last executing test programs: 2m49.496011656s ago: executing program 3 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000e00), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x9000000, 0x0, 0x40}, 0x4008014) 2m49.495823459s ago: executing program 3 (id=1236): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x52ff, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 2m49.425970029s ago: executing program 3 (id=1237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bdaf00000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 2m49.423190826s ago: executing program 3 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffffff}]}}]}, 0x38}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r5, 0x5, 0x70bd26, 0xff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x840) 2m49.295810668s ago: executing program 3 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20040060) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x1c, r2, 0xe09, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200c044}, 0x400c880) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0xc1) r6 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1e, 0x0, &(0x7f00000004c0)) sendto$inet6(r6, &(0x7f0000000000)="ceaf1992a7c9048d0ba2d37e7d259c76c59dbf21b871b4bc8d85f796091e8b938ffce7f2a075862bc4d2a1ad0dd8000f9ca23ee172b77ba66a", 0x39, 0xc1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2m48.965295561s ago: executing program 3 (id=1242): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m48.840972768s ago: executing program 32 (id=1242): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.733427978s ago: executing program 4 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x41) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) renameat2(r1, &(0x7f0000000080)='./file0/file3\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000c40)=""/4096) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file3\x00', 0x4000, 0x73) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x20000d, 0x9, 0x58565559, 0x3, 0xfffffff8, 0x6, 0x6, 0x7fff, 0x2000000, 0x3, 0x3e4229c9783332e6, 0x1}}) 4.539349699s ago: executing program 4 (id=2482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.03547194s ago: executing program 4 (id=2484): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0xff, 0x3) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000840)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xa}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0xfffffffa}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x4e20, @multicast1}}, 0xe4a3, 0x3, 0x800, 0x3, 0x10, 0x5, 0x2}, &(0x7f0000000440)=0x9c) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) 3.579858736s ago: executing program 4 (id=2488): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.933834543s ago: executing program 4 (id=2493): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2000}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 2.772012526s ago: executing program 4 (id=2494): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000001480)=[{0x4, 0x10, 0x4, &(0x7f00000012c0)="fee712f7"}], 0x1}) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x40, 0x6, 0x78, {0x78, 0x24, "f1f23a6136421db01dec6b13ab8528cb2ee6904d05dd04558f0a467484eb33ede6bc6ad5c7888fc9945fc5bd76a46666ef21b94bf403c0195ab2a4209d4a0b7e21432714853e46c581191627e90bad09d4bdd28e7c37ec5a75133a96922153b6310a54ef74bd53c9941aa14563d3bfa446961c5a8c1a"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003540000005403c7a94d5b23b5b39cfa02c05cff319e7f2967f0e2e7d70a5fa5c22781800622d7e3794042ffc05a2248edb89b0c2b5eb4f2714c80f7f94ce652fc0157ddd8cd98f812bbe2edb3f90235791093ba72db20391b8237387a36994d59c9b1c2154bca0ac94204718456a04d20b31aee383e5878f62a1aec6a5b0bac5b9c37010436497f346c95bfbaa8b7d3cd3a9707ddc3"]}, &(0x7f0000000580)={0x34, &(0x7f0000000340)={0x20, 0x5, 0xb3, "60804e8eedb3bb4c57048ae36307c8092b4db44794467fc4d9debea3a5ce2e2e649bc08db682f85406e3138ebb7d98742a0e3e2a6ad1b60da1bc9b84d8c26a796f94502e726f576f0b9d7343d44ccd03be165e8cdd83b52b3a8f21635a9b4a25835a118452031ddf5247d3fe6752e085a5200a47353e7910911d6dfe9b38348f5cb1c133668944a7dc639eb790012c125f1033942be0898333313689408269eaa4e27a74ed755a0a5dfded41b6bff27dd6c4d1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x67, {0x65, "07659e16b8f9d3967ad2b508dcd26782369dbfb0c635625a33e60b6fcfa63ff1cfcfa3b308ef8046ff62e5655d93df0292b3c54bf565bab1cd473870151ef9f043a500f3f4f61cdceaf37a4b1ae9d24a227b53db6de64a4b37b058812195a629626494e301"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x7}}) 2.561301321s ago: executing program 2 (id=2496): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x82eb8314716a31ec, 0x9}}, @void, @void, @void, @void, @void, @void}, 0x3a) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') mount$fuse(0x0, 0x0, 0x0, 0x10004, &(0x7f0000002140)=ANY=[]) read$FUSE(r5, &(0x7f0000006200)={0x2020}, 0xffe8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x100040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040019) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x5d}, @l2cap_cid_signaling={{0x59}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x5, 0x1}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0xffff, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7f, 0x5}, {0x5, 0x7f}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x7, 0x4}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x92e8, 0xaa, 0x1, 0x5}}, @l2cap_conn_rsp={{0x3, 0xf8, 0x8}, {0x7, 0xff, 0x0, 0xfffe}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x3f, 0x6}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x3ff, 0x5, 0x100, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x4, 0x4b, 0x200, 0x2}}]}}, 0x62) 1.852672203s ago: executing program 2 (id=2498): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0xa00}]}, 0x24}}, 0x0) 1.781502972s ago: executing program 2 (id=2499): landlock_create_ruleset(&(0x7f0000000040)={0x3400, 0x3}, 0x18, 0x1) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) r2 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) unshare(0x6e000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) sendmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000300)=@ax25={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000380)="b1d28404f99e308927f6b131f1066f667d155a7642146b7a90d37537bc640eafcd46f1e5086b271e82034c27703c94293ae799c3511ba77615012258773610426771fe56ccd9f71d3953690ad17a042045e56a0e2e8059e43d468fd1949b0a457f3a20b35241541b9147f14acd4d02d228a7f89e671509d2687c0fc19b2efb37aac210f121d9c6411428b064206f3ca8adda364dcf0591539c620c4d9a13e9ea9089e04a4b4aa457920fdbd201ccd9327444705a9e73f166f416c90f956677", 0xbf}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="d114cbf408bb51f30e93aff67770c9e366c484e43b9d15ac971ad098123f9f14f942b49b7694ea8a4b04ed6aed66173718f396dbbc8ae3e67fa368554ebc3377322bf06403ecd9506b79b71a173de6d1f0b99f92a7d892903c69c70af0ef71c81e4d", 0x62}, {&(0x7f0000001700)="3a209f50672945e7ecba84be458b920a5c1a408ce4d99f3123346a74df883e5439294fbd6844de3b8eedb24c6170626e4d167cec5f0b45697a8b69ce971438f60b6c456a070b7b38357ee473ee666845b304bf37e82165f7e7b083a0420cf5779fff2ad76ee7573c73a86e217c6de8d7f9e5cff2c95001915b8430aeb608253a471cf9489e69aab1a350bba42127c214cdd67b800520baf2c01c6b234643156f1e6ac466833aa2a5ac7359d534c8da3c147173f122b9f9e533f3b192d5dae20fef9a13937353", 0xc6}, {&(0x7f0000001800)="81ce3fd0abf7e6ba7a686ebf2e6ed47946fea051bcfde993ea4ebc66fab37d2f8ace1121169c655ce026929dc9d156d8ad7d7fbc8a04a8cf9b61", 0x3a}, {&(0x7f0000001840)="289967fad91fa0739d07c0d797eb7ca65d15eec096ff6807b79f2e43a80d86cfcd5bde9fb7ecec1a6b56d0032b8334820615e6356433a02af4d23ef32aa6f1d94140119305afbdafd4ee481e5c95611ae7c4bcd1eeb93cff6ed846ab4dbdc79569754a69387637cfd52665a8676290a4f32bcfb489bdbfb7ee6b057cc39e6b48e20ae017efce022b36d36d27f3399dd8c3743a64b53faa01450356829615eb467b3da9963afc07efc811f98b1c8633023d274a302e2f1fadc6fd62d82a3d94893efce437b656be880c9a9ceb482999f369a46cfd", 0xd4}, {&(0x7f0000001940)="1c85885221891170cc104f1633fcecd4ddf1dc929c2a6dd2cbde2368915be2dc161e58b74fefba4194404220bc134203a0c5a2be7c337c665ae767397cf31cd43cea31f24b239cd9e693c32c25d8899644c3418214c34b75dc1e8a8e55d1e2dd501d5830206fa53a4e9943fbb8251dd233d1cc65cf2f946dfcc931b2dab2537e7d760e0ee86fc3bfa601d47e41903345cf0acaf38737329766c68da9b4de17fe76240e50b466cfa76fdf81188101eb2d22263b82826923a9b0b25d954ae687e33b22423fb291fb441911f9f31ed8a3a61346f90715ba7e37503d62ee2c36", 0xde}], 0x7, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x1310}}], 0x1, 0x84) io_uring_enter(r2, 0x366a, 0x8c70, 0x60, &(0x7f0000000000)={[0x7]}, 0x8) msgctl$IPC_RMID(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x4, r3}, 0x38) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x100c3) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x30, r4, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000f8dbdf25fc000000000000000000000000000001ff01000000000000000000000000000100000004000000000a00602006000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000a00000000000000000000000000000000000000000002004100000000000000fdffffffffffffff5000000000000000fdffffffffffffff050000000000000000000000000000000000000000000000000000000000000006000000080000400001010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x240408d5}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 1.445049458s ago: executing program 2 (id=2501): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.081510894s ago: executing program 1 (id=2503): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x5, 0x0, 0xf, 0x7, 0x8801be, 0x0}) 965.743381ms ago: executing program 1 (id=2504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 833.554955ms ago: executing program 1 (id=2505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x41) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) renameat2(r1, &(0x7f0000000080)='./file0/file3\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000c40)=""/4096) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file3\x00', 0x4000, 0x73) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x20000d, 0x9, 0x58565559, 0x3, 0xfffffff8, 0x6, 0x6, 0x7fff, 0x2000000, 0x3, 0x3e4229c9783332e6, 0x1}}) 832.502812ms ago: executing program 2 (id=2506): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x82eb8314716a31ec, 0x9}}, @void, @void, @void, @void, @void, @void}, 0x3a) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') mount$fuse(0x0, 0x0, 0x0, 0x10004, &(0x7f0000002140)=ANY=[]) read$FUSE(r5, &(0x7f0000006200)={0x2020}, 0xffe8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x100040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040019) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x5d}, @l2cap_cid_signaling={{0x59}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x5, 0x1}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0xffff, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7f, 0x5}, {0x5, 0x7f}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x7, 0x4}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x92e8, 0xaa, 0x1, 0x5}}, @l2cap_conn_rsp={{0x3, 0xf8, 0x8}, {0x7, 0xff, 0x0, 0xfffe}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x3f, 0x6}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x3ff, 0x5, 0x100, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x4, 0x4b, 0x200, 0x2}}]}}, 0x62) 831.75371ms ago: executing program 0 (id=2507): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/nf_conntrack\x00') 739.043221ms ago: executing program 1 (id=2508): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044", 0x46}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 495.59817ms ago: executing program 0 (id=2509): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1) r3 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff08004510001c005f0200070290780a010102ac1414aa11ff907800000000"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f00000003c0)='GPL\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYBLOB='-:'], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x482100, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000000002010106c20000000000000a00000308000540000ab21008000540004000040f00060073616e652d32303030300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x44884) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) syz_open_dev$evdev(0x0, 0x3217, 0xa0200) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 346.079087ms ago: executing program 1 (id=2510): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4000}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 345.693336ms ago: executing program 1 (id=2511): sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="81012dbd7000d90200000100000008"], 0x1c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0xb2b9, 0x24, 0x81, 0xe4, 0x6, 0xfc000000, 0x10003, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe769, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x7, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7c"], 0x65) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 285.217178ms ago: executing program 0 (id=2512): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x5, 0x0, 0xf, 0x7, 0x8801be, 0x0}) 212.521393ms ago: executing program 0 (id=2513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 65.59587ms ago: executing program 0 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000002c40)={0x2020}, 0x2020) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000000080)="8c0e2fb457", 0x5) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) 63.513608ms ago: executing program 2 (id=2515): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=2516): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x41) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) renameat2(r1, &(0x7f0000000080)='./file0/file3\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000c40)=""/4096) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file3\x00', 0x4000, 0x73) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x20000d, 0x9, 0x58565559, 0x3, 0xfffffff8, 0x6, 0x6, 0x7fff, 0x2000000, 0x3, 0x3e4229c9783332e6, 0x1}}) kernel console output (not intermixed with test programs): ed cc 0x0c23 length: 249 > 4 [ 161.430310][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.525219][ T1173] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.528821][ T1173] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.776417][ T1173] bridge_slave_1: left allmulticast mode [ 161.783474][ T1173] bridge_slave_1: left promiscuous mode [ 161.789494][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.802068][ T1173] bridge_slave_0: left allmulticast mode [ 161.808740][ T1173] bridge_slave_0: left promiscuous mode [ 161.812387][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.056711][ T1045] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 162.060948][ T1045] ath9k_htc: Failed to initialize the device [ 162.066155][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 162.125986][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.134814][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.139797][ T1173] bond0 (unregistering): Released all slaves [ 162.147320][ T1173] bond1 (unregistering): Released all slaves [ 162.158884][ T1173] bond2 (unregistering): (slave veth3): Releasing active interface [ 162.163963][ T1173] bond2 (unregistering): Released all slaves [ 162.192147][ T1173] bond3 (unregistering): Released all slaves [ 162.355833][ T1173] tipc: Left network mode [ 162.398941][ T40] audit: type=1400 audit(1780613679.487:15439): avc: denied { write } for pid=9774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.491478][ T40] audit: type=1400 audit(1780613679.577:15440): avc: denied { write } for pid=9779 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.589988][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 162.603553][ T9783] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 162.637574][ T9783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.645681][ T9733] xfrm0 speed is unknown, defaulting to 1000 [ 162.680687][ T40] audit: type=1400 audit(1780613679.767:15441): avc: denied { write } for pid=9786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.741026][ T40] audit: type=1400 audit(1780613679.827:15442): avc: denied { write } for pid=9789 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.808430][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 162.954959][ T40] audit: type=1400 audit(1780613680.037:15443): avc: denied { write } for pid=9800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.052418][ T40] audit: type=1400 audit(1780613680.137:15444): avc: denied { write } for pid=9806 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.110747][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 163.169879][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 163.275864][ T1173] hsr_slave_0: left promiscuous mode [ 163.280369][ T1173] hsr_slave_1: left promiscuous mode [ 163.285527][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.291090][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.295865][ T9818] syz2: rxe_newlink: already configured on ipvlan0 [ 163.304495][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.314870][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.372816][ T1173] veth1_macvtap: left promiscuous mode [ 163.378547][ T1173] veth1_vlan: left promiscuous mode [ 163.383327][ T1173] veth0_vlan: left promiscuous mode [ 163.496807][ T62] Bluetooth: hci3: command tx timeout [ 163.713255][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 163.725323][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 163.942357][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.944827][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.947623][ T9733] bridge_slave_0: entered allmulticast mode [ 163.951620][ T9733] bridge_slave_0: entered promiscuous mode [ 163.956150][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.959703][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.963603][ T9733] bridge_slave_1: entered allmulticast mode [ 163.968245][ T9733] bridge_slave_1: entered promiscuous mode [ 164.048069][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.055141][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.056786][ T40] audit: type=1400 audit(1780613681.136:15445): avc: denied { write } for pid=9842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.117175][ T40] audit: type=1400 audit(1780613681.196:15446): avc: denied { write } for pid=9845 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.122634][ T9733] team0: Port device team_slave_0 added [ 164.129191][ T9733] team0: Port device team_slave_1 added [ 164.159305][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.164274][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.172428][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.181795][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 164.207316][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.210201][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.220498][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.266384][ T9733] hsr_slave_0: entered promiscuous mode [ 164.269292][ T9733] hsr_slave_1: entered promiscuous mode [ 164.389689][ T9869] xt_policy: output policy not valid in PREROUTING and INPUT [ 164.469956][ T9733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.487143][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.490438][ T9733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.495122][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.498343][ T9733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.509527][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.519673][ T9733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.530670][ T9733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.656462][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.675198][ T9892] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 164.682230][ T9892] SELinux: failed to load policy [ 164.710696][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.728311][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.731349][ T8817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.752381][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.755416][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.249869][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.579809][ T62] Bluetooth: hci3: command tx timeout [ 165.652373][ T9733] veth0_vlan: entered promiscuous mode [ 165.692271][ T9733] veth1_vlan: entered promiscuous mode [ 165.748006][ T9733] veth0_macvtap: entered promiscuous mode [ 165.765557][ T9733] veth1_macvtap: entered promiscuous mode [ 165.781123][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.801569][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.816044][ T1173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.824686][ T1173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.833954][ T1173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.836749][ T1173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.920235][ T8815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.923577][ T8815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.955484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.959491][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.255639][ T9985] openvswitch: netlink: Missing valid actions attribute. [ 166.257018][ T9986] openvswitch: netlink: Missing valid actions attribute. [ 166.261432][ T9986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.265160][ T9985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.287473][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 166.291535][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 166.291591][ T40] audit: type=1400 audit(1780613683.376:15464): avc: denied { listen } for pid=9982 comm="syz.0.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.312311][ T9986] hpfs: Bad magic ... probably not HPFS [ 166.317381][ T9985] hpfs: Bad magic ... probably not HPFS [ 166.322208][ T9985] hpfs: Bad magic ... probably not HPFS [ 166.341208][ T9984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9984 comm=syz.2.1292 [ 166.436996][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 166.440592][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 166.445298][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.448677][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.451186][ T9] usb 6-1: Product: syz [ 166.452470][ T9] usb 6-1: Manufacturer: syz [ 166.454370][ T9] usb 6-1: SerialNumber: syz [ 166.463072][ T9] usb 6-1: config 0 descriptor?? [ 166.472522][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.476285][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 167.071249][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 167.124764][T10013] syz2: rxe_newlink: already configured on ipvlan0 [ 167.168368][T10016] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 167.171567][T10016] SELinux: failed to load policy [ 167.467607][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.471540][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.491850][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.546963][ T40] audit: type=1400 audit(1780613684.626:15465): avc: denied { connect } for pid=10033 comm="syz.4.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.657671][ T5746] Bluetooth: hci3: command tx timeout [ 167.668375][ T40] audit: type=1400 audit(1780613684.756:15466): avc: denied { read } for pid=10033 comm="syz.4.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.686521][ T9] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 167.689715][ T9] em28xx 6-1:0.0: board has no eeprom [ 167.708511][T10042] syz2: rxe_newlink: already configured on ipvlan0 [ 167.723294][ T40] audit: type=1400 audit(1780613684.806:15467): avc: denied { write } for pid=10033 comm="syz.4.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.747328][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 167.750671][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 167.751841][ T40] audit: type=1400 audit(1780613684.836:15468): avc: denied { bind } for pid=10044 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.753034][ T1045] em28xx 6-1:0.0: Binding DVB extension [ 167.760905][ T9] usb 6-1: USB disconnect, device number 8 [ 167.764809][ T40] audit: type=1400 audit(1780613684.836:15469): avc: denied { read } for pid=10044 comm="syz.0.1313" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 167.767502][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 167.800506][ T1045] em28xx 6-1:0.0: Registering input extension [ 167.803960][ T9] em28xx 6-1:0.0: Closing input extension [ 167.814980][ T40] audit: type=1400 audit(1780613684.896:15470): avc: denied { connect } for pid=10044 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.820474][ T9] em28xx 6-1:0.0: Freeing device [ 167.885190][T10050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.079429][T10054] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 168.082625][T10054] SELinux: failed to load policy [ 168.403451][ T40] audit: type=1400 audit(1780613685.486:15471): avc: denied { mount } for pid=10063 comm="syz.1.1319" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.492434][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 168.524308][T10076] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 168.553524][T10076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.561754][T10076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=10076 comm=syz.1.1324 [ 168.699554][T10084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10084 comm=syz.1.1327 [ 168.864482][T10099] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 168.870159][T10099] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 168.875010][T10099] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 168.875041][ T40] audit: type=1400 audit(1780613685.956:15472): avc: denied { firmware_load } for pid=10097 comm="syz.0.1332" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.003925][T10098] xfrm0 speed is unknown, defaulting to 1000 [ 169.659233][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 169.747126][ T62] Bluetooth: hci3: command tx timeout [ 170.384734][T10147] tipc: Enabled bearer , priority 0 [ 170.388624][T10147] syzkaller0: entered promiscuous mode [ 170.390432][T10147] syzkaller0: entered allmulticast mode [ 170.398872][T10147] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 170.413468][T10147] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 170.418500][T10147] tipc: Resetting bearer [ 170.422421][T10146] tipc: Resetting bearer [ 170.434084][T10146] tipc: Disabling bearer [ 170.516491][T10154] xt_hashlimit: size too large, truncated to 1048576 [ 170.545985][T10158] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 170.572826][T10158] 8021q: adding VLAN 0 to HW filter on device bond7 [ 171.127292][ T5898] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 171.299374][ T5898] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 111, setting to 64 [ 171.304088][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.308758][T10195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.310328][ T5898] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.316544][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.320148][ T5898] usb 5-1: Product: syz [ 171.321906][ T5898] usb 5-1: Manufacturer: syz [ 171.323895][ T5898] usb 5-1: SerialNumber: syz [ 171.330838][ T5898] usb 5-1: config 0 descriptor?? [ 171.333820][T10179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.342098][ T5898] usb 5-1: selecting invalid altsetting 0 [ 171.381628][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.385151][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.398923][T10197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.563614][ T5829] usb 5-1: USB disconnect, device number 2 [ 171.706292][T10205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10205 comm=syz.0.1370 [ 171.853763][ T40] audit: type=1400 audit(1780613688.936:15473): avc: denied { accept } for pid=10209 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.867440][T10213] netlink: 'syz.4.1373': attribute type 10 has an invalid length. [ 171.911234][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 172.038157][T10233] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 172.041442][T10233] SELinux: failed to load policy [ 172.206462][T10244] tipc: Started in network mode [ 172.210089][T10244] tipc: Node identity e2a2516ad417, cluster identity 4711 [ 172.213036][T10244] tipc: Enabled bearer , priority 0 [ 172.217497][T10244] syzkaller0: entered promiscuous mode [ 172.220402][T10244] syzkaller0: entered allmulticast mode [ 172.227479][T10244] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 172.238944][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.242432][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.249208][T10244] tipc: Resetting bearer [ 172.255485][T10243] tipc: Resetting bearer [ 172.258960][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.273747][T10243] tipc: Disabling bearer [ 172.314372][T10251] tipc: Enabled bearer , priority 0 [ 172.321525][T10251] syzkaller0: entered promiscuous mode [ 172.323857][T10251] syzkaller0: entered allmulticast mode [ 172.333229][T10251] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 172.353587][T10251] tipc: Resetting bearer [ 172.361262][T10250] tipc: Resetting bearer [ 172.380966][T10250] tipc: Disabling bearer [ 172.405017][T10253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10253 comm=syz.2.1388 [ 172.556666][T10260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10260 comm=syz.1.1390 [ 172.574459][T10266] fuse: Bad value for 'group_id' [ 172.576949][T10266] fuse: Bad value for 'group_id' [ 172.603112][T10260] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed [ 172.603131][T10260] kvm: kvm [10259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xbfc0 [ 172.651062][T10260] kvm: kvm [10259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x10000ffc0 [ 172.661627][ T40] audit: type=1400 audit(1780613689.746:15474): avc: denied { connect } for pid=10271 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.671426][T10260] kvm: kvm [10259]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffc0 [ 173.147688][T10284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10284 comm=syz.0.1398 [ 173.530878][T10293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10293 comm=syz.1.1400 [ 173.816283][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 173.995002][T10313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.161318][T10315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10315 comm=syz.1.1409 [ 174.204405][T10315] kvm: kvm [10314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xbfc0 [ 174.233037][T10315] kvm: kvm [10314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x10000ffc0 [ 174.251187][T10315] kvm: kvm [10314]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffc0 [ 174.542841][T10329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10329 comm=syz.4.1413 [ 174.730292][T10338] tipc: Enabled bearer , priority 0 [ 174.733963][T10338] syzkaller0: entered promiscuous mode [ 174.736351][T10338] syzkaller0: entered allmulticast mode [ 174.741330][T10338] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 174.756439][T10337] tipc: Resetting bearer [ 174.769724][T10337] tipc: Disabling bearer [ 175.073384][ T40] audit: type=1400 audit(1780613692.156:15475): avc: denied { write } for pid=10354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.172080][ T40] audit: type=1400 audit(1780613692.256:15476): avc: denied { write } for pid=10365 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.190994][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.202517][ T62] Bluetooth: Unexpected continuation frame (len 93) [ 175.303164][ T40] audit: type=1400 audit(1780613692.386:15477): avc: denied { getopt } for pid=10374 comm="syz.2.