last executing test programs: 3.314994425s ago: executing program 3 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000a10ff02000000000000000000000000000189"], 0x340a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000240)='wg0\x00', 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f00000001c0)={{0x1, @rand_addr, 0x0, 0x0, 'lblc\x00', 0x8, 0x3, 0x2000000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x44) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="010000000000fc62f2da061ed0244b0003007e330326ad640aa60fa6cdfaff1386585b4ab974dcf397d5f2723e37e55f973bca7abad66efe0377c1483a07b6078dec2025383bbabe755866995e8578c3595e", @ANYRES32=r6, @ANYRES16=r0, @ANYRES64=r5], 0x94}}, 0x40400f0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x20, 0x70bd27, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) splice(r0, &(0x7f0000000040)=0x8beb, 0xffffffffffffffff, &(0x7f00000000c0)=0x9, 0x1, 0x0) 2.127627911s ago: executing program 3 (id=1026): r0 = socket$inet(0x2, 0xa, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 2.126713322s ago: executing program 3 (id=1028): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000380)="ab", 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020000) r2 = syz_io_uring_setup(0x6d9d, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00', 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r1, 0xc000}, {r5, 0x8}, {r2, 0x202}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x9dbe]}, 0x8) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@deltaction={0x18c, 0x31, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffc0}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x5d, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x24088001}, 0x0) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="deb66393eb2da98885ee9397515f", 0xe, r6) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0xc0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x94, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "d10347768f86451ea1067b781aa09d4087ac8d525d691cc486bd189315f97c54f8c7e91ae35138489bb9ca4c1dcab083b08bbe1bb4112975e94a81515638f9f558666633f029b54a3bf5c6bafb33911aae274303e53e00000000000000191d1a9bc78859f205f8333ec652d83dfe62691ed5a6dceb0698"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 1.967781809s ago: executing program 1 (id=1034): io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffff64}]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.748712205s ago: executing program 1 (id=1040): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) 1.687005233s ago: executing program 0 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async, rerun: 64) ftruncate(r0, 0x5) (async, rerun: 64) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, "cf"}}}}}, 0x0) (async, rerun: 32) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff4a}, {0xa, 0x4e23, 0x9, @empty, 0x2}, 0x1, {[0xc, 0xf363, 0x9, 0x28, 0x2, 0xfffffff0, 0x1, 0xb]}}, 0x5c) 1.594183575s ago: executing program 0 (id=1045): mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002280)=ANY=[@ANYBLOB="040e0b480510"], 0xe) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000910400"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) chdir(&(0x7f0000000280)='./file0\x00') rmdir(&(0x7f0000000380)='./file2\x00') 1.379147171s ago: executing program 1 (id=1050): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7fffffff) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x6801, 0x0) r3 = syz_open_pts(r2, 0x543683) ioctl$VT_ACTIVATE(r3, 0x5606, 0x3) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000002580)=ANY=[@ANYBLOB], 0x6) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x8000) (async) r6 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x8000) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f00000001c0)=0xffffff37) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x23, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x12f4}}, 0x240000c4) recvmmsg(r7, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000000)=""/36, 0x24}], 0x2}, 0x9}], 0x1, 0x12122, 0x0) (async) recvmmsg(r7, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000000)=""/36, 0x24}], 0x2}, 0x9}], 0x1, 0x12122, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x19a, 0x1, 0x5}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) 1.378063084s ago: executing program 2 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=0']) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) (async) accept4$unix(r0, &(0x7f00000003c0), &(0x7f0000000300)=0x6e, 0x800) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000100)={0x2, {0x2, 0xffff, 0x0, 0xf, 0x2, 0x11}}) (async) write$vhost_msg_v2(r1, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000140)=""/147, 0x93, &(0x7f0000000200)=""/248, 0x2, 0x2}}, 0x48) (async) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) 1.316194322s ago: executing program 2 (id=1052): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x980912, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="ff0000000000000002004e23ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e236401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e0dac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009cc9aed02b0fe589b0d2c2d96b9c9aaaae132566b1eb9acf3b482a6423133d923d3f808b1d2924a158309fa7dcad6bc23ef8dadbe3e6587a318afe0c3211877235a941bc1922045c5df7d65df7439f12e85a7fa11f0d83bf711dc0062183581904101ac3b6ceac9ea88f4db3"], 0x290) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) signalfd4(r3, &(0x7f0000000180), 0x8, 0x80800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x81, 0x1f, 0x1, 0x100}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x7, 0x7ff, 0x16, 0x3, 0x5, 0x8, 0xffffffff, 0xa, 0xfd, 0x2, 0x0, 0x1, 0x1, 0x6, 0x101, 0xfffffffe, 0x7f, 0x8, 0x40000003, 0x89, 0xca9f, 0x3, 0x20101e58, 0x9, 0xe66, 0x3, 0xc, 0x4085, 0x0, 0xfffffff8, 0x3]}) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'fl512\x00', [0x9, 0x5, 0x1, 0x1, 0x1, 0x6, 0x76e, 0x8, 0x3c98efb6, 0xa9e3, 0x7, 0x9, 0x9, 0x5, 0x5, 0x2, 0xf, 0xffff, 0x8, 0x5, 0x3, 0x101, 0xcaaa746a, 0xea62, 0x10001, 0xfe64, 0x1, 0xc, 0x9, 0x0, 0x5, 0x7]}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) userfaultfd(0x40002) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) 1.252187601s ago: executing program 2 (id=1053): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) 1.2519101s ago: executing program 0 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008849}, 0xc880) 1.251612401s ago: executing program 2 (id=1055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, 0x0, 0x28054054) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x503000, 