0xc0 [ 378.354827][T23772] do_syscall_64+0x115/0x870 [ 378.354843][T23772] ? clear_bhb_loop+0x40/0x90 [ 378.354855][T23772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.354866][T23772] RIP: 0033:0x7fabbaf9ce59 [ 378.354875][T23772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.354886][T23772] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.354897][T23772] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 378.354904][T23772] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 378.354910][T23772] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.354917][T23772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.354923][T23772] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 378.354933][T23772] [ 378.534942][T23748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.539135][T23748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.571770][T21948] usb 5-1: USB disconnect, device number 37 [ 378.684778][T23787] team_slave_1: entered promiscuous mode [ 378.688171][T23787] team_slave_1: entered allmulticast mode [ 378.801715][T23795] syzkaller0: entered promiscuous mode [ 378.803491][T23795] syzkaller0: entered allmulticast mode [ 379.062354][T23809] FAULT_INJECTION: forcing a failure. [ 379.062354][T23809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.067656][T23809] CPU: 3 UID: 0 PID: 23809 Comm: syz.3.7026 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.067681][T23809] Tainted: [L]=SOFTLOCKUP [ 379.067686][T23809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.067696][T23809] Call Trace: [ 379.067701][T23809] [ 379.067707][T23809] dump_stack_lvl+0x100/0x190 [ 379.067732][T23809] should_fail_ex.cold+0x5/0xa [ 379.067751][T23809] _copy_from_iter+0x1f4/0x1690 [ 379.067775][T23809] ? __asan_memset+0x23/0x50 [ 379.067790][T23809] ? __pfx__copy_from_iter+0x10/0x10 [ 379.067812][T23809] ? __pfx___alloc_skb+0x10/0x10 [ 379.067828][T23809] ? netlink_autobind.isra.0+0x160/0x370 [ 379.067854][T23809] netlink_sendmsg+0x808/0xda0 [ 379.067877][T23809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.067902][T23809] ____sys_sendmsg+0xa4d/0xbe0 [ 379.067923][T23809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.067945][T23809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.067968][T23809] ? kstrtouint_from_user+0x13c/0x1d0 [ 379.067987][T23809] ___sys_sendmsg+0x190/0x1e0 [ 379.068010][T23809] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.068032][T23809] ? get_pid_task+0x106/0x250 [ 379.068057][T23809] ? rcu_is_watching+0x12/0xc0 [ 379.068086][T23809] __sys_sendmsg+0x160/0x210 [ 379.068103][T23809] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.068123][T23809] ? rcu_is_watching+0x12/0xc0 [ 379.068146][T23809] do_syscall_64+0x115/0x870 [ 379.068168][T23809] ? clear_bhb_loop+0x40/0x90 [ 379.068186][T23809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.068201][T23809] RIP: 0033:0x7fabbaf9ce59 [ 379.068213][T23809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.068228][T23809] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.068244][T23809] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 379.068253][T23809] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 379.068263][T23809] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 379.068272][T23809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.068281][T23809] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 379.068296][T23809] [ 379.088716][T23812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7027'. [ 379.205915][T23826] syzkaller0: entered promiscuous mode [ 379.208173][T23826] syzkaller0: entered allmulticast mode [ 379.213219][T23822] syzkaller0: entered promiscuous mode [ 379.214961][T23822] syzkaller0: entered allmulticast mode [ 379.443675][T23840] comedi: valid board names for 8255 driver are: [ 379.445903][T23840] 8255 [ 379.446925][T23840] comedi: valid board names for vmk80xx driver are: [ 379.448984][T23840] vmk80xx [ 379.450077][T23840] comedi: valid board names for usbduxsigma driver are: [ 379.452396][T23840] usbduxsigma [ 379.453623][T23840] comedi: valid board names for usbduxfast driver are: [ 379.455996][T23840] usbduxfast [ 379.457958][T23840] comedi: valid board names for usbdux driver are: [ 379.460175][T23840] usbdux [ 379.461210][T23840] comedi: valid board names for ni6501 driver are: [ 379.463331][T23840] ni6501 [ 379.464316][T23840] comedi: valid board names for dt9812 driver are: [ 379.466543][T23840] dt9812 [ 379.467572][T23840] comedi: valid board names for ni_labpc_cs driver are: [ 379.469752][T23840] ni_labpc_cs [ 379.470889][T23840] comedi: valid board names for ni_daq_700 driver are: [ 379.472980][T23840] ni_daq_700 [ 379.474032][T23840] comedi: valid board names for labpc_pci driver are: [ 379.476186][T23840] labpc_pci [ 379.477321][T23840] comedi: valid board names for adl_pci9118 driver are: [ 379.480083][T23840] pci9118dg [ 379.481388][T23840] pci9118hg [ 379.482474][T23840] pci9118hr [ 379.484669][T23840] comedi: valid board names for 8255_pci driver are: [ 379.486927][T23840] 8255_pci [ 379.488052][T23840] comedi: valid board names for s526 driver are: [ 379.490234][T23840] s526 [ 379.491206][T23840] comedi: valid board names for multiq3 driver are: [ 379.493351][T23840] multiq3 [ 379.494382][T23840] comedi: valid board names for pcmuio driver are: [ 379.496681][T23840] pcmuio48 [ 379.497747][T23840] pcmuio96 [ 379.498863][T23840] comedi: valid board names for pcmmio driver are: [ 379.501051][T23840] pcmmio [ 379.502084][T23840] comedi: valid board names for pcmda12 driver are: [ 379.504257][T23840] pcmda12 [ 379.505330][T23840] comedi: valid board names for pcmad driver are: [ 379.507485][T23840] pcmad12 [ 379.508456][T23840] pcmad16 [ 379.509473][T23840] comedi: valid board names for ni_labpc driver are: [ 379.511622][T23840] lab-pc-1200 [ 379.512745][T23840] lab-pc-1200ai [ 379.514042][T23840] lab-pc+ [ 379.515139][T23840] comedi: valid board names for atmio16 driver are: [ 379.517653][T23840] atmio16 [ 379.518808][T23840] atmio16d [ 379.519759][T23840] comedi: valid board names for ni_at_ao driver are: [ 379.521851][T23840] at-ao-6 [ 379.522863][T23840] at-ao-10 [ 379.523843][T23840] comedi: valid board names for ni_at_a2150 driver are: [ 379.526079][T23840] ni_at_a2150 [ 379.527301][T23840] comedi: valid board names for adq12b driver are: [ 379.529892][T23840] adq12b [ 379.531060][T23840] comedi: valid board names for mpc624 driver are: [ 379.533098][T23840] mpc624 [ 379.533993][T23840] comedi: valid board names for c6xdigio driver are: [ 379.536075][T23840] c6xdigio [ 379.537256][T23840] comedi: valid board names for aio_iiro_16 driver are: [ 379.539492][T23840] aio_iiro_16 [ 379.540600][T23840] comedi: valid board names for aio_aio12_8 driver are: [ 379.542837][T23840] aio_aio12_8 [ 379.543930][T23840] aio_ai12_8 [ 379.545018][T23840] aio_ao12_4 [ 379.546157][T23840] comedi: valid board names for fl512 driver are: [ 379.548318][T23840] fl512 [ 379.549280][T23840] comedi: valid board names for dmm32at driver are: [ 379.551296][T23840] dmm32at [ 379.552291][T23840] comedi: valid board names for dt282x driver are: [ 379.554295][T23840] dt2821 [ 379.555214][T23840] dt2821-f [ 379.556254][T23840] dt2821-g [ 379.557302][T23840] dt2823 [ 379.558218][T23840] dt2824-pgh [ 379.559440][T23840] dt2824-pgl [ 379.560488][T23840] dt2825 [ 379.561413][T23840] dt2827 [ 379.562374][T23840] dt2828 [ 379.563314][T23840] dt2829 [ 379.564223][T23840] dt21-ez [ 379.565175][T23840] dt23-ez [ 379.566240][T23840] dt24-ez [ 379.567405][T23840] dt24-ez-pgl [ 379.568495][T23840] comedi: valid board names for dt2817 driver are: [ 379.570741][T23840] dt2817 [ 379.571702][T23840] comedi: valid board names for dt2815 driver are: [ 379.573941][T23840] dt2815 [ 379.574901][T23840] comedi: valid board names for dt2814 driver are: [ 379.577140][T23840] dt2814 [ 379.578102][T23840] comedi: valid board names for dt2811 driver are: [ 379.580273][T23840] dt2811-pgh [ 379.581369][T23840] dt2811-pgl [ 379.582479][T23840] comedi: valid board names for dt2801 driver are: [ 379.584504][T23840] dt2801 [ 379.585419][T23840] comedi: valid board names for das6402 driver are: [ 379.587701][T23840] das6402-12 [ 379.588740][T23840] das6402-16 [ 379.589852][T23840] comedi: valid board names for das1800 driver are: [ 379.591934][T23840] das-1701st [ 379.593106][T23840] das-1701st-da [ 379.594473][T23840] das-1702st [ 379.595871][T23840] das-1702st-da [ 379.597440][T23840] das-1702hr [ 379.598842][T23840] das-1702hr-da [ 379.600317][T23840] das-1701ao [ 379.601654][T23840] das-1702ao [ 379.602992][T23840] das-1801st [ 379.604365][T23840] das-1801st-da [ 379.605786][T23840] das-1802st [ 379.607338][T23840] das-1802st-da [ 379.608869][T23840] das-1802hr [ 379.610249][T23840] das-1802hr-da [ 379.611721][T23840] das-1801hc [ 379.613156][T23840] das-1802hc [ 379.614603][T23840] das-1801ao [ 379.616022][T23840] das-1802ao [ 379.617537][T23840] comedi: valid board names for das800 driver are: [ 379.620284][T23840] das-800 [ 379.621586][T23840] cio-das800 [ 379.623049][T23840] das-801 [ 379.624319][T23840] cio-das801 [ 379.625724][T23840] das-802 [ 379.627122][T23840] cio-das802 [ 379.628438][T23840] cio-das802/16 [ 379.629845][T23840] comedi: valid board names for isa-das08 driver are: [ 379.632609][T23840] isa-das08 [ 379.633981][T23840] das08-pgm [ 379.635361][T23840] das08-pgh [ 379.636768][T23840] das08-pgl [ 379.638096][T23840] das08-aoh [ 379.639503][T23840] das08-aol [ 379.640848][T23840] das08-aom [ 379.642141][T23840] das08/jr-ao [ 379.643495][T23840] das08jr-16-ao [ 379.644915][T23840] pc104-das08 [ 379.646775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.647977][T23840] das08jr/16 [ 379.653643][T23840] comedi: valid board names for das16m1 driver are: [ 379.656479][T23840] das16m1 [ 379.658334][T23840] comedi: valid board names for dac02 driver are: [ 379.661190][T23840] dac02 [ 379.662400][T23840] comedi: valid board names for rti802 driver are: [ 379.665104][T23840] rti802 [ 379.666541][T23840] comedi: valid board names for rti800 driver are: [ 379.668494][T23840] rti800 [ 379.669393][T23840] rti815 [ 379.670434][T23840] comedi: valid board names for pcm3724 driver are: [ 379.672431][T23840] pcm3724 [ 379.673378][T23840] comedi: valid board names for pcl818 driver are: [ 379.675395][T23840] pcl818l [ 379.676840][T23840] pcl818h [ 379.678188][T23840] pcl818hd [ 379.679718][T23840] pcl818hg [ 379.681114][T23840] pcl818 [ 379.682489][T23840] pcl718 [ 379.683743][T23840] pcm3718 [ 379.685052][T23840] comedi: valid board names for pcl816 driver are: [ 379.687904][T23840] pcl816 [ 379.689198][T23840] pcl814b [ 379.690603][T23840] comedi: valid board names for pcl812 driver are: [ 379.693322][T23840] pcl812 [ 379.694598][T23840] pcl812pg [ 379.695940][T23840] acl8112pg [ 379.697413][T23840] acl8112dg [ 379.698975][T23840] acl8112hg [ 379.700525][T23840] a821pgl [ 379.701869][T23840] a821pglnda [ 379.703281][T23840] a821pgh [ 379.704563][T23840] a822pgl [ 379.705854][T23840] a822pgh [ 379.707237][T23840] a823pgl [ 379.708351][T23840] a823pgh [ 379.709625][T23840] pcl813 [ 379.710893][T23840] pcl813b [ 379.712186][T23840] acl8113 [ 379.713445][T23840] iso813 [ 379.714657][T23840] acl8216 [ 379.716024][T23840] a826pg [ 379.717454][T23840] comedi: valid board names for pcl730 driver are: [ 379.720152][T23840] pcl730 [ 379.721628][T23840] iso730 [ 379.722944][T23840] acl7130 [ 379.724292][T23840] pcm3730 [ 379.725647][T23840] pcl725 [ 379.727087][T23840] p8r8dio [ 379.728571][T23840] acl7225b [ 379.730146][T23840] p16r16dio [ 379.731604][T23840] pcl733 [ 379.732823][T23840] pcl734 [ 379.734079][T23840] opmm-1616-xt [ 379.735593][T23840] pearl-mm-p [ 379.737135][T23840] ir104-pbf [ 379.738609][T23840] comedi: valid board names for pcl726 driver are: [ 379.741317][T23840] pcl726 [ 379.742578][T23840] pcl727 [ 379.743477][T23854] xt_ecn: cannot match TCP bits for non-tcp packets [ 379.743818][T23840] pcl728 [ 379.743827][T23840] acl6126 [ 379.743835][T23840] acl6128 [ 379.743842][T23840] comedi: valid board names for pcl724 driver are: [ 379.743852][T23840] pcl724 [ 379.743859][T23840] pcl722 [ 379.743867][T23840] pcl731 [ 379.743874][T23840] acl7122 [ 379.758077][T23840] acl7124 [ 379.759466][T23840] pet48dio [ 379.760892][T23840] pcmio48 [ 379.762268][T23840] onyx-mm-dio [ 379.763761][T23840] comedi: valid board names for pcl711 driver are: [ 379.766824][T23840] pcl711 [ 379.768177][T23840] pcl711b [ 379.769589][T23840] acl8112hg [ 379.771030][T23840] acl8112dg [ 379.772374][T23840] comedi: valid board names for amplc_pc263 driver are: [ 379.775378][T23840] pc263 [ 379.776705][T23840] comedi: valid board names for amplc_pc236 driver are: [ 379.779824][T23840] pc36at [ 379.781147][T23840] comedi: valid board names for amplc_dio200 driver are: [ 379.784097][T23840] pc212e [ 379.785408][T23840] pc214e [ 379.786862][T23840] pc215e [ 379.788165][T23840] pc218e [ 379.789553][T23840] pc272e [ 379.790869][T23840] comedi: valid board names for comedi_parport driver are: [ 379.793915][T23840] comedi_parport [ 379.795467][T23840] comedi: valid board names for comedi_test driver are: [ 379.798398][T23840] comedi_test [ 379.799986][T23840] comedi: valid board names for comedi_bond driver are: [ 379.802824][T23840] comedi_bond [ 380.036638][T23873] overlay: Bad value for 'workdir' [ 380.252674][T23884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7055'. [ 380.255918][T23884] netlink: 'syz.2.7055': attribute type 1 has an invalid length. [ 380.259486][T23884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7055'. [ 380.266557][ T5893] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 380.307698][T23890] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.427433][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 380.427444][ T42] audit: type=1400 audit(1782211816.981:1571): avc: denied { getopt } for pid=23895 comm="syz.2.7059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 380.447632][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.456474][ T5893] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.464075][ T5893] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 380.468095][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.471463][ T5893] usb 8-1: Product: syz [ 380.473059][ T5893] usb 8-1: Manufacturer: syz [ 380.474962][ T5893] usb 8-1: SerialNumber: syz [ 380.481812][ T5893] usb 8-1: config 0 descriptor?? [ 380.509516][T23908] /dev/kvm: Can't lookup blockdev [ 380.516915][T23912] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 380.645512][T23914] syzkaller0: entered promiscuous mode [ 380.647860][T23914] syzkaller0: entered allmulticast mode [ 380.656479][T23914] tipc: Enabled bearer , priority 0 [ 380.663509][T23913] tipc: Resetting bearer [ 380.669665][T23913] tipc: Disabling bearer [ 380.791138][ T42] audit: type=1326 audit(1782211817.341:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.2.7066" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f4d5a79ce59 code=0x0 [ 381.022548][T23927] netlink: 'syz.0.7068': attribute type 1 has an invalid length. [ 381.034384][T23927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.072866][T23927] dummy0: left promiscuous mode [ 381.079837][T23927] netlink: 'syz.0.7068': attribute type 10 has an invalid length. [ 381.083323][T23927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7068'. [ 381.087481][T23927] dummy0: entered promiscuous mode [ 381.325769][ T42] audit: type=1400 audit(1782211817.871:1573): avc: denied { accept } for pid=23948 comm="syz.0.7071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 381.332799][ T9608] Bluetooth: hci2: Frame reassembly failed (-84) [ 381.334937][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7071'. [ 381.338281][T23949] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7071'. [ 381.342026][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7071'. [ 381.345708][T23949] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7071'. [ 381.348843][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7071'. [ 381.353584][T23949] Bluetooth: hci2: Frame reassembly failed (-84) [ 382.053403][T23966] TCP: TCP_TX_DELAY enabled [ 382.060943][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7077'. [ 382.094593][ T42] audit: type=1326 audit(1782211818.641:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23967 comm="syz.4.7078" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b8959ce59 code=0x0 [ 383.112736][ T5893] usb 8-1: USB disconnect, device number 41 [ 383.151566][T23982] syzkaller0: entered promiscuous mode [ 383.154057][T23982] syzkaller0: entered allmulticast mode [ 383.163616][T23983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7084'. [ 383.276433][ T6099] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 383.344838][T23993] syzkaller0: entered promiscuous mode [ 383.347039][T23993] syzkaller0: entered allmulticast mode [ 383.406548][ T5746] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 383.407155][ T62] Bluetooth: hci2: command 0xfc11 tx timeout [ 383.436404][ T6099] usb 7-1: Using ep0 maxpacket: 8 [ 383.439321][ T6099] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.443073][ T6099] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.447073][ T6099] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.450800][ T6099] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.455406][ T6099] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.459236][ T6099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.466562][T23996] syzkaller0: entered promiscuous mode [ 383.468336][T23996] syzkaller0: entered allmulticast mode [ 383.488694][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.496524][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.505365][T23999] FAULT_INJECTION: forcing a failure. [ 383.505365][T23999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.510972][T23999] CPU: 1 UID: 0 PID: 23999 Comm: syz.4.7090 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.510999][T23999] Tainted: [L]=SOFTLOCKUP [ 383.511008][T23999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 383.511018][T23999] Call Trace: [ 383.511025][T23999] [ 383.511032][T23999] dump_stack_lvl+0x100/0x190 [ 383.511060][T23999] should_fail_ex.cold+0x5/0xa [ 383.511083][T23999] _copy_to_user+0x32/0xd0 [ 383.511111][T23999] simple_read_from_buffer+0xcb/0x170 [ 383.511143][T23999] proc_fail_nth_read+0x1af/0x230 [ 383.511168][T23999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.511193][T23999] ? security_file_permission+0x76/0x210 [ 383.511216][T23999] ? rw_verify_area+0xce/0x6d0 [ 383.511240][T23999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.511264][T23999] vfs_read+0x1e4/0xb40 [ 383.511290][T23999] ? __pfx_vfs_read+0x10/0x10 [ 383.511313][T23999] ? rcu_is_watching+0x12/0xc0 [ 383.511342][T23999] ? __fget_files+0x21f/0x3d0 [ 383.511363][T23999] ksys_read+0x12a/0x250 [ 383.511388][T23999] ? __pfx_ksys_read+0x10/0x10 [ 383.511421][T23999] ? rcu_is_watching+0x12/0xc0 [ 383.511447][T23999] do_syscall_64+0x115/0x870 [ 383.511475][T23999] ? clear_bhb_loop+0x40/0x90 [ 383.511496][T23999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.511515][T23999] RIP: 0033:0x7f4b8955d68e [ 383.511531][T23999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.511549][T23999] RSP: 002b:00007f4b8a378fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.511568][T23999] RAX: ffffffffffffffda RBX: 00007f4b8a3796c0 RCX: 00007f4b8955d68e [ 383.511581][T23999] RDX: 000000000000000f RSI: 00007f4b8a3790a0 RDI: 0000000000000005 [ 383.511592][T23999] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 383.511604][T23999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.511615][T23999] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 383.511633][T23999] [ 383.683250][ T6099] usb 7-1: GET_CAPABILITIES returned 0 [ 383.687868][ T6099] usbtmc 7-1:16.0: can't read capabilities [ 383.794821][ T42] audit: type=1400 audit(1782211820.341:1575): avc: denied { write } for pid=24016 comm="syz.3.7098" name="/" dev="ocfs2_dlmfs" ino=169612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.794823][T24017] (syz.3.7098,24017,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 383.808207][ T42] audit: type=1400 audit(1782211820.361:1576): avc: denied { read } for pid=24018 comm="syz.4.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.858762][T24025] syzkaller0: entered promiscuous mode [ 383.861192][T24025] syzkaller0: entered allmulticast mode [ 383.950754][T24038] Bluetooth: MGMT ver 1.23 [ 384.232217][ T42] audit: type=1400 audit(1782211820.781:1577): avc: denied { ioctl } for pid=24054 comm="syz.0.7114" path="socket:[171332]" dev="sockfs" ino=171332 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 384.354181][T24060] syzkaller0: entered promiscuous mode [ 384.355953][T24060] syzkaller0: entered allmulticast mode [ 384.532283][T24069] FAULT_INJECTION: forcing a failure. [ 384.532283][T24069] name failslab, interval 1, probability 0, space 0, times 0 [ 384.536176][T24069] CPU: 1 UID: 0 PID: 24069 Comm: syz.0.7120 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.536194][T24069] Tainted: [L]=SOFTLOCKUP [ 384.536199][T24069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.536206][T24069] Call Trace: [ 384.536210][T24069] [ 384.536214][T24069] dump_stack_lvl+0x100/0x190 [ 384.536231][T24069] should_fail_ex.cold+0x5/0xa [ 384.536245][T24069] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 384.536262][T24069] should_failslab+0xc2/0x120 [ 384.536288][T24069] __kmalloc_cache_noprof+0x91/0x6c0 [ 384.536306][T24069] ? sctp_auth_shkey_create+0x9e/0x210 [ 384.536319][T24069] sctp_auth_shkey_create+0x9e/0x210 [ 384.536332][T24069] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 384.536346][T24069] sctp_association_new+0x19ab/0x2990 [ 384.536362][T24069] sctp_connect_new_asoc+0x1a8/0x770 [ 384.536378][T24069] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 384.536393][T24069] ? selinux_sctp_bind_connect+0x112/0x2a0 [ 384.536413][T24069] sctp_sendmsg+0x1743/0x22e0 [ 384.536429][T24069] ? __pfx_sctp_sendmsg+0x10/0x10 [ 384.536445][T24069] ? __pfx_sock_has_perm+0x10/0x10 [ 384.536465][T24069] ? __pfx_sctp_sendmsg+0x10/0x10 [ 384.536480][T24069] inet_sendmsg+0x11c/0x140 [ 384.536492][T24069] __sys_sendto+0x453/0x4e0 [ 384.536503][T24069] ? __pfx_inet_sendmsg+0x10/0x10 [ 384.536515][T24069] ? __pfx___sys_sendto+0x10/0x10 [ 384.536528][T24069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.536547][T24069] ? ksys_write+0x1ac/0x250 [ 384.536563][T24069] ? __pfx_ksys_write+0x10/0x10 [ 384.536579][T24069] __x64_sys_sendto+0xe0/0x1c0 [ 384.536594][T24069] ? trace_irq_enable.constprop.0+0x122/0x160 [ 384.536610][T24069] do_syscall_64+0x115/0x870 [ 384.536626][T24069] ? clear_bhb_loop+0x40/0x90 [ 384.536639][T24069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.536650][T24069] RIP: 0033:0x7f337999ce59 [ 384.536659][T24069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.536670][T24069] RSP: 002b:00007f337a8b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 384.536681][T24069] RAX: ffffffffffffffda RBX: 00007f3379c15fa0 RCX: 00007f337999ce59 [ 384.536689][T24069] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000003 [ 384.536696][T24069] RBP: 00007f337a8b3090 R08: 0000200000000480 R09: 000000000000001c [ 384.536704][T24069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.536710][T24069] R13: 00007f3379c16038 R14: 00007f3379c15fa0 R15: 00007ffe1fefb238 [ 384.536721][T24069] [ 384.921688][T24089] netlink: 'syz.3.7128': attribute type 1 has an invalid length. [ 384.927657][T24089] openvswitch: netlink: Actions may not be safe on all matching packets [ 385.048337][ T42] audit: type=1400 audit(1782211821.601:1578): avc: denied { write } for pid=24099 comm="syz.0.7132" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.052112][T24102] syzkaller0: entered promiscuous mode [ 385.059423][T24102] syzkaller0: entered allmulticast mode [ 385.420101][T24119] kvm: MWAIT instruction emulated as NOP! [ 385.540946][ T42] audit: type=1400 audit(1782211822.091:1579): avc: denied { bind } for pid=24125 comm="syz.4.7144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 385.940955][ T42] audit: type=1400 audit(1782211822.491:1580): avc: denied { execute } for pid=24141 comm="syz.3.7151" name="file0" dev="ramfs" ino=172094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 385.950811][ T42] audit: type=1400 audit(1782211822.491:1581): avc: denied { execute_no_trans } for pid=24141 comm="syz.3.7151" path="/file0" dev="ramfs" ino=172094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 386.046156][ T5893] usb 7-1: USB disconnect, device number 43 [ 386.076940][T24152] netlink: 'syz.2.7155': attribute type 28 has an invalid length. [ 386.085237][T24152] netlink: 'syz.2.7155': attribute type 13 has an invalid length. [ 386.213888][ T42] audit: type=1400 audit(1782211822.761:1582): avc: denied { remount } for pid=24158 comm="syz.0.7157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 386.498199][ T42] audit: type=1400 audit(1782211823.051:1583): avc: denied { read write } for pid=24189 comm="syz.3.7168" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 386.505392][ T42] audit: type=1400 audit(1782211823.051:1584): avc: denied { open } for pid=24189 comm="syz.3.7168" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 386.513613][ T42] audit: type=1400 audit(1782211823.051:1585): avc: denied { ioctl } for pid=24189 comm="syz.3.7168" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 386.518785][T24190] __nla_validate_parse: 8 callbacks suppressed [ 386.518828][T24190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7168'. [ 386.528825][ T5520] hid_parser_main: 3 callbacks suppressed [ 386.528893][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.534200][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.537086][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.539774][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.542228][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.544824][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.547733][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.550157][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.552549][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.554882][ T5520] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 386.564941][ T5520] hid-generic 0000:0000:0004.0004: hidraw1: HID v0.03 Device [syz1] on syz0 [ 386.627798][T24191] fido_id[24191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 386.660057][T24198] binder: 24196:24198 ioctl 4018620d 0 returned -22 [ 386.663346][T24198] binder: 24196:24198 ioctl c0306201 200000000240 returned -11 [ 386.769577][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.774016][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.778396][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.782714][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.786836][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.811555][T19969] syz_tun (unregistering): left allmulticast mode [ 387.017744][ T5810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.021217][ T5810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.085110][ T5810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.089338][ T5810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.101651][T24204] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.104824][T24204] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.108004][T24204] bridge_slave_0: entered allmulticast mode [ 387.111241][T24204] bridge_slave_0: entered promiscuous mode [ 387.115117][T24204] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.118165][T24204] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.121183][T24204] bridge_slave_1: entered allmulticast mode [ 387.124304][T24204] bridge_slave_1: entered promiscuous mode [ 387.139231][T24204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.145435][T24204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.160798][T24204] team0: Port device team_slave_0 added [ 387.167794][ T5810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.171631][ T5810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.177186][T24204] team0: Port device team_slave_1 added [ 387.185400][T24204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.187708][T24204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.195824][T24204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.199871][T24204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.202338][T24204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.210969][T24204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.228322][T24204] hsr_slave_0: entered promiscuous mode [ 387.230400][T24204] hsr_slave_1: entered promiscuous mode [ 387.232972][T24204] debugfs: 'hsr0' already exists in 'hsr' [ 387.235241][T24204] Cannot create hsr debugfs directory [ 387.257208][ T5810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.261658][ T5810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.351490][ T5810] bridge_slave_1: left allmulticast mode [ 387.353460][ T5810] bridge_slave_1: left promiscuous mode [ 387.355775][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.361919][ T5810] bridge_slave_0: left promiscuous mode [ 387.364482][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.370318][ T5810] pim6reg: left allmulticast mode [ 387.445931][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.452824][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.458475][ T5810] bond0 (unregistering): (slave team0): Releasing backup interface [ 387.462837][ T5810] bond0 (unregistering): Released all slaves [ 387.467649][ T5810] bond1 (unregistering): Released all slaves [ 387.473701][ T5810] bond2 (unregistering): Released all slaves [ 387.561769][ T42] audit: type=1400 audit(1782211824.111:1586): avc: denied { write } for pid=24230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.591025][ T5810] : left promiscuous mode [ 387.608587][ T42] audit: type=1400 audit(1782211824.161:1587): avc: denied { write } for pid=24237 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.655023][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 387.703922][ T5810] IPVS: stopping master sync thread 23912 ... [ 387.781981][ T42] audit: type=1400 audit(1782211824.331:1588): avc: denied { write } for pid=24244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.793354][T24247] syzkaller0: entered promiscuous mode [ 387.795577][T24247] syzkaller0: entered allmulticast mode [ 387.864497][T24255] FAULT_INJECTION: forcing a failure. [ 387.864497][T24255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.869463][T24255] CPU: 2 UID: 0 PID: 24255 Comm: syz.2.7183 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.869482][T24255] Tainted: [L]=SOFTLOCKUP [ 387.869486][T24255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.869495][T24255] Call Trace: [ 387.869506][T24255] [ 387.869511][T24255] dump_stack_lvl+0x100/0x190 [ 387.869537][T24255] should_fail_ex.cold+0x5/0xa [ 387.869552][T24255] _copy_to_user+0x32/0xd0 [ 387.869572][T24255] simple_read_from_buffer+0xcb/0x170 [ 387.869590][T24255] proc_fail_nth_read+0x1af/0x230 [ 387.869605][T24255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.869619][T24255] ? security_file_permission+0x76/0x210 [ 387.869632][T24255] ? rw_verify_area+0xce/0x6d0 [ 387.869646][T24255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.869660][T24255] vfs_read+0x1e4/0xb40 [ 387.869675][T24255] ? __pfx_vfs_read+0x10/0x10 [ 387.869690][T24255] ? rcu_is_watching+0x12/0xc0 [ 387.869707][T24255] ? __fget_files+0x21f/0x3d0 [ 387.869718][T24255] ksys_read+0x12a/0x250 [ 387.869733][T24255] ? __pfx_ksys_read+0x10/0x10 [ 387.869749][T24255] ? rcu_is_watching+0x12/0xc0 [ 387.869765][T24255] do_syscall_64+0x115/0x870 [ 387.869786][T24255] ? clear_bhb_loop+0x40/0x90 [ 387.869798][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.869809][T24255] RIP: 0033:0x7f4d5a75d68e [ 387.869818][T24255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.869828][T24255] RSP: 002b:00007f4d589d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.869840][T24255] RAX: ffffffffffffffda RBX: 00007f4d589d56c0 RCX: 00007f4d5a75d68e [ 387.869847][T24255] RDX: 000000000000000f RSI: 00007f4d589d50a0 RDI: 0000000000000005 [ 387.869854][T24255] RBP: 00007f4d589d5090 R08: 0000000000000000 R09: 0000000000000000 [ 387.869860][T24255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.869867][T24255] R13: 00007f4d5aa16128 R14: 00007f4d5aa16090 R15: 00007ffec75e71d8 [ 387.869876][T24255] [ 387.962737][T24252] pim6reg: entered allmulticast mode [ 387.992710][T24204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.997717][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.002230][T24204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.009027][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.017067][T24204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.039169][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.042911][T24204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.050650][T24204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.071385][ T5810] hsr_slave_1: left promiscuous mode [ 388.073295][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.075847][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.080642][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.082988][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.087733][ T5810] veth1_macvtap: left promiscuous mode [ 388.089419][ T5810] veth0_macvtap: left promiscuous mode [ 388.091253][ T5810] veth1_vlan: left promiscuous mode [ 388.092899][ T5810] veth0_vlan: left promiscuous mode [ 388.120815][T24269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7186'. [ 388.149706][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 388.154057][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 388.212322][T24204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.223240][T24204] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.226666][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.226720][ T9606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.232057][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.232086][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.409026][T24204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.427720][T24295] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.7191'. [ 388.436025][T24204] veth0_vlan: entered promiscuous mode [ 388.452566][T24204] veth1_vlan: entered promiscuous mode [ 388.462137][T24204] veth0_macvtap: entered promiscuous mode [ 388.467851][T24204] veth1_macvtap: entered promiscuous mode [ 388.477566][T24204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.484091][T24204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.499538][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.503051][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.509031][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.511775][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.522230][ T5810] IPVS: stop unused estimator thread 0... [ 388.547105][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.550946][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.561709][ T9608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.564773][ T9608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.702024][T24313] FAULT_INJECTION: forcing a failure. [ 388.702024][T24313] name failslab, interval 1, probability 0, space 0, times 0 [ 388.709269][T24313] CPU: 2 UID: 0 PID: 24313 Comm: syz.3.7198 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.709300][T24313] Tainted: [L]=SOFTLOCKUP [ 388.709307][T24313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.709320][T24313] Call Trace: [ 388.709327][T24313] [ 388.709335][T24313] dump_stack_lvl+0x100/0x190 [ 388.709365][T24313] should_fail_ex.cold+0x5/0xa [ 388.709389][T24313] ? fs_reclaim_acquire+0x70/0x100 [ 388.709416][T24313] should_failslab+0xc2/0x120 [ 388.709441][T24313] __kmalloc_noprof+0xfc/0x820 [ 388.709462][T24313] ? rcu_is_watching+0x12/0xc0 [ 388.709491][T24313] ? tomoyo_realpath_from_path+0xb6/0x690 [ 388.709518][T24313] tomoyo_realpath_from_path+0xb6/0x690 [ 388.709542][T24313] tomoyo_path_number_perm+0x23c/0x580 [ 388.709572][T24313] ? tomoyo_path_number_perm+0x22e/0x580 [ 388.709603][T24313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.709637][T24313] ? preempt_count_add+0x76/0x150 [ 388.709667][T24313] ? rcu_is_watching+0x12/0xc0 [ 388.709695][T24313] ? __fget_files+0x215/0x3d0 [ 388.709714][T24313] ? hook_file_ioctl_common+0x140/0x440 [ 388.709740][T24313] ? lock_release+0x24d/0x310 [ 388.709765][T24313] ? __fget_files+0x21f/0x3d0 [ 388.709786][T24313] security_file_ioctl+0xd3/0x230 [ 388.709808][T24313] __x64_sys_ioctl+0xb7/0x210 [ 388.709835][T24313] do_syscall_64+0x115/0x870 [ 388.709863][T24313] ? clear_bhb_loop+0x40/0x90 [ 388.709912][T24313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.709931][T24313] RIP: 0033:0x7fabbaf9ce59 [ 388.709946][T24313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.709965][T24313] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.709984][T24313] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 388.709998][T24313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 388.710014][T24313] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.710026][T24313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.710038][T24313] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 388.710056][T24313] [ 388.710064][T24313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.846476][ T5746] Bluetooth: hci2: command tx timeout [ 389.089100][T24326] support for the xor transformation has been removed. [ 389.389598][T24334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7206'. [ 389.813356][T24336] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.7207'. [ 390.043690][T24350] netlink: 'syz.2.7213': attribute type 4 has an invalid length. [ 390.227728][T24356] syzkaller0: entered promiscuous mode [ 390.230074][T24356] syzkaller0: entered allmulticast mode [ 390.233566][T24356] FAULT_INJECTION: forcing a failure. [ 390.233566][T24356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.238391][T24356] CPU: 2 UID: 0 PID: 24356 Comm: syz.4.7215 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.238408][T24356] Tainted: [L]=SOFTLOCKUP [ 390.238412][T24356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.238418][T24356] Call Trace: [ 390.238422][T24356] [ 390.238426][T24356] dump_stack_lvl+0x100/0x190 [ 390.238443][T24356] should_fail_ex.cold+0x5/0xa [ 390.238457][T24356] _copy_from_iter+0x43a/0x1690 [ 390.238475][T24356] ? __pfx__copy_from_iter+0x10/0x10 [ 390.238506][T24356] ? dev_get_by_index+0x180/0x380 [ 390.238518][T24356] ? rcu_is_watching+0x12/0xc0 [ 390.238534][T24356] ? dev_get_by_index+0x180/0x380 [ 390.238545][T24356] ? lock_release+0x24d/0x310 [ 390.238559][T24356] packet_sendmsg+0x1bb3/0x5100 [ 390.238570][T24356] ? avc_has_perm+0x135/0x1e0 [ 390.238584][T24356] ? __pfx_avc_has_perm+0x10/0x10 [ 390.238598][T24356] ? kernel_text_address+0x8d/0x100 [ 390.238610][T24356] ? __kernel_text_address+0xd/0x30 [ 390.238621][T24356] ? unwind_get_return_address+0x59/0xa0 [ 390.238633][T24356] ? sock_has_perm+0x25a/0x2f0 [ 390.238649][T24356] ? __pfx_sock_has_perm+0x10/0x10 [ 390.238665][T24356] ? __pfx_packet_sendmsg+0x10/0x10 [ 390.238678][T24356] ____sys_sendmsg+0xa4d/0xbe0 [ 390.238693][T24356] ? __pfx_packet_sendmsg+0x10/0x10 [ 390.238704][T24356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.238720][T24356] ? kstrtouint_from_user+0x13c/0x1d0 [ 390.238733][T24356] ___sys_sendmsg+0x190/0x1e0 [ 390.238749][T24356] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.238766][T24356] ? get_pid_task+0x106/0x250 [ 390.238784][T24356] ? rcu_is_watching+0x12/0xc0 [ 390.238804][T24356] __sys_sendmsg+0x160/0x210 [ 390.238816][T24356] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.238834][T24356] ? rcu_is_watching+0x12/0xc0 [ 390.238850][T24356] do_syscall_64+0x115/0x870 [ 390.238867][T24356] ? clear_bhb_loop+0x40/0x90 [ 390.238879][T24356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.238890][T24356] RIP: 0033:0x7f4b8959ce59 [ 390.238899][T24356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.238910][T24356] RSP: 002b:00007f4b8a379028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.238920][T24356] RAX: ffffffffffffffda RBX: 00007f4b89815fa0 RCX: 00007f4b8959ce59 [ 390.238927][T24356] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 390.238934][T24356] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 390.238940][T24356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.238947][T24356] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 390.238956][T24356] [ 390.613742][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7219'. [ 390.623911][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 390.623924][ T42] audit: type=1400 audit(1782211827.171:1594): avc: denied { write } for pid=24363 comm="syz.4.7219" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.903112][T24377] FAULT_INJECTION: forcing a failure. [ 390.903112][T24377] name failslab, interval 1, probability 0, space 0, times 0 [ 390.907238][T24377] CPU: 1 UID: 0 PID: 24377 Comm: syz.2.7222 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.907265][T24377] Tainted: [L]=SOFTLOCKUP [ 390.907270][T24377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.907295][T24377] Call Trace: [ 390.907302][T24377] [ 390.907308][T24377] dump_stack_lvl+0x100/0x190 [ 390.907325][T24377] should_fail_ex.cold+0x5/0xa [ 390.907338][T24377] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 390.907350][T24377] should_failslab+0xc2/0x120 [ 390.907369][T24377] kmem_cache_alloc_noprof+0x91/0x6a0 [ 390.907387][T24377] ? skb_clone+0x190/0x400 [ 390.907406][T24377] skb_clone+0x190/0x400 [ 390.907422][T24377] netlink_deliver_tap+0xaed/0xcc0 [ 390.907450][T24377] netlink_unicast+0x62b/0x850 [ 390.907475][T24377] ? __pfx_netlink_unicast+0x10/0x10 [ 390.907504][T24377] netlink_sendmsg+0x8b0/0xda0 [ 390.907531][T24377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.907559][T24377] ____sys_sendmsg+0xa4d/0xbe0 [ 390.907581][T24377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.907608][T24377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.907633][T24377] ? kstrtouint_from_user+0x13c/0x1d0 [ 390.907655][T24377] ___sys_sendmsg+0x190/0x1e0 [ 390.907680][T24377] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.907705][T24377] ? get_pid_task+0x106/0x250 [ 390.907734][T24377] ? rcu_is_watching+0x12/0xc0 [ 390.907767][T24377] __sys_sendmsg+0x160/0x210 [ 390.907786][T24377] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.907809][T24377] ? rcu_is_watching+0x12/0xc0 [ 390.907834][T24377] do_syscall_64+0x115/0x870 [ 390.907859][T24377] ? clear_bhb_loop+0x40/0x90 [ 390.907877][T24377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.907894][T24377] RIP: 0033:0x7f4d5a79ce59 [ 390.907907][T24377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.907929][T24377] RSP: 002b:00007f4d589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.907946][T24377] RAX: ffffffffffffffda RBX: 00007f4d5aa15fa0 RCX: 00007f4d5a79ce59 [ 390.907958][T24377] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 390.907968][T24377] RBP: 00007f4d589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.907979][T24377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.907988][T24377] R13: 00007f4d5aa16038 R14: 00007f4d5aa15fa0 R15: 00007ffec75e71d8 [ 390.908005][T24377] [ 390.909227][T24377] syz_tun (unregistering): left allmulticast mode [ 390.936446][ T5746] Bluetooth: hci2: command tx timeout [ 391.125575][T24382] syzkaller1: entered promiscuous mode [ 391.128937][T24382] syzkaller1: entered allmulticast mode [ 391.165318][T24384] syzkaller0: entered promiscuous mode [ 391.168351][T24384] syzkaller0: entered allmulticast mode [ 391.310589][T24388] FAULT_INJECTION: forcing a failure. [ 391.310589][T24388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.315335][T24388] CPU: 2 UID: 0 PID: 24388 Comm: syz.2.7228 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.315353][T24388] Tainted: [L]=SOFTLOCKUP [ 391.315357][T24388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.315364][T24388] Call Trace: [ 391.315368][T24388] [ 391.315372][T24388] dump_stack_lvl+0x100/0x190 [ 391.315389][T24388] should_fail_ex.cold+0x5/0xa [ 391.315404][T24388] _copy_from_iter+0x1f4/0x1690 [ 391.315421][T24388] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 391.315439][T24388] ? __pfx__copy_from_iter+0x10/0x10 [ 391.315455][T24388] ? __pfx__mutex_trylock_nest_lock+0x10/0x10 [ 391.315474][T24388] file_tty_write.isra.0+0x45b/0x890 [ 391.315491][T24388] vfs_write+0x6ac/0x1050 [ 391.315506][T24388] ? __pfx_tty_write+0x10/0x10 [ 391.315520][T24388] ? __pfx_vfs_write+0x10/0x10 [ 391.315535][T24388] ? lock_release+0x24d/0x310 [ 391.315551][T24388] ksys_write+0x12a/0x250 [ 391.315566][T24388] ? __pfx_ksys_write+0x10/0x10 [ 391.315581][T24388] ? rcu_is_watching+0x12/0xc0 [ 391.315598][T24388] do_syscall_64+0x115/0x870 [ 391.315614][T24388] ? clear_bhb_loop+0x40/0x90 [ 391.315626][T24388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.315637][T24388] RIP: 0033:0x7f4d5a79ce59 [ 391.315646][T24388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.315658][T24388] RSP: 002b:00007f4d589f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.315669][T24388] RAX: ffffffffffffffda RBX: 00007f4d5aa15fa0 RCX: 00007f4d5a79ce59 [ 391.315676][T24388] RDX: 0000000000001006 RSI: 00002000000014c0 RDI: 0000000000000004 [ 391.315682][T24388] RBP: 00007f4d589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.315689][T24388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.315695][T24388] R13: 00007f4d5aa16038 R14: 00007f4d5aa15fa0 R15: 00007ffec75e71d8 [ 391.315705][T24388] [ 391.610287][T24399] binder: 24398:24399 ioctl c0306201 200000000080 returned -14 [ 391.621730][T24399] binder: 24398:24399 ioctl c0306201 2000000003c0 returned -14 [ 391.698567][T24403] netlink: 'syz.0.7235': attribute type 4 has an invalid length. [ 391.702971][T24403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7235'. [ 391.746852][T24407] FAULT_INJECTION: forcing a failure. [ 391.746852][T24407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.750768][T24407] CPU: 2 UID: 0 PID: 24407 Comm: syz.0.7236 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.750788][T24407] Tainted: [L]=SOFTLOCKUP [ 391.750793][T24407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.750799][T24407] Call Trace: [ 391.750804][T24407] [ 391.750808][T24407] dump_stack_lvl+0x100/0x190 [ 391.750825][T24407] should_fail_ex.cold+0x5/0xa [ 391.750839][T24407] _copy_from_iter+0x1f4/0x1690 [ 391.750857][T24407] ? __asan_memset+0x23/0x50 [ 391.750867][T24407] ? __pfx__copy_from_iter+0x10/0x10 [ 391.750883][T24407] ? __pfx___alloc_skb+0x10/0x10 [ 391.750894][T24407] ? netlink_autobind.isra.0+0x160/0x370 [ 391.750913][T24407] netlink_sendmsg+0x808/0xda0 [ 391.750930][T24407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.750948][T24407] ____sys_sendmsg+0xa4d/0xbe0 [ 391.750963][T24407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.750979][T24407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.750996][T24407] ? kstrtouint_from_user+0x13c/0x1d0 [ 391.751009][T24407] ___sys_sendmsg+0x190/0x1e0 [ 391.751025][T24407] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.751040][T24407] ? get_pid_task+0x106/0x250 [ 391.751059][T24407] ? rcu_is_watching+0x12/0xc0 [ 391.751083][T24407] __sys_sendmsg+0x160/0x210 [ 391.751095][T24407] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.751109][T24407] ? rcu_is_watching+0x12/0xc0 [ 391.751125][T24407] do_syscall_64+0x115/0x870 [ 391.751141][T24407] ? clear_bhb_loop+0x40/0x90 [ 391.751153][T24407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.751164][T24407] RIP: 0033:0x7f403539ce59 [ 391.751173][T24407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.751183][T24407] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.751194][T24407] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 391.751201][T24407] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 391.751208][T24407] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 