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.527475][ T854] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 175.571863][ T40] audit: type=1400 audit(1780613692.656:15478): avc: denied { write } for pid=10383 comm="syz.1.1433" name="/" dev="9p" ino=72877341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.584517][ T40] audit: type=1400 audit(1780613692.656:15479): avc: denied { create } for pid=10383 comm="syz.1.1433" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 175.620480][ T40] audit: type=1400 audit(1780613692.706:15480): avc: denied { read open } for pid=10383 comm="syz.1.1433" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 175.662283][ T40] audit: type=1400 audit(1780613692.746:15481): avc: denied { write } for pid=10388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.689095][ T854] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 175.692820][ T854] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.698540][ T854] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.702573][ T854] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.706000][ T854] usb 5-1: Product: syz [ 175.708059][ T854] usb 5-1: Manufacturer: syz [ 175.710086][ T854] usb 5-1: SerialNumber: syz [ 175.715697][ T854] usb 5-1: config 0 descriptor?? [ 175.723596][ T854] usb 5-1: selecting invalid altsetting 0 [ 175.728329][ T40] audit: type=1400 audit(1780613692.816:15482): avc: denied { write } for pid=10392 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.923689][ T5860] usb 5-1: USB disconnect, device number 3 [ 176.361931][T10425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.621643][T10436] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 176.642204][T10438] binder: 10437:10438 ioctl c0306201 200000000640 returned -22 [ 176.916431][T10452] fuse: Bad value for 'fd' [ 176.961651][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 176.961669][ T40] audit: type=1400 audit(1780613694.046:15490): avc: denied { watch } for pid=10451 comm="syz.4.1452" path="/32/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.001340][ T40] audit: type=1400 audit(1780613694.086:15491): avc: denied { ioctl } for pid=10454 comm="syz.2.1451" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59213 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 177.277737][T10474] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 177.522484][T10494] syz2: rxe_newlink: already configured on ipvlan0 [ 177.675022][ T40] audit: type=1400 audit(1780613694.756:15492): avc: denied { setattr } for pid=10510 comm="syz.4.1474" name="SCTP" dev="sockfs" ino=63548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.857370][ T1045] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 178.026509][T10527] netlink: 'syz.0.1480': attribute type 10 has an invalid length. [ 178.057726][ T1045] usb 7-1: Using ep0 maxpacket: 16 [ 178.064051][ T1045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 178.069644][ T40] audit: type=1400 audit(1780613695.156:15493): avc: denied { read } for pid=10529 comm="syz.1.1482" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.071329][ T1045] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.085607][ T40] audit: type=1400 audit(1780613695.156:15494): avc: denied { open } for pid=10529 comm="syz.1.1482" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.098074][ T1045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.102343][ T1045] usb 7-1: Product: syz [ 178.108632][ T1045] usb 7-1: Manufacturer: syz [ 178.112395][ T1045] usb 7-1: SerialNumber: syz [ 178.119180][ T1045] usb 7-1: config 0 descriptor?? [ 178.125529][ T1045] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.129928][ T1045] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 178.310532][T10548] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 178.313239][T10548] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 178.316656][T10548] vhci_hcd vhci_hcd.0: Device attached [ 178.399827][T10549] vhci_hcd: connection closed [ 178.400162][ T1201] vhci_hcd vhci_hcd.1: stop threads [ 178.405740][ T1201] vhci_hcd vhci_hcd.1: release socket [ 178.409491][ T1201] vhci_hcd vhci_hcd.1: disconnect device [ 178.553066][T10559] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 178.727406][ T1045] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 179.005259][T10567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10567 comm=syz.0.1497 [ 179.348158][ T1045] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 179.351049][ T1045] em28xx 7-1:0.0: board has no eeprom [ 179.457468][ T1045] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 179.466823][ T1045] em28xx 7-1:0.0: dvb set to bulk mode. [ 179.474386][ T9] em28xx 7-1:0.0: Binding DVB extension [ 179.482461][ T1045] usb 7-1: USB disconnect, device number 7 [ 179.486962][ T1045] em28xx 7-1:0.0: Disconnecting em28xx [ 179.533358][ T9] em28xx 7-1:0.0: Registering input extension [ 179.534000][ T40] audit: type=1400 audit(1780613696.616:15495): avc: denied { map } for pid=10591 comm="syz.1.1504" path="socket:[63071]" dev="sockfs" ino=63071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.537339][ T1045] em28xx 7-1:0.0: Closing input extension [ 179.544276][ T40] audit: type=1400 audit(1780613696.616:15496): avc: denied { write } for pid=10591 comm="syz.1.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.558065][ T40] audit: type=1400 audit(1780613696.646:15497): avc: denied { ioctl } for pid=10591 comm="syz.1.1504" path="socket:[63069]" dev="sockfs" ino=63069 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.564610][ T1045] em28xx 7-1:0.0: Freeing device [ 179.588335][T10602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.051954][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 180.060187][T10614] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 180.150564][T10624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.205782][ T40] audit: type=1400 audit(1780613697.286:15498): avc: denied { map } for pid=10629 comm="syz.2.1514" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.217765][ T40] audit: type=1400 audit(1780613697.286:15499): avc: denied { read write } for pid=10629 comm="syz.2.1514" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.477253][T10640] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 180.503221][T10640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.518685][T10640] vlan3: entered allmulticast mode [ 180.526597][T10640] bond2: (slave vlan3): Enslaving as an active interface with a down link [ 181.075176][T10672] netlink: 'syz.2.1530': attribute type 10 has an invalid length. [ 181.218655][T10676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10676 comm=syz.0.1532 [ 181.842401][T10708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10708 comm=syz.0.1540 [ 181.892118][T10710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10710 comm=syz.2.1542 [ 183.044173][ T40] audit: type=1400 audit(1780613700.136:15500): avc: denied { ioctl } for pid=10738 comm="syz.0.1549" path="socket:[66866]" dev="sockfs" ino=66866 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.474562][ T40] audit: type=1400 audit(1780613700.556:15501): avc: denied { bind } for pid=10752 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.482561][T10756] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 183.516190][ T40] audit: type=1400 audit(1780613700.596:15502): avc: denied { append } for pid=10759 comm="syz.2.1557" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 183.530169][T10758] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 183.533742][T10756] team0: Failed to send options change via netlink (err -105) [ 183.552412][T10756] team0: Port device dummy0 added [ 183.561608][T10758] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.615704][T10758] team0: Failed to send options change via netlink (err -105) [ 183.622221][T10758] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.631660][T10758] team0: Port device dummy0 removed [ 183.639434][T10758] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.756109][T10769] netlink: 'syz.4.1559': attribute type 10 has an invalid length. [ 183.883820][ T40] audit: type=1400 audit(1780613700.966:15503): avc: denied { lock } for pid=10772 comm="syz.4.1561" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.607186][T10795] kAFS: No cell specified [ 184.895615][T10805] netlink: zone id is out of range [ 184.896030][ T40] audit: type=1400 audit(1780613701.986:15504): avc: denied { getopt } for pid=10804 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.380757][T10819] netlink: 'syz.0.1577': attribute type 21 has an invalid length. [ 185.383972][ T40] audit: type=1400 audit(1780613702.466:15505): avc: denied { setattr } for pid=10816 comm="syz.0.1577" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.384934][T10819] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.454359][T10821] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1574'. [ 187.042768][T10859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10859 comm=syz.2.1589 [ 187.424364][ T40] audit: type=1400 audit(1780613704.506:15506): avc: denied { shutdown } for pid=10863 comm="syz.0.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.845089][T10873] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 187.851632][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.158126][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 189.169678][T10908] netlink: 'syz.4.1606': attribute type 15 has an invalid length. [ 189.181530][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 189.187023][T10908] netlink: 'syz.4.1606': attribute type 15 has an invalid length. [ 189.245501][T10908] syzkaller0: entered promiscuous mode [ 189.288399][T10908] syzkaller0: entered allmulticast mode [ 189.291579][ T8818] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.332490][ T8818] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.347725][ T8818] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.356027][ T8818] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.568518][T10917] xt_ipcomp: unknown flags 1D [ 190.046508][T10930] 9p: Invalid uid '0x00000000ffffffff' [ 190.434181][T10935] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 197.520007][T10926] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 197.527600][T10935] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 197.990417][ T40] audit: type=1400 audit(1780613715.066:15507): avc: denied { sqpoll } for pid=10962 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.142055][T10972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.249034][ T40] audit: type=1400 audit(1780613715.336:15508): avc: denied { create } for pid=10962 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.250231][T10963] syzkaller0: entered promiscuous mode [ 198.290692][T10963] syzkaller0: entered allmulticast mode [ 198.762154][T10985] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 198.788780][T10985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.862110][T10982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10982 comm=syz.1.1629 [ 199.000217][T10990] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 199.031243][T10982] kvm: kvm [10981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000012e [ 199.093437][T10982] kvm: kvm [10981]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1c7f [ 199.097460][T10982] kvm: kvm [10981]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 199.103123][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 199.145380][T10998] xt_hashlimit: size too large, truncated to 1048576 [ 199.835857][T11018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.948668][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.970605][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.033160][T11025] FAULT_INJECTION: forcing a failure. [ 200.033160][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.037984][T11025] CPU: 2 UID: 0 PID: 11025 Comm: syz.4.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.038011][T11025] Tainted: [L]=SOFTLOCKUP [ 200.038016][T11025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.038025][T11025] Call Trace: [ 200.038032][T11025] [ 200.038039][T11025] dump_stack_lvl+0x100/0x190 [ 200.038074][T11025] should_fail_ex.cold+0x5/0xa [ 200.038095][T11025] _copy_from_user+0x2e/0xd0 [ 200.038123][T11025] copy_msghdr_from_user+0x9f/0x4f0 [ 200.038152][T11025] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 200.038181][T11025] ___sys_sendmsg+0x106/0x1e0 [ 200.038209][T11025] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.038277][T11025] __sys_sendmsg+0x170/0x220 [ 200.038303][T11025] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.038337][T11025] ? rcu_is_watching+0x12/0xc0 [ 200.038364][T11025] do_syscall_64+0x115/0x870 [ 200.038390][T11025] ? clear_bhb_loop+0x40/0x90 [ 200.038409][T11025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.038426][T11025] RIP: 0033:0x7f5b9439ce59 [ 200.038441][T11025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.038456][T11025] RSP: 002b:00007f5b9533a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.038473][T11025] RAX: ffffffffffffffda RBX: 00007f5b94615fa0 RCX: 00007f5b9439ce59 [ 200.038484][T11025] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 200.038494][T11025] RBP: 00007f5b9533a090 R08: 0000000000000000 R09: 0000000000000000 [ 200.038504][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.038513][T11025] R13: 00007f5b94616038 R14: 00007f5b94615fa0 R15: 00007ffe9a4d9aa8 [ 200.038534][T11025] [ 200.425427][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 200.450549][T11029] xt_hashlimit: size too large, truncated to 1048576 [ 200.606116][T11032] kvm: user requested TSC rate below hardware speed [ 200.632276][T11031] kvm: user requested TSC rate below hardware speed [ 201.251529][T11046] kvm: kvm [11045]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6509 [ 201.548204][T11046] kvm: kvm [11045]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000430b [ 201.791304][T11061] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 201.879841][T11061] 8021q: adding VLAN 0 to HW filter on device bond8 [ 202.431193][ T40] audit: type=1326 audit(1780613719.516:15509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1655" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f934039ce59 code=0x0 [ 202.682052][T11082] 9pnet_fd: Insufficient options for proto=fd [ 202.693982][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 202.718464][T11084] xt_hashlimit: size too large, truncated to 1048576 [ 204.272616][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 204.335706][T11119] xt_hashlimit: size too large, truncated to 1048576 [ 204.394048][T11123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.808895][T11132] binder: 11131:11132 ioctl c0106f32 200000000240 returned -22 [ 205.105328][T11141] netlink: 'syz.1.1674': attribute type 10 has an invalid length. [ 205.389557][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 205.397704][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 205.677904][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 205.705389][T11160] xt_hashlimit: size too large, truncated to 1048576 [ 205.737806][ T5860] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 205.909278][ T5860] usb 7-1: not running at top speed; connect to a high speed hub [ 205.915472][ T5860] usb 7-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 205.922501][ T5860] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 205.929925][ T5860] usb 7-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 205.934369][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.941469][ T5860] usb 7-1: Product: syz [ 205.943497][ T5860] usb 7-1: Manufacturer: syz [ 205.945240][ T5860] usb 7-1: SerialNumber: syz [ 206.215639][ T5860] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.247745][ T5860] usb 7-1: MIDIStreaming interface descriptor not found [ 206.416594][ T5860] usb 7-1: USB disconnect, device number 8 [ 206.600169][T11177] udevd[11177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.854350][T11182] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 207.129307][T11189] netlink: 'syz.4.1687': attribute type 10 has an invalid length. [ 207.137172][T11191] bridge_slave_1: default FDB implementation only supports local addresses [ 207.147151][ T40] audit: type=1400 audit(1780613724.226:15510): avc: denied { read } for pid=11190 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.253666][T11222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.476720][T11246] syz2: rxe_newlink: already configured on ipvlan0 [ 209.622406][ T40] audit: type=1400 audit(1780613726.706:15511): avc: denied { recv } for pid=11248 comm="syz.2.1707" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 209.775791][ T40] audit: type=1400 audit(1780613726.846:15512): avc: denied { create } for pid=11255 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.811419][ T40] audit: type=1400 audit(1780613726.846:15513): avc: denied { bind } for pid=11255 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.860813][ T40] audit: type=1400 audit(1780613726.846:15514): avc: denied { setopt } for pid=11255 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.878296][ T40] audit: type=1400 audit(1780613726.846:15515): avc: denied { accept } for pid=11255 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.897249][ T40] audit: type=1400 audit(1780613726.846:15516): avc: denied { write } for pid=11255 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.916223][ T40] audit: type=1400 audit(1780613726.846:15517): avc: denied { read } for pid=11255 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.982635][ T40] audit: type=1400 audit(1780613726.986:15518): avc: denied { write } for pid=11258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.151423][ T40] audit: type=1400 audit(1780613727.206:15519): avc: denied { write } for pid=11267 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.317006][T11276] ocfs2: Unknown parameter 'aclv/loop#' [ 211.845284][T11314] binder: 11312:11314 ioctl c0306201 0 returned -14 [ 211.850497][T11313] binder: 11312:11313 ioctl c0306201 0 returned -14 [ 212.199402][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 212.287013][T11320] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 212.970819][T11344] macsec3: entered promiscuous mode [ 212.989503][T11344] macsec3: entered allmulticast mode [ 213.019671][T11346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.263243][T11351] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 213.923036][T11368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11368 comm=syz.1.1749 [ 214.337572][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 214.356931][T11384] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 214.491551][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 214.577173][T11391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.646509][T11396] FAULT_INJECTION: forcing a failure. [ 214.646509][T11396] name failslab, interval 1, probability 0, space 0, times 0 [ 214.649739][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1753'. [ 214.667406][T11386] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 214.674940][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 214.674955][ T40] audit: type=1400 audit(1780613731.756:15521): avc: denied { read } for pid=11385 comm="syz.2.