0x0) kexec_load(0x0, 0x0, 0x0, 0x320000) syz_emit_vhci(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) sync() bind$bt_sco(r1, &(0x7f0000000340), 0x8) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a000000000000003adc13e2fdf37bebce0da20efab43cbaf058278c11398208e18b7a4de929fecc2c11749e253e8496e736e8f92dd84e78f50e4c76a88324aed4929bf7ab87ed018cf57cc35defaf", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc0200"/204], 0x174}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.176165927s ago: executing program 1 (id=1056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0xb5315241, 0x7, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000100)=0xfbe2d31e81ae5717) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc40) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffcc4, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x24044805) 1.172796894s ago: executing program 3 (id=1057): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa8}}, 0x0) 1.172358338s ago: executing program 1 (id=1058): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002080)={0x50, 0x0, r1, {0x7, 0x2b, 0xa, 0x2080084, 0x28f, 0x8, 0x4, 0x400, 0x0, 0x0, 0x10, 0x8}}, 0x50) open$dir(&(0x7f0000002100)='./file0\x00', 0x284040, 0x50) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000002140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x20, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa1b, 0x42}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r4 = syz_open_dev$vim2m(&(0x7f00000022c0), 0x1, 0x2) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000002380)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000023c0)=@userptr={0x8, 0x3, 0x4, 0x0, 0x1, {r5, r6/1000+10000}, {0x4, 0x1, 0xf7, 0x0, 0x1, 0x0, "bfbd85e6"}, 0x1, 0x2, {&(0x7f0000002340)}, 0x3, 0x0, r7}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f00000024c0)={0x134, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40c6fcec}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20041000}, 0x801) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0xa0, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xa0, 0x3}}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x51}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xbc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf85}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) r9 = syz_open_dev$vcsa(&(0x7f0000002840), 0x7, 0x400002) syz_genetlink_get_family_id$batadv(&(0x7f0000002800), r9) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) utimensat(r9, &(0x7f0000002880)='./file0\x00', &(0x7f0000002900)={{r10, r11/1000+10000}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x6c, 0x0, 0x202, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44080}, 0x4008841) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0x80585414, &(0x7f0000002a80)) io_setup(0x3ff, &(0x7f0000002b00)) writev(r4, &(0x7f0000003f00)=[{&(0x7f0000002b40)="f9583c73bdec34b7936fb4486ddd1c47d389c4b44e49edc0b6ac1b273eefb5a43b3c65510df39891f1fa6cd7c97595396fdf31d8ae6f54ffe077bc55ac48392acfebcea69abdbf076c8435cb4ad54a388a348228fe942fdb56a3622ec7f118010899560ec1cf543d3a28725bf124d353682822079406e6ed93e5a20ed5070d6a749042e960d02197970f2e2431a587aa6c0495d7e36ec9a922e9e58df633526df8b76bd045206d22dcddec1e6a0e11e8c2549b903691d81a7d01cc2f509f1fb41f0ded72c2df0c1220942c47e0a877590eefed1a9200811f63cbb89f89510572a761e62a66e7e054b770c69cd888a4", 0xef}, {&(0x7f0000002c40)="877fc5e9a3e682f78665", 0xa}, {&(0x7f0000002c80)="827d6d702bff26850cbef79108f0a29df201a967dac2f3bd9600aa180b2fb2589b32ac01b7029b025c88f1629d408cf578bb261097708ae9585e9a26a134e30cd84117a9407e028465bc3f0d13baa3f046052e6527547e9f1f7e9682dec207f31f3a7c908bc2acb2277a9297f734bbf00f7fa5ead650a27285e645eea4bc127b34a2c98a93ab72091fb37038ba7753ceb3ffb88a5f6691bb285dffea5441a21664f6ef0c56e2b9d10bae8e7e6f6a3487b5c9f2a6a09d9e1b1de5a861f129051677a207b71e3080d9eac5c4a52f8b99f9b14564067bcf0a59d252c40de5f5cd07a43672e49cb6a9170fd998d6db827e3d4116725e42d58a2c89", 0xf9}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)}, {&(0x7f0000003dc0)="c752cf08b72d4504ed17e87ca7e0d92d7d15fccf80", 0x15}, {&(0x7f0000003e00)="96927c8e685d8389032769b3209161d843d1e68ccfb79c2eb03f98c7249f955aab5e62cd1a71c9ae160a729f0d086494597bfc8748c7b194c05fd9759589f9bb33c9c84a9c87b28967c78aeb3d984cfa35bb7e668f2c5a285be58d54cc8360faec29bcaaf0d7385fd3c98458826e4ba686cba884ddde4c26f70468794723a69c1fe000ba00418909eb03299ab393ad46ed6c7b2677e9c17820f12efdaa3cb4078437bc588a465407b5ec34e3854fe35cd81d39745bcdf048764d44afbe69", 0xbe}, {&(0x7f0000003ec0)="f8cdfb4b3e8885456c78db4770881b0cafc9493a98d4d8d13091e5bfa4d154af6b5d7a28269e2474c93733659ba0c2c7cdc6fc0edf64dc86dca9b29f49b75f", 0x3f}], 0x8) close_range(0xffffffffffffffff, r4, 0xfd69b710d0d817ce) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f0000003f80)={0x3, 'ipvlan1\x00', {0x89c4}, 0x8}) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000004000), r9) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f00000040c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x14, r13, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x844) r14 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r14, &(0x7f0000004380)={&(0x7f0000004100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004180)=""/202, 0xca}], 0x1, &(0x7f00000042c0)=""/171, 0xab}, 0x40004000) 1.172054513s ago: executing program 3 (id=1059): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fbf52ee4507000002000000250600000ee60000bf250000000000001f010000000000006507040002000000070700004c0000001f75000000000000bf540000000000000704000004000bffbd350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb600100000a4911fe82664d775cdb9dfc83fa32db39b636c1866b526ffff00005172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b5d6902e7db826e6dffda3aabdc5b5ce08ca4ee6035f1b7dc6b3b4672f7c22efa6d633473cd548789f8ab5a654106888aff6f3eb7e962160dac2c68c044584bb50e9c0952bab14c2c65176c7e40faaea21457d5f2d6f40c4d3390a1e14561cbf0a6ccd15f45c52753e24c6488b23ec9a3261c7706cecfc37b25b382c76631983e053efde84f80c5483d26bfaa66bf477cca77d399c76469551913f98a26fa0363ebb7f861a3d53d4dd6d91f7dcefb0748cd20346878bc0759851cd32ba781d6e62e8eee022be7fb6fff27871a5a7a723e5e330f454f0c568fbfc9b901bd6cc3af8355e5ecf3f74a472c7861beeeba7d5d25208a2e1d4c0b8e4f82ce05ffe1c69aaea312bbb3656c873b26161dccd130823e87d0b411e6fdb2cc4def13ecdf4217b647803c9dbaba0cd1036081842b7fc3a30759c24058ad22001bc2817d4604bc2d49bf41894e61356ddf6d394a397c67321a0dd4ac4082ee583de98e8a89535050054d40a4dbd809d0ce9c444286b5d5a51d933d35714d8ca7fb49b5329107825926fd5caaf4ddd1e81e616fc56e47d30e51cd558d630f665a88da23e96c45a0a4ccd554a92628336eb43de1022d60e5ffe41b6bef61ea28c5ea09a832f9f84b10aa4b6350930b11865184fce06bb8bf64b578e8477d3440526aa2055daa7945db10e7c2cf517d954fc2db6cdee34cff68b43fef6205f2cf390e1bc4ee8ee0b5f204bf14c30a54196863eb6c707de3b344a6f84b47be3012b55d41da4c0bc43af548ee4b98c8599008d140e106138c6469cbc3857beddafd53fd1ba63b4786d5efec1942049aae281112e43477f0bf74ce9f2acc9bc6dd58a434eb41ad1a5cd4f753c32f2a40ff3c0c25a6f7833acfee9fc332eca2a41a97e832240b574a6413334f8b1ce08f6b560569355cac2d81191aaa6f3849433ed3f4617a04e22917c889f878486657fc6c001d90dc4e3d609f0ee78305143c60140a2396e959d8430fdcd7ccfaa0b0ba1dcb130f25714a191dbe2efeab57746e44a4344eaaf95c70d7043145f560b2e633f546a8c6b1aca8fa92ddd95b5aeade2ca2bb39a19e9250ae15e3a083914ec19605f13b7f1dedb7d26a9713f920d9b83b038863f066ef0e0cef0b63927773078a6c9187881b96c14bcfb475a6cb07fc2e434ecd4c58b8dd7e8282d966d7d184dc1513c4fa2e161c26742d7c7a5afcb85291c9393206729cc9aa027814b03cbb598c5bd01fd63478d10e9a6c94a211be56e5b8bd4d6777eafa4fa777695b941bb65be7651828c9c7f6b68cd7e1b62f4d6a3b5cacbb7d340d76"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.091829343s ago: executing program 3 (id=1060): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "ce23a62e900312a97a2dca1f65a707cf"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x5, 0x6, 0x3}}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="d7fe230d47ebcead3d62ff6c0739b356", 0x10) shutdown(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 973.785412ms ago: executing program 2 (id=1061): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x8000000, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r2, 0x4}) 973.105457ms ago: executing program 0 (id=1062): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="db", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000008400000008000000fc020000000000000000000000000001200000000000000084000000080000002001000000000000000000000000000118000000000000008400000007000000ac"], 0x58, 0x4855}, 0x4008084) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2000) ioctl$LOOP_CLR_FD(r1, 0x4c01) 813.628272ms ago: executing program 2 (id=1063): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x2}, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0xffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4c044) 75.827222ms ago: executing program 1 (id=1064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b4280, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x8, 0xed8d, @local, 0x7fff}}, [0x1, 0x5, 0x8, 0xfffffffffffffffd, 0x3, 0x1, 0xfffffffffffffff8, 0x2, 0x5, 0x5, 0x1, 0x0, 0x800, 0x7fffffff, 0x5]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={r6, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5dce}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0xfffffffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9b0}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x9}]}, &(0x7f0000000380)=0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "30529a36df6da6777a8ea00c32a2874cfdffd8f352d8bc7b55e18fe7f99f8b320e5794dfce17a724654dbbd67d996c5b7803aad228c9aa9e51d4d99596014003e6e8523a82b4d6188141a0c5711309bc021a2a3585d7552f6e57b8c42df22bf6f4a05e684a6d86ae3cecc4775635e858fcc03a9d65beca48afb0fce2dc24966158696e99c38e8d43972998d72a59b10875fd4895232fc8b584513fc2ef2a358398b09f19c04a7bf673ed157dd0ccb6"}, 0xba) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000440)=ANY=[@ANYBLOB="99177fa54f29ece65fbcee5586dd60000000001611fffe8000000000000000000000005017bbfe8000000000000009000000000000aa00000e2200169078020300000000000030b00afe4e705cfbb18abd8bbbe842f47e184dcb3f6d05a2a4ce81a4d61b522677e436ed6ba0bdae00348e8246582870d2e27df9ebaf8b2fefdf01943e22807268b980be872b7aac252f0d2736726a9cec96eccf9b4d"], 0x0) 22.016035ms ago: executing program 0 (id=1065): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x69) close(r0) open(&(0x7f0000000080)='./file0\x00', 0x28000, 0x102) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1066): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xac}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xac}}, 0x0) 0s ago: executing program 2 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x100, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="14850c", 0x3}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41b28, 0x400}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x3}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004044}, 0x14) (async) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000000)={0x1, 0x1}) kernel console output (not intermixed with test programs): tered blocking state [ 53.514484][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.517871][ T5963] bridge_slave_1: entered allmulticast mode [ 53.521660][ T5963] bridge_slave_1: entered promiscuous mode [ 53.599992][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.602747][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.605586][ T5949] bridge_slave_0: entered allmulticast mode [ 53.608259][ T5949] bridge_slave_0: entered promiscuous mode [ 53.661288][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.664463][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.666826][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.669141][ T5951] bridge_slave_0: entered allmulticast mode [ 53.671858][ T5951] bridge_slave_0: entered promiscuous mode [ 53.675933][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.678633][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.680999][ T5949] bridge_slave_1: entered allmulticast mode [ 53.683617][ T5949] bridge_slave_1: entered promiscuous mode [ 53.690683][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.694836][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.697784][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.700088][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.702380][ T5951] bridge_slave_1: entered allmulticast mode [ 53.705531][ T5951] bridge_slave_1: entered promiscuous mode [ 53.759557][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.806075][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.851467][ T5950] team0: Port device team_slave_0 added [ 53.883114][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.889464][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.919222][ T5950] team0: Port device team_slave_1 added [ 53.922926][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.942829][ T5963] team0: Port device team_slave_0 added [ 54.022112][ T5963] team0: Port device team_slave_1 added [ 54.026145][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.028418][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.037919][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.070066][ T5949] team0: Port device team_slave_0 added [ 54.098662][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.101051][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.111019][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.128773][ T5951] team0: Port device team_slave_0 added [ 54.132726][ T5949] team0: Port device team_slave_1 added [ 54.164608][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.168338][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.179894][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.192536][ T5951] team0: Port device team_slave_1 added [ 54.246296][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.249293][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.259848][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.290538][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.293334][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.302278][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.343902][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.347244][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.358781][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.363978][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.366422][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.375574][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.431871][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.434587][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.445837][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.474794][ T5950] hsr_slave_0: entered promiscuous mode [ 54.477634][ T5950] hsr_slave_1: entered promiscuous mode [ 54.491609][ T5963] hsr_slave_0: entered promiscuous mode [ 54.495011][ T5963] hsr_slave_1: entered promiscuous mode [ 54.498403][ T5963] debugfs: 'hsr0' already exists in 'hsr' [ 54.501030][ T5963] Cannot create hsr debugfs directory [ 54.610772][ T5951] hsr_slave_0: entered promiscuous mode [ 54.613791][ T5951] hsr_slave_1: entered promiscuous mode [ 54.616828][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 54.619184][ T5951] Cannot create hsr debugfs directory [ 54.677883][ T5949] hsr_slave_0: entered promiscuous mode [ 54.681260][ T5949] hsr_slave_1: entered promiscuous mode [ 54.684390][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 54.686518][ T5949] Cannot create hsr debugfs directory [ 54.786079][ T65] Bluetooth: hci1: command tx timeout [ 54.786185][ T5962] Bluetooth: hci0: command tx timeout [ 54.786282][ T5959] Bluetooth: hci3: command tx timeout [ 54.786678][ T5967] Bluetooth: hci2: command tx timeout [ 55.126928][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.135576][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.140635][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.154088][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.189032][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.203466][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.211392][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.216409][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.256714][ T5963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.265075][ T5963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.270190][ T5963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.289289][ T5963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.327102][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.332193][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.338980][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.353184][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.398431][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.426003][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.452140][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.455188][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.461866][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.464149][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.488758][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.505166][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.518874][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.538511][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.541005][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.548829][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.553789][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.568173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.571349][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.583747][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.598580][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.600844][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.605438][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.608456][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.624429][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.627098][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.641439][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.644291][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.670636][ T40] audit: type=1400 audit(1759627047.865:89): avc: denied { sys_module } for pid=5950 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.758526][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.793632][ T5950] veth0_vlan: entered promiscuous mode [ 55.809082][ T5950] veth1_vlan: entered promiscuous mode [ 55.818192][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.837444][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.856207][ T5950] veth0_macvtap: entered promiscuous mode [ 55.866447][ T5950] veth1_macvtap: entered promiscuous mode [ 55.881085][ T5951] veth0_vlan: entered promiscuous mode [ 55.902311][ T5951] veth1_vlan: entered promiscuous mode [ 55.909652][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.913924][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.917623][ T5949] veth0_vlan: entered promiscuous mode [ 55.926034][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.939201][ T5949] veth1_vlan: entered promiscuous mode [ 55.950201][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.953927][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.967232][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.970494][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.994225][ T5951] veth0_macvtap: entered promiscuous mode [ 56.011651][ T5951] veth1_macvtap: entered promiscuous mode [ 56.030001][ T5963] veth0_vlan: entered promiscuous mode [ 56.054586][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.058202][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.074893][ T5963] veth1_vlan: entered promiscuous mode [ 56.080500][ T5949] veth0_macvtap: entered promiscuous mode [ 56.093435][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.102888][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.106336][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.106428][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.111233][ T5949] veth1_macvtap: entered promiscuous mode [ 56.126027][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.133288][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.136486][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.148417][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.161483][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.162080][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.167861][ T5963] veth0_macvtap: entered promiscuous mode [ 56.174144][ T5963] veth1_macvtap: entered promiscuous mode [ 56.183769][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.206176][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.209082][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.213936][ T5962] Bluetooth: hci2: unexpected cc 0x2003 length: 4 < 9 [ 56.223459][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.228926][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.231916][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.259714][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.263385][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.269201][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.272095][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.286884][ T216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.313233][ T216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.317509][ T216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.321317][ T216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.345807][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.348860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.388720][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.392684][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.441356][ T6052] Bluetooth: MGMT ver 1.23 [ 56.442046][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.449573][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.465358][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.476726][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.508043][ T216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.511545][ T216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.633055][ T6076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.733111][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 56.736314][ T6081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57360 sclass=netlink_route_socket pid=6081 comm=syz.2.13 [ 56.874939][ T5962] Bluetooth: hci0: command tx timeout [ 56.875154][ T65] Bluetooth: hci3: command tx timeout [ 57.179008][ T6051] [U]  [ 58.235026][ T65] Bluetooth: hci2: command tx timeout [ 58.785294][ T6078] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 58.795351][ T65] Bluetooth: hci1: command 0x040f tx timeout [ 58.797521][ T6078] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 58.945130][ T65] Bluetooth: hci3: command tx timeout [ 58.945743][ T5962] Bluetooth: hci0: command tx timeout [ 59.675326][ T6078] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.680117][ T6078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.682971][ T6078] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.686799][ T6078] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.689881][ T6078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.692335][ T6078] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.695348][ T6078] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.697862][ T6078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.699758][ T6078] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.703486][ T6078] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.743364][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 59.743399][ T40] audit: type=1400 audit(1759627051.935:171): avc: denied { name_bind } for pid=6104 comm="syz.1.22" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.765128][ T40] audit: type=1400 audit(1759627051.945:172): avc: denied { read write } for pid=6108 comm="syz.3.25" name="video4" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.777203][ T6111] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.778147][ T40] audit: type=1400 audit(1759627051.945:173): avc: denied { open } for pid=6108 comm="syz.3.25" path="/dev/video4" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.782321][ T6113] /dev/sg0: Can't lookup blockdev [ 59.791230][ T40] audit: type=1400 audit(1759627051.945:174): avc: denied { ioctl } for pid=6108 comm="syz.3.25" path="/dev/video4" dev="devtmpfs" ino=960 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.804708][ T40] audit: type=1400 audit(1759627051.955:175): avc: denied { read append } for pid=6108 comm="syz.3.25" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.814720][ T40] audit: type=1400 audit(1759627051.955:176): avc: denied { open } for pid=6108 comm="syz.3.25" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.826795][ T40] audit: type=1400 audit(1759627051.955:177): avc: denied { ioctl } for pid=6108 comm="syz.3.25" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.835121][ T40] audit: type=1400 audit(1759627051.965:178): avc: denied { allowed } for pid=6105 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.841348][ T40] audit: type=1400 audit(1759627051.975:179): avc: denied { mounton } for pid=6105 comm="syz.2.24" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 59.855020][ T6117] tipc: Failed to remove unknown binding: 66,1,1/0:1685941556/1685941558 [ 59.856930][ T6120] vxcan1: tx address claim with different name [ 59.859291][ T6117] tipc: Failed to remove unknown binding: 66,1,1/0:1685941556/1685941558 [ 59.861226][ T40] audit: type=1400 audit(1759627051.975:180): avc: denied { setopt } for pid=6107 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.943076][ T6130] hfs: can't find a HFS filesystem on dev sr0 [ 60.104573][ T6145] capability: warning: `syz.0.35' uses deprecated v2 capabilities in a way that may be insecure [ 60.108886][ T6145] syz.0.35 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.123403][ T6142] overlayfs: failed lookup in lower (newroot/5, name='bus', err=-40): overlapping layers [ 60.305006][ T6151] nbd0: detected capacity change from 0 to 3 [ 60.309324][ T5962] block nbd0: Receive control failed (result -32) [ 60.309482][ T5957] block nbd0: Send control failed (result -32) [ 60.313930][ T5957] block nbd0: Request send failed, requeueing [ 60.317470][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.320685][ T271] block nbd0: Dead connection, failed to find a fallback [ 60.323582][ T271] block nbd0: shutting down sockets [ 60.327705][ T271] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.330823][ T271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.334716][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.339229][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.342537][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.349769][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.350407][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.355414][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.356593][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.362865][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.365593][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.368873][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.371637][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.374445][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.378637][ T5957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.382242][ T5957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.385125][ T5957] ldm_validate_partition_table(): Disk read failed. [ 60.387718][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.390946][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.395678][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.399018][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.402222][ T5957] Dev nbd0: unable to read RDB block 0 [ 60.404043][ T5957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.407559][ T5957] nbd0: unable to read partition table [ 60.409765][ T5957] nbd0: partition table beyond EOD, truncated [ 60.416141][ T5957] ldm_validate_partition_table(): Disk read failed. [ 60.418728][ T5957] Dev nbd0: unable to read RDB block 0 [ 60.420909][ T5957] nbd0: unable to read partition table [ 60.422751][ T5957] nbd0: partition table beyond EOD, truncated [ 60.468862][ T6188] netlink: 'syz.0.47': attribute type 63 has an invalid length. [ 60.569510][ T6202] process 'syz.3.44' launched './file0' with NULL argv: empty string added [ 60.705182][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.865550][ T5962] Bluetooth: hci1: command 0x040f tx timeout [ 60.868739][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 60.873774][ T54] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 60.881886][ T54] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 60.886183][ T54] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 60.890391][ T54] usb 5-1: Product: syz [ 60.892551][ T54] usb 5-1: Manufacturer: syz [ 60.894509][ T54] usb 5-1: SerialNumber: syz [ 60.899739][ T54] usb 5-1: config 0 descriptor?? [ 60.904353][ T6188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.909867][ T54] hub 5-1:0.0: bad descriptor, ignoring hub [ 60.912647][ T54] hub 5-1:0.0: probe with driver hub failed with error -5 [ 61.745520][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.745677][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.746306][ T5967] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.815641][ T6188] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 61.820082][ T6188] usb 5-1: device reset changed ep0 maxpacket size! [ 61.823371][ T6046] usb 5-1: USB disconnect, device number 2 [ 61.954974][ T6046] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.143618][ T6209] binder: 6208:6209 ioctl 80404525 2000000000c0 returned -22 [ 62.158019][ T6206] netlink: 763 bytes leftover after parsing attributes in process `syz.0.47'. [ 62.166922][ T6212] ======================================================= [ 62.166922][ T6212] WARNING: The mand mount option has been deprecated and [ 62.166922][ T6212] and is ignored by this kernel. Remove the mand [ 62.166922][ T6212] option from the mount to silence this warning. [ 62.166922][ T6212] ======================================================= [ 62.179761][ T6046] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.187454][ T6046] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 62.190450][ T6046] usb 5-1: can't read configurations, error -71 [ 62.195000][ T6212] overlayfs: failed to resolve './file1': -2 [ 62.466073][ T842] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 62.637571][ T842] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.641311][ T842] usb 7-1: config 0 has no interface number 0 [ 62.644856][ T842] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 62.649907][ T842] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 62.653852][ T842] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.657766][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.666567][ T842] usb 7-1: config 0 descriptor?? [ 62.669569][ T6212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.684194][ T842] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 62.892973][ T6234] netlink: 37 bytes leftover after parsing attributes in process `syz.0.56'. [ 62.904866][ T6234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.907289][ T6234] IPv6: NLM_F_CREATE should be set when creating new route [ 62.909807][ T6234] IPv6: NLM_F_CREATE should be set when creating new route [ 62.944940][ T65] Bluetooth: hci1: command 0x040f tx timeout [ 62.976949][ T6236] bad cache= option: none [ 62.976949][ T6236] [ 62.979405][ T6236] CIFS: VFS: bad cache= option: none [ 63.499649][ T841] usb 7-1: USB disconnect, device number 2 [ 63.540174][ T6255] trusted_key: syz.2.61 sent an empty control message without MSG_MORE. [ 63.646847][ T6266] netlink: 'syz.2.64': attribute type 8 has an invalid length. [ 63.726735][ T6269] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 63.729103][ T6269] PKCS7: Only support pkcs7_signedData type [ 63.756254][ T6273] netlink: 480 bytes leftover after parsing attributes in process `syz.2.68'. [ 63.757609][ T6272] macvlan0: entered promiscuous mode [ 63.761647][ T6272] macvlan0: entered allmulticast mode [ 63.763407][ T6272] veth1_vlan: entered allmulticast mode [ 63.767271][ T6272] netlink: 72 bytes leftover after parsing attributes in process `syz.1.67'. [ 63.825227][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.825257][ T5962] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.834876][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.843257][ T6281] erofs (device loop2): cannot find valid erofs superblock [ 63.919138][ T6290] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 