391.751214][T24407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.751221][T24407] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 391.751230][T24407] [ 391.861216][T24411] FAULT_INJECTION: forcing a failure. [ 391.861216][T24411] name failslab, interval 1, probability 0, space 0, times 0 [ 391.866375][T24411] CPU: 3 UID: 0 PID: 24411 Comm: syz.2.7238 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.866400][T24411] Tainted: [L]=SOFTLOCKUP [ 391.866407][T24411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.866417][T24411] Call Trace: [ 391.866423][T24411] [ 391.866430][T24411] dump_stack_lvl+0x100/0x190 [ 391.866455][T24411] should_fail_ex.cold+0x5/0xa [ 391.866477][T24411] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.866494][T24411] should_failslab+0xc2/0x120 [ 391.866516][T24411] kmem_cache_alloc_noprof+0x91/0x6a0 [ 391.866536][T24411] ? skb_clone+0x190/0x400 [ 391.866558][T24411] skb_clone+0x190/0x400 [ 391.866577][T24411] netlink_deliver_tap+0xaed/0xcc0 [ 391.866605][T24411] netlink_unicast+0x62b/0x850 [ 391.866633][T24411] ? __pfx_netlink_unicast+0x10/0x10 [ 391.866661][T24411] netlink_sendmsg+0x8b0/0xda0 [ 391.866689][T24411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.866720][T24411] ____sys_sendmsg+0xa4d/0xbe0 [ 391.866745][T24411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.866772][T24411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.866799][T24411] ? kstrtouint_from_user+0x13c/0x1d0 [ 391.866823][T24411] ___sys_sendmsg+0x190/0x1e0 [ 391.866850][T24411] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.866877][T24411] ? get_pid_task+0x106/0x250 [ 391.866912][T24411] ? rcu_is_watching+0x12/0xc0 [ 391.866945][T24411] __sys_sendmsg+0x160/0x210 [ 391.866965][T24411] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.866989][T24411] ? rcu_is_watching+0x12/0xc0 [ 391.867027][T24411] do_syscall_64+0x115/0x870 [ 391.867054][T24411] ? clear_bhb_loop+0x40/0x90 [ 391.867074][T24411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.867092][T24411] RIP: 0033:0x7f4d5a79ce59 [ 391.867107][T24411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.867124][T24411] RSP: 002b:00007f4d589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.867142][T24411] RAX: ffffffffffffffda RBX: 00007f4d5aa15fa0 RCX: 00007f4d5a79ce59 [ 391.867154][T24411] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 391.867165][T24411] RBP: 00007f4d589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.867176][T24411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.867187][T24411] R13: 00007f4d5aa16038 R14: 00007f4d5aa15fa0 R15: 00007ffec75e71d8 [ 391.867204][T24411] [ 391.867228][T24411] netlink: 'syz.2.7238': attribute type 10 has an invalid length. [ 392.085336][T24418] pim6reg: entered allmulticast mode [ 392.241581][T24432] netlink: 'syz.3.7245': attribute type 39 has an invalid length. [ 392.439258][T24437] netlink: 'syz.4.7247': attribute type 83 has an invalid length. [ 392.464869][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.468082][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.471050][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.473608][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.475951][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.518807][ T5810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.583712][ T5810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.659317][ T5810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.723316][ T5810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.746481][T21957] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 392.798453][T24443] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.801333][T24443] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.804288][T24443] bridge_slave_0: entered allmulticast mode [ 392.807697][T24443] bridge_slave_0: entered promiscuous mode [ 392.810996][T24443] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.813224][T24443] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.815781][T24443] bridge_slave_1: entered allmulticast mode [ 392.818933][T24443] bridge_slave_1: entered promiscuous mode [ 392.828792][T24443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.834117][T24443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.847572][T24443] team0: Port device team_slave_0 added [ 392.850137][T24443] team0: Port device team_slave_1 added [ 392.860652][T24443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.862994][T24443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.872567][T24443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.878099][T24443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.880277][T24443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.889389][T24443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.896388][T21957] usb 8-1: Using ep0 maxpacket: 8 [ 392.907562][T21957] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.910655][T21957] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.913495][T21957] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.916519][T21957] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.920432][T21957] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.923265][T21957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.929805][T24443] hsr_slave_0: entered promiscuous mode [ 392.932077][T24443] hsr_slave_1: entered promiscuous mode [ 392.949679][ T5810] bridge_slave_1: left allmulticast mode [ 392.952008][ T5810] bridge_slave_1: left promiscuous mode [ 392.954763][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.963684][ T5810] bridge_slave_0: left allmulticast mode [ 392.966135][ T5810] bridge_slave_0: left promiscuous mode [ 392.969757][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.976827][ T5810] pim6reg: left allmulticast mode [ 393.006423][ T62] Bluetooth: hci2: command tx timeout [ 393.048024][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.053711][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.058475][ T5810] bond0 (unregistering): Released all slaves [ 393.090098][T24478] FAULT_INJECTION: forcing a failure. [ 393.090098][T24478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.094459][T24478] CPU: 1 UID: 0 PID: 24478 Comm: syz.0.7257 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.094486][T24478] Tainted: [L]=SOFTLOCKUP [ 393.094493][T24478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.094503][T24478] Call Trace: [ 393.094509][T24478] [ 393.094516][T24478] dump_stack_lvl+0x100/0x190 [ 393.094543][T24478] should_fail_ex.cold+0x5/0xa [ 393.094565][T24478] _copy_to_user+0x32/0xd0 [ 393.094590][T24478] __sys_bpf+0x3469/0x4e80 [ 393.094610][T24478] ? __pfx___sys_bpf+0x10/0x10 [ 393.094626][T24478] ? rcu_is_watching+0x12/0xc0 [ 393.094652][T24478] ? get_pid_task+0xfc/0x250 [ 393.094678][T24478] ? rcu_is_watching+0x12/0xc0 [ 393.094704][T24478] ? get_pid_task+0xfc/0x250 [ 393.094726][T24478] ? lock_release+0x24d/0x310 [ 393.094749][T24478] ? ksys_write+0x12a/0x250 [ 393.094775][T24478] ? rcu_is_watching+0x12/0xc0 [ 393.094801][T24478] ? preempt_count_add+0x76/0x150 [ 393.094837][T24478] ? fput+0x79/0x100 [ 393.094858][T24478] ? __x64_sys_bpf+0xce/0x140 [ 393.094874][T24478] __x64_sys_bpf+0xce/0x140 [ 393.094891][T24478] ? trace_irq_enable.constprop.0+0x122/0x160 [ 393.094914][T24478] do_syscall_64+0x115/0x870 [ 393.094935][T24478] ? clear_bhb_loop+0x40/0x90 [ 393.094953][T24478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.094969][T24478] RIP: 0033:0x7f403539ce59 [ 393.094982][T24478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.094999][T24478] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.095016][T24478] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 393.095028][T24478] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000f [ 393.095039][T24478] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 393.095049][T24478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.095060][T24478] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 393.095077][T24478] [ 393.130899][T21957] usb 8-1: GET_CAPABILITIES returned 0 [ 393.164766][T21957] usbtmc 8-1:16.0: can't read capabilities [ 393.170434][ T5810] tipc: Left network mode [ 393.183226][ T42] audit: type=1400 audit(1782211829.731:1595): avc: denied { write } for pid=24482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.209085][ T42] audit: type=1400 audit(1782211829.761:1596): avc: denied { write } for pid=24485 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.242480][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.300621][ T42] audit: type=1400 audit(1782211829.851:1597): avc: denied { write } for pid=24489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.345800][ T42] audit: type=1400 audit(1782211829.891:1598): avc: denied { write } for pid=24492 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.414280][T24499] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 393.440498][ T42] audit: type=1400 audit(1782211829.991:1599): avc: denied { write } for pid=24501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.470418][ T42] audit: type=1400 audit(1782211830.021:1600): avc: denied { write } for pid=24507 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.527912][ T42] audit: type=1400 audit(1782211830.081:1601): avc: denied { write } for pid=24509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.569783][ T5810] hsr_slave_0: left promiscuous mode [ 393.574069][ T5810] hsr_slave_1: left promiscuous mode [ 393.575924][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.579041][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.581920][ T42] audit: type=1400 audit(1782211830.131:1602): avc: denied { write } for pid=24512 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.591339][ T5810] veth1_macvtap: left promiscuous mode [ 393.593630][ T5810] veth0_macvtap: left promiscuous mode [ 393.595768][ T5810] veth1_vlan: left promiscuous mode [ 393.598083][ T5810] veth0_vlan: left promiscuous mode [ 393.656247][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 393.661377][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 393.725684][T24443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.726812][ T42] audit: type=1400 audit(1782211830.271:1603): avc: denied { write } for pid=24514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.744186][T24443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.747284][T24443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.751086][T24443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.754449][T24443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.758846][T24443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.763006][T24443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.767473][T24443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.833324][T24443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.840219][T24443] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.844304][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.847127][ T9611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.855541][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.858403][ T9640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.051598][T24443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.076641][T24443] veth0_vlan: entered promiscuous mode [ 394.082159][T24443] veth1_vlan: entered promiscuous mode [ 394.099973][T24443] veth0_macvtap: entered promiscuous mode [ 394.104858][T24443] veth1_macvtap: entered promiscuous mode [ 394.114538][T24443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.123119][T24443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.132857][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.137280][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.141036][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.145185][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.179006][ T9630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.183029][ T9630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.192746][ T9630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.195958][ T9630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.241494][T24546] FAULT_INJECTION: forcing a failure. [ 394.241494][T24546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.247087][T24546] CPU: 2 UID: 0 PID: 24546 Comm: syz.2.7249 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.247116][T24546] Tainted: [L]=SOFTLOCKUP [ 394.247122][T24546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.247133][T24546] Call Trace: [ 394.247139][T24546] [ 394.247146][T24546] dump_stack_lvl+0x100/0x190 [ 394.247173][T24546] should_fail_ex.cold+0x5/0xa [ 394.247195][T24546] _copy_to_user+0x32/0xd0 [ 394.247219][T24546] bpf_test_finish.isra.0+0x452/0x660 [ 394.247243][T24546] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 394.247267][T24546] ? rcu_is_watching+0x12/0xc0 [ 394.247292][T24546] ? trace_irq_enable.constprop.0+0x122/0x160 [ 394.247315][T24546] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 394.247336][T24546] ? ___migrate_enable+0x90/0xc0 [ 394.247359][T24546] ? __pfx____migrate_enable+0x10/0x10 [ 394.247382][T24546] ? rcu_is_watching+0x12/0xc0 [ 394.247407][T24546] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 394.247437][T24546] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 394.247462][T24546] ? __fget_files+0x215/0x3d0 [ 394.247477][T24546] ? lock_release+0x24d/0x310 [ 394.247499][T24546] ? __fget_files+0x21f/0x3d0 [ 394.247516][T24546] ? fput+0x79/0x100 [ 394.247534][T24546] ? __bpf_prog_get+0x97/0x2a0 [ 394.247555][T24546] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 394.247578][T24546] __sys_bpf+0x2a12/0x4e80 [ 394.247608][T24546] ? kstrtouint_from_user+0x70/0x1d0 [ 394.247628][T24546] ? __pfx___sys_bpf+0x10/0x10 [ 394.247643][T24546] ? rcu_is_watching+0x12/0xc0 [ 394.247667][T24546] ? get_pid_task+0xfc/0x250 [ 394.247689][T24546] ? rcu_is_watching+0x12/0xc0 [ 394.247712][T24546] ? get_pid_task+0xfc/0x250 [ 394.247753][T24546] ? lock_release+0x24d/0x310 [ 394.247776][T24546] ? ksys_write+0x12a/0x250 [ 394.247799][T24546] ? rcu_is_watching+0x12/0xc0 [ 394.247822][T24546] ? preempt_count_add+0x76/0x150 [ 394.247841][T24546] ? ksys_write+0x190/0x250 [ 394.247864][T24546] ? rcu_is_watching+0x12/0xc0 [ 394.247892][T24546] ? ksys_write+0x190/0x250 [ 394.247914][T24546] ? lock_release+0x24d/0x310 [ 394.247937][T24546] ? fput+0x79/0x100 [ 394.247956][T24546] ? __x64_sys_bpf+0xce/0x140 [ 394.247972][T24546] __x64_sys_bpf+0xce/0x140 [ 394.247988][T24546] ? trace_irq_enable.constprop.0+0x122/0x160 [ 394.248012][T24546] do_syscall_64+0x115/0x870 [ 394.248037][T24546] ? clear_bhb_loop+0x40/0x90 [ 394.248054][T24546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.248072][T24546] RIP: 0033:0x7f5e64f9ce59 [ 394.248088][T24546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.248106][T24546] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.248125][T24546] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 394.248137][T24546] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 394.248149][T24546] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.248159][T24546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.248168][T24546] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 394.248185][T24546] [ 394.526736][ T62] Bluetooth: hci4: command tx timeout [ 394.834724][T24563] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 394.937640][T24574] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 394.943355][T24574] cramfs: wrong magic [ 395.086485][ T62] Bluetooth: hci2: command tx timeout [ 395.507650][ T5829] usb 8-1: USB disconnect, device number 42 [ 395.758706][T24598] pim6reg: left allmulticast mode [ 395.967338][T24614] netlink: 328 bytes leftover after parsing attributes in process `syz.0.7289'. [ 396.108558][T24618] Cannot find add_set index 0 as target [ 396.606470][ T62] Bluetooth: hci4: command tx timeout [ 396.770816][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 396.770828][ T42] audit: type=1400 audit(1782211833.321:1613): avc: denied { append } for pid=24630 comm="syz.2.7296" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 396.821984][T24633] fuse: Bad value for 'fd' [ 396.823683][T24633] netlink: 'syz.2.7297': attribute type 1 has an invalid length. [ 396.835506][T24635] Set syz1 is full, maxelem 768 reached [ 396.926752][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.958841][ T10] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 397.145458][ T10] usb 8-1: config 0 has no interfaces? [ 397.148611][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.153491][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.172512][ T10] usb 8-1: config 0 descriptor?? [ 397.380304][T24625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.383186][T24625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.407810][T21956] usb 8-1: USB disconnect, device number 43 [ 397.481345][T24660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 397.483254][T24660] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 397.490582][T24660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.492723][T24660] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 397.512496][T24660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 397.514633][T24660] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 397.531647][T24660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 397.533484][T24660] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 397.804987][ T42] audit: type=1400 audit(1782211834.351:1614): avc: denied { write } for pid=24665 comm="syz.2.7309" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.821910][ T42] audit: type=1400 audit(1782211834.351:1615): avc: denied { create } for pid=24665 comm="syz.2.7309" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 398.607540][T24705] bridge: RTM_NEWNEIGH with invalid ether address [ 398.751511][T24717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7328'. [ 398.817665][T24727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7331'. [ 398.828494][ T42] audit: type=1400 audit(1782211835.381:1616): avc: denied { write } for pid=24726 comm="syz.0.7331" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 399.050324][T24737] bond0: (slave vlan2): Opening slave failed [ 399.101905][ T42] audit: type=1400 audit(1782211835.651:1617): avc: denied { setattr } for pid=24736 comm="syz.4.7335" name="SCTPv6" dev="sockfs" ino=179790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 399.196440][ T5826] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 399.351165][ T5826] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.354956][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.358411][ T5826] usb 8-1: Product: syz [ 399.360127][ T5826] usb 8-1: Manufacturer: syz [ 399.363265][ T5826] usb 8-1: SerialNumber: syz [ 399.371895][ T5826] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.391482][ T5893] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.792624][T21956] usb 8-1: USB disconnect, device number 44 [ 399.829498][T24761] program syz.4.7343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.864828][T24763] FAULT_INJECTION: forcing a failure. [ 399.864828][T24763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.870553][T24763] CPU: 3 UID: 0 PID: 24763 Comm: syz.0.7342 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.870580][T24763] Tainted: [L]=SOFTLOCKUP [ 399.870586][T24763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.870596][T24763] Call Trace: [ 399.870601][T24763] [ 399.870608][T24763] dump_stack_lvl+0x100/0x190 [ 399.870646][T24763] should_fail_ex.cold+0x5/0xa [ 399.870668][T24763] _copy_from_user+0x2e/0xd0 [ 399.870706][T24763] vt_ioctl+0xd6d/0x3110 [ 399.870722][T24763] ? __pfx_vt_ioctl+0x10/0x10 [ 399.870735][T24763] ? tomoyo_path_number_perm+0x28f/0x580 [ 399.870761][T24763] ? lock_release+0x24d/0x310 [ 399.870784][T24763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.870803][T24763] ? __pfx_vt_ioctl+0x10/0x10 [ 399.870819][T24763] tty_ioctl+0x26a/0x1640 [ 399.870844][T24763] ? __pfx_tty_ioctl+0x10/0x10 [ 399.870864][T24763] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 399.870884][T24763] ? rcu_is_watching+0x12/0xc0 [ 399.870908][T24763] ? hook_file_ioctl_common+0x140/0x440 [ 399.870930][T24763] ? selinux_file_ioctl+0x13b/0x290 [ 399.870946][T24763] ? selinux_file_ioctl+0xb6/0x290 [ 399.870963][T24763] ? __pfx_tty_ioctl+0x10/0x10 [ 399.870987][T24763] __x64_sys_ioctl+0x18e/0x210 [ 399.871011][T24763] do_syscall_64+0x115/0x870 [ 399.871040][T24763] ? clear_bhb_loop+0x40/0x90 [ 399.871057][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.871072][T24763] RIP: 0033:0x7f403539ce59 [ 399.871084][T24763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.871099][T24763] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.871117][T24763] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 399.871129][T24763] RDX: 00002000000013c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 399.871142][T24763] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 399.871154][T24763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.871163][T24763] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 399.871178][T24763] [ 400.166501][ T5826] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 400.316392][ T5826] usb 7-1: Using ep0 maxpacket: 8 [ 400.320192][ T5826] usb 7-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 400.324558][ T5826] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.327722][T24783] loop8: detected capacity change from 0 to 7 [ 400.328690][ T5826] usb 7-1: config 1 has no interface number 0 [ 400.333503][ T5826] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 400.333566][T24783] Dev loop8: unable to read RDB block 7 [ 400.340406][T24783] loop8: unable to read partition table [ 400.340860][ T5826] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 400.342691][T24783] loop8: partition table beyond EOD, truncated [ 400.347655][ T5826] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 400.352016][T24783] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 400.360179][T24783] FAULT_INJECTION: forcing a failure. [ 400.360179][T24783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.360208][ T5826] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 400.364815][T24783] CPU: 3 UID: 0 PID: 24783 Comm: syz.3.7349 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.364843][T24783] Tainted: [L]=SOFTLOCKUP [ 400.364850][T24783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.364861][T24783] Call Trace: [ 400.364868][T24783] [ 400.364875][T24783] dump_stack_lvl+0x100/0x190 [ 400.364901][T24783] should_fail_ex.cold+0x5/0xa [ 400.364925][T24783] _copy_to_iter+0x1f3/0x1720 [ 400.364950][T24783] ? filemap_get_pages+0x407/0x2030 [ 400.364979][T24783] ? __pfx__copy_to_iter+0x10/0x10 [ 400.365004][T24783] ? is_bpf_text_address+0x8a/0x1a0 [ 400.365027][T24783] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.365046][T24783] ? __pfx_filemap_get_pages+0x10/0x10 [ 400.365071][T24783] ? bpf_ksym_find+0x128/0x1c0 [ 400.365096][T24783] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.365116][T24783] copy_page_to_iter+0x285/0x370 [ 400.365141][T24783] filemap_read+0x7a9/0x10a0 [ 400.365171][T24783] ? __pfx_filemap_read+0x10/0x10 [ 400.365196][T24783] ? do_syscall_64+0x115/0x870 [ 400.365229][T24783] ? __pfx_down_read+0x10/0x10 [ 400.365246][T24783] ? avc_policy_seqno+0x9/0x20 [ 400.365268][T24783] ? selinux_file_permission+0x8f/0x6d0 [ 400.365288][T24783] blkdev_read_iter+0x2c4/0x4f0 [ 400.365307][T24783] ? __pfx_blkdev_read_iter+0x10/0x10 [ 400.365324][T24783] __io_read+0x357/0x1470 [ 400.365350][T24783] ? rcu_is_watching+0x12/0xc0 [ 400.365377][T24783] io_read+0x8d/0x1f0 [ 400.365401][T24783] ? __pfx_io_read+0x10/0x10 [ 400.365427][T24783] ? __fget_files+0x21f/0x3d0 [ 400.365445][T24783] __io_issue_sqe+0xe8/0x7a0 [ 400.365468][T24783] io_issue_sqe+0x88/0x1540 [ 400.365486][T24783] io_submit_sqes+0xb17/0x2480 [ 400.365503][T24783] ? ksys_write+0x190/0x250 [ 400.365531][T24783] __do_sys_io_uring_enter+0xa88/0x1b10 [ 400.365549][T24783] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 