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.675380][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1753'. [ 214.748601][T11396] CPU: 0 UID: 0 PID: 11396 Comm: syz.0.1755 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.748630][T11396] Tainted: [L]=SOFTLOCKUP [ 214.748636][T11396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.748645][T11396] Call Trace: [ 214.748650][T11396] [ 214.748657][T11396] dump_stack_lvl+0x100/0x190 [ 214.748690][T11396] should_fail_ex.cold+0x5/0xa [ 214.748712][T11396] ? tomoyo_realpath_from_path+0xb6/0x690 [ 214.748742][T11396] should_failslab+0xc2/0x120 [ 214.748760][T11396] __kmalloc_noprof+0xe0/0x850 [ 214.748781][T11396] ? kfree+0x1dd/0x6c0 [ 214.748804][T11396] tomoyo_realpath_from_path+0xb6/0x690 [ 214.748834][T11396] tomoyo_path_number_perm+0x23c/0x580 [ 214.748854][T11396] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.748875][T11396] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.748921][T11396] ? find_held_lock+0x2b/0x80 [ 214.748936][T11396] ? __fget_files+0x215/0x3d0 [ 214.748954][T11396] ? hook_file_ioctl_common+0x149/0x410 [ 214.748970][T11396] ? __fget_files+0x215/0x3d0 [ 214.748992][T11396] ? __fget_files+0x21f/0x3d0 [ 214.749036][T11396] security_file_ioctl+0xd3/0x230 [ 214.749060][T11396] __x64_sys_ioctl+0xb7/0x210 [ 214.749079][T11396] do_syscall_64+0x115/0x870 [ 214.749108][T11396] ? clear_bhb_loop+0x40/0x90 [ 214.749128][T11396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.749143][T11396] RIP: 0033:0x7f721db9ce59 [ 214.749157][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.749172][T11396] RSP: 002b:00007f721bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.749188][T11396] RAX: ffffffffffffffda RBX: 00007f721de16090 RCX: 00007f721db9ce59 [ 214.749198][T11396] RDX: 00002000000004c0 RSI: 00000000c0606610 RDI: 0000000000000004 [ 214.749208][T11396] RBP: 00007f721bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.749217][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.749226][T11396] R13: 00007f721de16128 R14: 00007f721de16090 R15: 00007ffca07a06a8 [ 214.749248][T11396] [ 214.749285][T11396] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.032829][T11386] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.279293][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1759'. [ 215.489339][T11404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11404 comm=syz.1.1758 [ 215.664155][ T40] audit: type=1400 audit(1780613732.746:15522): avc: denied { write } for pid=11413 comm="syz.4.1763" path="socket:[74786]" dev="sockfs" ino=74786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.684748][T11414] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 215.720141][T11414] VFS: Can't find a romfs filesystem on dev nullb0. [ 215.720141][T11414] [ 216.019725][T11422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.258300][T11429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.461018][T11434] fuse: Bad value for 'fd' [ 216.587437][T11437] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 217.290848][T11452] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 217.334505][T11452] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 217.478405][T11452] veth3: entered promiscuous mode [ 217.688409][T11464] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1781'. [ 217.728052][ T40] audit: type=1400 audit(1780613734.806:15523): avc: denied { create } for pid=11461 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 217.786736][ T40] audit: type=1400 audit(1780613734.876:15524): avc: denied { sys_admin } for pid=11461 comm="syz.0.1782" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 217.796377][T11467] netlink: 'syz.0.1782': attribute type 3 has an invalid length. [ 217.870320][T11470] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 218.084950][T11477] overlayfs: missing 'lowerdir' [ 218.134473][ T40] audit: type=1400 audit(1780613735.216:15525): avc: denied { name_bind } for pid=11476 comm="syz.1.1784" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 218.233477][ T40] audit: type=1400 audit(1780613735.316:15526): avc: denied { map } for pid=11476 comm="syz.1.1784" path="socket:[74859]" dev="sockfs" ino=74859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 218.274744][ T40] audit: type=1400 audit(1780613735.346:15527): avc: denied { read } for pid=11481 comm="syz.2.1786" name="file3" dev="9p" ino=72877407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 218.313741][T11488] overlayfs: overlapping lowerdir path [ 218.348626][T11480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11480 comm=syz.4.1785 [ 218.370691][T11489] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1787'. [ 218.406307][ T40] audit: type=1400 audit(1780613735.456:15528): avc: denied { execute } for pid=11486 comm="syz.1.1787" path="/435/file0/cpu.stat" dev="cgroup2" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 218.738184][T11494] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 218.826996][T11494] 8021q: adding VLAN 0 to HW filter on device bond9 [ 219.099008][T11502] netlink: 'syz.1.1793': attribute type 10 has an invalid length. [ 219.263519][ T40] audit: type=1400 audit(1780613736.346:15529): avc: denied { create } for pid=11507 comm="syz.2.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.268777][T11502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.342575][T11508] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 219.535246][T11520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.030309][T11528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=11528 comm=syz.1.1798 [ 220.150693][T11533] ip6gre0: entered allmulticast mode [ 220.398456][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.730976][T11545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11545 comm=syz.1.1802 [ 221.424176][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.746844][T11561] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 221.823601][T11561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.162242][ T40] audit: type=1400 audit(1780613739.246:15530): avc: denied { mount } for pid=11571 comm="syz.1.1812" name="/" dev="ramfs" ino=76345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 222.321823][T11575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11575 comm=syz.4.1813 [ 222.493990][T11580] netlink: 'syz.2.1814': attribute type 11 has an invalid length. [ 223.114700][ T40] audit: type=1400 audit(1780613740.196:15531): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 223.439850][T11605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11605 comm=syz.4.1824 [ 223.472734][T11608] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 223.550824][T11608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.601964][T11612] xt_hashlimit: size too large, truncated to 1048576 [ 223.873742][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1826'. [ 224.268297][ T40] audit: type=1400 audit(1780613741.346:15532): avc: denied { getopt } for pid=11635 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.058567][ T5891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 225.278836][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 225.282856][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 225.332512][ T5891] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.362127][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.371699][ T5891] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.383633][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.410144][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.422856][ T5891] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.440268][ T5891] usb 7-1: config 168 interface 0 has no altsetting 0 [ 225.449787][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 225.453706][ T5891] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.475695][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.491684][ T5891] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.508893][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.541726][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.546593][ T5891] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.571335][ T5891] usb 7-1: config 168 interface 0 has no altsetting 0 [ 225.579117][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 225.587738][ T5891] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.601954][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.621139][ T5891] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.629360][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.667561][ T5891] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.681156][ T5891] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.708154][ T5891] usb 7-1: config 168 interface 0 has no altsetting 0 [ 225.759240][ T5891] usb 7-1: string descriptor 0 read error: -22 [ 225.768523][ T5891] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 225.779287][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.812787][ T5891] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 226.150887][T11644] netlink: 'syz.2.1836': attribute type 6 has an invalid length. [ 226.168053][ T40] audit: type=1400 audit(1780613743.246:15533): avc: denied { write } for pid=11643 comm="syz.2.1836" path="socket:[75311]" dev="sockfs" ino=75311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.862394][T11659] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 226.919309][T11669] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 226.988195][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 227.000824][T11673] xt_hashlimit: size too large, truncated to 1048576 [ 227.023555][T11674] FAULT_INJECTION: forcing a failure. [ 227.023555][T11674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.042602][T11674] CPU: 3 UID: 0 PID: 11674 Comm: syz.1.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.042634][T11674] Tainted: [L]=SOFTLOCKUP [ 227.042640][T11674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.042651][T11674] Call Trace: [ 227.042657][T11674] [ 227.042665][T11674] dump_stack_lvl+0x100/0x190 [ 227.042691][T11674] should_fail_ex.cold+0x5/0xa [ 227.042717][T11674] _copy_from_user+0x2e/0xd0 [ 227.042741][T11674] do_pagemap_scan+0xc4/0xcd0 [ 227.042766][T11674] ? __pfx_do_pagemap_scan+0x10/0x10 [ 227.042786][T11674] ? do_vfs_ioctl+0x226/0x13e0 [ 227.042807][T11674] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.042838][T11674] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.042883][T11674] ? selinux_file_ioctl+0x13b/0x290 [ 227.042909][T11674] ? selinux_file_ioctl+0xb6/0x290 [ 227.042936][T11674] do_pagemap_cmd+0x58/0x80 [ 227.042956][T11674] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 227.042977][T11674] __x64_sys_ioctl+0x18e/0x210 [ 227.043005][T11674] do_syscall_64+0x115/0x870 [ 227.043052][T11674] ? clear_bhb_loop+0x40/0x90 [ 227.043076][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.043095][T11674] RIP: 0033:0x7f4792f9ce59 [ 227.043108][T11674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.043125][T11674] RSP: 002b:00007f47911f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.043143][T11674] RAX: ffffffffffffffda RBX: 00007f4793216090 RCX: 00007f4792f9ce59 [ 227.043155][T11674] RDX: 00002000000004c0 RSI: 00000000c0606610 RDI: 0000000000000004 [ 227.043165][T11674] RBP: 00007f47911f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.043175][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.043185][T11674] R13: 00007f4793216128 R14: 00007f4793216090 R15: 00007fff450daa08 [ 227.043211][T11674] [ 228.221452][ T54] usb 7-1: USB disconnect, device number 9 [ 229.194237][T11719] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 229.359377][T11719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.451411][T11721] vlan2: entered allmulticast mode [ 229.474354][T11721] veth0_to_bond: entered allmulticast mode [ 229.508383][T11721] bond1: (slave vlan2): making interface the new active one [ 229.595461][T11721] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 229.602592][ T40] audit: type=1400 audit(1780613746.676:15534): avc: denied { watch } for pid=11724 comm="syz.1.1862" path="/sys/kernel/debug/binder/transaction_log" dev="debugfs" ino=1646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 229.815234][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.090587][ T40] audit: type=1326 audit(1780613748.146:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.1.1879" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4792f9ce59 code=0x0 [ 231.148965][ T40] audit: type=1400 audit(1780613748.176:15536): avc: denied { write } for pid=11772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.269174][ T40] audit: type=1400 audit(1780613748.296:15537): avc: denied { write } for pid=11785 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.958728][T11793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.958890][ T5829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 232.156271][ T5829] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 232.161701][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 232.169621][ T5829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.174822][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.184822][ T5829] usb 5-1: Product: syz [ 232.237757][ T5829] usb 5-1: Manufacturer: syz [ 232.260844][ T5829] usb 5-1: SerialNumber: syz [ 232.336161][ T5829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 232.356863][T11800] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 232.392591][T11800] exFAT-fs (nullb0): invalid boot record signature [ 232.396603][T11800] exFAT-fs (nullb0): failed to read boot sector [ 232.400948][T11800] exFAT-fs (nullb0): failed to recognize exfat type [ 232.403914][ T5891] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.472020][ T40] audit: type=1400 audit(1780613749.546:15538): avc: denied { write } for pid=11801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.535963][ T40] audit: type=1400 audit(1780613749.616:15539): avc: denied { execute } for pid=11797 comm="syz.2.1884" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.638778][T11810] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 232.669313][ T39] usb 5-1: USB disconnect, device number 4 [ 232.707352][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 232.773850][ T40] audit: type=1400 audit(1780613749.746:15540): avc: denied { read write } for pid=11814 comm="syz.4.1888" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.856248][ T40] audit: type=1400 audit(1780613749.746:15541): avc: denied { open } for pid=11814 comm="syz.4.1888" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.921902][ T40] audit: type=1400 audit(1780613749.746:15542): avc: denied { ioctl } for pid=11814 comm="syz.4.1888" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.967753][ T40] audit: type=1400 audit(1780613749.896:15543): avc: denied { write } for pid=11806 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.055146][T11828] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 233.093505][T11828] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.433369][T11838] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 233.497752][ T5891] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 233.525021][ T5891] ath9k_htc: Failed to initialize the device [ 233.545551][T11843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1895'. [ 233.616627][ T39] usb 5-1: ath9k_htc: USB layer deinitialized [ 234.330889][T11863] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 234.376497][T11863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.576941][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 234.832091][T11880] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 234.855329][T11879] 9pnet_virtio: no channels available for device syz [ 235.100976][T11884] netlink: 'syz.0.1907': attribute type 1 has an invalid length. [ 235.117098][ T40] audit: type=1400 audit(1780613752.175:15544): avc: denied { ioctl } for pid=11878 comm="syz.0.1907" path="socket:[76968]" dev="sockfs" ino=76968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.160100][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1907'. [ 235.208956][T11886] input: syz1 as /devices/virtual/input/input11 [ 235.238758][T11880] comedi comedi2: board detection failed [ 235.370380][T11886] kernel read not supported for file /policy (pid: 11886 comm: syz.4.1911) [ 235.371781][ T40] audit: type=1400 audit(1780613752.455:15545): avc: denied { module_load } for pid=11885 comm="syz.4.1911" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 236.224085][ T40] audit: type=1400 audit(1780613753.305:15546): avc: denied { listen } for pid=11907 comm="syz.1.