63.930381][ T6282] autofs: Unknown parameter 'barrieryH ' [ 63.993031][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 63.996890][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 64.000176][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 64.003122][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 64.007307][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 64.010149][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 64.146184][ T6302] netlink: ct family unspecified [ 64.147973][ T6302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.244284][ T5962] Bluetooth: hci1: ISO packet for unknown connection handle 3273 [ 64.745693][ T40] kauditd_printk_skb: 33616 callbacks suppressed [ 64.745704][ T40] audit: type=1326 audit(1759627056.945:33798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.761352][ T40] audit: type=1326 audit(1759627056.935:33750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.768773][ T40] audit: type=1326 audit(1759627056.955:33799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.776933][ T40] audit: type=1326 audit(1759627056.955:33800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.794848][ T40] audit: type=1326 audit(1759627056.955:33801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.804003][ T40] audit: type=1326 audit(1759627056.955:33802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.818575][ T40] audit: type=1326 audit(1759627056.955:33803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.829588][ T40] audit: type=1326 audit(1759627056.955:33804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.840444][ T40] audit: type=1326 audit(1759627056.955:33805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.852010][ T40] audit: type=1326 audit(1759627056.955:33806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.3.54" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680ed8eec9 code=0x50000 [ 64.863493][ T6324] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 65.024873][ T5962] Bluetooth: hci1: command 0x040f tx timeout [ 65.469106][ T6316] delete_channel: no stack [ 65.527583][ T6374] mkiss: ax0: crc mode is auto. [ 65.562717][ T6376] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 65.573695][ T6376] bond0: (slave bond_slave_0): Releasing backup interface [ 65.905007][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.908221][ T5967] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.911523][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.192344][ T6401] fuse: Bad value for 'fd' [ 66.450503][ T6384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.452801][ T6384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.455662][ T6384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.458075][ T6384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.547030][ T6421] JFS: charset not found [ 66.630447][ T6428] overlay: ./bus is not a directory [ 67.038668][ T6463] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 67.182051][ T6480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.203580][ T6480] bridge_slave_0: left allmulticast mode [ 67.207772][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.391956][ T6491] program syz.0.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.424089][ T6494] tmpfs: Bad value for 'mpol' [ 67.459098][ T6497] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 67.467300][ T6498] program syz.0.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.746123][ T5962] Bluetooth: hci1: command 0x040f tx timeout [ 67.978665][ T6515] __nla_validate_parse: 128 callbacks suppressed [ 67.978676][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 68.030525][ T6541] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 68.034067][ T6541] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.146'. [ 68.062988][ T6543] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 68.092080][ T6543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.097241][ T6543] bond1: (slave bond2): making interface the new active one [ 68.100128][ T6543] bond1: (slave bond2): Enslaving as an active interface with an up link [ 68.105229][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'. [ 68.108534][ T6543] bond1: entered promiscuous mode [ 68.110275][ T6543] bond2: entered promiscuous mode [ 68.112174][ T6543] bond1: entered allmulticast mode [ 68.114386][ T6543] bond2: entered allmulticast mode [ 68.120023][ T6543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.454899][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.464923][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.465029][ T5967] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.467052][ T5962] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.625003][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 68.628289][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.635621][ T54] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.640793][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.644367][ T54] usb 6-1: Product: syz [ 68.646361][ T54] usb 6-1: Manufacturer: syz [ 68.648436][ T54] usb 6-1: SerialNumber: syz [ 68.652019][ T54] usb 6-1: config 0 descriptor?? [ 68.656158][ T54] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.659734][ T54] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 68.850616][ T6558] overlay: filesystem on ./file0 not supported [ 68.915266][ T54] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 68.961302][ T6564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.154'. [ 68.981282][ T54] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 68.984011][ T54] em28xx 6-1:0.0: board has no eeprom [ 69.044958][ T54] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 69.047686][ T54] em28xx 6-1:0.0: dvb set to bulk mode. [ 69.048915][ T6568] tmpfs: Unknown parameter 'usrquota' [ 69.049886][ T5952] em28xx 6-1:0.0: Binding DVB extension [ 69.053089][ T6568] netlink: 72 bytes leftover after parsing attributes in process `syz.2.155'. [ 69.057062][ T54] usb 6-1: USB disconnect, device number 2 [ 69.057560][ T54] em28xx 6-1:0.0: Disconnecting em28xx [ 69.076014][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 69.082316][ T5952] em28xx 6-1:0.0: Registering input extension [ 69.085448][ T54] em28xx 6-1:0.0: Closing input extension [ 69.102045][ T54] em28xx 6-1:0.0: Freeing device [ 69.191152][ T6580] netfs: Couldn't get user pages (rc=-14) [ 69.208122][ T6586] netlink: 'syz.0.161': attribute type 5 has an invalid length. [ 69.279061][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 69.333131][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 