400.365576][T24783] ? __fget_files+0x21f/0x3d0 [ 400.365591][T24783] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 400.365608][T24783] ? fput+0x79/0x100 [ 400.365636][T24783] ? ksys_write+0x1ac/0x250 [ 400.365656][T24783] ? __pfx_ksys_write+0x10/0x10 [ 400.365679][T24783] ? rcu_is_watching+0x12/0xc0 [ 400.365702][T24783] do_syscall_64+0x115/0x870 [ 400.365752][T24783] ? clear_bhb_loop+0x40/0x90 [ 400.365769][T24783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.365785][T24783] RIP: 0033:0x7fabbaf9ce59 [ 400.365797][T24783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.365812][T24783] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 400.365828][T24783] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 400.365839][T24783] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 400.365848][T24783] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 400.365857][T24783] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 400.365867][T24783] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 400.365882][T24783] [ 400.503259][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.506804][ T5826] usb 7-1: Product: syz [ 400.508560][ T5826] usb 7-1: Manufacturer: syz [ 400.510578][ T5826] usb 7-1: SerialNumber: syz [ 400.591666][T24794] evm: overlay not supported [ 400.606582][ T5893] usb 8-1: Service connection timeout for: 256 [ 400.609430][ T5893] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 400.613239][ T5893] ath9k_htc: Failed to initialize the device [ 400.616185][T21956] usb 8-1: ath9k_htc: USB layer deinitialized [ 400.751488][T24798] FAULT_INJECTION: forcing a failure. [ 400.751488][T24798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.757128][T24798] CPU: 3 UID: 0 PID: 24798 Comm: syz.4.7353 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.757147][T24798] Tainted: [L]=SOFTLOCKUP [ 400.757151][T24798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.757157][T24798] Call Trace: [ 400.757161][T24798] [ 400.757166][T24798] dump_stack_lvl+0x100/0x190 [ 400.757187][T24798] should_fail_ex.cold+0x5/0xa [ 400.757201][T24798] _copy_from_iter+0x1f4/0x1690 [ 400.757218][T24798] ? __asan_memset+0x23/0x50 [ 400.757229][T24798] ? __pfx__copy_from_iter+0x10/0x10 [ 400.757245][T24798] ? __pfx___alloc_skb+0x10/0x10 [ 400.757256][T24798] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 400.757276][T24798] netlink_sendmsg+0x808/0xda0 [ 400.757294][T24798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.757313][T24798] ____sys_sendmsg+0xa4d/0xbe0 [ 400.757327][T24798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.757344][T24798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.757360][T24798] ? kstrtouint_from_user+0x13c/0x1d0 [ 400.757374][T24798] ___sys_sendmsg+0x190/0x1e0 [ 400.757390][T24798] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.757406][T24798] ? get_pid_task+0x106/0x250 [ 400.757424][T24798] ? rcu_is_watching+0x12/0xc0 [ 400.757444][T24798] __sys_sendmsg+0x160/0x210 [ 400.757456][T24798] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.757470][T24798] ? rcu_is_watching+0x12/0xc0 [ 400.757486][T24798] do_syscall_64+0x115/0x870 [ 400.757502][T24798] ? clear_bhb_loop+0x40/0x90 [ 400.757514][T24798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.757525][T24798] RIP: 0033:0x7f4b8959ce59 [ 400.757534][T24798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.757545][T24798] RSP: 002b:00007f4b877f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.757557][T24798] RAX: ffffffffffffffda RBX: 00007f4b89816090 RCX: 00007f4b8959ce59 [ 400.757564][T24798] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 400.757571][T24798] RBP: 00007f4b877f6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.757577][T24798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.757584][T24798] R13: 00007f4b89816128 R14: 00007f4b89816090 R15: 00007ffdcba18518 [ 400.757594][T24798] [ 401.124893][T24766] Context (ID=0x0) not attached to queue pair (handle=0x1:0x9) [ 401.139350][T21949] usb 7-1: USB disconnect, device number 44 [ 401.390525][T24811] FAULT_INJECTION: forcing a failure. [ 401.390525][T24811] name failslab, interval 1, probability 0, space 0, times 0 [ 401.395077][T24811] CPU: 2 UID: 0 PID: 24811 Comm: syz.3.7357 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.395095][T24811] Tainted: [L]=SOFTLOCKUP [ 401.395099][T24811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.395106][T24811] Call Trace: [ 401.395110][T24811] [ 401.395114][T24811] dump_stack_lvl+0x100/0x190 [ 401.395132][T24811] should_fail_ex.cold+0x5/0xa [ 401.395145][T24811] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 401.395158][T24811] should_failslab+0xc2/0x120 [ 401.395172][T24811] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 401.395184][T24811] ? __alloc_skb+0x5b7/0x710 [ 401.395195][T24811] ? __alloc_skb+0x140/0x710 [ 401.395207][T24811] __alloc_skb+0x140/0x710 [ 401.395217][T24811] ? __alloc_skb+0x5b7/0x710 [ 401.395228][T24811] ? __pfx___alloc_skb+0x10/0x10 [ 401.395238][T24811] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 401.395258][T24811] netlink_alloc_large_skb+0x69/0x150 [ 401.395278][T24811] netlink_sendmsg+0x680/0xda0 [ 401.395295][T24811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.395313][T24811] ____sys_sendmsg+0xa4d/0xbe0 [ 401.395329][T24811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.395345][T24811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.395365][T24811] ? kstrtouint_from_user+0x13c/0x1d0 [ 401.395379][T24811] ___sys_sendmsg+0x190/0x1e0 [ 401.395395][T24811] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.395411][T24811] ? get_pid_task+0x106/0x250 [ 401.395429][T24811] ? rcu_is_watching+0x12/0xc0 [ 401.395450][T24811] __sys_sendmsg+0x160/0x210 [ 401.395462][T24811] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.395475][T24811] ? rcu_is_watching+0x12/0xc0 [ 401.395491][T24811] do_syscall_64+0x115/0x870 [ 401.395508][T24811] ? clear_bhb_loop+0x40/0x90 [ 401.395520][T24811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.395531][T24811] RIP: 0033:0x7fabbaf9ce59 [ 401.395539][T24811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.395550][T24811] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.395561][T24811] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 401.395568][T24811] RDX: 0000000004000884 RSI: 0000200000000240 RDI: 0000000000000004 [ 401.395574][T24811] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.395581][T24811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.395587][T24811] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 401.395597][T24811] [ 401.815921][T24828] syzkaller0: entered promiscuous mode [ 401.817803][T24828] syzkaller0: entered allmulticast mode [ 401.865839][T24830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7365'. [ 401.976233][T24842] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 402.169311][T24863] pim6reg: entered allmulticast mode [ 402.336785][T24879] FAULT_INJECTION: forcing a failure. [ 402.336785][T24879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.342502][T24879] CPU: 2 UID: 0 PID: 24879 Comm: syz.0.7382 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.342531][T24879] Tainted: [L]=SOFTLOCKUP [ 402.342538][T24879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.342549][T24879] Call Trace: [ 402.342555][T24879] [ 402.342563][T24879] dump_stack_lvl+0x100/0x190 [ 402.342590][T24879] should_fail_ex.cold+0x5/0xa [ 402.342614][T24879] _copy_from_iter+0x1f4/0x1690 [ 402.342643][T24879] ? __asan_memset+0x23/0x50 [ 402.342660][T24879] ? __pfx__copy_from_iter+0x10/0x10 [ 402.342685][T24879] ? __pfx___alloc_skb+0x10/0x10 [ 402.342710][T24879] ? netlink_autobind.isra.0+0x160/0x370 [ 402.342740][T24879] netlink_sendmsg+0x808/0xda0 [ 402.342768][T24879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.342797][T24879] ____sys_sendmsg+0xa4d/0xbe0 [ 402.342821][T24879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.342848][T24879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.342892][T24879] ? kstrtouint_from_user+0x13c/0x1d0 [ 402.342914][T24879] ___sys_sendmsg+0x190/0x1e0 [ 402.342940][T24879] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.342966][T24879] ? get_pid_task+0x106/0x250 [ 402.343109][T24879] ? rcu_is_watching+0x12/0xc0 [ 402.343142][T24879] __sys_sendmsg+0x160/0x210 [ 402.343163][T24879] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.343188][T24879] ? rcu_is_watching+0x12/0xc0 [ 402.343214][T24879] do_syscall_64+0x115/0x870 [ 402.343240][T24879] ? clear_bhb_loop+0x40/0x90 [ 402.343260][T24879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.343277][T24879] RIP: 0033:0x7f403539ce59 [ 402.343292][T24879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.343309][T24879] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.343327][T24879] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 402.343339][T24879] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 402.343350][T24879] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 402.343361][T24879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.343371][T24879] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 402.343389][T24879] [ 402.443191][ T42] audit: type=1400 audit(1782211838.991:1618): avc: denied { read } for pid=24872 comm="syz.4.7380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.496396][T24888] FAULT_INJECTION: forcing a failure. [ 402.496396][T24888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.501101][T24888] CPU: 3 UID: 0 PID: 24888 Comm: syz.0.7385 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.501121][T24888] Tainted: [L]=SOFTLOCKUP [ 402.501126][T24888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.501132][T24888] Call Trace: [ 402.501137][T24888] [ 402.501142][T24888] dump_stack_lvl+0x100/0x190 [ 402.501159][T24888] should_fail_ex.cold+0x5/0xa [ 402.501175][T24888] _copy_from_iter+0x1f4/0x1690 [ 402.501192][T24888] ? __asan_memset+0x23/0x50 [ 402.501203][T24888] ? __pfx__copy_from_iter+0x10/0x10 [ 402.501219][T24888] ? __pfx___alloc_skb+0x10/0x10 [ 402.501230][T24888] ? netlink_autobind.isra.0+0x160/0x370 [ 402.501249][T24888] netlink_sendmsg+0x808/0xda0 [ 402.501266][T24888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.501284][T24888] ____sys_sendmsg+0xa4d/0xbe0 [ 402.501300][T24888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.501316][T24888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.501332][T24888] ? kstrtouint_from_user+0x13c/0x1d0 [ 402.501346][T24888] ___sys_sendmsg+0x190/0x1e0 [ 402.501362][T24888] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.501378][T24888] ? get_pid_task+0x106/0x250 [ 402.501396][T24888] ? rcu_is_watching+0x12/0xc0 [ 402.501416][T24888] __sys_sendmsg+0x160/0x210 [ 402.501428][T24888] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.501442][T24888] ? rcu_is_watching+0x12/0xc0 [ 402.501459][T24888] do_syscall_64+0x115/0x870 [ 402.501475][T24888] ? clear_bhb_loop+0x40/0x90 [ 402.501487][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.501498][T24888] RIP: 0033:0x7f403539ce59 [ 402.501507][T24888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.501517][T24888] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.501528][T24888] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 402.501535][T24888] RDX: 00000000000008c0 RSI: 0000200000000680 RDI: 0000000000000003 [ 402.501542][T24888] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 402.501549][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.501555][T24888] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 402.501565][T24888] [ 402.634312][T24892] syzkaller0: entered promiscuous mode [ 402.636613][T24892] syzkaller0: entered allmulticast mode [ 402.706394][T21956] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 402.833537][T24903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7391'. [ 402.837810][T24903] FAULT_INJECTION: forcing a failure. [ 402.837810][T24903] name failslab, interval 1, probability 0, space 0, times 0 [ 402.842519][T24903] CPU: 3 UID: 0 PID: 24903 Comm: syz.2.7391 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.842544][T24903] Tainted: [L]=SOFTLOCKUP [ 402.842550][T24903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.842559][T24903] Call Trace: [ 402.842565][T24903] [ 402.842572][T24903] dump_stack_lvl+0x100/0x190 [ 402.842596][T24903] should_fail_ex.cold+0x5/0xa [ 402.842618][T24903] ? sctp_get_port_local+0xbb3/0x1630 [ 402.842636][T24903] should_failslab+0xc2/0x120 [ 402.842650][T24903] __kmalloc_cache_noprof+0x91/0x6c0 [ 402.842667][T24903] ? sctp_bind_addr_match+0x193/0x300 [ 402.842677][T24903] ? sctp_add_bind_addr+0xae/0x3e0 [ 402.842687][T24903] sctp_add_bind_addr+0xae/0x3e0 [ 402.842697][T24903] sctp_do_bind+0x36c/0x760 [ 402.842714][T24903] sctp_connect_new_asoc+0x5e7/0x770 [ 402.842730][T24903] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 402.842746][T24903] sctp_sendmsg+0x1743/0x22e0 [ 402.842762][T24903] ? __kernel_text_address+0xd/0x30 [ 402.842774][T24903] ? __pfx_sctp_sendmsg+0x10/0x10 [ 402.842790][T24903] ? __pfx_sock_has_perm+0x10/0x10 [ 402.842809][T24903] ? __pfx_sctp_sendmsg+0x10/0x10 [ 402.842824][T24903] inet_sendmsg+0x11c/0x140 [ 402.842837][T24903] ____sys_sendmsg+0x9c9/0xbe0 [ 402.842852][T24903] ? __pfx_inet_sendmsg+0x10/0x10 [ 402.842864][T24903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.842880][T24903] ? kstrtouint_from_user+0x13c/0x1d0 [ 402.842894][T24903] ___sys_sendmsg+0x190/0x1e0 [ 402.842910][T24903] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.842926][T24903] ? get_pid_task+0x106/0x250 [ 402.842944][T24903] ? rcu_is_watching+0x12/0xc0 [ 402.842964][T24903] __sys_sendmsg+0x160/0x210 [ 402.842977][T24903] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.842991][T24903] ? rcu_is_watching+0x12/0xc0 [ 402.843007][T24903] do_syscall_64+0x115/0x870 [ 402.843023][T24903] ? clear_bhb_loop+0x40/0x90 [ 402.843035][T24903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.843046][T24903] RIP: 0033:0x7f5e64f9ce59 [ 402.843055][T24903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.843066][T24903] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.843077][T24903] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 402.843084][T24903] RDX: 0000000000048043 RSI: 0000200000000800 RDI: 0000000000000004 [ 402.843091][T24903] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.843097][T24903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.843103][T24903] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 402.843113][T24903] [ 402.849737][T24899] FAULT_INJECTION: forcing a failure. [ 402.849737][T24899] name failslab, interval 1, probability 0, space 0, times 0 [ 402.856706][T21956] usb 8-1: Using ep0 maxpacket: 32 [ 402.858138][T24899] CPU: 2 UID: 0 PID: 24899 Comm: syz.0.7390 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.858156][T24899] Tainted: [L]=SOFTLOCKUP [ 402.858160][T24899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.858166][T24899] Call Trace: [ 402.858170][T24899] [ 402.858174][T24899] dump_stack_lvl+0x100/0x190 [ 402.858192][T24899] should_fail_ex.cold+0x5/0xa [ 402.858205][T24899] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 402.858218][T24899] should_failslab+0xc2/0x120 [ 402.858231][T24899] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 402.858243][T24899] ? rcu_is_watching+0x12/0xc0 [ 402.858259][T24899] ? copy_process+0x69a/0x7ff0 [ 402.858275][T24899] copy_process+0x69a/0x7ff0 [ 402.858292][T24899] ? __pfx_copy_process+0x10/0x10 [ 402.858306][T24899] ? __kasan_kmalloc+0xaa/0xb0 [ 402.858318][T24899] ? lockdep_init_map_type+0x5c/0x250 [ 402.858332][T24899] ? lockdep_init_map_type+0x5c/0x250 [ 402.858345][T24899] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 402.858359][T24899] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 402.858371][T24899] vhost_task_create+0x1db/0x370 [ 402.858383][T24899] ? __pfx_vhost_task_create+0x10/0x10 [ 402.858395][T24899] ? rcu_is_watching+0x12/0xc0 [ 402.858411][T24899] ? __pfx_vhost_task_fn+0x10/0x10 [ 402.858423][T24899] ? __pfx___mutex_lock+0x10/0x10 [ 402.858440][T24899] ? trace_irq_enable.constprop.0+0x122/0x160 [ 402.858456][T24899] kvm_mmu_post_init_vm+0x1b3/0x360 [ 402.858473][T24899] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 402.858490][T24899] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 402.858502][T24899] ? lock_release+0x24d/0x310 [ 402.858515][T24899] kvm_vcpu_ioctl+0x730/0x1700 [ 402.858528][T24899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 402.858540][T24899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.858553][T24899] ? do_vfs_ioctl+0x226/0x13e0 [ 402.858567][T24899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 402.858581][T24899] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 402.858595][T24899] ? rcu_is_watching+0x12/0xc0 [ 402.858611][T24899] ? hook_file_ioctl_common+0x140/0x440 [ 402.858627][T24899] ? selinux_file_ioctl+0x13b/0x290 [ 402.858637][T24899] ? selinux_file_ioctl+0xb6/0x290 [ 402.858648][T24899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 402.858661][T24899] __x64_sys_ioctl+0x18e/0x210 [ 402.858680][T24899] do_syscall_64+0x115/0x870 [ 402.858696][T24899] ? clear_bhb_loop+0x40/0x90 [ 402.858709][T24899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.858719][T24899] RIP: 0033:0x7f403539ce59 [ 402.858728][T24899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.858739][T24899] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.858750][T24899] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 402.858770][T24899] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 402.858777][T24899] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 402.858784][T24899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.858790][T24899] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 402.858801][T24899] [ 402.867869][T24905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7392'. [ 402.871219][T21956] usb 8-1: config 0 has no interfaces? [ 402.888705][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7393'. [ 402.891055][T21956] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 402.891188][T24907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7393'. [ 402.893152][T21956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.894778][T24907] netlink: 'syz.2.7393': attribute type 7 has an invalid length. [ 403.060790][T21956] usb 8-1: Product: syz [ 403.062081][T21956] usb 8-1: Manufacturer: syz [ 403.063560][T21956] usb 8-1: SerialNumber: syz [ 403.065854][T21956] usb 8-1: config 0 descriptor?? [ 403.273066][T12202] usb 8-1: USB disconnect, device number 45 [ 403.449253][ T42] audit: type=1400 audit(1782211840.001:1619): avc: denied { ioctl } for pid=24932 comm="syz.0.7400" path="socket:[183310]" dev="sockfs" ino=183310 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 403.530532][T24937] syzkaller1: entered promiscuous mode [ 403.532607][T24937] syzkaller1: entered allmulticast mode [ 403.544414][ T42] audit: type=1400 audit(1782211840.091:1620): avc: denied { append } for pid=24936 comm="syz.2.7401" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 403.804979][T24951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7406'. [ 403.819297][ T42] audit: type=1400 audit(1782211840.371:1621): avc: denied { write } for pid=24950 comm="syz.2.7406" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.863542][T24955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7408'. [ 403.870122][T24955] FAULT_INJECTION: forcing a failure. [ 403.870122][T24955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.875587][T24955] CPU: 2 UID: 0 PID: 24955 Comm: syz.4.7408 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.875611][T24955] Tainted: [L]=SOFTLOCKUP [ 403.875615][T24955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.875621][T24955] Call Trace: [ 403.875625][T24955] [ 403.875630][T24955] dump_stack_lvl+0x100/0x190 [ 403.875652][T24955] should_fail_ex.cold+0x5/0xa [ 403.875667][T24955] _copy_from_user+0x2e/0xd0 [ 403.875683][T24955] move_addr_to_kernel+0x65/0x170 [ 403.875700][T24955] __sys_connect+0xb5/0x170 [ 403.875710][T24955] ? __pfx___sys_connect+0x10/0x10 [ 403.875720][T24955] ? __fget_files+0x21f/0x3d0 [ 403.875732][T24955] ? __pfx_ksys_write+0x10/0x10 [ 403.875749][T24955] __x64_sys_connect+0x72/0xb0 [ 403.875759][T24955] do_syscall_64+0x115/0x870 [ 403.875777][T24955] ? clear_bhb_loop+0x40/0x90 [ 403.875789][T24955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.875799][T24955] RIP: 0033:0x7f4b8959ce59 [ 403.875808][T24955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.875818][T24955] RSP: 002b:00007f4b8a379028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 403.875829][T24955] RAX: ffffffffffffffda RBX: 00007f4b89815fa0 RCX: 00007f4b8959ce59 [ 403.875836][T24955] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 403.875843][T24955] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 403.875849][T24955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.875855][T24955] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 403.875865][T24955] [ 404.757183][T24985] FAULT_INJECTION: forcing a failure. [ 404.757183][T24985] name failslab, interval 1, probability 0, space 0, times 0 [ 404.762306][T24985] CPU: 2 UID: 0 PID: 24985 Comm: syz.0.7418 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.762334][T24985] Tainted: [L]=SOFTLOCKUP [ 404.762340][T24985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.762352][T24985] Call Trace: [ 404.762358][T24985] [ 404.762366][T24985] dump_stack_lvl+0x100/0x190 [ 404.762393][T24985] should_fail_ex.cold+0x5/0xa [ 404.762418][T24985] should_failslab+0xc2/0x120 [ 404.762441][T24985] kmem_cache_alloc_noprof+0x91/0x6a0 [ 404.762463][T24985] ? dst_alloc+0x99/0x1a0 [ 404.762484][T24985] dst_alloc+0x99/0x1a0 [ 404.762503][T24985] rt_dst_alloc+0x35/0x3a0 [ 404.762522][T24985] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 404.762549][T24985] ip_route_output_key_hash+0x118/0x2b0 [ 404.762572][T24985] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 404.762596][T24985] ? rcu_is_watching+0x12/0xc0 [ 404.762628][T24985] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 404.762655][T24985] ? avc_has_perm_noaudit+0x145/0x3b0 [ 404.762681][T24985] tcp_v4_connect+0x86b/0x1b40 [ 404.762707][T24985] ? __pfx_tcp_v4_connect+0x10/0x10 [ 404.762728][T24985] ? avc_has_perm_noaudit+0x145/0x3b0 [ 404.762753][T24985] tcp_v6_connect+0x779/0x2660 [ 404.762783][T24985] ? __pfx_tcp_v6_connect+0x10/0x10 [ 404.762812][T24985] ? selinux_socket_connect_helper.isra.0+0x1b3/0x520 [ 404.762844][T24985] __inet_stream_connect+0x208/0xfa0 [ 404.762865][T24985] ? do_raw_spin_lock+0x128/0x260 [ 404.762892][T24985] ? __pfx___inet_stream_connect+0x10/0x10 [ 404.762912][T24985] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.762937][T24985] ? __pfx___might_resched+0x10/0x10 [ 404.762959][T24985] ? inet_stream_connect+0x43/0xa0 [ 404.762978][T24985] ? inet_stream_connect+0x43/0xa0 [ 404.762997][T24985] ? rcu_is_watching+0x12/0xc0 [ 404.763023][T24985] ? inet_stream_connect+0x43/0xa0 [ 404.763041][T24985] ? trace_irq_enable.constprop.0+0x122/0x160 [ 404.763068][T24985] ? __pfx_inet_stream_connect+0x10/0x10 [ 404.763086][T24985] inet_stream_connect+0x57/0xa0 [ 404.763105][T24985] __sys_connect_file+0x141/0x1a0 [ 404.763125][T24985] __sys_connect+0x141/0x170 [ 404.763143][T24985] ? __pfx___sys_connect+0x10/0x10 [ 404.763161][T24985] ? __fget_files+0x21f/0x3d0 [ 404.763183][T24985] ? __pfx_ksys_write+0x10/0x10 [ 404.763211][T24985] __x64_sys_connect+0x72/0xb0 [ 404.763230][T24985] do_syscall_64+0x115/0x870 [ 404.763257][T24985] ? clear_bhb_loop+0x40/0x90 [ 404.763278][T24985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.763297][T24985] RIP: 0033:0x7f403539ce59 [ 404.763313][T24985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.763331][T24985] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 404.763350][T24985] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 404.763362][T24985] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 404.763374][T24985] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 