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.240810][ T40] audit: type=1400 audit(1780613753.305:15547): avc: denied { accept } for pid=11907 comm="syz.1.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.307812][ T40] audit: type=1400 audit(1780613753.385:15548): avc: denied { write } for pid=11911 comm="syz.0.1916" lport=48166 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 236.862786][T11923] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 236.904696][T11923] bond8: option mode: invalid value (152) [ 237.052279][T11923] bond8 (unregistering): Released all slaves [ 237.183147][ T40] audit: type=1400 audit(1780613754.265:15549): avc: denied { getopt } for pid=11927 comm="syz.1.1921" lport=33985 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 237.230029][T11928] tmpfs: Unknown parameter '' [ 238.365791][T11949] kvm: kvm [11945]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000001af [ 238.467466][T11949] kvm: kvm [11945]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1f6 [ 238.529510][ T40] audit: type=1400 audit(1780613755.605:15550): avc: denied { map } for pid=11959 comm="syz.0.1932" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 238.545560][T11949] kvm: kvm [11945]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x17b [ 238.579841][T11960] cdrom: dropping to single frame dma [ 238.597401][T11949] kvm: kvm [11945]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 238.758849][T11959] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 239.894012][ T8815] Bluetooth: Error in BCSP hdr checksum [ 240.155766][ T8818] Bluetooth: Error in BCSP hdr checksum [ 240.425975][ T8818] Bluetooth: Error in BCSP hdr checksum [ 240.488573][T12007] EXT4-fs (nbd0): unable to read superblock [ 240.679547][ T8819] Bluetooth: Error in BCSP hdr checksum [ 240.962480][ T8819] Bluetooth: Error in BCSP hdr checksum [ 241.056231][ T40] audit: type=1400 audit(1780613758.125:15551): avc: denied { read append } for pid=12014 comm="syz.1.1947" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.103259][ T40] audit: type=1400 audit(1780613758.125:15552): avc: denied { open } for pid=12014 comm="syz.1.1947" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.229491][ T8819] Bluetooth: Error in BCSP hdr checksum [ 241.294417][T12025] trusted_key: encrypted_key: keyword 'u' not recognized [ 241.492220][ T8816] Bluetooth: Error in BCSP hdr checksum [ 241.661957][T10689] Bluetooth: hci4: command 0x1003 tx timeout [ 241.669372][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 241.749966][ T8816] Bluetooth: Error in BCSP hdr checksum [ 241.929859][T12015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.970170][T12015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.021544][ T8818] Bluetooth: Error in BCSP hdr checksum [ 242.024687][T12015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.158524][T12031] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 242.274602][ T8818] Bluetooth: Error in BCSP hdr checksum [ 242.384892][T12038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.517009][T12041] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 242.521334][T12042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.683759][T12046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.288087][ T40] audit: type=1400 audit(1780613760.375:15553): avc: denied { write } for pid=12056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.431576][T10723] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.519943][ T40] audit: type=1400 audit(1780613760.605:15554): avc: denied { write } for pid=12065 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.791534][T12075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1966'. [ 244.149370][ T8819] Bluetooth: Error in BCSP hdr checksum [ 244.409953][ T8815] Bluetooth: Error in BCSP hdr checksum [ 244.540238][ T40] audit: type=1400 audit(1780613761.585:15555): avc: denied { write } for pid=12087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.682644][ T12] Bluetooth: Error in BCSP hdr checksum [ 244.705090][ T40] audit: type=1400 audit(1780613761.785:15556): avc: denied { write } for pid=12091 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.995443][ T8815] Bluetooth: Error in BCSP hdr checksum [ 245.113062][T12084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.248723][ T12] Bluetooth: Error in BCSP hdr checksum [ 245.367711][ T40] audit: type=1400 audit(1780613762.445:15557): avc: denied { read } for pid=12074 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.413070][ T40] audit: type=1400 audit(1780613762.495:15558): avc: denied { mount } for pid=12097 comm="syz.2.1970" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 245.523769][ T8816] Bluetooth: Error in BCSP hdr checksum [ 245.782015][ T8818] Bluetooth: Error in BCSP hdr checksum [ 245.902439][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 246.067910][ T12] Bluetooth: Error in BCSP hdr checksum [ 246.168051][ T40] audit: type=1400 audit(1780613763.235:15559): avc: denied { search } for pid=12109 comm="syz.2.1973" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 246.266088][T12112] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 246.318467][ T1273] Bluetooth: Error in BCSP hdr checksum [ 246.476796][T10723] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.594112][ T1273] Bluetooth: Error in BCSP hdr checksum [ 247.529675][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.018338][ T40] audit: type=1400 audit(1780613765.105:15560): avc: denied { read } for pid=12143 comm="syz.0.1985" path="socket:[79790]" dev="sockfs" ino=79790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.110493][T12145] tipc: Enabled bearer , priority 27 [ 248.114857][ T40] audit: type=1400 audit(1780613765.195:15561): avc: denied { view } for pid=12143 comm="syz.0.1985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 248.568263][T10723] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.123893][ T844] tipc: Node number set to 2563893176 [ 249.765079][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 249.774250][T12166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1992'. [ 249.869947][ T40] audit: type=1400 audit(1780613766.955:15562): avc: denied { ioctl } for pid=12162 comm="syz.0.1992" path="socket:[77555]" dev="sockfs" ino=77555 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.132153][T12166] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.569791][ T40] audit: type=1400 audit(1780613767.655:15563): avc: denied { write } for pid=12180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.947139][ T40] audit: type=1400 audit(1780613768.005:15564): avc: denied { write } for pid=12192 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.058382][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.663829][T12204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.993781][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2004'. [ 254.070563][T10723] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.466292][T12234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12234 comm=syz.2.2011 [ 255.250219][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 255.254501][T12246] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2014'. [ 256.220463][T12271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.154742][ T40] audit: type=1400 audit(1780613774.235:15565): avc: denied { setattr } for pid=12282 comm="syz.2.2026" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.176220][T12284] nftables ruleset with unbound set [ 257.436859][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'. [ 258.095251][T12302] binder: 12299:12302 ioctl c0306201 200000000640 returned -22 [ 258.099100][T12302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2034'. [ 258.129033][T12302] binder: 12299:12302 ioctl 8924 200000000200 returned -22 [ 258.134580][T12302] trusted_key: syz.4.2034 sent an empty control message without MSG_MORE. [ 258.158766][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 258.638159][T12312] xfrm0 speed is unknown, defaulting to 1000 [ 259.631490][T12320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.984756][ T40] audit: type=1400 audit(1780613777.065:15566): avc: denied { execute } for pid=12344 comm="syz.2.2047" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=80891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 260.522104][T12359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12359 comm=syz.0.2048 [ 260.666109][T12362] pimreg: entered allmulticast mode [ 260.679772][T12362] pimreg: left allmulticast mode [ 260.942983][T12369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.034239][T10723] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.149560][T12375] netlink: 'syz.4.2057': attribute type 126 has an invalid length. [ 261.362937][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.366620][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.712827][T12388] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2062'. [ 261.849765][T12379] xfrm0 speed is unknown, defaulting to 1000 [ 261.864492][ T40] audit: type=1400 audit(1780613778.935:15567): avc: denied { read } for pid=12392 comm="syz.2.2064" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 261.900154][ T40] audit: type=1400 audit(1780613778.935:15568): avc: denied { read open } for pid=12392 comm="syz.2.2064" path="/syzcgroup/unified/syz2" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 262.101913][ T5893] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 262.224201][T12405] comedi comedi3: s526: a I/O base address must be specified [ 262.231150][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 262.236276][T12405] netlink: 'syz.4.2068': attribute type 6 has an invalid length. [ 262.239631][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'. [ 262.246062][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 262.284550][T12405] netlink: 'syz.4.2068': attribute type 6 has an invalid length. [ 262.320479][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'. [ 262.343777][ T5893] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.366617][ T5893] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 262.425915][ T5893] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.429970][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.459022][T12393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.518695][ T5893] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.889441][ T5893] usb 7-1: USB disconnect, device number 10 [ 263.522037][ T5829] xfrm0 speed is unknown, defaulting to 1000 [ 263.793024][T12420] xfrm0 speed is unknown, defaulting to 1000 [ 264.992032][T12464] kernel read not supported for file /file1 (pid: 12464 comm: syz.2.2089) [ 265.064383][ T40] audit: type=1800 audit(1780613782.145:15569): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2089" name="file1" dev="mqueue" ino=81779 res=0 errno=0 [ 265.285165][T12469] binder: 12468:12469 ioctl c0306201 200000000640 returned -22 [ 265.415877][ T40] audit: type=1400 audit(1780613782.495:15570): avc: denied { setopt } for pid=12472 comm="syz.0.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.495642][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2093'. [ 265.500124][T12473] netlink: 'syz.0.2093': attribute type 7 has an invalid length. [ 265.501829][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 265.508615][T12473] netlink: 'syz.0.2093': attribute type 8 has an invalid length. [ 265.508633][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 265.611383][T12475] mac80211_hwsim hwsim7 wlan0: default FDB implementation only supports local addresses [ 265.625691][ T40] audit: type=1400 audit(1780613782.705:15571): avc: denied { write } for pid=12472 comm="syz.0.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.807808][T12482] syz.0.2095: vmalloc error: size 4006727680, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.835009][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.0.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.835039][T12482] Tainted: [L]=SOFTLOCKUP [ 265.835047][T12482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.835066][T12482] Call Trace: [ 265.835075][T12482] [ 265.835083][T12482] dump_stack_lvl+0x100/0x190 [ 265.835119][T12482] warn_alloc.cold+0x95/0x1c1 [ 265.835141][T12482] ? __pfx_warn_alloc+0x10/0x10 [ 265.835169][T12482] ? mark_held_locks+0x40/0x70 [ 265.835194][T12482] ? lockdep_hardirqs_on+0x78/0x100 [ 265.835231][T12482] ? stack_depot_save_flags+0x479/0x9d0 [ 265.835273][T12482] ? vb2_vmalloc_alloc+0x135/0x410 [ 265.835293][T12482] __vmalloc_node_range_noprof+0x136c/0x1630 [ 265.835321][T12482] ? __video_do_ioctl+0xb2a/0xdf0 [ 265.835343][T12482] ? video_usercopy+0x47d/0x1700 [ 265.835363][T12482] ? v4l2_ioctl+0x1bd/0x250 [ 265.835387][T12482] ? __x64_sys_ioctl+0x18e/0x210 [ 265.835405][T12482] ? do_syscall_64+0x115/0x870 [ 265.835428][T12482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.835452][T12482] ? vb2_vmalloc_alloc+0x135/0x410 [ 265.835477][T12482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.835512][T12482] ? vb2_vmalloc_alloc+0x135/0x410 [ 265.835529][T12482] vmalloc_user_noprof+0x9e/0xe0 [ 265.835551][T12482] ? vb2_vmalloc_alloc+0x135/0x410 [ 265.835569][T12482] vb2_vmalloc_alloc+0x135/0x410 [ 265.835585][T12482] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 265.835604][T12482] __vb2_queue_alloc+0x8d5/0x1160 [ 265.835641][T12482] vb2_core_create_bufs+0x5fa/0xa30 [ 265.835670][T12482] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 265.835700][T12482] ? lock_acquire+0x1b1/0x370 [ 265.835727][T12482] vb2_create_bufs+0x40c/0x830 [ 265.835755][T12482] ? __pfx_vb2_create_bufs+0x10/0x10 [ 265.835776][T12482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.835797][T12482] ? v4l_sanitize_colorspace+0x220/0x410 [ 265.835825][T12482] vb2_ioctl_create_bufs+0x244/0x3e0 [ 265.835847][T12482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.835867][T12482] vidioc_create_bufs+0x7d/0xf0 [ 265.835888][T12482] v4l_create_bufs+0x17d/0x270 [ 265.835907][T12482] __video_do_ioctl+0xb2a/0xdf0 [ 265.835931][T12482] ? __might_fault+0xc5/0x140 [ 265.835955][T12482] ? __pfx___video_do_ioctl+0x10/0x10 [ 265.835987][T12482] video_usercopy+0x47d/0x1700 [ 265.836011][T12482] ? __pfx___video_do_ioctl+0x10/0x10 [ 265.836036][T12482] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 265.836068][T12482] ? __pfx_video_usercopy+0x10/0x10 [ 265.836108][T12482] v4l2_ioctl+0x1bd/0x250 [ 265.836132][T12482] ? __pfx_v4l2_ioctl+0x10/0x10 [ 265.836157][T12482] __x64_sys_ioctl+0x18e/0x210 [ 265.836178][T12482] do_syscall_64+0x115/0x870 [ 265.836203][T12482] ? clear_bhb_loop+0x40/0x90 [ 265.836226][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.836246][T12482] RIP: 0033:0x7f721db9ce59 [ 265.836263][T12482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.836283][T12482] RSP: 002b:00007f721bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.836303][T12482] RAX: ffffffffffffffda RBX: 00007f721de16090 RCX: 00007f721db9ce59 [ 265.836323][T12482] RDX: 00002000000001c0 RSI: 00000000c100565c RDI: 000000000000000c [ 265.836336][T12482] RBP: 00007f721dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 265.836348][T12482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.836360][T12482] R13: 00007f721de16128 R14: 00007f721de16090 R15: 00007ffca07a06a8 [ 265.836388][T12482] [ 265.836396][T12482] Mem-Info: [ 265.837886][T12479] ip6gre1: entered promiscuous mode [ 265.854716][T12482] active_anon:21956 inactive_anon:5985 isolated_anon:0 [ 265.854716][T12482] active_file:1295 inactive_file:28301 isolated_file:0 [ 265.854716][T12482] unevictable:1768 dirty:230 writeback:0 [ 265.854716][T12482] slab_reclaimable:8882 slab_unreclaimable:77384 [ 265.854716][T12482] mapped:25629 shmem:18778 pagetables:6267 [ 265.854716][T12482] sec_pagetables:297 bounce:0 [ 265.854716][T12482] kernel_misc_reclaimable:0 [ 265.854716][T12482] free:384481 free_pcp:18292 free_cma:0 [ 265.854797][T12482] Node 0 active_anon:80436kB inactive_anon:23940kB active_file:2824kB inactive_file:112912kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94280kB dirty:920kB writeback:0kB shmem:66208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:12368kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 