404.763385][T24985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.763396][T24985] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 404.763414][T24985] [ 404.988711][T24996] FAULT_INJECTION: forcing a failure. [ 404.988711][T24996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.993625][T24996] CPU: 3 UID: 0 PID: 24996 Comm: syz.3.7421 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.993671][T24996] Tainted: [L]=SOFTLOCKUP [ 404.993677][T24996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.993686][T24996] Call Trace: [ 404.993693][T24996] [ 404.993700][T24996] dump_stack_lvl+0x100/0x190 [ 404.993722][T24996] should_fail_ex.cold+0x5/0xa [ 404.993750][T24996] _copy_to_user+0x32/0xd0 [ 404.993775][T24996] bpf_test_finish.isra.0+0x156/0x660 [ 404.993796][T24996] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 404.993816][T24996] ? rcu_is_watching+0x12/0xc0 [ 404.993837][T24996] ? trace_irq_enable.constprop.0+0x122/0x160 [ 404.993860][T24996] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 404.993879][T24996] ? ___migrate_enable+0x90/0xc0 [ 404.993898][T24996] ? __pfx____migrate_enable+0x10/0x10 [ 404.993917][T24996] ? rcu_is_watching+0x12/0xc0 [ 404.993942][T24996] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 404.993967][T24996] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 404.993989][T24996] ? __fget_files+0x215/0x3d0 [ 404.994002][T24996] ? lock_release+0x24d/0x310 [ 404.994024][T24996] ? __fget_files+0x21f/0x3d0 [ 404.994042][T24996] ? fput+0x79/0x100 [ 404.994060][T24996] ? __bpf_prog_get+0x97/0x2a0 [ 404.994081][T24996] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 404.994109][T24996] __sys_bpf+0x2a12/0x4e80 [ 404.994128][T24996] ? kstrtouint_from_user+0x70/0x1d0 [ 404.994150][T24996] ? __pfx___sys_bpf+0x10/0x10 [ 404.994165][T24996] ? rcu_is_watching+0x12/0xc0 [ 404.994189][T24996] ? get_pid_task+0xfc/0x250 [ 404.994214][T24996] ? rcu_is_watching+0x12/0xc0 [ 404.994234][T24996] ? get_pid_task+0xfc/0x250 [ 404.994254][T24996] ? lock_release+0x24d/0x310 [ 404.994276][T24996] ? ksys_write+0x12a/0x250 [ 404.994296][T24996] ? rcu_is_watching+0x12/0xc0 [ 404.994317][T24996] ? preempt_count_add+0x76/0x150 [ 404.994337][T24996] ? ksys_write+0x190/0x250 [ 404.994360][T24996] ? rcu_is_watching+0x12/0xc0 [ 404.994381][T24996] ? ksys_write+0x190/0x250 [ 404.994402][T24996] ? lock_release+0x24d/0x310 [ 404.994426][T24996] ? fput+0x79/0x100 [ 404.994441][T24996] ? __x64_sys_bpf+0xce/0x140 [ 404.994454][T24996] __x64_sys_bpf+0xce/0x140 [ 404.994472][T24996] ? trace_irq_enable.constprop.0+0x122/0x160 [ 404.994492][T24996] do_syscall_64+0x115/0x870 [ 404.994513][T24996] ? clear_bhb_loop+0x40/0x90 [ 404.994533][T24996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.994547][T24996] RIP: 0033:0x7fabbaf9ce59 [ 404.994559][T24996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.994577][T24996] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.994596][T24996] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 404.994609][T24996] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 404.994620][T24996] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 404.994632][T24996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.994644][T24996] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 404.994661][T24996] [ 405.113316][ T5810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.160767][T25001] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 405.165905][T25001] 9pnet_fd: p9_fd_create_tcp (25001): problem connecting socket to 127.0.0.1 [ 405.195914][ T5810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.311709][ T5810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.391664][ T5810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.524380][ T5810] bridge_slave_1: left allmulticast mode [ 405.526741][ T5810] bridge_slave_1: left promiscuous mode [ 405.529097][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.533908][ T5810] bridge_slave_0: left allmulticast mode [ 405.536260][ T5810] bridge_slave_0: left promiscuous mode [ 405.538691][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.617475][T25029] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 405.679789][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.684102][ T5810] bond_slave_0: left allmulticast mode [ 405.703323][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.707848][ T5810] bond_slave_1: left allmulticast mode [ 405.708976][T25031] FAULT_INJECTION: forcing a failure. [ 405.708976][T25031] name failslab, interval 1, probability 0, space 0, times 0 [ 405.711087][ T5810] bond0 (unregistering): Released all slaves [ 405.719962][T25031] CPU: 1 UID: 0 PID: 25031 Comm: syz.2.7435 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.719992][T25031] Tainted: [L]=SOFTLOCKUP [ 405.719999][T25031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.720011][T25031] Call Trace: [ 405.720017][T25031] [ 405.720026][T25031] dump_stack_lvl+0x100/0x190 [ 405.720053][T25031] should_fail_ex.cold+0x5/0xa [ 405.720077][T25031] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 405.720101][T25031] should_failslab+0xc2/0x120 [ 405.720124][T25031] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 405.720159][T25031] ? rcu_is_watching+0x12/0xc0 [ 405.720193][T25031] ? copy_process+0x69a/0x7ff0 [ 405.720219][T25031] copy_process+0x69a/0x7ff0 [ 405.720248][T25031] ? __pfx_copy_process+0x10/0x10 [ 405.720274][T25031] ? __kasan_kmalloc+0xaa/0xb0 [ 405.720310][T25031] ? lockdep_init_map_type+0x5c/0x250 [ 405.720335][T25031] ? lockdep_init_map_type+0x5c/0x250 [ 405.720358][T25031] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 405.720382][T25031] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 405.720402][T25031] vhost_task_create+0x1db/0x370 [ 405.720424][T25031] ? __pfx_vhost_task_create+0x10/0x10 [ 405.720444][T25031] ? rcu_is_watching+0x12/0xc0 [ 405.720473][T25031] ? __pfx_vhost_task_fn+0x10/0x10 [ 405.720496][T25031] ? __pfx___mutex_lock+0x10/0x10 [ 405.720524][T25031] ? trace_irq_enable.constprop.0+0x122/0x160 [ 405.720550][T25031] kvm_mmu_post_init_vm+0x1b3/0x360 [ 405.720579][T25031] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 405.720610][T25031] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 405.720632][T25031] ? lock_release+0x24d/0x310 [ 405.720655][T25031] kvm_vcpu_ioctl+0x730/0x1700 [ 405.720676][T25031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.720699][T25031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.720721][T25031] ? do_vfs_ioctl+0x226/0x13e0 [ 405.720744][T25031] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 405.720769][T25031] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 405.720793][T25031] ? rcu_is_watching+0x12/0xc0 [ 405.720820][T25031] ? hook_file_ioctl_common+0x140/0x440 [ 405.720847][T25031] ? selinux_file_ioctl+0x13b/0x290 [ 405.720867][T25031] ? selinux_file_ioctl+0xb6/0x290 [ 405.720887][T25031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.720909][T25031] __x64_sys_ioctl+0x18e/0x210 [ 405.720934][T25031] do_syscall_64+0x115/0x870 [ 405.720961][T25031] ? clear_bhb_loop+0x40/0x90 [ 405.720983][T25031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.721002][T25031] RIP: 0033:0x7f5e64f9ce59 [ 405.721017][T25031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.721035][T25031] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.721055][T25031] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 405.721067][T25031] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 405.721079][T25031] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.721091][T25031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.721102][T25031] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 405.721122][T25031] [ 405.722814][ T5810] bond1 (unregistering): Released all slaves [ 405.862258][ T5810] bond2 (unregistering): Released all slaves [ 405.920307][ T42] audit: type=1400 audit(1782211842.471:1622): avc: denied { write } for pid=25034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.938790][ T42] audit: type=1400 audit(1782211842.491:1623): avc: denied { setopt } for pid=25038 comm="syz.3.7436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 405.957074][ T42] audit: type=1400 audit(1782211842.511:1624): avc: denied { write } for pid=25041 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.974138][ T5810] tipc: Left network mode [ 405.983314][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.068491][ T42] audit: type=1400 audit(1782211842.621:1625): avc: denied { getopt } for pid=25048 comm="syz.2.7440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 406.092990][ T42] audit: type=1400 audit(1782211842.631:1626): avc: denied { write } for pid=25049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.110925][T25050] kvm: Disabled LAPIC found during irq injection [ 406.177028][ T5810] hsr_slave_0: left promiscuous mode [ 406.179841][ T5810] hsr_slave_1: left promiscuous mode [ 406.182554][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.185621][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.190975][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.194027][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.201825][ T5810] veth1_macvtap: left promiscuous mode [ 406.203988][ T5810] veth0_macvtap: left promiscuous mode [ 406.209199][ T5810] veth1_vlan: left promiscuous mode [ 406.211396][ T5810] veth0_vlan: left promiscuous mode [ 406.223187][ T42] audit: type=1400 audit(1782211842.771:1627): avc: denied { write } for pid=25059 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.254239][T25063] FAULT_INJECTION: forcing a failure. [ 406.254239][T25063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.260975][T25063] CPU: 3 UID: 0 PID: 25063 Comm: syz.2.7443 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.261021][T25063] Tainted: [L]=SOFTLOCKUP [ 406.261028][T25063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.261038][T25063] Call Trace: [ 406.261045][T25063] [ 406.261053][T25063] dump_stack_lvl+0x100/0x190 [ 406.261082][T25063] should_fail_ex.cold+0x5/0xa [ 406.261107][T25063] _copy_from_iter+0x1f4/0x1690 [ 406.261136][T25063] ? __asan_memset+0x23/0x50 [ 406.261156][T25063] ? __pfx__copy_from_iter+0x10/0x10 [ 406.261187][T25063] ? __pfx___alloc_skb+0x10/0x10 [ 406.261207][T25063] ? netlink_autobind.isra.0+0x160/0x370 [ 406.261239][T25063] netlink_sendmsg+0x808/0xda0 [ 406.261268][T25063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.261299][T25063] ____sys_sendmsg+0xa4d/0xbe0 [ 406.261323][T25063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.261350][T25063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.261378][T25063] ? kstrtouint_from_user+0x13c/0x1d0 [ 406.261403][T25063] ___sys_sendmsg+0x190/0x1e0 [ 406.261430][T25063] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.261457][T25063] ? get_pid_task+0x106/0x250 [ 406.261489][T25063] ? rcu_is_watching+0x12/0xc0 [ 406.261522][T25063] __sys_sendmsg+0x160/0x210 [ 406.261543][T25063] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.261568][T25063] ? rcu_is_watching+0x12/0xc0 [ 406.261594][T25063] do_syscall_64+0x115/0x870 [ 406.261620][T25063] ? clear_bhb_loop+0x40/0x90 [ 406.261664][T25063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.261682][T25063] RIP: 0033:0x7f5e64f9ce59 [ 406.261696][T25063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.261712][T25063] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.261730][T25063] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 406.261742][T25063] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 406.261753][T25063] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.261763][T25063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.261774][T25063] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 406.261792][T25063] [ 406.415324][ T5810] team0 (unregistering): Port device team_slave_1 removed [ 406.420806][ T5810] team0 (unregistering): Port device team_slave_0 removed [ 406.464020][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 406.536867][ T6099] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 406.587558][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 406.709475][ T6099] usb 8-1: config 0 has no interfaces? [ 406.711171][ T6099] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.717982][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.723866][ T6099] usb 8-1: config 0 descriptor?? [ 406.735162][T25099] syzkaller0: entered promiscuous mode [ 406.737904][T25099] syzkaller0: entered allmulticast mode [ 406.741229][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 406.930478][T25065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.935472][T25065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.960270][T21949] usb 8-1: USB disconnect, device number 46 [ 406.996409][ T6099] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 407.156432][ T6099] usb 7-1: Using ep0 maxpacket: 8 [ 407.160539][ T6099] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 407.164408][ T6099] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.169864][ T6099] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.174045][ T6099] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.178619][ T6099] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.183939][ T6099] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.188222][ T6099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.398061][ T6099] usb 7-1: usb_control_msg returned -32 [ 407.400855][ T6099] usbtmc 7-1:16.0: can't read capabilities [ 407.514210][T25129] syzkaller0: entered promiscuous mode [ 407.517249][T25129] syzkaller0: entered allmulticast mode [ 407.765297][T25151] usbtmc 7-1:16.0: control status returned 0 [ 407.841701][T25155] netlink: 'syz.4.7470': attribute type 4 has an invalid length. [ 407.844755][T25155] netlink: 'syz.4.7470': attribute type 8 has an invalid length. [ 407.848010][T25155] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7470'. [ 407.966343][T21949] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 408.057633][T21957] usb 7-1: USB disconnect, device number 45 [ 408.070770][T25175] syzkaller0: entered promiscuous mode [ 408.072803][T25175] syzkaller0: entered allmulticast mode [ 408.128820][T21949] usb 5-1: config 0 has no interfaces? [ 408.130626][T21949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.133731][T21949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.137518][T21949] usb 5-1: config 0 descriptor?? [ 408.265915][T25187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7482'. [ 408.279674][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7481'. [ 408.291569][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 408.291580][ T42] audit: type=1400 audit(1782211844.841:1632): avc: denied { write } for pid=25184 comm="syz.4.7481" name="/" dev="9p" ino=72878941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.347922][T25150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.350627][T25150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.360682][T21949] usb 5-1: USB disconnect, device number 38 [ 408.749799][T25204] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 409.055704][T25219] sit1: entered promiscuous mode [ 409.057548][T25219] sit1: entered allmulticast mode [ 409.282029][T25228] FAULT_INJECTION: forcing a failure. [ 409.282029][T25228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.286412][T25228] CPU: 2 UID: 0 PID: 25228 Comm: syz.0.7494 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.286432][T25228] Tainted: [L]=SOFTLOCKUP [ 409.286435][T25228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.286442][T25228] Call Trace: [ 409.286446][T25228] [ 409.286451][T25228] dump_stack_lvl+0x100/0x190 [ 409.286480][T25228] should_fail_ex.cold+0x5/0xa [ 409.286495][T25228] _copy_from_iter+0x1f4/0x1690 [ 409.286516][T25228] ? __asan_memset+0x23/0x50 [ 409.286526][T25228] ? __pfx__copy_from_iter+0x10/0x10 [ 409.286542][T25228] ? __pfx___alloc_skb+0x10/0x10 [ 409.286560][T25228] ? netlink_autobind.isra.0+0x160/0x370 [ 409.286578][T25228] netlink_sendmsg+0x808/0xda0 [ 409.286597][T25228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.286615][T25228] ____sys_sendmsg+0xa4d/0xbe0 [ 409.286630][T25228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.286646][T25228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.286662][T25228] ? kstrtouint_from_user+0x13c/0x1d0 [ 409.286676][T25228] ___sys_sendmsg+0x190/0x1e0 [ 409.286692][T25228] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.286708][T25228] ? get_pid_task+0x106/0x250 [ 409.286727][T25228] ? rcu_is_watching+0x12/0xc0 [ 409.286762][T25228] __sys_sendmsg+0x160/0x210 [ 409.286775][T25228] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.286792][T25228] ? rcu_is_watching+0x12/0xc0 [ 409.286814][T25228] do_syscall_64+0x115/0x870 [ 409.286838][T25228] ? clear_bhb_loop+0x40/0x90 [ 409.286857][T25228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.286875][T25228] RIP: 0033:0x7f403539ce59 [ 409.286890][T25228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.286907][T25228] RSP: 002b:00007f40362de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.286925][T25228] RAX: ffffffffffffffda RBX: 00007f4035616180 RCX: 00007f403539ce59 [ 409.286936][T25228] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 409.286946][T25228] RBP: 00007f40362de090 R08: 0000000000000000 R09: 0000000000000000 [ 409.286957][T25228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.286967][T25228] R13: 00007f4035616218 R14: 00007f4035616180 R15: 00007ffffe325b98 [ 409.286983][T25228] [ 409.805857][T25250] /dev/nullb0: Can't open blockdev [ 410.025489][T25258] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 410.199503][T25269] FAULT_INJECTION: forcing a failure. [ 410.199503][T25269] name failslab, interval 1, probability 0, space 0, times 0 [ 410.204774][T25269] CPU: 0 UID: 0 PID: 25269 Comm: syz.2.7511 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.204801][T25269] Tainted: [L]=SOFTLOCKUP [ 410.204807][T25269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.204818][T25269] Call Trace: [ 410.204824][T25269] [ 410.204831][T25269] dump_stack_lvl+0x100/0x190 [ 410.204858][T25269] should_fail_ex.cold+0x5/0xa [ 410.204880][T25269] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 410.204901][T25269] should_failslab+0xc2/0x120 [ 410.204922][T25269] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 410.204941][T25269] ? rcu_is_watching+0x12/0xc0 [ 410.204967][T25269] ? copy_process+0x69a/0x7ff0 [ 410.204993][T25269] copy_process+0x69a/0x7ff0 [ 410.205021][T25269] ? __pfx_copy_process+0x10/0x10 [ 410.205045][T25269] ? __kasan_kmalloc+0xaa/0xb0 [ 410.205064][T25269] ? lockdep_init_map_type+0x5c/0x250 [ 410.205092][T25269] ? lockdep_init_map_type+0x5c/0x250 [ 410.205115][T25269] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 410.205138][T25269] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 410.205157][T25269] vhost_task_create+0x1db/0x370 [ 410.205177][T25269] ? __pfx_vhost_task_create+0x10/0x10 [ 410.205195][T25269] ? rcu_is_watching+0x12/0xc0 [ 410.205222][T25269] ? __pfx_vhost_task_fn+0x10/0x10 [ 410.205241][T25269] ? __pfx___mutex_lock+0x10/0x10 [ 410.205268][T25269] ? trace_irq_enable.constprop.0+0x122/0x160 [ 410.205294][T25269] kvm_mmu_post_init_vm+0x1b3/0x360 [ 410.205320][T25269] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 410.205348][T25269] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 410.205367][T25269] ? lock_release+0x24d/0x310 [ 410.205389][T25269] kvm_vcpu_ioctl+0x730/0x1700 [ 410.205410][T25269] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.205430][T25269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.205452][T25269] ? do_vfs_ioctl+0x226/0x13e0 [ 410.205476][T25269] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.205501][T25269] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 410.205526][T25269] ? rcu_is_watching+0x12/0xc0 [ 410.205550][T25269] ? hook_file_ioctl_common+0x140/0x440 [ 410.205603][T25269] ? selinux_file_ioctl+0x13b/0x290 [ 410.205622][T25269] ? selinux_file_ioctl+0xb6/0x290 [ 410.205640][T25269] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.205661][T25269] __x64_sys_ioctl+0x18e/0x210 [ 410.205685][T25269] do_syscall_64+0x115/0x870 [ 410.205711][T25269] ? clear_bhb_loop+0x40/0x90 [ 410.205733][T25269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.205751][T25269] RIP: 0033:0x7f5e64f9ce59 [ 410.205766][T25269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.205783][T25269] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.205801][T25269] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 410.205813][T25269] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 410.205823][T25269] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.205834][T25269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.205845][T25269] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 410.205862][T25269] [ 410.360902][T25279] FAULT_INJECTION: forcing a failure. [ 410.360902][T25279] name failslab, interval 1, probability 0, space 0, times 0 [ 410.366385][T25279] CPU: 2 UID: 0 PID: 25279 Comm: syz.4.7514 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.366414][T25279] Tainted: [L]=SOFTLOCKUP [ 410.366422][T25279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.366433][T25279] Call Trace: [ 410.366440][T25279] [ 410.366447][T25279] dump_stack_lvl+0x100/0x190 [ 410.366476][T25279] should_fail_ex.cold+0x5/0xa [ 410.366506][T25279] ? __kmalloc_noprof+0xd6/0x820 [ 410.366527][T25279] should_failslab+0xc2/0x120 [ 410.366550][T25279] __kmalloc_noprof+0xfc/0x820 [ 410.366570][T25279] ? pneigh_create+0x183/0x510 [ 410.366601][T25279] pneigh_create+0x183/0x510 [ 410.366629][T25279] arp_ioctl+0xb73/0xcb0 [ 410.366650][T25279] ? __pfx_arp_ioctl+0x10/0x10 [ 410.366671][T25279] ? rcu_is_watching+0x12/0xc0 [ 410.366699][T25279] ? avc_has_extended_perms+0x33a/0x1080 [ 410.366739][T25279] ? avc_has_extended_perms+0x484/0x1080 [ 410.366766][T25279] inet_ioctl+0x1a4/0x3f0 [ 410.366784][T25279] ? __pfx_inet_ioctl+0x10/0x10 [ 410.366808][T25279] ? tomoyo_path_number_perm+0x188/0x580 [ 410.366840][T25279] sock_do_ioctl+0x118/0x280 [ 410.366866][T25279] ? __pfx_sock_do_ioctl+0x10/0x10 [ 410.366908][T25279] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.366933][T25279] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 410.366957][T25279] sock_ioctl+0x599/0x6b0 [ 410.366984][T25279] ? __pfx_sock_ioctl+0x10/0x10 [ 410.367009][T25279] ? hook_file_ioctl_common+0x140/0x440 [ 410.367036][T25279] ? selinux_file_ioctl+0x13b/0x290 [ 410.367056][T25279] ? selinux_file_ioctl+0xb6/0x290 [ 410.367077][T25279] ? __pfx_sock_ioctl+0x10/0x10 [ 410.367104][T25279] __x64_sys_ioctl+0x18e/0x210 [ 410.367127][T25279] do_syscall_64+0x115/0x870 [ 410.367154][T25279] ? clear_bhb_loop+0x40/0x90 [ 410.367175][T25279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.367195][T25279] RIP: 0033:0x7f4b8959ce59 [ 410.367211][T25279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.367228][T25279] RSP: 002b:00007f4b8a379028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.367249][T25279] RAX: ffffffffffffffda RBX: 00007f4b89815fa0 RCX: 00007f4b8959ce59 [ 410.367262][T25279] RDX: 0000200000000a80 RSI: 0000000000008955 RDI: 0000000000000003 [ 410.367273][T25279] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 410.367284][T25279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.367295][T25279] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 410.367314][T25279] [ 410.471793][T25284] gretap1: entered promiscuous mode [ 410.514581][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 410.670090][T25307] syz_tun: entered allmulticast mode [ 410.673957][T25307] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 410.677504][T25307] mroute: pending queue full, dropping entries [ 410.732766][T25316] FAULT_INJECTION: forcing a failure. [ 410.732766][T25316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.737102][T25316] CPU: 3 UID: 0 PID: 25316 Comm: syz.4.7528 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.737120][T25316] Tainted: [L]=SOFTLOCKUP [ 410.737124][T25316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.737131][T25316] Call Trace: [ 