265.854850][T12482] Node 1 active_anon:7388kB inactive_anon:0kB active_file:2356kB inactive_file:292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8236kB dirty:0kB writeback:0kB shmem:8904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:544kB pagetables:12700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 265.854906][T12482] Node 0 DMA free:5272kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:96kB free_cma:0kB [ 265.854960][T12482] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 265.854999][T12482] Node 0 DMA32 free:30220kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80320kB inactive_anon:23940kB active_file:2824kB inactive_file:112912kB unevictable:3536kB writepending:920kB zspages:0kB present:2080628kB managed:1261120kB mlocked:0kB bounce:0kB free_pcp:29656kB local_pcp:8492kB free_cma:0kB [ 265.855053][T12482] lowmem_reserve[]: 0 0 0 0 0 [ 265.855089][T12482] Node 1 Normal free:1502432kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7388kB inactive_anon:0kB active_file:2356kB inactive_file:292kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:43312kB local_pcp:17908kB free_cma:0kB [ 265.855143][T12482] lowmem_reserve[]: 0 0 0 0 0 [ 265.855179][T12482] Node 0 DMA: 5*4kB (M) 8*8kB (UM) 5*16kB (UM) 7*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (M) 1*512kB (M) 3*1024kB (U) 0*2048kB 0*4096kB = 5252kB [ 265.855335][T12482] Node 0 DMA32: 78*4kB (ME) 75*8kB (UME) 32*16kB (UME) 38*32kB (UME) 58*64kB (UME) 13*128kB (ME) 67*256kB (UME) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 30288kB [ 265.855489][T12482] Node 1 Normal: 2*4kB (UE) 2*8kB (ME) 2*16kB (E) 11*32kB (UME) 410*64kB (UME) 475*128kB (UME) 359*256kB (UE) 256*512kB (UM) 158*1024kB (UM) 9*2048kB (UME) 247*4096kB (UM) = 1502360kB [ 265.855653][T12482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.855669][T12482] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.855684][T12482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.855699][T12482] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.855713][T12482] 48370 total pagecache pages [ 265.855721][T12482] 0 pages in swap cache [ 265.855728][T12482] Free swap = 124996kB [ 265.855735][T12482] Total swap = 124996kB [ 265.855743][T12482] 1048443 pages RAM [ 265.855749][T12482] 0 pages HighMem/MovableOnly [ 265.855756][T12482] 283852 pages reserved [ 265.855763][T12482] 0 pages cma reserved [ 266.000315][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'. [ 266.002076][T12479] ip6gre1: entered allmulticast mode [ 266.007397][T12467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.014574][ T40] audit: type=1400 audit(1780613783.085:15572): avc: denied { nlmsg_read } for pid=12483 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.239095][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2098'. [ 267.120160][ T40] audit: type=1400 audit(1780613784.205:15573): avc: denied { map } for pid=12500 comm="syz.0.2102" path="socket:[81821]" dev="sockfs" ino=81821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 267.276493][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 267.366384][T10723] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.377892][ T8818] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.382055][ T8818] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.409733][ T8818] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.680511][ T40] audit: type=1400 audit(1780613784.755:15574): avc: denied { create } for pid=12513 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 267.800945][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2108'. [ 268.281857][T12530] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 268.592530][T12530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.645639][T12531] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 268.791499][T12531] bond3: entered allmulticast mode [ 268.813645][T12536] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 268.913182][T12546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12546 comm=syz.1.2113 [ 269.048816][T12530] kvm: pic: level sensitive irq not supported [ 269.053797][T12530] kvm: pic: non byte read [ 269.078170][T12530] kvm: pic: level sensitive irq not supported [ 269.078950][T12530] kvm: pic: non byte read [ 269.087741][T12530] kvm: pic: level sensitive irq not supported [ 269.088224][T12530] kvm: pic: non byte read [ 269.095611][T12537] (syz.1.2113,12537,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 269.095799][T12530] kvm: pic: level sensitive irq not supported [ 269.099642][T12537] (syz.1.2113,12537,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 269.109412][T12530] kvm: pic: non byte read [ 269.124022][T12530] kvm: pic: level sensitive irq not supported [ 269.124806][T12530] kvm: pic: non byte read [ 269.140234][T12530] kvm: pic: level sensitive irq not supported [ 269.140987][T12530] kvm: pic: non byte read [ 269.187024][T12530] kvm: pic: level sensitive irq not supported [ 269.187946][T12530] kvm: pic: non byte read [ 269.196382][T12530] kvm: pic: level sensitive irq not supported [ 269.196842][T12530] kvm: pic: non byte read [ 269.206568][T12530] kvm: pic: level sensitive irq not supported [ 269.207009][T12530] kvm: pic: non byte read [ 269.214635][T12530] kvm: pic: level sensitive irq not supported [ 269.217792][T12530] kvm: pic: non byte read [ 269.329344][T12537] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 269.516624][T12544] xfrm0 speed is unknown, defaulting to 1000 [ 269.714976][T12554] netlink: 'syz.1.2117': attribute type 10 has an invalid length. [ 269.801132][T12556] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 269.878103][T12556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.942510][T12562] bridge_slave_0: left allmulticast mode [ 269.968008][T12562] bridge_slave_0: left promiscuous mode [ 270.016164][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.158275][T12562] bridge_slave_1: left allmulticast mode [ 270.161922][T12562] bridge_slave_1: left promiscuous mode [ 270.169428][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.219793][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.256316][T12562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.310592][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.314097][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.333476][T12562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.673625][T12593] netlink: 'syz.0.2128': attribute type 10 has an invalid length. [ 272.001100][T12599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12599 comm=syz.0.2129 [ 272.644127][ T40] audit: type=1400 audit(1780613789.725:15575): avc: denied { map } for pid=12613 comm="syz.4.2135" path="socket:[83400]" dev="sockfs" ino=83400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.706054][ T40] audit: type=1400 audit(1780613789.725:15576): avc: denied { read } for pid=12613 comm="syz.4.2135" path="socket:[83400]" dev="sockfs" ino=83400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.744442][T12636] xfrm0 speed is unknown, defaulting to 1000 [ 274.618071][ T5891] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 274.796363][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 274.819810][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 274.852097][ T5891] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 274.871340][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.874868][ T5891] usb 6-1: Product: syz [ 274.876679][ T5891] usb 6-1: Manufacturer: syz [ 274.878922][ T5891] usb 6-1: SerialNumber: syz [ 274.914586][ T5891] usb 6-1: config 0 descriptor?? [ 274.922591][ T5891] hub 6-1:0.0: bad descriptor, ignoring hub [ 274.927591][ T5891] hub 6-1:0.0: probe with driver hub failed with error -5 [ 274.940015][ T5891] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 274.953066][ T40] audit: type=1400 audit(1780613792.025:15577): avc: denied { cmd } for pid=12648 comm="syz.2.2147" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 275.062425][T12658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2149'. [ 275.702070][ T9] usb 6-1: USB disconnect, device number 9 [ 275.746814][T10689] Bluetooth: hci4: command 0x1003 tx timeout [ 275.757969][ T40] audit: type=1400 audit(1780613792.795:15578): avc: denied { write } for pid=12648 comm="syz.2.2147" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 275.762930][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 276.557334][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.741222][T12677] xfrm0 speed is unknown, defaulting to 1000 [ 277.271590][T12695] netlink: 'syz.4.2158': attribute type 10 has an invalid length. [ 277.982077][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.183436][T12711] xfrm0 speed is unknown, defaulting to 1000 [ 278.600651][T12724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.654511][T10723] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 278.695710][T12726] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 278.781754][ T40] audit: type=1400 audit(1780613795.865:15579): avc: denied { create } for pid=12725 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 278.821807][ T40] audit: type=1400 audit(1780613795.905:15580): avc: denied { accept } for pid=12725 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 278.834523][ T40] audit: type=1400 audit(1780613795.905:15581): avc: denied { write } for pid=12725 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 278.842406][T12726] bond10: entered promiscuous mode [ 278.971073][T12726] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.404343][T10723] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 279.743788][T12745] SELinux: ebitmap start bit (4294967168) is beyond the end of the bitmap (1472) [ 279.762885][T12745] SELinux: failed to load policy [ 279.787266][T12745] fuse: Unknown parameter 'Ðrootmode' [ 279.812828][T12746] omfs: Invalid superblock (0) [ 279.946125][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'. [ 280.236621][T12762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.884373][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'. [ 281.389145][T12778] fuse: blksize only supported for fuseblk [ 281.626231][T12786] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 281.643935][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'. [ 281.988299][T10689] Bluetooth: hci4: command 0x1003 tx timeout [ 282.004157][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 282.975202][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2196'. [ 283.111685][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 283.741030][T12826] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 283.898002][ T40] audit: type=1400 audit(1780613800.975:15582): avc: denied { name_bind } for pid=12827 comm="syz.4.2201" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 283.940580][T12830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.901899][T12864] netlink: 'syz.2.2212': attribute type 10 has an invalid length. [ 285.117721][T12871] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 286.269543][T12905] netlink: 'syz.4.2225': attribute type 10 has an invalid length. [ 286.308629][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'. [ 286.332038][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2226'. [ 286.538727][T12915] netlink: 'syz.4.2229': attribute type 10 has an invalid length. [ 286.547758][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 286.618639][ T40] audit: type=1400 audit(1780613803.695:15583): avc: denied { mounton } for pid=12916 comm="syz.2.2230" path="/syzcgroup/unified/syz2" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 286.667940][ T8806] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 286.692512][T12917] (syz.2.2230,12917,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 286.700520][T12920] binder: 12916:12920 ioctl 4018620d 0 returned -22 [ 286.704547][T12917] (syz.2.2230,12917,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 286.716759][T12920] binder: 12916:12920 ioctl c0306201 200000000240 returned -11 [ 286.899685][T12924] 9pnet: Found fid 0 not clunked [ 286.909535][ T8806] usb 6-1: Using ep0 maxpacket: 32 [ 286.966206][ T8806] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.982029][ T8806] usb 6-1: string descriptor 0 read error: -22 [ 286.984885][ T8806] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 286.991221][ T8806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.011113][T12917] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 287.445272][ T5829] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 287.474530][ T854] usb 6-1: USB disconnect, device number 10 [ 287.490743][T12937] 9pnet_virtio: no channels available for device syz [ 287.653223][ T5829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.657244][ T5829] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.664465][ T5829] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.681970][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.925058][ T5829] usb 7-1: usb_control_msg returned -32 [ 287.927378][ T5829] usbtmc 7-1:16.0: can't read capabilities [ 288.195937][ T40] audit: type=1400 audit(1780613805.275:15584): avc: denied { mount } for pid=12953 comm="syz.0.2239" name="/" dev="autofs" ino=89364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 288.205750][T12957] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 288.228284][ T40] audit: type=1400 audit(1780613805.285:15585): avc: denied { read } for pid=12953 comm="syz.0.2239" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 288.253739][ T40] audit: type=1400 audit(1780613805.285:15586): avc: denied { open } for pid=12953 comm="syz.0.2239" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 288.276436][ T40] audit: type=1400 audit(1780613805.285:15587): avc: denied { ioctl } for pid=12953 comm="syz.0.2239" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 288.299213][T12957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.307251][T12920] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32 [ 288.332664][ T5829] usb 7-1: USB disconnect, device number 11 [ 288.421313][T12963] netlink: 'syz.1.2241': attribute type 10 has an invalid length. [ 288.438249][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 288.449175][ T40] audit: type=1400 audit(1780613805.505:15588): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 288.878535][T12977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.921806][T10723] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 288.954365][T12979] 9pnet_virtio: no channels available for device syz [ 288.955278][T12974] xfrm0 speed is unknown, defaulting to 1000 [ 289.329050][ T40] audit: type=1400 audit(1780613806.375:15589): avc: denied { mounton } for pid=12986 comm="syz.0.2251" path="/572/file0" dev="tmpfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 290.447734][T13012] netlink: 'syz.2.2256': attribute type 10 has an invalid length. [ 290.700125][T13016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2258'. [ 291.578833][T13043] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 291.624840][T13043] 8021q: adding VLAN 0 to HW filter on device bond11 [ 292.364494][T13059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.584471][T13073] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 292.591424][T10723] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 292.708422][T13073] 8021q: adding VLAN 0 to HW filter on device bond12 [ 293.086683][T13089] trusted_key: encrypted_key: master key parameter 'b' is invalid [ 293.090060][ T40] audit: type=1400 audit(1780613810.165:15590): avc: granted { setsecparam } for pid=13088 comm="syz.4.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 293.141285][ T40] audit: type=1400 audit(1780613810.165:15591): avc: granted { setsecparam } for pid=13088 comm="syz.4.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 293.653965][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.660728][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.677848][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.721746][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.742621][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.747300][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.786136][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.829190][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 293.865608][T13112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13112 comm=syz.2.2288 [ 295.303683][ T40] audit: type=1400 audit(1780613812.385:15592): avc: denied { setopt } for pid=13151 comm="syz.4.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.337269][ T40] audit: type=1400 audit(1780613812.395:15593): avc: denied { getopt } for pid=13151 comm="syz.4.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.367981][ T40] audit: type=1400 audit(1780613812.435:15594): avc: denied { write } for pid=13151 comm="syz.4.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.884202][T13163] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 301.488648][T13163] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 302.623709][T13189] netlink: 'syz.4.2309': attribute type 1 has an invalid length. [ 302.712078][T13191] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 302.719317][T13189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.786881][T13191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.850435][T13199] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 303.000637][T13202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.369809][ T40] audit: type=1400 audit(1780613820.455:15595): avc: denied { bind } for pid=13211 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.392227][ T40] audit: type=1400 audit(1780613820.455:15596): avc: denied { name_bind } for pid=13211 comm="syz.4.2317" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 303.420964][ T40] audit: type=1400 audit(1780613820.455:15597): avc: denied { node_bind } for pid=13211 comm="syz.4.2317" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 304.036048][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.041529][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.068048][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.093143][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.116598][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.132120][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.173613][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.178311][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.187813][T13238] netlink: 'syz.0.2324': attribute type 1 has an invalid length. [ 304.197101][T13230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13230 comm=syz.1.2322 [ 304.263977][T13238] 8021q: adding VLAN 0 to HW filter on device bond13 [ 304.672628][T13250] netlink: 'syz.4.2326': attribute type 1 has an invalid length. [ 305.072865][ T40] audit: type=1400 audit(1780613822.145:15598): avc: denied { create } for pid=13257 comm="syz.2.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.120041][ T40] audit: type=1400 audit(1780613822.165:15599): avc: denied { write } for pid=13257 comm="syz.2.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.282370][T13248] xfrm0 speed is unknown, defaulting to 1000 [ 305.468301][ T1347] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 305.654259][ T1347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.659440][ T1347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.701331][ T1347] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.715100][ T1347] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.764609][ T1347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.833096][ T1347] usb 9-1: config 0 descriptor?? [ 305.905970][T13280] kvm: kvm [13279]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000016e [ 306.101583][T13284] FAULT_INJECTION: forcing a failure. [ 306.101583][T13284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.131038][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.2.2338 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.131069][T13284] Tainted: [L]=SOFTLOCKUP [ 306.131078][T13284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.131089][T13284] Call Trace: [ 306.131096][T13284] [ 306.131104][T13284] dump_stack_lvl+0x100/0x190 [ 306.131146][T13284] should_fail_ex.cold+0x5/0xa [ 306.131172][T13284] _copy_to_user+0x32/0xd0 [ 306.131206][T13284] simple_read_from_buffer+0xcb/0x170 [ 306.131232][T13284] proc_fail_nth_read+0x1af/0x230 [ 306.131256][T13284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.131278][T13284] ? rw_verify_area+0xce/0x6d0 [ 306.131298][T13284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.131318][T13284] vfs_read+0x1e4/0xb30 [ 306.131344][T13284] ? __pfx_vfs_read+0x10/0x10 [ 306.131363][T13284] ? __fget_files+0x215/0x3d0 [ 306.131393][T13284] ? __fget_files+0x21f/0x3d0 [ 306.131424][T13284] ksys_read+0x12a/0x250 [ 306.131446][T13284] ? __pfx_ksys_read+0x10/0x10 [ 306.131468][T13284] ? rcu_is_watching+0x12/0xc0 [ 306.131499][T13284] do_syscall_64+0x115/0x870 [ 306.131536][T13284] ? clear_bhb_loop+0x40/0x90 [ 306.131560][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.131579][T13284] RIP: 0033:0x7f934035d68e [ 306.131597][T13284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.131615][T13284] RSP: 002b:00007f93412e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.131634][T13284] RAX: ffffffffffffffda RBX: 00007f93412e46c0 RCX: 00007f934035d68e [ 306.131647][T13284] RDX: 000000000000000f RSI: 00007f93412e40a0 RDI: 0000000000000007 [ 306.131658][T13284] RBP: 00007f93412e4090 R08: 0000000000000000 R09: 0000000000000000 [ 306.131669][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.131680][T13284] R13: 00007f9340616038 R14: 00007f9340615fa0 R15: 00007ffe66ad2138 [ 306.131707][T13284] [ 306.421515][ T1347] usbhid 9-1:0.0: can't add hid device: -71 [ 306.428127][ T1347] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 306.695422][ T1347] usb 9-1: USB disconnect, device number 2 [ 306.855377][T13297] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 309.571856][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 309.590042][ T40] audit: type=1326 audit(1780613826.665:15600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13389 comm="syz.0.2361" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f721db9ce59 code=0x0 [ 309.842425][T13408] binder: 13406:13408 ioctl c0306201 0 returned -14 [ 310.708873][ T40] audit: type=1400 audit(1780613827.785:15601): avc: denied { ioctl } for pid=13422 comm="syz.2.2369" path="socket:[91069]" dev="sockfs" ino=91069 ioctlcmd=0x6f34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.331458][T13446] netlink: 'syz.4.2377': attribute type 1 has an invalid length. [ 311.529334][T13453] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2379'. [ 311.742499][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 312.010809][ T40] audit: type=1400 audit(1780613829.085:15602): avc: denied { wake_alarm } for pid=13462 comm="syz.4.2384" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.034990][T13469] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 312.260421][T13484] netlink: 'syz.0.2390': attribute type 1 has an invalid length. [ 312.336865][T13484] 8021q: adding VLAN 0 to HW filter on device bond14 [ 312.610366][T13477] xfrm0 speed is unknown, defaulting to 1000 [ 313.847727][T13519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2398'. [ 314.067913][T13515] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 314.329856][T13515] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 314.545876][T13519] xfrm0 speed is unknown, defaulting to 1000 [ 314.833844][T13542] netlink: 'syz.4.2403': attribute type 1 has an invalid length. [ 315.085990][T13542] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.551037][T13559] wg1: entered promiscuous mode [ 315.832389][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 316.392783][ T40] audit: type=1400 audit(1780613833.445:15603): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 316.460713][T13593] netlink: 'syz.0.2418': attribute type 1 has an invalid length. [ 316.680633][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 316.849124][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 317.279027][T13608] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 317.343425][ T40] audit: type=1400 audit(1780613834.425:15604): avc: denied { bind } for pid=13607 comm="syz.0.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.370329][ T40] audit: type=1326 audit(1780613834.445:15605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.2422" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721db9ce59 code=0x0 [ 317.726444][T13623] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 318.177915][T13621] xfrm0 speed is unknown, defaulting to 1000 [ 318.773689][T13652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13652 comm=syz.1.2434 [ 319.235987][ T40] audit: type=1400 audit(1780613836.315:15606): avc: denied { create } for pid=13656 comm="syz.4.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 319.329555][T13662] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 319.538902][T13673] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 319.638349][T13679] FAULT_INJECTION: forcing a failure. [ 319.638349][T13679] name failslab, interval 1, probability 0, space 0, times 0 [ 319.662055][T13679] CPU: 3 UID: 0 PID: 13679 Comm: syz.4.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.662086][T13679] Tainted: [L]=SOFTLOCKUP [ 319.662092][T13679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.662102][T13679] Call Trace: [ 319.662108][T13679] [ 319.662115][T13679] dump_stack_lvl+0x100/0x190 [ 319.662149][T13679] should_fail_ex.cold+0x5/0xa [ 319.662174][T13679] ? tomoyo_realpath_from_path+0xb6/0x690 [ 319.662207][T13679] should_failslab+0xc2/0x120 [ 319.662227][T13679] __kmalloc_noprof+0xe0/0x850 [ 319.662252][T13679] ? kfree+0x1dd/0x6c0 [ 319.662279][T13679] tomoyo_realpath_from_path+0xb6/0x690 [ 319.662311][T13679] tomoyo_path_number_perm+0x23c/0x580 [ 319.662335][T13679] ? tomoyo_path_number_perm+0x22e/0x580 [ 319.662360][T13679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.662408][T13679] ? find_held_lock+0x2b/0x80 [ 319.662424][T13679] ? __fget_files+0x215/0x3d0 [ 319.662444][T13679] ? hook_file_ioctl_common+0x149/0x410 [ 319.662462][T13679] ? __fget_files+0x215/0x3d0 [ 319.662488][T13679] ? __fget_files+0x21f/0x3d0 [ 319.662514][T13679] security_file_ioctl+0xd3/0x230 [ 319.662541][T13679] __x64_sys_ioctl+0xb7/0x210 [ 319.662561][T13679] do_syscall_64+0x115/0x870 [ 319.662593][T13679] ? clear_bhb_loop+0x40/0x90 [ 319.662614][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.662631][T13679] RIP: 0033:0x7f5b9439ce59 [ 319.662646][T13679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.662668][T13679] RSP: 002b:00007f5b9533a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.662685][T13679] RAX: ffffffffffffffda RBX: 00007f5b94615fa0 RCX: 00007f5b9439ce59 [ 319.662697][T13679] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 319.662707][T13679] RBP: 00007f5b9533a090 R08: 0000000000000000 R09: 0000000000000000 [ 319.662719][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.662729][T13679] R13: 00007f5b94616038 R14: 00007f5b94615fa0 R15: 00007ffe9a4d9aa8 [ 319.662753][T13679] [ 319.662762][T13679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.876695][T13679] binder: 13678:13679 ioctl c0306201 200000000640 returned -22 [ 320.640136][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 321.541590][T13694] xfrm0 speed is unknown, defaulting to 1000 [ 322.212150][T13709] erspan1: entered promiscuous mode [ 322.418513][T13712] ipvlan0: entered allmulticast mode [ 322.421205][T13712] veth0_vlan: entered allmulticast mode [ 322.427575][T13712] sctp: [Deprecated]: syz.1.2455 (pid 13712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.427575][T13712] Use struct sctp_sack_info instead [ 322.800556][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.823329][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.364966][T13736] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 323.414514][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'. [ 323.464839][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 323.660900][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 323.665769][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.675328][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 323.700362][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.709772][ T9] usb 5-1: Product: syz [ 323.713710][ T9] usb 5-1: Manufacturer: syz [ 323.735135][ T9] usb 5-1: SerialNumber: syz [ 323.758447][ T9] usb 5-1: config 0 descriptor?? [ 323.766670][ T40] audit: type=1400 audit(1780613840.825:15607): avc: denied { connect } for pid=13754 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.810217][ T40] audit: type=1400 audit(1780613840.895:15608): avc: denied { setopt } for pid=13754 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.952944][T13790] loop7: detected capacity change from 0 to 16384 [ 325.951096][T13805] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 325.972327][T13807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2483'. [ 325.990293][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 326.218572][ T854] usb 5-1: USB disconnect, device number 5 [ 326.250751][T13811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13811 comm=syz.4.2484 [ 326.307960][ T40] audit: type=1400 audit(1780613843.385:15609): avc: denied { setopt } for pid=13810 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 326.480419][T13818] nbd: illegal input index -2146435068 [ 326.501385][ T40] audit: type=1400 audit(1780613843.585:15610): avc: denied { write } for pid=13817 comm="syz.0.2487" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 326.515860][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'. [ 326.558491][ T40] audit: type=1400 audit(1780613843.585:15611): avc: denied { ioctl } for pid=13817 comm="syz.0.2487" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 327.189127][T10689] Bluetooth: hci4: command 0x1003 tx timeout [ 327.210590][T13834] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 327.212717][T10723] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 327.620689][ T1347] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 327.622009][T13843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.777977][ T1347] usb 9-1: Using ep0 maxpacket: 16 [ 327.819122][ T1347] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.832434][ T1347] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.839246][ T1347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.844911][ T1347] usb 9-1: Product: syz [ 327.847353][ T1347] usb 9-1: Manufacturer: syz [ 327.854828][ T1347] usb 9-1: SerialNumber: syz [ 327.875587][ T1347] usb 9-1: config 0 descriptor?? [ 328.244940][T13849] netlink: 'syz.2.2498': attribute type 10 has an invalid length. [ 328.345250][T13851] Failed to initialize the IGMP autojoin socket (err -2) [ 328.414084][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 328.415742][ T40] audit: type=1400 audit(1780613845.475:15612): avc: denied { ioctl } for pid=13850 comm="syz.2.2499" path="pid:[4026532866]" dev="nsfs" ino=4026532866 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 328.899979][T13863] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 329.330580][T13875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.341755][T13873] Failed to initialize the IGMP autojoin socket (err -2) [ 329.806626][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 330.127240][ C3] ================================================================== [ 330.134199][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 330.143843][ C3] Read of size 1 at addr ffff88802b3af418 by task syz.1.2511/13887 [ 330.148920][ C3] [ 330.157819][ C3] CPU: 3 UID: 0 PID: 13887 Comm: syz.1.