410.737135][T25316] [ 410.737139][T25316] dump_stack_lvl+0x100/0x190 [ 410.737156][T25316] should_fail_ex.cold+0x5/0xa [ 410.737171][T25316] _copy_from_iter+0x1f4/0x1690 [ 410.737188][T25316] ? __asan_memset+0x23/0x50 [ 410.737198][T25316] ? __pfx__copy_from_iter+0x10/0x10 [ 410.737214][T25316] ? __pfx___alloc_skb+0x10/0x10 [ 410.737226][T25316] ? netlink_autobind.isra.0+0x160/0x370 [ 410.737245][T25316] netlink_sendmsg+0x808/0xda0 [ 410.737261][T25316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.737280][T25316] ____sys_sendmsg+0xa4d/0xbe0 [ 410.737294][T25316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.737311][T25316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.737327][T25316] ? kstrtouint_from_user+0x13c/0x1d0 [ 410.737341][T25316] ___sys_sendmsg+0x190/0x1e0 [ 410.737357][T25316] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.737373][T25316] ? get_pid_task+0x106/0x250 [ 410.737391][T25316] ? rcu_is_watching+0x12/0xc0 [ 410.737411][T25316] __sys_sendmsg+0x160/0x210 [ 410.737423][T25316] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.737437][T25316] ? rcu_is_watching+0x12/0xc0 [ 410.737453][T25316] do_syscall_64+0x115/0x870 [ 410.737470][T25316] ? clear_bhb_loop+0x40/0x90 [ 410.737483][T25316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.737493][T25316] RIP: 0033:0x7f4b8959ce59 [ 410.737508][T25316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.737519][T25316] RSP: 002b:00007f4b8a379028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.737529][T25316] RAX: ffffffffffffffda RBX: 00007f4b89815fa0 RCX: 00007f4b8959ce59 [ 410.737536][T25316] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 410.737543][T25316] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 410.737549][T25316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.737556][T25316] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 410.737596][T25316] [ 411.136440][ T5826] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 411.242990][T25337] FAULT_INJECTION: forcing a failure. [ 411.242990][T25337] name failslab, interval 1, probability 0, space 0, times 0 [ 411.247254][T25337] CPU: 2 UID: 0 PID: 25337 Comm: syz.3.7537 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.247280][T25337] Tainted: [L]=SOFTLOCKUP [ 411.247287][T25337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.247298][T25337] Call Trace: [ 411.247304][T25337] [ 411.247311][T25337] dump_stack_lvl+0x100/0x190 [ 411.247336][T25337] should_fail_ex.cold+0x5/0xa [ 411.247357][T25337] ? __kmalloc_noprof+0xd6/0x820 [ 411.247376][T25337] should_failslab+0xc2/0x120 [ 411.247397][T25337] __kmalloc_noprof+0xfc/0x820 [ 411.247415][T25337] ? ip_options_get+0xa4/0x4f0 [ 411.247441][T25337] ip_options_get+0xa4/0x4f0 [ 411.247466][T25337] ? rcu_is_watching+0x13/0xc0 [ 411.247492][T25337] ? __pfx_ip_options_get+0x10/0x10 [ 411.247517][T25337] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 411.247542][T25337] ip_cmsg_send+0x86f/0xbc0 [ 411.247560][T25337] ? rcu_is_watching+0x13/0xc0 [ 411.247585][T25337] ? udp_cmsg_send+0x25a/0x2d0 [ 411.247612][T25337] udp_sendmsg+0x1ccf/0x2720 [ 411.247637][T25337] ? udp_lib_get_port+0x560/0x1b50 [ 411.247662][T25337] ? __pfx_udp_sendmsg+0x10/0x10 [ 411.247685][T25337] ? udp_lib_get_port+0x560/0x1b50 [ 411.247710][T25337] ? rcu_is_watching+0x12/0xc0 [ 411.247736][T25337] ? lock_release+0x24d/0x310 [ 411.247760][T25337] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 411.247780][T25337] ? inet_autobind+0x145/0x1a0 [ 411.247795][T25337] ? inet_autobind+0x145/0x1a0 [ 411.247811][T25337] ? inet_autobind+0x145/0x1a0 [ 411.247825][T25337] ? inet_autobind+0x145/0x1a0 [ 411.247839][T25337] ? __local_bh_enable_ip+0x9e/0x120 [ 411.247861][T25337] ? inet_autobind+0x14a/0x1a0 [ 411.247875][T25337] ? __pfx_udp_sendmsg+0x10/0x10 [ 411.247900][T25337] inet_sendmsg+0x105/0x140 [ 411.247918][T25337] ____sys_sendmsg+0x9c9/0xbe0 [ 411.247942][T25337] ? __pfx_inet_sendmsg+0x10/0x10 [ 411.247960][T25337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.247986][T25337] ? kstrtouint_from_user+0x13c/0x1d0 [ 411.248008][T25337] ___sys_sendmsg+0x190/0x1e0 [ 411.248033][T25337] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.248058][T25337] ? get_pid_task+0x106/0x250 [ 411.248086][T25337] ? rcu_is_watching+0x12/0xc0 [ 411.248116][T25337] __sys_sendmsg+0x160/0x210 [ 411.248134][T25337] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.248156][T25337] ? rcu_is_watching+0x12/0xc0 [ 411.248182][T25337] do_syscall_64+0x115/0x870 [ 411.248213][T25337] ? clear_bhb_loop+0x40/0x90 [ 411.248229][T25337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.248240][T25337] RIP: 0033:0x7fabbaf9ce59 [ 411.248249][T25337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.248260][T25337] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.248271][T25337] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 411.248278][T25337] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 411.248284][T25337] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 411.248291][T25337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.248297][T25337] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 411.248307][T25337] [ 411.286343][ T5826] usb 7-1: Using ep0 maxpacket: 16 [ 411.295182][T25339] FAULT_INJECTION: forcing a failure. [ 411.295182][T25339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.298838][ T5826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 411.300257][T25339] CPU: 2 UID: 0 PID: 25339 Comm: syz.3.7538 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.300273][T25339] Tainted: [L]=SOFTLOCKUP [ 411.300278][T25339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.300284][T25339] Call Trace: [ 411.300288][T25339] [ 411.300292][T25339] dump_stack_lvl+0x100/0x190 [ 411.300309][T25339] should_fail_ex.cold+0x5/0xa [ 411.300323][T25339] _copy_from_iter+0x1f4/0x1690 [ 411.300341][T25339] ? __asan_memset+0x23/0x50 [ 411.300352][T25339] ? __pfx__copy_from_iter+0x10/0x10 [ 411.300367][T25339] ? __pfx___alloc_skb+0x10/0x10 [ 411.300378][T25339] ? netlink_autobind.isra.0+0x160/0x370 [ 411.300397][T25339] netlink_sendmsg+0x808/0xda0 [ 411.300414][T25339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.300432][T25339] ____sys_sendmsg+0xa4d/0xbe0 [ 411.300447][T25339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.300464][T25339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.300480][T25339] ? kstrtouint_from_user+0x13c/0x1d0 [ 411.300493][T25339] ___sys_sendmsg+0x190/0x1e0 [ 411.300510][T25339] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.300525][T25339] ? get_pid_task+0x106/0x250 [ 411.300545][T25339] ? rcu_is_watching+0x12/0xc0 [ 411.300565][T25339] __sys_sendmsg+0x160/0x210 [ 411.300578][T25339] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.300591][T25339] ? rcu_is_watching+0x12/0xc0 [ 411.300607][T25339] do_syscall_64+0x115/0x870 [ 411.300623][T25339] ? clear_bhb_loop+0x40/0x90 [ 411.300635][T25339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.300646][T25339] RIP: 0033:0x7fabbaf9ce59 [ 411.300655][T25339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.300665][T25339] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.300676][T25339] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 411.300683][T25339] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 411.300690][T25339] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 411.300696][T25339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.300703][T25339] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 411.300713][T25339] [ 411.351317][T25343] input: syz1 as /devices/virtual/input/input22 [ 411.355668][ T5826] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 411.473549][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.478564][ T5826] usb 7-1: Product: syz [ 411.479874][ T5826] usb 7-1: Manufacturer: syz [ 411.481308][ T5826] usb 7-1: SerialNumber: syz [ 411.483917][ T5826] usb 7-1: config 0 descriptor?? [ 411.489421][ T5826] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 411.492334][ T5826] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 411.679882][T25361] FAULT_INJECTION: forcing a failure. [ 411.679882][T25361] name failslab, interval 1, probability 0, space 0, times 0 [ 411.685312][T25361] CPU: 1 UID: 0 PID: 25361 Comm: syz.3.7546 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.685341][T25361] Tainted: [L]=SOFTLOCKUP [ 411.685348][T25361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.685360][T25361] Call Trace: [ 411.685367][T25361] [ 411.685375][T25361] dump_stack_lvl+0x100/0x190 [ 411.685418][T25361] should_fail_ex.cold+0x5/0xa [ 411.685443][T25361] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 411.685465][T25361] should_failslab+0xc2/0x120 [ 411.685495][T25361] kmem_cache_alloc_noprof+0x91/0x6a0 [ 411.685518][T25361] ? skb_clone+0x190/0x400 [ 411.685542][T25361] skb_clone+0x190/0x400 [ 411.685585][T25361] netlink_deliver_tap+0xaed/0xcc0 [ 411.685615][T25361] netlink_unicast+0x62b/0x850 [ 411.685645][T25361] ? __pfx_netlink_unicast+0x10/0x10 [ 411.685676][T25361] netlink_sendmsg+0x8b0/0xda0 [ 411.685706][T25361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.685735][T25361] ____sys_sendmsg+0xa4d/0xbe0 [ 411.685754][T25361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.685776][T25361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.685797][T25361] ? kstrtouint_from_user+0x13c/0x1d0 [ 411.685815][T25361] ___sys_sendmsg+0x190/0x1e0 [ 411.685837][T25361] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.685860][T25361] ? get_pid_task+0x106/0x250 [ 411.685888][T25361] ? rcu_is_watching+0x12/0xc0 [ 411.685920][T25361] __sys_sendmsg+0x160/0x210 [ 411.685939][T25361] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.685960][T25361] ? rcu_is_watching+0x12/0xc0 [ 411.685992][T25361] do_syscall_64+0x115/0x870 [ 411.686020][T25361] ? clear_bhb_loop+0x40/0x90 [ 411.686040][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.686060][T25361] RIP: 0033:0x7fabbaf9ce59 [ 411.686075][T25361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.686095][T25361] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.686115][T25361] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 411.686128][T25361] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 411.686139][T25361] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 411.686152][T25361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.686164][T25361] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 411.686181][T25361] [ 411.969001][T25370] syz_tun: entered allmulticast mode [ 411.972541][T25370] Attempt to restore checkpoint with obsolete wellknown handles [ 412.038125][T25379] FAULT_INJECTION: forcing a failure. [ 412.038125][T25379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.043431][T25379] CPU: 0 UID: 0 PID: 25379 Comm: syz.3.7554 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.043459][T25379] Tainted: [L]=SOFTLOCKUP [ 412.043466][T25379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.043478][T25379] Call Trace: [ 412.043491][T25379] [ 412.043498][T25379] dump_stack_lvl+0x100/0x190 [ 412.043526][T25379] should_fail_ex.cold+0x5/0xa [ 412.043550][T25379] _copy_from_iter+0x1f4/0x1690 [ 412.043579][T25379] ? __asan_memset+0x23/0x50 [ 412.043598][T25379] ? __pfx__copy_from_iter+0x10/0x10 [ 412.043625][T25379] ? __pfx___alloc_skb+0x10/0x10 [ 412.043645][T25379] ? netlink_autobind.isra.0+0x160/0x370 [ 412.043676][T25379] netlink_sendmsg+0x808/0xda0 [ 412.043704][T25379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.043735][T25379] ____sys_sendmsg+0xa4d/0xbe0 [ 412.043759][T25379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.043787][T25379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.043814][T25379] ? kstrtouint_from_user+0x13c/0x1d0 [ 412.043838][T25379] ___sys_sendmsg+0x190/0x1e0 [ 412.043864][T25379] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.043891][T25379] ? get_pid_task+0x106/0x250 [ 412.043921][T25379] ? rcu_is_watching+0x12/0xc0 [ 412.043954][T25379] __sys_sendmsg+0x160/0x210 [ 412.043990][T25379] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.044014][T25379] ? rcu_is_watching+0x12/0xc0 [ 412.044042][T25379] do_syscall_64+0x115/0x870 [ 412.044069][T25379] ? clear_bhb_loop+0x40/0x90 [ 412.044090][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.044109][T25379] RIP: 0033:0x7fabbaf9ce59 [ 412.044124][T25379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.044142][T25379] RSP: 002b:00007fabbbe0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.044163][T25379] RAX: ffffffffffffffda RBX: 00007fabbb215fa0 RCX: 00007fabbaf9ce59 [ 412.044175][T25379] RDX: 0000000004000000 RSI: 0000200000006780 RDI: 0000000000000004 [ 412.044187][T25379] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 412.044199][T25379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.044211][T25379] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 412.044229][T25379] [ 412.112269][T25382] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7555'. [ 412.193262][ T5826] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 412.424618][T25396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7559'. [ 412.540665][T25404] netlink: 'syz.0.7562': attribute type 1 has an invalid length. [ 412.543225][T25404] netlink: 'syz.0.7562': attribute type 2 has an invalid length. [ 412.598601][T25405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7562'. [ 412.604789][ T5826] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 412.608348][ T5826] em28xx 7-1:0.0: board has no eeprom [ 413.615342][T25438] syzkaller0: entered promiscuous mode [ 413.617901][T25438] syzkaller0: entered allmulticast mode [ 413.626546][ T29] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 413.646910][T25324] em28xx 7-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 413.706360][ T5826] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 413.708779][ T5826] em28xx 7-1:0.0: dvb set to bulk mode. [ 413.710540][ T5893] em28xx 7-1:0.0: Binding DVB extension [ 413.714098][ T5826] usb 7-1: USB disconnect, device number 46 [ 413.716782][ T5826] em28xx 7-1:0.0: Disconnecting em28xx [ 413.729692][ T5893] em28xx 7-1:0.0: Registering input extension [ 413.732249][ T5826] em28xx 7-1:0.0: Closing input extension [ 413.738592][ T5826] em28xx 7-1:0.0: Freeing device [ 413.790178][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.793100][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 413.797475][ T29] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 413.800103][ T29] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 413.802727][ T29] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 413.805999][ T29] usb 5-1: config 14 has no interface number 0 [ 413.809097][ T29] usb 5-1: config 14 has no interface number 1 [ 413.811135][ T29] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 413.814455][ T29] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 413.818113][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.821660][ T29] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.824760][ T29] usb 5-1: config 14 interface 57 has no altsetting 0 [ 413.827330][ T29] usb 5-1: config 14 interface 228 has no altsetting 0 [ 413.831535][ T29] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 413.834563][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.837105][ T29] usb 5-1: Product: syz [ 413.838591][ T29] usb 5-1: Manufacturer: syz [ 413.840052][ T29] usb 5-1: SerialNumber: syz [ 413.935410][T25450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7576'. [ 413.939609][T25450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.947715][T25450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.249937][ T29] legousbtower 5-1:14.57: interrupt endpoints not found [ 414.446389][ T10] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 414.547997][T25480] FAULT_INJECTION: forcing a failure. [ 414.547997][T25480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.553425][T25480] CPU: 1 UID: 0 PID: 25480 Comm: syz.2.7588 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.553453][T25480] Tainted: [L]=SOFTLOCKUP [ 414.553460][T25480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.553470][T25480] Call Trace: [ 414.553478][T25480] [ 414.553485][T25480] dump_stack_lvl+0x100/0x190 [ 414.553547][T25480] should_fail_ex.cold+0x5/0xa [ 414.553570][T25480] _copy_from_user+0x2e/0xd0 [ 414.553596][T25480] copy_msghdr_from_user+0x9f/0x4c0 [ 414.553625][T25480] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 414.553654][T25480] ? kstrtouint+0xdf/0x130 [ 414.553673][T25480] ___sys_recvmsg+0xdd/0x1a0 [ 414.553698][T25480] ? __pfx____sys_recvmsg+0x10/0x10 [ 414.553732][T25480] do_recvmmsg+0x2f3/0x740 [ 414.553760][T25480] ? __pfx_do_recvmmsg+0x10/0x10 [ 414.553785][T25480] ? rcu_is_watching+0x12/0xc0 [ 414.553813][T25480] ? lock_release+0x24d/0x310 [ 414.553836][T25480] ? __mutex_unlock_slowpath+0x35d/0x930 [ 414.553867][T25480] ? __fget_files+0x21f/0x3d0 [ 414.553887][T25480] __x64_sys_recvmmsg+0x22a/0x280 [ 414.553910][T25480] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 414.553933][T25480] ? rcu_is_watching+0x12/0xc0 [ 414.553960][T25480] do_syscall_64+0x115/0x870 [ 414.553987][T25480] ? clear_bhb_loop+0x40/0x90 [ 414.554008][T25480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.554026][T25480] RIP: 0033:0x7f5e64f9ce59 [ 414.554041][T25480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.554059][T25480] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 414.554077][T25480] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 414.554090][T25480] RDX: 0000000000000001 RSI: 0000200000002cc0 RDI: 0000000000000003 [ 414.554101][T25480] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.554117][T25480] R10: 0000000040000023 R11: 0000000000000246 R12: 0000000000000001 [ 414.554128][T25480] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 414.554146][T25480] [ 414.637886][ T10] usb 8-1: config 0 has no interfaces? [ 414.640161][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.643354][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.647881][ T10] usb 8-1: config 0 descriptor?? [ 414.655330][ T42] audit: type=1400 audit(1782211851.201:1633): avc: denied { map } for pid=25485 comm="syz.2.7590" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 414.660813][ T29] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 414.668234][ T29] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 414.784070][T25492] FAULT_INJECTION: forcing a failure. [ 414.784070][T25492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.788188][T25492] CPU: 0 UID: 0 PID: 25492 Comm: syz.4.7591 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.788205][T25492] Tainted: [L]=SOFTLOCKUP [ 414.788209][T25492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.788215][T25492] Call Trace: [ 414.788219][T25492] [ 414.788223][T25492] dump_stack_lvl+0x100/0x190 [ 414.788240][T25492] should_fail_ex.cold+0x5/0xa [ 414.788254][T25492] _copy_from_iter+0x1f4/0x1690 [ 414.788270][T25492] ? __asan_memset+0x23/0x50 [ 414.788280][T25492] ? __pfx__copy_from_iter+0x10/0x10 [ 414.788296][T25492] ? __pfx___alloc_skb+0x10/0x10 [ 414.788308][T25492] ? netlink_autobind.isra.0+0x160/0x370 [ 414.788327][T25492] netlink_sendmsg+0x808/0xda0 [ 414.788343][T25492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.788361][T25492] ____sys_sendmsg+0xa4d/0xbe0 [ 414.788376][T25492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.788394][T25492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.788416][T25492] ? kstrtouint_from_user+0x13c/0x1d0 [ 414.788435][T25492] ___sys_sendmsg+0x190/0x1e0 [ 414.788454][T25492] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.788474][T25492] ? get_pid_task+0x106/0x250 [ 414.788500][T25492] ? rcu_is_watching+0x12/0xc0 [ 414.788521][T25492] __sys_sendmsg+0x160/0x210 [ 414.788533][T25492] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.788547][T25492] ? rcu_is_watching+0x12/0xc0 [ 414.788563][T25492] do_syscall_64+0x115/0x870 [ 414.788580][T25492] ? clear_bhb_loop+0x40/0x90 [ 414.788596][T25492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.788607][T25492] RIP: 0033:0x7f4b8959ce59 [ 414.788617][T25492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.788628][T25492] RSP: 002b:00007f4b8a379028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.788639][T25492] RAX: ffffffffffffffda RBX: 00007f4b89815fa0 RCX: 00007f4b8959ce59 [ 414.788646][T25492] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 414.788653][T25492] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 414.788659][T25492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.788666][T25492] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 414.788680][T25492] [ 414.867457][T25467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.870250][T25467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.882517][ T10] usb 8-1: USB disconnect, device number 47 [ 415.062743][T25509] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 415.512844][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7601'. [ 415.715956][T25529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7604'. [ 415.767541][T25532] syzkaller0: entered promiscuous mode [ 415.769837][T25532] syzkaller0: entered allmulticast mode [ 415.842781][T25533] FAULT_INJECTION: forcing a failure. [ 415.842781][T25533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.848389][T25533] CPU: 0 UID: 0 PID: 25533 Comm: syz.2.7603 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.848418][T25533] Tainted: [L]=SOFTLOCKUP [ 415.848425][T25533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.848435][T25533] Call Trace: [ 415.848443][T25533] [ 415.848451][T25533] dump_stack_lvl+0x100/0x190 [ 415.848479][T25533] should_fail_ex.cold+0x5/0xa [ 415.848502][T25533] _copy_from_iter+0x1f4/0x1690 [ 415.848533][T25533] ? __asan_memset+0x23/0x50 [ 415.848550][T25533] ? __pfx__copy_from_iter+0x10/0x10 [ 415.848576][T25533] ? __pfx___alloc_skb+0x10/0x10 [ 415.848596][T25533] ? netlink_autobind.isra.0+0x160/0x370 [ 415.848627][T25533] netlink_sendmsg+0x808/0xda0 [ 415.848656][T25533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.848687][T25533] ____sys_sendmsg+0xa4d/0xbe0 [ 415.848711][T25533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.848739][T25533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.848767][T25533] ? kstrtouint_from_user+0x13c/0x1d0 [ 415.848790][T25533] ___sys_sendmsg+0x190/0x1e0 [ 415.848818][T25533] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.848845][T25533] ? get_pid_task+0x106/0x250 [ 415.848875][T25533] ? rcu_is_watching+0x12/0xc0 [ 415.848911][T25533] __sys_sendmsg+0x160/0x210 [ 415.848938][T25533] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.848964][T25533] ? rcu_is_watching+0x12/0xc0 [ 415.848992][T25533] do_syscall_64+0x115/0x870 [ 415.849019][T25533] ? clear_bhb_loop+0x40/0x90 [ 415.849042][T25533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.849061][T25533] RIP: 0033:0x7f5e64f9ce59 [ 415.849077][T25533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.849096][T25533] RSP: 002b:00007f5e631b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.849115][T25533] RAX: ffffffffffffffda RBX: 00007f5e65216180 RCX: 00007f5e64f9ce59 [ 415.849129][T25533] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 415.849141][T25533] RBP: 00007f5e631b4090 R08: 0000000000000000 R09: 0000000000000000 [ 415.849153][T25533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.849166][T25533] R13: 00007f5e65216218 R14: 00007f5e65216180 R15: 00007ffd85ab4268 [ 415.849184][T25533] [ 416.407961][ T10] usb 5-1: USB disconnect, device number 39 [ 416.415042][ T10] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 416.464315][T25558] syzkaller0: entered promiscuous mode [ 416.468837][T25558] syzkaller0: entered allmulticast mode [ 416.874923][T25582] FAULT_INJECTION: forcing a failure. [ 416.874923][T25582] name failslab, interval 1, probability 0, space 0, times 0 [ 416.878714][T25582] CPU: 0 UID: 0 PID: 25582 Comm: syz.4.7623 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.878731][T25582] Tainted: [L]=SOFTLOCKUP [ 416.878735][T25582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.878741][T25582] Call Trace: [ 416.878745][T25582] [ 416.878750][T25582] dump_stack_lvl+0x100/0x190 [ 416.878766][T25582] should_fail_ex.cold+0x5/0xa [ 416.878780][T25582] ? __kvmalloc_node_noprof+0xf0/0x970 [ 416.878793][T25582] should_failslab+0xc2/0x120 [ 416.878806][T25582] __kvmalloc_node_noprof+0x116/0x970 [ 416.878817][T25582] ? kasan_addr_to_slab+0x41/0x60 [ 416.878829][T25582] ? __pfx___kasan_kmalloc+0x10/0x10 [ 416.878841][T25582] ? bpf_test_init.isra.0+0x88/0x100 [ 416.878854][T25582] ? bpf_test_run_xdp_live+0x16f/0x760 [ 416.878870][T25582] bpf_test_run_xdp_live+0x16f/0x760 [ 416.878884][T25582] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 416.878901][T25582] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 416.878920][T25582] ? _copy_from_user+0x59/0xd0 [ 416.878936][T25582] ? bpf_test_init.isra.0+0x51/0x100 [ 416.878950][T25582] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 416.878971][T25582] ? __fget_files+0x215/0x3d0 [ 416.878981][T25582] ? lock_release+0x24d/0x310 [ 416.878993][T25582] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.879011][T25582] ? fput+0x79/0x100 [ 416.879022][T25582] ? __bpf_prog_get+0x97/0x2a0 [ 416.879036][T25582] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.879051][T25582] __sys_bpf+0x2a12/0x4e80 [ 416.879062][T25582] ? kstrtouint_from_user+0x70/0x1d0 [ 416.879074][T25582] ? __pfx___sys_bpf+0x10/0x10 [ 416.879083][T25582] ? rcu_is_watching+0x12/0xc0 [ 416.879100][T25582] ? get_pid_task+0xfc/0x250 [ 416.879116][T25582] ? rcu_is_watching+0x12/0xc0 [ 416.879131][T25582] ? get_pid_task+0xfc/0x250 [ 416.879146][T25582] ? lock_release+0x24d/0x310 [ 416.879160][T25582] ? ksys_write+0x12a/0x250 [ 416.879175][T25582] ? rcu_is_watching+0x12/0xc0 [ 416.879191][T25582] ? preempt_count_add+0x76/0x150 [ 416.879204][T25582] ? ksys_write+0x190/0x250 [ 416.879219][T25582] ? rcu_is_watching+0x12/0xc0 [ 416.879234][T25582] ? ksys_write+0x190/0x250 [ 416.879248][T25582] ? lock_release+0x24d/0x310 [ 416.879264][T25582] ? fput+0x79/0x100 [ 416.879275][T25582] ? __x64_sys_bpf+0xce/0x140 [ 416.879285][T25582] __x64_sys_bpf+0xce/0x140 [ 416.879295][T25582] ? trace_irq_enable.constprop.0+0x122/0x160 [ 416.879311][T25582] do_syscall_64+0x115/0x870 [ 416.879327][T25582] ? clear_bhb_loop+0x40/0x90 [ 416.879340][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.879350][T25582] RIP: 0033:0x7f4b8959ce59 [ 416.879359][T25582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.879369][T25582] RSP: 002b:00007f4b8a379028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.879380][T25582] RAX: ffffffffffffffda RBX: 00007f4b89815fa0 RCX: 00007f4b8959ce59 [ 416.879387][T25582] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 416.879394][T25582] RBP: 00007f4b8a379090 R08: 0000000000000000 R09: 0000000000000000 [ 416.879400][T25582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.879406][T25582] R13: 00007f4b89816038 R14: 00007f4b89815fa0 R15: 00007ffdcba18518 [ 416.879416][T25582] [ 416.879500][ T5520] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 417.155840][T25598] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 417.156404][ T5520] usb 5-1: Using ep0 maxpacket: 8 [ 417.164080][ T5520] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 417.170105][ T5520] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 417.174100][ T5520] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 417.179463][ T5520] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 417.183413][ T5520] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.189075][ T5520] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.192671][ T5520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.407750][ T5520] usb 5-1: GET_CAPABILITIES returned 0 [ 417.407772][ T5520] usbtmc 5-1:16.0: can't read capabilities [ 417.441461][ T42] audit: type=1400 audit(1782211853.991:1634): avc: denied { write } for pid=25624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.492043][ T42] audit: type=1400 audit(1782211854.041:1635): avc: denied { write } for pid=25628 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.559525][T25636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 417.657669][T25643] syzkaller0: entered promiscuous mode [ 417.660296][T25643] syzkaller0: entered allmulticast mode [ 417.664506][T25570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7618'. [ 417.743510][ T29] usb 5-1: USB disconnect, device number 40 [ 417.821849][ T42] audit: type=1400 audit(1782211854.371:1636): avc: denied { write } for pid=25651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.869620][ T42] audit: type=1400 audit(1782211854.421:1637): avc: denied { write } for pid=25660 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.898486][T25667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7651'. [ 417.907111][T25667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7651'. [ 417.922290][T25668] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.931687][T25668] bridge_slave_0 (unregistering): left allmulticast mode [ 417.936589][T25668] bridge_slave_0 (unregistering): left promiscuous mode [ 417.939498][T25668] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.070937][ T42] audit: type=1400 audit(1782211854.621:1638): avc: denied { write } for pid=25679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.096001][ T42] audit: type=1400 audit(1782211854.641:1639): avc: denied { write } for pid=25684 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.217868][T25690] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 418.244608][T25694] vlan2: entered allmulticast mode [ 418.246193][T25694] bond0: entered allmulticast mode [ 418.247822][T25694] bond_slave_0: entered allmulticast mode [ 418.249578][T25694] bond_slave_1: entered allmulticast mode [ 418.481187][T25699] syzkaller0: entered promiscuous mode [ 418.482866][T25699] syzkaller0: entered allmulticast mode [ 418.764977][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7664'. [ 418.842620][T25713] comedi comedi0: dt2814: I/O base address or length out of range [ 418.878732][T25716] bridge0: port 1(vlan2) entered blocking state [ 418.881537][T25716] bridge0: port 1(vlan2) entered disabled state [ 418.884309][T25716] vlan2: entered allmulticast mode [ 418.887191][T25716] geneve0: entered allmulticast mode [ 418.889796][T25716] vlan2: entered promiscuous mode [ 418.891792][T25716] geneve0: entered promiscuous mode [ 418.920276][ T42] audit: type=1404 audit(1782211855.471:1640): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 418.931116][ T42] audit: type=1404 audit(1782211855.481:1641): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 418.936070][ T42] audit: type=1400 audit(1782211855.481:1642): avc: denied { create } for pid=25719 comm="syz.2.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 419.042377][T25729] netlink: 'syz.2.7673': attribute type 21 has an invalid length. [ 419.045377][T25729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7673'. [ 419.049330][T25729] netlink: 'syz.2.7673': attribute type 21 has an invalid length. [ 419.052502][T25729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7673'. [ 419.140235][T25740] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 419.206267][T25742] syzkaller0: entered promiscuous mode [ 419.208498][T25742] syzkaller0: entered allmulticast mode [ 419.217537][T25742] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7674'. [ 419.264701][T25733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7675'. [ 419.321745][T25739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7675'. [ 419.366089][T25748] FAULT_INJECTION: forcing a failure. [ 419.366089][T25748] name failslab, interval 1, probability 0, space 0, times 0 [ 419.370086][T25748] CPU: 0 UID: 0 PID: 25748 Comm: syz.0.7677 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.370116][T25748] Tainted: [L]=SOFTLOCKUP [ 419.370125][T25748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.370136][T25748] Call Trace: [ 419.370152][T25748] [ 419.370161][T25748] dump_stack_lvl+0x100/0x190 [ 419.370203][T25748] should_fail_ex.cold+0x5/0xa [ 419.370225][T25748] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 419.370251][T25748] should_failslab+0xc2/0x120 [ 419.370276][T25748] kmem_cache_alloc_noprof+0x91/0x6a0 [ 419.370298][T25748] ? skb_clone+0x190/0x400 [ 419.370328][T25748] skb_clone+0x190/0x400 [ 419.370349][T25748] netlink_deliver_tap+0xaed/0xcc0 [ 419.370378][T25748] netlink_unicast+0x62b/0x850 [ 419.370406][T25748] ? __pfx_netlink_unicast+0x10/0x10 [ 419.370433][T25748] ? __build_skb_around+0x278/0x390 [ 419.370466][T25748] netlink_sendmsg+0x8b0/0xda0 [ 419.370494][T25748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.370525][T25748] ____sys_sendmsg+0xa4d/0xbe0 [ 419.370549][T25748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.370576][T25748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.370604][T25748] ? kstrtouint_from_user+0x13c/0x1d0 [ 419.370629][T25748] ___sys_sendmsg+0x190/0x1e0 [ 419.370655][T25748] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.370682][T25748] ? get_pid_task+0x106/0x250 [ 419.370712][T25748] ? rcu_is_watching+0x12/0xc0 [ 419.370746][T25748] __sys_sendmsg+0x160/0x210 [ 419.370767][T25748] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.370791][T25748] ? rcu_is_watching+0x12/0xc0 [ 419.370818][T25748] do_syscall_64+0x115/0x870 [ 419.370846][T25748] ? clear_bhb_loop+0x40/0x90 [ 419.370868][T25748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.370886][T25748] RIP: 0033:0x7f403539ce59 [ 419.370907][T25748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.370925][T25748] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.370943][T25748] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 419.370957][T25748] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 419.370969][T25748] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 419.370982][T25748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.370994][T25748] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 419.371013][T25748] [ 419.506189][T25751] syzkaller0: entered promiscuous mode [ 419.508515][T25751] syzkaller0: entered allmulticast mode [ 419.648601][T25763] FAULT_INJECTION: forcing a failure. [ 419.648601][T25763] name failslab, interval 1, probability 0, space 0, times 0 [ 419.653778][T25763] CPU: 2 UID: 0 PID: 25763 Comm: syz.2.7681 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.653805][T25763] Tainted: [L]=SOFTLOCKUP [ 419.653811][T25763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.653821][T25763] Call Trace: [ 419.653827][T25763] [ 419.653833][T25763] dump_stack_lvl+0x100/0x190 [ 419.653859][T25763] should_fail_ex.cold+0x5/0xa [ 419.653876][T25763] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 419.653895][T25763] should_failslab+0xc2/0x120 [ 419.653924][T25763] kmem_cache_alloc_noprof+0x91/0x6a0 [ 419.653944][T25763] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 419.653970][T25763] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 419.653996][T25763] mmu_topup_memory_caches+0x25/0x170 [ 419.654024][T25763] kvm_mmu_load+0xd6/0x23e0 [ 419.654048][T25763] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 419.654068][T25763] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 419.654089][T25763] ? __pfx_kvm_mmu_load+0x10/0x10 [ 419.654114][T25763] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 419.654136][T25763] ? kvm_check_and_inject_events+0x961/0x1070 [ 419.654163][T25763] ? record_steal_time+0x3b0/0xbb0 [ 419.654186][T25763] vcpu_run+0x3a57/0x5d50 [ 419.654217][T25763] ? __pfx_vcpu_run+0x10/0x10 [ 419.654244][T25763] ? rcu_is_watching+0x12/0xc0 [ 419.654271][T25763] ? rcu_is_watching+0x12/0xc0 [ 419.654295][T25763] ? lock_acquire+0x301/0x370 [ 419.654317][T25763] ? rcu_is_watching+0x12/0xc0 [ 419.654344][T25763] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 419.654371][T25763] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 419.654402][T25763] kvm_vcpu_ioctl+0x730/0x1700 [ 419.654423][T25763] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 419.654444][T25763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.654467][T25763] ? do_vfs_ioctl+0x226/0x13e0 [ 419.654490][T25763] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 419.654513][T25763] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 419.654536][T25763] ? rcu_is_watching+0x12/0xc0 [ 419.654563][T25763] ? hook_file_ioctl_common+0x140/0x440 [ 419.654589][T25763] ? selinux_file_ioctl+0x13b/0x290 [ 419.654608][T25763] ? selinux_file_ioctl+0xb6/0x290 [ 419.654626][T25763] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 419.654648][T25763] __x64_sys_ioctl+0x18e/0x210 [ 419.654672][T25763] do_syscall_64+0x115/0x870 [ 419.654698][T25763] ? clear_bhb_loop+0x40/0x90 [ 419.654719][T25763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.654737][T25763] RIP: 0033:0x7f5e64f9ce59 [ 419.654750][T25763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.654766][T25763] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.654785][T25763] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 419.654798][T25763] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 419.654808][T25763] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.654820][T25763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.654830][T25763] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 419.654847][T25763] [ 419.831570][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 419.831586][ T42] audit: type=1400 audit(1782211856.381:1722): avc: denied { name_bind } for pid=25767 comm="syz.0.7683" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 419.845218][ T42] audit: type=1400 audit(1782211856.381:1723): avc: denied { node_bind } for pid=25767 comm="syz.0.7683" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 419.854146][ T42] audit: type=1400 audit(1782211856.381:1724): avc: denied { allowed } for pid=25767 comm="syz.0.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 419.861910][ T42] audit: type=1400 audit(1782211856.381:1725): avc: denied { prog_load } for pid=25767 comm="syz.0.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 419.868134][ T42] audit: type=1400 audit(1782211856.381:1726): avc: denied { create } for pid=25767 comm="syz.0.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 419.873962][ T42] audit: type=1400 audit(1782211856.381:1727): avc: denied { ioctl } for pid=25767 comm="syz.0.7683" path="socket:[191217]" dev="sockfs" ino=191217 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 419.881566][ T42] audit: type=1400 audit(1782211856.381:1728): avc: denied { write } for pid=25767 comm="syz.0.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 419.888996][ T42] audit: type=1400 audit(1782211856.381:1729): avc: denied { write } for pid=25767 comm="syz.0.7683" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.896212][ T42] audit: type=1400 audit(1782211856.391:1730): avc: denied { ioctl } for pid=25767 comm="syz.0.7683" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.964576][ T42] audit: type=1400 audit(1782211856.511:1731): avc: denied { accept } for pid=25772 comm="syz.2.7685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.086419][ T29] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 420.248232][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 420.249633][T21956] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 420.251363][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 420.257422][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.262735][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 420.265460][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 420.267910][ T29] usb 5-1: Product: syz [ 420.269258][ T29] usb 5-1: Manufacturer: syz [ 420.270738][ T29] usb 5-1: SerialNumber: syz [ 420.401149][T21956] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 420.405062][T21956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 420.408575][T21956] usb 7-1: Product: syz [ 420.410388][T21956] usb 7-1: Manufacturer: syz [ 420.412382][T21956] usb 7-1: SerialNumber: syz [ 420.415851][T21956] usb 7-1: config 0 descriptor?? [ 420.420009][T21956] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 420.423291][T21956] dvb-usb: bulk message failed: -22 (2/0) [ 420.427598][T21956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.431900][T21956] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 420.435152][T21956] usb 7-1: media controller created [ 420.443750][T21956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.477220][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 420.620021][T25777] dvb-usb: bulk message failed: -22 (4/0) [ 420.622459][T25777] cxusb: i2c read failed [ 420.629817][T25777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.635869][T25777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.643540][T21956] cxusb: set interface failed [ 420.645589][T21956] dvb-usb: bulk message failed: -22 (1/0) [ 420.659348][T21956] DVB: Unable to find symbol mt352_attach() [ 420.661900][T21956] dvb-usb: bulk message failed: -22 (5/0) [ 420.664257][T21956] zl10353_read_register: readreg error (reg=127, ret==-121) [ 420.668351][T21956] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 420.680457][T25768] fuse: Bad value for 'fd' [ 420.683247][T21949] usb 5-1: USB disconnect, device number 41 [ 420.688220][T21949] usblp0: removed [ 420.716436][T21956] rc_core: IR keymap rc-dvico-mce not found [ 420.719040][T21956] Registered IR keymap rc-empty [ 420.721912][T21956] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 420.727144][T21956] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input24 [ 420.732190][T21956] dvb-usb: schedule remote query interval to 100 msecs. [ 420.735064][T21956] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 420.739699][T21956] usb 7-1: USB disconnect, device number 47 [ 420.763533][T21956] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 421.377319][T25809] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.380819][T25810] netlink: 'syz.4.7699': attribute type 1 has an invalid length. [ 421.383693][T25810] __nla_validate_parse: 1 callbacks suppressed [ 421.383707][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7699'. [ 421.384397][T25809] bridge_slave_0 (unregistering): left allmulticast mode [ 421.392689][T25809] bridge_slave_0 (unregistering): left promiscuous mode [ 421.395713][T25809] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.436376][T21956] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 421.518562][T25804] overlay: ./file0 is not a directory [ 421.544899][T25816] loop5: detected capacity change from 0 to 7 [ 421.549260][T25816] Dev loop5: unable to read RDB block 7 [ 421.551773][T25816] loop5: unable to read partition table [ 421.554322][T25816] loop5: partition table beyond EOD, truncated [ 421.554787][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7702'. [ 421.557384][T25816] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.596402][T21956] usb 7-1: Using ep0 maxpacket: 8 [ 421.600495][T21956] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 421.604244][T21956] usb 7-1: config 179 has no interface number 0 [ 421.607660][T21956] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 421.612444][T21956] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 421.617577][T21956] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 421.622568][T21956] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 421.627583][T21956] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 421.633582][T21956] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 421.637627][T21956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.643217][T25790] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.850017][T21956] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input25 [ 422.050887][T21956] usb 7-1: USB disconnect, device number 48 [ 422.053559][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 422.053604][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 422.173243][T25836] netlink: 'syz.3.7709': attribute type 10 has an invalid length. [ 422.224270][T25840] FAULT_INJECTION: forcing a failure. [ 422.224270][T25840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.230096][T25840] CPU: 1 UID: 0 PID: 25840 Comm: syz.3.7711 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.230126][T25840] Tainted: [L]=SOFTLOCKUP [ 422.230134][T25840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.230144][T25840] Call Trace: [ 422.230152][T25840] [ 422.230158][T25840] dump_stack_lvl+0x100/0x190 [ 422.230186][T25840] should_fail_ex.cold+0x5/0xa [ 422.230210][T25840] should_fail_alloc_page+0xeb/0x140 [ 422.230235][T25840] prepare_alloc_pages+0x1f0/0x5f0 [ 422.230261][T25840] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 422.230283][T25840] ? __pfx_avc_has_perm+0x10/0x10 [ 422.230309][T25840] ? rcu_is_watching+0x12/0xc0 [ 422.230337][T25840] ? unwind_next_frame+0x3be/0x2090 [ 422.230356][T25840] ? rcu_is_watching+0x12/0xc0 [ 422.230383][T25840] ? rcu_is_watching+0x12/0xc0 [ 422.230408][T25840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 422.230427][T25840] ? lock_release+0x24d/0x310 [ 422.230450][T25840] ? page_table_check_set+0x486/0x920 [ 422.230474][T25840] ? xas_find+0x32c/0x8e0 [ 422.230490][T25840] ? pte_offset_map_lock+0x174/0x320 [ 422.230509][T25840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.230530][T25840] ? policy_nodemask+0xed/0x4f0 [ 422.230555][T25840] alloc_pages_mpol+0x1fb/0x540 [ 422.230579][T25840] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 422.230604][T25840] folio_alloc_mpol_noprof+0x36/0x260 [ 422.230633][T25840] vma_alloc_folio_noprof+0xed/0x1d0 [ 422.230659][T25840] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 422.230686][T25840] ? rcu_is_watching+0x12/0xc0 [ 422.230712][T25840] do_anonymous_page+0xb2b/0x2080 [ 422.230737][T25840] ? rcu_read_unlock+0x2d/0xb0 [ 422.230754][T25840] __handle_mm_fault+0x1d2c/0x2a00 [ 422.230783][T25840] ? __pfx___handle_mm_fault+0x10/0x10 [ 422.230811][T25840] ? __pfx_vma_start_read+0x10/0x10 [ 422.230838][T25840] ? rcu_is_watching+0x12/0xc0 [ 422.230867][T25840] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 422.230892][T25840] handle_mm_fault+0x37b/0xa30 [ 422.230920][T25840] do_user_addr_fault+0x5a3/0x12f0 [ 422.230950][T25840] exc_page_fault+0x6f/0xd0 [ 422.230975][T25840] asm_exc_page_fault+0x26/0x30 [ 422.230995][T25840] RIP: 0033:0x7fabbae5e60b [ 422.231011][T25840] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 422.231030][T25840] RSP: 002b:00007fabbbe0dfa0 EFLAGS: 00010206 [ 422.231052][T25840] RAX: 0000000000000000 RBX: 00007fabbb215fa0 RCX: 0000000000000000 [ 422.231065][T25840] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0 [ 422.231076][T25840] RBP: 00007fabbbe0f090 R08: 0000000000000000 R09: 0000000000000000 [ 422.231088][T25840] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001 [ 422.231100][T25840] R13: 00007fabbb216038 R14: 00007fabbb215fa0 R15: 00007ffc01df4098 [ 422.231118][T25840] [ 422.231129][T25840] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 422.544920][T25847] input: syz1 as /devices/virtual/input/input26 [ 423.046398][ T29] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 423.206410][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 423.209268][ T29] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 423.211842][ T29] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 423.214438][ T29] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 423.217519][ T29] usb 8-1: config 250 has no interface number 0 [ 423.219499][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 423.223718][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 423.227398][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 423.230504][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 423.233573][ T29] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 423.237649][ T29] usb 8-1: config 250 interface 228 has no altsetting 0 [ 423.241687][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 423.245244][ T29] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 423.248592][ T29] usb 8-1: Product: syz [ 423.250192][ T29] usb 8-1: SerialNumber: syz [ 423.255247][ T29] hub 8-1:250.228: bad descriptor, ignoring hub [ 423.257299][ T29] hub 8-1:250.228: probe with driver hub failed with error -5 [ 423.458918][ T29] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 423.483339][T25861] FAULT_INJECTION: forcing a failure. [ 423.483339][T25861] name failslab, interval 1, probability 0, space 0, times 0 [ 423.488358][T25861] CPU: 0 UID: 0 PID: 25861 Comm: syz.2.7719 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.488385][T25861] Tainted: [L]=SOFTLOCKUP [ 423.488392][T25861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 423.488402][T25861] Call Trace: [ 423.488416][T25861] [ 423.488423][T25861] dump_stack_lvl+0x100/0x190 [ 423.488460][T25861] should_fail_ex.cold+0x5/0xa [ 423.488485][T25861] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 423.488508][T25861] should_failslab+0xc2/0x120 [ 423.488529][T25861] kmem_cache_alloc_noprof+0x91/0x6a0 [ 423.488548][T25861] ? skb_clone+0x190/0x400 [ 423.488574][T25861] skb_clone+0x190/0x400 [ 423.488593][T25861] netlink_deliver_tap+0xaed/0xcc0 [ 423.488620][T25861] netlink_unicast+0x62b/0x850 [ 423.488646][T25861] ? __pfx_netlink_unicast+0x10/0x10 [ 423.488675][T25861] netlink_sendmsg+0x8b0/0xda0 [ 423.488702][T25861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.488731][T25861] ____sys_sendmsg+0xa4d/0xbe0 [ 423.488755][T25861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.488781][T25861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.488807][T25861] ? kstrtouint_from_user+0x13c/0x1d0 [ 423.488829][T25861] ___sys_sendmsg+0x190/0x1e0 [ 423.488855][T25861] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.488880][T25861] ? get_pid_task+0x106/0x250 [ 423.488910][T25861] ? rcu_is_watching+0x12/0xc0 [ 423.488943][T25861] __sys_sendmsg+0x160/0x210 [ 423.488962][T25861] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.488984][T25861] ? rcu_is_watching+0x12/0xc0 [ 423.489010][T25861] do_syscall_64+0x115/0x870 [ 423.489036][T25861] ? clear_bhb_loop+0x40/0x90 [ 423.489055][T25861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.489072][T25861] RIP: 0033:0x7f5e64f9ce59 [ 423.489099][T25861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.489116][T25861] RSP: 002b:00007f5e631f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.489133][T25861] RAX: ffffffffffffffda RBX: 00007f5e65215fa0 RCX: 00007f5e64f9ce59 [ 423.489144][T25861] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 423.489158][T25861] RBP: 00007f5e631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.489168][T25861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.489178][T25861] R13: 00007f5e65216038 R14: 00007f5e65215fa0 R15: 00007ffd85ab4268 [ 423.489195][T25861] [ 423.726342][T25866] syzkaller0: entered promiscuous mode [ 423.728700][T25866] syzkaller0: entered allmulticast mode [ 423.757396][T21948] usb 8-1: USB disconnect, device number 48 [ 423.761632][T21948] usblp0: removed [ 424.550757][T25896] netlink: 'syz.2.7733': attribute type 11 has an invalid length. [ 424.714066][T25911] xt_connbytes: Forcing CT accounting to be enabled [ 424.716388][T25911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.839069][T25922] xt_hashlimit: invalid interval [ 424.841259][T25922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7743'. [ 424.843729][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 424.843738][ T42] audit: type=1400 audit(1782211861.391:1792): avc: denied { map_read map_write } for pid=25921 comm="syz.3.