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.157844][ C3] Tainted: [L]=SOFTLOCKUP [ 330.157849][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.157857][ C3] Call Trace: [ 330.157863][ C3] [ 330.157870][ C3] dump_stack_lvl+0x100/0x190 [ 330.157891][ C3] print_report+0x13d/0x4b0 [ 330.157910][ C3] ? __virt_addr_valid+0x239/0x430 [ 330.157925][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 330.157940][ C3] kasan_report+0xdf/0x1d0 [ 330.157955][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 330.157971][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 330.157985][ C3] __kasan_check_byte+0x36/0x50 [ 330.157998][ C3] lock_acquire+0x12a/0x370 [ 330.158014][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 330.158031][ C3] ? .slowpath+0x9/0x18 [ 330.158047][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 330.158061][ C3] ? p9_req_put+0xaf/0x250 [ 330.158078][ C3] p9_req_put+0xaf/0x250 [ 330.158095][ C3] req_done+0x1dc/0x2e0 [ 330.158110][ C3] ? __pfx_req_done+0x10/0x10 [ 330.158126][ C3] ? __pfx_req_done+0x10/0x10 [ 330.158140][ C3] vring_interrupt+0x2ef/0x650 [ 330.158153][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 330.158165][ C3] __handle_irq_event_percpu+0x235/0x8c0 [ 330.158187][ C3] handle_irq_event+0xab/0x1e0 [ 330.158207][ C3] handle_edge_irq+0x35e/0x960 [ 330.158227][ C3] __common_interrupt+0xd8/0x2f0 [ 330.158242][ C3] common_interrupt+0xb9/0xe0 [ 330.158254][ C3] [ 330.158259][ C3] [ 330.158264][ C3] asm_common_interrupt+0x26/0x40 [ 330.158277][ C3] RIP: 0010:lock_acquire+0x5e/0x370 [ 330.158293][ C3] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 88 f2 0e 0f 82 a4 02 00 00 8b 35 0e bc f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 330.158317][ C3] RSP: 0018:ffffc90005697970 EFLAGS: 00000206 [ 330.158331][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 330.158339][ C3] RDX: 0000000000000000 RSI: ffffffff8dee956e RDI: ffffffff8c1c4480 [ 330.158348][ C3] RBP: ffff88803bec5850 R08: 00000000f59ea543 R09: 0000000000000096 [ 330.158357][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 330.158365][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 330.158384][ C3] ? __pfx_select_collect+0x10/0x10 [ 330.158404][ C3] ? __pfx_select_collect+0x10/0x10 [ 330.158421][ C3] _raw_spin_lock+0x2e/0x40 [ 330.158434][ C3] ? d_walk+0xf3/0x970 [ 330.158445][ C3] d_walk+0xf3/0x970 [ 330.158458][ C3] ? __pfx_select_collect_umount+0x10/0x10 [ 330.158477][ C3] shrink_dcache_tree+0xc5/0x7e0 [ 330.158490][ C3] ? __pfx_select_collect+0x10/0x10 [ 330.158507][ C3] ? __lock_acquire+0x4a5/0x2630 [ 330.158522][ C3] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 330.158538][ C3] ? do_raw_spin_lock+0x128/0x260 [ 330.158555][ C3] ? find_held_lock+0x2b/0x80 [ 330.158567][ C3] ? d_invalidate+0xfd/0x290 [ 330.158579][ C3] ? d_invalidate+0xfd/0x290 [ 330.158593][ C3] d_invalidate+0x13a/0x290 [ 330.158606][ C3] ? __pfx_d_invalidate+0x10/0x10 [ 330.158619][ C3] ? __pfx_down_write_nested+0x10/0x10 [ 330.158637][ C3] ? up_write+0x28c/0x4f0 [ 330.158652][ C3] ? find_next_child+0x18f/0x280 [ 330.158666][ C3] __simple_recursive_removal+0x130/0x5c0 [ 330.158684][ C3] ? __pfx_remove_one+0x10/0x10 [ 330.158701][ C3] debugfs_remove+0x5d/0x80 [ 330.158715][ C3] kvm_destroy_vm_debugfs+0xc6/0x200 [ 330.158738][ C3] ? __pfx_kvm_vm_release+0x10/0x10 [ 330.158760][ C3] kvm_put_kvm+0xff/0xb10 [ 330.158780][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 330.158800][ C3] ? _raw_spin_unlock_irq+0x2e/0x50 [ 330.158818][ C3] ? __pfx_kvm_vm_release+0x10/0x10 [ 330.158835][ C3] kvm_vm_release+0x3c/0x50 [ 330.158851][ C3] __fput+0x3ff/0xb50 [ 330.158869][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.158884][ C3] task_work_run+0x150/0x240 [ 330.158902][ C3] ? __pfx_task_work_run+0x10/0x10 [ 330.158918][ C3] ? rcu_is_watching+0x12/0xc0 [ 330.158938][ C3] exit_to_user_mode_loop+0x157/0x670 [ 330.158956][ C3] ? rcu_is_watching+0x12/0xc0 [ 330.158975][ C3] do_syscall_64+0x666/0x870 [ 330.158992][ C3] ? clear_bhb_loop+0x40/0x90 [ 330.159008][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.159022][ C3] RIP: 0033:0x7f4792f9ce59 [ 330.159034][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.159046][ C3] RSP: 002b:00007fff450dab68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 330.159060][ C3] RAX: 0000000000000000 RBX: 00007f4793217da0 RCX: 00007f4792f9ce59 [ 330.159069][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 330.159077][ C3] RBP: 00007f4793217da0 R08: 0000000000000006 R09: 0000000000000000 [ 330.159085][ C3] R10: 00000000003f947c R11: 0000000000000246 R12: 00000000000508f8 [ 330.159094][ C3] R13: 00007f479321609c R14: 00000000000506b5 R15: 00007f4793216090 [ 330.159107][ C3] [ 330.159112][ C3] [ 330.592760][ C3] Allocated by task 13900: [ 330.594744][ C3] kasan_save_stack+0x30/0x50 [ 330.596893][ C3] kasan_save_track+0x14/0x30 [ 330.599319][ C3] __kasan_kmalloc+0xaa/0xb0 [ 330.604632][ C3] p9_client_create+0xaf/0xd40 [ 330.607804][ C3] v9fs_session_init+0x3c/0xd20 [ 330.620814][ C3] v9fs_get_tree+0xb8/0xb50 [ 330.623723][ C3] vfs_get_tree+0x92/0x320 [ 330.626559][ C3] path_mount+0x7d0/0x23d0 [ 330.645273][ C3] __x64_sys_mount+0x293/0x310 [ 330.648442][ C3] do_syscall_64+0x115/0x870 [ 330.650463][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.652662][ C3] [ 330.653569][ C3] Freed by task 13900: [ 330.655072][ C3] kasan_save_stack+0x30/0x50 [ 330.656999][ C3] kasan_save_track+0x14/0x30 [ 330.658833][ C3] kasan_save_free_info+0x3b/0x70 [ 330.661260][ C3] __kasan_slab_free+0x5f/0x80 [ 330.666463][ C3] kfree+0x223/0x6c0 [ 330.668127][ C3] p9_client_create+0x72d/0xd40 [ 330.678416][ C3] v9fs_session_init+0x3c/0xd20 [ 330.680544][ C3] v9fs_get_tree+0xb8/0xb50 [ 330.682669][ C3] vfs_get_tree+0x92/0x320 [ 330.684521][ C3] path_mount+0x7d0/0x23d0 [ 330.689798][ C3] __x64_sys_mount+0x293/0x310 [ 330.692801][ C3] do_syscall_64+0x115/0x870 [ 330.695533][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.699718][ C3] [ 330.704294][ C3] The buggy address belongs to the object at ffff88802b3af400 [ 330.704294][ C3] which belongs to the cache kmalloc-512 of size 512 [ 330.717542][ C3] The buggy address is located 24 bytes inside of [ 330.717542][ C3] freed 512-byte region [ffff88802b3af400, ffff88802b3af600) [ 330.739836][ C3] [ 330.742789][ C3] The buggy address belongs to the physical page: [ 330.751314][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b3ac [ 330.755609][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 330.765472][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 330.774441][ C3] page_type: f5(slab) [ 330.778245][ C3] raw: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122 [ 330.786264][ C3] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 330.797843][ C3] head: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122 [ 330.807567][ C3] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 330.812527][ C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 330.819604][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 330.832861][ C3] page dumped because: kasan: bad access detected [ 330.835279][ C3] page_owner tracks the page as allocated [ 330.837512][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5170, tgid 5170 (udevd), ts 30327833417, free_ts 30312824042 [ 330.872836][ C3] post_alloc_hook+0xfd/0x120 [ 330.874583][ C3] get_page_from_freelist+0x11a6/0x3410 [ 330.876972][ C3] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 330.880318][ C3] new_slab+0xa6/0x6c0 [ 330.882465][ C3] refill_objects+0x277/0x420 [ 330.892277][ C3] __pcs_replace_empty_main+0x375/0x650 [ 330.894189][ C3] __kmalloc_cache_noprof+0x493/0x6f0 [ 330.896029][ C3] kernfs_fop_open+0x23d/0xd50 [ 330.898797][ C3] do_dentry_open+0x6ab/0x14d0 [ 330.901373][ C3] vfs_open+0x82/0x3f0 [ 330.909541][ C3] path_openat+0x208c/0x31a0 [ 330.912106][ C3] do_file_open+0x20e/0x430 [ 330.920634][ C3] do_sys_openat2+0x10d/0x1e0 [ 330.923047][ C3] __x64_sys_openat+0x12d/0x210 [ 330.925699][ C3] do_syscall_64+0x115/0x870 [ 330.928111][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.933795][ C3] page last free pid 5153 tgid 5153 stack trace: [ 330.954071][ C3] __free_frozen_pages+0x794/0x10a0 [ 330.956829][ C3] qlist_free_all+0x47/0xf0 [ 330.959876][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 330.962700][ C3] __kasan_slab_alloc+0x69/0x90 [ 330.965107][ C3] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 330.968137][ C3] __alloc_skb+0x140/0x710 [ 330.971070][ C3] netlink_alloc_large_skb+0x69/0x150 [ 330.973745][ C3] netlink_sendmsg+0x680/0xda0 [ 330.978579][ C3] ____sys_sendmsg+0x9e1/0xb70 [ 330.988158][ C3] ___sys_sendmsg+0x190/0x1e0 [ 330.990101][ C3] __sys_sendmsg+0x170/0x220 [ 330.991985][ C3] do_syscall_64+0x115/0x870 [ 331.001149][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.003818][ C3] [ 331.005104][ C3] Memory state around the buggy address: [ 331.008468][ C3] ffff88802b3af300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.015563][ C3] ffff88802b3af380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 331.021497][ C3] >ffff88802b3af400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.025762][ C3] ^ [ 331.028895][ C3] ffff88802b3af480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.035191][ C3] ffff88802b3af500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.040252][ C3] ================================================================== [ 331.046481][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 331.051592][ C3] CPU: 3 UID: 0 PID: 13887 Comm: syz.1.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.068210][ C3] Tainted: [L]=SOFTLOCKUP [ 331.074021][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.081253][ C3] Call Trace: [ 331.083605][ C3] [ 331.085387][ C3] dump_stack_lvl+0x100/0x190 [ 331.088284][ C3] vpanic+0x552/0x970 [ 331.090795][ C3] ? __pfx_vpanic+0x10/0x10 [ 331.094582][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 331.097635][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 331.100977][ C3] panic+0xd1/0xe0 [ 331.105535][ C3] ? __pfx_panic+0x10/0x10 [ 331.109232][ C3] ? end_report.part.0+0x23/0x90 [ 331.112297][ C3] ? rcu_is_watching+0x12/0xc0 [ 331.115202][ C3] ? end_report.part.0+0x23/0x90 [ 331.118476][ C3] ? check_panic_on_warn+0x1f/0x90 [ 331.123171][ C3] check_panic_on_warn.cold+0x19/0x34 [ 331.127726][ C3] end_report.part.0+0x3a/0x90 [ 331.131190][ C3] kasan_report.cold+0xe/0x18 [ 331.134136][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 331.139313][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 331.145177][ C3] __kasan_check_byte+0x36/0x50 [ 331.148649][ C3] lock_acquire+0x12a/0x370 [ 331.151761][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 331.156968][ C3] ? .slowpath+0x9/0x18 [ 331.160121][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 331.163958][ C3] ? p9_req_put+0xaf/0x250 [ 331.167839][ C3] p9_req_put+0xaf/0x250 [ 331.172903][ C3] req_done+0x1dc/0x2e0 [ 331.176924][ C3] ? __pfx_req_done+0x10/0x10 [ 331.180862][ C3] ? __pfx_req_done+0x10/0x10 [ 331.184208][ C3] vring_interrupt+0x2ef/0x650 [ 331.187740][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 331.191091][ C3] __handle_irq_event_percpu+0x235/0x8c0 [ 331.193745][ C3] handle_irq_event+0xab/0x1e0 [ 331.195990][ C3] handle_edge_irq+0x35e/0x960 [ 331.198985][ C3] __common_interrupt+0xd8/0x2f0 [ 331.202034][ C3] common_interrupt+0xb9/0xe0 [ 331.204879][ C3] [ 331.206707][ C3] [ 331.208562][ C3] asm_common_interrupt+0x26/0x40 [ 331.211705][ C3] RIP: 0010:lock_acquire+0x5e/0x370 [ 331.214877][ C3] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 88 f2 0e 0f 82 a4 02 00 00 8b 35 0e bc f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 331.226549][ C3] RSP: 0018:ffffc90005697970 EFLAGS: 00000206 [ 331.230216][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 331.235070][ C3] RDX: 0000000000000000 RSI: ffffffff8dee956e RDI: ffffffff8c1c4480 [ 331.239738][ C3] RBP: ffff88803bec5850 R08: 00000000f59ea543 R09: 0000000000000096 [ 331.244596][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 331.249397][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 331.254213][ C3] ? __pfx_select_collect+0x10/0x10 [ 331.257355][ C3] ? __pfx_select_collect+0x10/0x10 [ 331.260884][ C3] _raw_spin_lock+0x2e/0x40 [ 331.263662][ C3] ? d_walk+0xf3/0x970 [ 331.266199][ C3] d_walk+0xf3/0x970 [ 331.268590][ C3] ? __pfx_select_collect_umount+0x10/0x10 [ 331.272129][ C3] shrink_dcache_tree+0xc5/0x7e0 [ 331.276446][ C3] ? __pfx_select_collect+0x10/0x10 [ 331.282848][ C3] ? __lock_acquire+0x4a5/0x2630 [ 331.287051][ C3] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 331.290438][ C3] ? do_raw_spin_lock+0x128/0x260 [ 331.293382][ C3] ? find_held_lock+0x2b/0x80 [ 331.296445][ C3] ? d_invalidate+0xfd/0x290 [ 331.299285][ C3] ? d_invalidate+0xfd/0x290 [ 331.302207][ C3] d_invalidate+0x13a/0x290 [ 331.305001][ C3] ? __pfx_d_invalidate+0x10/0x10 [ 331.308055][ C3] ? __pfx_down_write_nested+0x10/0x10 [ 331.312684][ C3] ? up_write+0x28c/0x4f0 [ 331.315331][ C3] ? find_next_child+0x18f/0x280 [ 331.318364][ C3] __simple_recursive_removal+0x130/0x5c0 [ 331.321922][ C3] ? __pfx_remove_one+0x10/0x10 [ 331.326723][ C3] debugfs_remove+0x5d/0x80 [ 331.330539][ C3] kvm_destroy_vm_debugfs+0xc6/0x200 [ 331.334172][ C3] ? __pfx_kvm_vm_release+0x10/0x10 [ 331.337273][ C3] kvm_put_kvm+0xff/0xb10 [ 331.341186][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 331.344343][ C3] ? _raw_spin_unlock_irq+0x2e/0x50 [ 331.347532][ C3] ? __pfx_kvm_vm_release+0x10/0x10 [ 331.350852][ C3] kvm_vm_release+0x3c/0x50 [ 331.354150][ C3] __fput+0x3ff/0xb50 [ 331.358049][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.361841][ C3] task_work_run+0x150/0x240 [ 331.365849][ C3] ? __pfx_task_work_run+0x10/0x10 [ 331.369091][ C3] ? rcu_is_watching+0x12/0xc0 [ 331.372282][ C3] exit_to_user_mode_loop+0x157/0x670 [ 331.377155][ C3] ? rcu_is_watching+0x12/0xc0 [ 331.381162][ C3] do_syscall_64+0x666/0x870 [ 331.384123][ C3] ? clear_bhb_loop+0x40/0x90 [ 331.386917][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.391744][ C3] RIP: 0033:0x7f4792f9ce59 [ 331.394390][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.406522][ C3] RSP: 002b:00007fff450dab68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.412075][ C3] RAX: 0000000000000000 RBX: 00007f4793217da0 RCX: 00007f4792f9ce59 [ 331.414937][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 331.418779][ C3] RBP: 00007f4793217da0 R08: 0000000000000006 R09: 0000000000000000 [ 331.425901][ C3] R10: 00000000003f947c R11: 0000000000000246 R12: 00000000000508f8 [ 331.431370][ C3] R13: 00007f479321609c R14: 00000000000506b5 R15: 00007f4793216090 [ 331.436609][ C3] [ 331.439781][ C3] Kernel Offset: disabled [ 331.442520][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:19:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=0000000000000006 RCX=0000000000000006 RDX=0000000000000006 RSI=ffff888062163120 RDI=ffff888062162540 RBP=ffffc90003f27918 RSP=ffffc90003f27880 R8 =0000000000000001 R9 =0000000000000038 R10=0000000000000002 R11=0000000000000000 R12=ffff888062163120 R13=ffff888062162540 R14=0000000000000040 R15=0000000000000003 RIP=ffffffff81e44922 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555859b9500 ffffffff 00c00000 GS =0000 ffff8880d6386000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f721ddedd40 CR3=000000002cc6b000 CR4=00352ef0 DR0=0000000000000001 DR1=00000000000001f8 DR2=0000000000000003 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555859b97e0 00005555859b97e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca07a0b96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca07a0b96 00007ffca07a0b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc33352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc33392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc33384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001ea561 RBX=ffff88801e6e2540 RCX=ffffffff8b894285 RDX=0000000000000000 RSI=ffffffff8df0ead1 RDI=ffffffff8c1c4480 RBP=0000000000000000 RSP=ffffc90000177df0 R8 =0000000000000001 R9 =ffffed100d4a67b5 R10=ffff88806a533dab R11=0000000000000000 R12=0000000000000001 R13=ffffed1003cdc4a8 R14=0000000000000001 R15=ffffffff90d70450 RIP=ffffffff8b8928df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6486000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9be09fed24 CR3=000000003fbf8000 CR4=00352ef0 DR0=0000000000000001 DR1=00000000000001f8 DR2=0000000000000003 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe66ad2626 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe66ad2626 00007ffe66ad262c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9340433352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9340433392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93404334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9340433384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000156c3f RBX=ffff88801eacca80 RCX=ffffffff8b894285 RDX=0000000000000000 RSI=ffffffff8df0ead1 RDI=ffffffff8c1c4480 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c67b5 R10=ffff88806a633dab R11=0000000000000000 R12=0000000000000002 R13=ffffed1003d59950 R14=0000000000000002 R15=ffffffff90d70450 RIP=ffffffff8b8928df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6586000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f721e94da08 CR3=000000002ddff000 CR4=00352ef0 DR0=0000000000000001 DR1=00000000000001f8 DR2=0000000000000003 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca07a0b96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca07a0b96 00007ffca07a0b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc33352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc33392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721dc33384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857e75a5 RDI=ffffffff9b45dca0 RBP=ffffffff9b45dc60 RSP=ffffc900006f8710 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff857e7540 RIP=ffffffff857e75cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555706ce500 ffffffff 00c00000 GS =0000 ffff8880d6686000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f934044f156 CR3=0000000056cb6000 CR4=00352ef0 DR0=0000000000000001 DR1=00000000000001f8 DR2=0000000000000003 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff450daef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff450daef6 00007fff450daefc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4793033352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4793033392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47930334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4793033384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000