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 424.860733][ T42] audit: type=1400 audit(1782211861.411:1793): avc: denied { prog_run } for pid=25923 comm="syz.4.7744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 424.876222][ T42] audit: type=1400 audit(1782211861.421:1794): avc: denied { create } for pid=25925 comm="syz.3.7745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 424.916062][T25929] FAULT_INJECTION: forcing a failure. [ 424.916062][T25929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.918796][ T42] audit: type=1404 audit(1782211861.471:1795): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 424.923445][T25929] CPU: 2 UID: 0 PID: 25929 Comm: syz.0.7746 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.923474][T25929] Tainted: [L]=SOFTLOCKUP [ 424.923482][T25929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.923493][T25929] Call Trace: [ 424.923500][T25929] [ 424.923508][T25929] dump_stack_lvl+0x100/0x190 [ 424.923536][T25929] should_fail_ex.cold+0x5/0xa [ 424.923560][T25929] _copy_to_user+0x32/0xd0 [ 424.923588][T25929] bpf_test_finish.isra.0+0x4df/0x660 [ 424.923615][T25929] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 424.923642][T25929] ? rcu_is_watching+0x12/0xc0 [ 424.923670][T25929] ? trace_irq_enable.constprop.0+0x122/0x160 [ 424.923696][T25929] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 424.923722][T25929] ? ___migrate_enable+0x90/0xc0 [ 424.923745][T25929] ? __pfx____migrate_enable+0x10/0x10 [ 424.923771][T25929] ? rcu_is_watching+0x12/0xc0 [ 424.923797][T25929] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 424.923829][T25929] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 424.923859][T25929] ? __fget_files+0x215/0x3d0 [ 424.923877][T25929] ? lock_release+0x24d/0x310 [ 424.923900][T25929] ? __fget_files+0x21f/0x3d0 [ 424.923919][T25929] ? fput+0x79/0x100 [ 424.923938][T25929] ? __bpf_prog_get+0x97/0x2a0 [ 424.923962][T25929] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 424.923989][T25929] __sys_bpf+0x2a12/0x4e80 [ 424.924010][T25929] ? kstrtouint_from_user+0x70/0x1d0 [ 424.924031][T25929] ? __pfx___sys_bpf+0x10/0x10 [ 424.924048][T25929] ? rcu_is_watching+0x12/0xc0 [ 424.924073][T25929] ? get_pid_task+0xfc/0x250 [ 424.924100][T25929] ? rcu_is_watching+0x12/0xc0 [ 424.924126][T25929] ? get_pid_task+0xfc/0x250 [ 424.924168][T25929] ? lock_release+0x24d/0x310 [ 424.924193][T25929] ? ksys_write+0x12a/0x250 [ 424.924218][T25929] ? rcu_is_watching+0x12/0xc0 [ 424.924259][T25929] ? preempt_count_add+0x76/0x150 [ 424.924282][T25929] ? ksys_write+0x190/0x250 [ 424.924312][T25929] ? rcu_is_watching+0x12/0xc0 [ 424.924338][T25929] ? ksys_write+0x190/0x250 [ 424.924362][T25929] ? lock_release+0x24d/0x310 [ 424.924389][T25929] ? fput+0x79/0x100 [ 424.924410][T25929] ? __x64_sys_bpf+0xce/0x140 [ 424.924430][T25929] __x64_sys_bpf+0xce/0x140 [ 424.924448][T25929] ? trace_irq_enable.constprop.0+0x122/0x160 [ 424.924473][T25929] do_syscall_64+0x115/0x870 [ 424.924500][T25929] ? clear_bhb_loop+0x40/0x90 [ 424.924522][T25929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.924541][T25929] RIP: 0033:0x7f403539ce59 [ 424.924557][T25929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.924575][T25929] RSP: 002b:00007f4036320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.924593][T25929] RAX: ffffffffffffffda RBX: 00007f4035615fa0 RCX: 00007f403539ce59 [ 424.924606][T25929] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 424.924619][T25929] RBP: 00007f4036320090 R08: 0000000000000000 R09: 0000000000000000 [ 424.924630][T25929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.924642][T25929] R13: 00007f4035616038 R14: 00007f4035615fa0 R15: 00007ffffe325b98 [ 424.924661][T25929] [ 425.032834][ T42] audit: type=1400 audit(1782211861.471:1796): avc: denied { create } for pid=25934 comm="syz.3.7749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 425.038938][ T42] audit: type=1400 audit(1782211861.471:1797): avc: denied { create } for pid=25934 comm="syz.3.7749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 425.045168][ T42] audit: type=1400 audit(1782211861.471:1798): avc: denied { mount } for pid=25934 comm="syz.3.7749" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=0 [ 425.045191][ T42] audit: type=1400 audit(1782211861.481:1799): avc: denied { read write } for pid=23050 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 425.045209][ T42] audit: type=1400 audit(1782211861.491:1800): avc: denied { read write } for pid=24204 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 425.045227][ T42] audit: type=1400 audit(1782211861.491:1801): avc: denied { create } for pid=25936 comm="syz.3.7750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 432.207020][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 432.207040][ T42] audit: type=1400 audit(1782211868.761:1826): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=53122 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 434.867234][ T42] audit: type=1400 audit(1782211871.421:1827): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 435.910683][ T42] audit: type=1400 audit(1782211872.461:1828): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 436.868761][ T42] audit: type=1400 audit(1782211873.421:1829): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 437.368753][ T42] audit: type=1400 audit(1782211873.921:1830): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 438.369742][ T42] audit: type=1400 audit(1782211874.921:1831): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 438.910452][ T42] audit: type=1400 audit(1782211875.461:1832): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 439.807169][ T42] audit: type=1400 audit(1782211876.361:1833): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=53122 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 443.872743][ T42] audit: type=1400 audit(1782211880.421:1834): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 444.910501][ T42] audit: type=1400 audit(1782211881.461:1835): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 444.928077][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.931149][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.373508][ T42] audit: type=1400 audit(1782211881.921:1836): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 446.057261][ T5812] macvlan4: left allmulticast mode [ 446.059536][ T5812] ip6gretap0: left allmulticast mode [ 446.061917][ T5812] macvlan4: left promiscuous mode [ 446.064278][ T5812] bridge0: port 3(macvlan4) entered disabled state [ 446.068453][ T5812] bridge_slave_1: left allmulticast mode [ 446.070950][ T5812] bridge_slave_1: left promiscuous mode [ 446.073314][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.077288][ T5812] bridge_slave_0: left allmulticast mode [ 446.079715][ T5812] bridge_slave_0: left promiscuous mode [ 446.082125][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.087822][ T5812] lo: left allmulticast mode [ 446.160274][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.164189][ T5812] bond_slave_0: left allmulticast mode [ 446.174116][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.182730][ T5812] bond_slave_1: left allmulticast mode [ 446.185553][ T5812] bond0 (unregistering): Released all slaves [ 446.190522][ T5812] bond1 (unregistering): Released all slaves [ 446.196825][ T5812] bond2 (unregistering): Released all slaves [ 446.283156][ T5812] tipc: Left network mode [ 446.474331][ T5812] hsr_slave_0: left promiscuous mode [ 446.476650][ T5812] hsr_slave_1: left promiscuous mode [ 446.478554][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.480876][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.483462][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.485781][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.490294][ T5812] veth1_to_team: left allmulticast mode [ 446.492067][ T5812] veth1_to_team: left promiscuous mode [ 446.493775][ T5812] veth1_macvtap: left promiscuous mode [ 446.495467][ T5812] veth0_macvtap: left promiscuous mode [ 446.497375][ T5812] veth1_vlan: left promiscuous mode [ 446.498994][ T5812] veth0_vlan: left promiscuous mode [ 446.562653][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 446.569937][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 446.882105][ T5812] IPVS: stop unused estimator thread 0... [ 451.328390][ T42] audit: type=1400 audit(1782211887.881:1837): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 451.880176][ T42] audit: type=1400 audit(1782211888.431:1838): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 453.247684][ T42] audit: type=1400 audit(1782211889.801:1839): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 454.527777][ T42] audit: type=1400 audit(1782211891.081:1840): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=53122 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 456.910068][ T42] audit: type=1400 audit(1782211893.461:1841): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 457.384641][ T42] audit: type=1400 audit(1782211893.931:1842): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 466.393548][ T42] audit: type=1400 audit(1782211902.941:1843): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 468.895709][ T42] audit: type=1400 audit(1782211905.441:1844): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 468.909778][ T42] audit: type=1400 audit(1782211905.461:1845): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 472.398533][ T42] audit: type=1400 audit(1782211908.951:1846): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 480.909976][ T42] audit: type=1400 audit(1782211917.461:1847): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 483.326749][ T42] audit: type=1400 audit(1782211919.881:1848): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=53122 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 492.909609][ T42] audit: type=1400 audit(1782211929.461:1849): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 504.909593][ T42] audit: type=1400 audit(1782211941.461:1850): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 506.369404][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.371754][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.487982][ T42] audit: type=1400 audit(1782211948.041:1851): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 516.608702][ T42] audit: type=1400 audit(1782211953.161:1852): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 516.909452][ T42] audit: type=1400 audit(1782211953.461:1853): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 525.448918][ T42] audit: type=1400 audit(1782211962.001:1854): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 528.909134][ T42] audit: type=1400 audit(1782211965.461:1855): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 540.908847][ T42] audit: type=1400 audit(1782211977.461:1856): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 542.206744][ T42] audit: type=1400 audit(1782211978.761:1857): avc: denied { recv } for pid=0 comm="swapper/3" saddr=127.0.0.1 src=53122 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 552.908722][ T42] audit: type=1400 audit(1782211989.461:1858): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 564.908514][ T42] audit: type=1400 audit(1782212001.461:1859): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 567.807248][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.809850][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.908486][ T42] audit: type=1400 audit(1782212013.461:1860): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 588.908567][ T42] audit: type=1400 audit(1782212025.461:1861): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 600.908377][ T42] audit: type=1400 audit(1782212037.461:1862): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 612.907898][ T42] audit: type=1400 audit(1782212049.461:1863): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 624.907683][ T42] audit: type=1400 audit(1782212061.461:1864): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 629.248006][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.251937][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.369335][ T42] audit: type=1400 audit(1782212070.921:1865): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 636.907832][ T42] audit: type=1400 audit(1782212073.461:1866): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 644.608377][ T42] audit: type=1400 audit(1782212081.161:1867): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 648.908209][ T42] audit: type=1400 audit(1782212085.461:1868): avc: denied { recv } for pid=9640 comm="kworker/u33:55" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 659.967359][ T42] audit: type=1400 audit(1782212096.521:1869): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=53122 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 660.907660][ T42] audit: type=1400 audit(1782212097.461:1870): avc: denied { recv } for pid=9593 comm="kworker/u33:11" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 672.907213][ T42] audit: type=1400 audit(1782212109.461:1871): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 684.907164][ T42] audit: type=1400 audit(1782212121.461:1872): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 690.687378][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.689345][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.906895][ T42] audit: type=1400 audit(1782212133.461:1873): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 708.906570][ T42] audit: type=1400 audit(1782212145.461:1874): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 720.906429][ T42] audit: type=1400 audit(1782212157.451:1875): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=38498 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 VM DIAGNOSIS: 10:51:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000001816524 RBX=ffffffff8e491480 RCX=ffffffff8b9ae2d5 RDX=0000000000000001 RSI=ffffffff8c1e6000 RDI=ffffffff81de4aa7 RBP=fffffbfff1c92290 RSP=ffffffff8e407e10 R8 =0000000000000000 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=ffffffff81d51f9c R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1c80fc6 R15=dffffc0000000000 RIP=ffffffff8b9ac89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d62ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b95dab8168 CR3=0000000035541000 CR4=00352ef0 DR0=000004000002002c DR1=fffeffffff7fff00 DR2=0000000080000002 DR3=0000000000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000002b Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463657078656e75 2064657469786520 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20444950206d6f72 6620796c64657463 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b95dabc0d0 000055b95daeab00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b95dac1510 000055b95dac15c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6f726620796c64 657463657078656e 7520646574697865 2073257325732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 484a5743055c4941 40514640555d404b 50054140514c5d40 0556005600560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 973f9d66a4a68cfd 00000000000080fe 0001001400000008 fd80400ada311081 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 000009bd000009bd ffffffffffffffff 00060014973f9d66 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4a68cfd00000000 000080fe00010014 00000008fd80400a da3110816a3a6504 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000009b5000009b5 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014c76e2f2c fb4b238c00000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 615f695f655f0063 6420656120202031 3220646120322020 0a6e695f20310a00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b6d7cc RBX=ffff88801e6ca540 RCX=ffffffff8b9ae2d5 RDX=0000000000000001 RSI=ffffffff8c1e6000 RDI=ffffffff81de4aa7 RBP=ffffed1003cd94a8 RSP=ffffc90000177e00 R8 =0000000000000000 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=ffffffff81d51f9c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8b9ac89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d63ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b95dab8168 CR3=000000000e592000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000001 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000004003fff Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2409edcb266c2234 fb043838362e7ee9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47a42983118104d5 5ca15bc2c9e4f47f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7488939fd5cb1709 4c3a40f6fddee0de ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9faa55089e001ff3 a5228ef8a68543ce ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000280 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b8000001b9 00325b083d753960 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 695132603b97b47e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b935ce46c8 353e937c0033e202 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3de99392a23a83f2 6a4bb365e7dd44ce ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6700df085cfef4d6 d2a6dd94e3101b2e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 896d2aaa75d67b2b ddacb060c3f0c14f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 973f9d66a4a68cfd 00000000000080fe 0001001400000008 fd80400ada311081 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 000009bd000009bd ffffffffffffffff 00060014973f9d66 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4a68cfd00000000 000080fe00010014 00000008fd80400a da3110816a3a6504 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000009b5000009b5 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014c76e2f2c fb4b238c00000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 615f695f655f0063 6420656120202031 3220646120322020 0a6e695f20310a00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000006a336c RBX=ffff88801eab4a80 RCX=ffffffff8b9ae2d5 RDX=0000000000000001 RSI=ffffffff8c1e6000 RDI=ffffffff81de4aa7 RBP=ffffed1003d56950 RSP=ffffc90000187e00 R8 =0000000000000000 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=ffffffff94152607 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8b9ac89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d64ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb4c84bc708 CR3=00000000285a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583cd6b00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4d33ede80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4d33ede80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583cdfb18 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800401bc800301bc 800435a003000800 3590030fffffffff ffff043580030100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78bafef23798c171 7c861ef4f25153af c24f757fc263c58b 5da8c611d2712b74 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01bca003019a1000 01bc9003111af36c 3fa56289010f961c d16c447ca411e562 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100004100035 80040100000c0806 08015bea00080036 f00300080036e003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100036d0030fff ffffffffff0436c0 0300100036b00344 800436a003000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3690030fffffffff ffff043680030008 0035f00300080035 e00300100035d003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 35c00304100035b0 0300100001bcb003 0fffffffffffff04 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000066dca4 RBX=ffff88801eab2540 RCX=ffffffff8b9ae2d5 RDX=0000000000000001 RSI=ffffffff8c1e6000 RDI=ffffffff81de4aa7 RBP=ffffed1003d564a8 RSP=ffffc90000197e00 R8 =0000000000000000 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=000000a9c0f61c00 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8b9ac89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb4c84bc708 CR3=000000000e592000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b95dabc0d0 000055b95daeab00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b95dac1510 000055b95dac15c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 973f9d66a4a68cfd 00000000000080fe 0001001400000008 fd80400ada311081 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 000009bd000009bd ffffffffffffffff 00060014973f9d66 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4a68cfd00000000 000080fe00010014 00000008fd80400a da3110816a3a6504 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000009b5000009b5 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014c76e2f2c fb4b238c00000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 615f695f655f0063 6420656120202031 3220646120322020 0a6e695f20310a00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000