69.580363][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 69.583591][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 69.587002][ T6601] netlink: 'syz.2.166': attribute type 11 has an invalid length. [ 69.589563][ T6601] netlink: 'syz.2.166': attribute type 13 has an invalid length. [ 69.804979][ T6615] netlink: 'syz.2.171': attribute type 4 has an invalid length. [ 69.813468][ T40] kauditd_printk_skb: 4427 callbacks suppressed [ 69.813481][ T40] audit: type=1400 audit(1759627317.999:38228): avc: denied { relabelfrom } for pid=6613 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.822513][ T40] audit: type=1400 audit(1759627318.009:38229): avc: denied { relabelto } for pid=6613 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.844879][ T5952] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.975164][ T5952] usb 6-1: device descriptor read/64, error -71 [ 70.214896][ T5952] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.364905][ T5952] usb 6-1: device descriptor read/64, error -71 [ 70.475135][ T5952] usb usb6-port1: attempt power cycle [ 70.712373][ T40] audit: type=1400 audit(1759627318.899:38230): avc: denied { read } for pid=6631 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.800835][ T40] audit: type=1400 audit(1759627318.989:38231): avc: denied { write } for pid=6636 comm="syz.3.177" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 70.804400][ T6637] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.815285][ T5952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.818189][ T6637] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 70.835514][ T5952] usb 6-1: device descriptor read/8, error -71 [ 70.861298][ T40] audit: type=1400 audit(1759627319.049:38232): avc: denied { bind } for pid=6639 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.868856][ T40] audit: type=1400 audit(1759627319.049:38233): avc: denied { write } for pid=6639 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.898354][ T40] audit: type=1400 audit(1759627319.089:38234): avc: denied { append } for pid=6641 comm="syz.3.179" name="loop2" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.941536][ T40] audit: type=1400 audit(1759627319.129:38235): avc: denied { read } for pid=6643 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.992694][ T40] audit: type=1400 audit(1759627319.179:38236): avc: denied { ioctl } for pid=6643 comm="syz.3.180" path="socket:[10722]" dev="sockfs" ino=10722 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.085249][ T5952] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 71.097509][ T40] audit: type=1400 audit(1759627319.289:38237): avc: denied { mounton } for pid=6646 comm="syz.0.181" path="/56/file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 71.097545][ T6647] 9pnet_fd: Insufficient options for proto=fd [ 71.115550][ T5952] usb 6-1: device descriptor read/8, error -71 [ 71.162719][ T6649] /dev/sg0: Can't lookup blockdev [ 71.236119][ T5952] usb usb6-port1: unable to enumerate USB device [ 71.315554][ T6657] Zero length message leads to an empty skb [ 71.852553][ T6662] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 71.978120][ T6673] kvm: pic: non byte write [ 72.095627][ T6680] SELinux: policydb magic number 0x757cff8c does not match expected magic number 0xf97cff8c [ 72.099466][ T6680] SELinux: failed to load policy [ 72.337244][ T6688] netlink: 'syz.3.193': attribute type 2 has an invalid length. [ 72.671505][ T6693] syz.1.194: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 72.678685][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.1.194 Not tainted syzkaller #0 PREEMPT(full) [ 72.678703][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.678711][ T6693] Call Trace: [ 72.678725][ T6693] [ 72.678730][ T6693] dump_stack_lvl+0x16c/0x1f0 [ 72.678772][ T6693] warn_alloc+0x248/0x3a0 [ 72.678786][ T6693] ? __pfx_warn_alloc+0x10/0x10 [ 72.678805][ T6693] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 72.678820][ T6693] ? __vmalloc_node_noprof+0xad/0xf0 [ 72.678841][ T6693] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 72.678864][ T6693] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 72.678883][ T6693] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.678906][ T6693] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 72.678921][ T6693] vmalloc_user_noprof+0x9e/0xe0 [ 72.678939][ T6693] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 72.678954][ T6693] vb2_vmalloc_alloc+0x135/0x3f0 [ 72.678969][ T6693] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 72.678983][ T6693] __vb2_queue_alloc+0x8c9/0x1280 [ 72.679001][ T6693] vb2_core_reqbufs+0xa90/0xfe0 [ 72.679016][ T6693] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 72.679030][ T6693] ? rcu_is_watching+0x12/0xc0 [ 72.679048][ T6693] ? __mutex_lock+0x1c5/0x1060 [ 72.679061][ T6693] ? avc_has_extended_perms+0x47c/0x1090 [ 72.679086][ T6693] vb2_reqbufs+0x1a3/0x1f0 [ 72.679102][ T6693] ? __pfx_vb2_reqbufs+0x10/0x10 [ 72.679120][ T6693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.679137][ T6693] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 72.679156][ T6693] v4l_reqbufs+0x13f/0x1d0 [ 72.679169][ T6693] __video_do_ioctl+0xb74/0xf00 [ 72.679186][ T6693] ? __might_fault+0xe3/0x190 [ 72.679197][ T6693] ? __pfx___video_do_ioctl+0x10/0x10 [ 72.679217][ T6693] video_usercopy+0x4d0/0x1720 [ 72.679238][ T6693] ? __pfx___video_do_ioctl+0x10/0x10 [ 72.679253][ T6693] ? selinux_kernel_read_file+0xb0/0x130 [ 72.679266][ T6693] ? __pfx_video_usercopy+0x10/0x10 [ 72.679291][ T6693] v4l2_ioctl+0x1bd/0x250 [ 72.679305][ T6693] ? __pfx_v4l2_ioctl+0x10/0x10 [ 72.679320][ T6693] __x64_sys_ioctl+0x18e/0x210 [ 72.679338][ T6693] do_syscall_64+0xcd/0x4e0 [ 72.679352][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.679364][ T6693] RIP: 0033:0x7fa7e4d8eec9 [ 72.679373][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.679386][ T6693] RSP: 002b:00007fa7e5c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.679396][ T6693] RAX: ffffffffffffffda RBX: 00007fa7e4fe6180 RCX: 00007fa7e4d8eec9 [ 72.679403][ T6693] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 72.679409][ T6693] RBP: 00007fa7e4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.679415][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.679421][ T6693] R13: 00007fa7e4fe6218 R14: 00007fa7e4fe6180 R15: 00007ffe2ac8f508 [ 72.679434][ T6693] [ 72.679438][ T6693] Mem-Info: [ 72.783042][ T6693] active_anon:9167 inactive_anon:0 isolated_anon:0 [ 72.783042][ T6693] active_file:15046 inactive_file:40633 isolated_file:0 [ 72.783042][ T6693] unevictable:1768 dirty:1772 writeback:0 [ 72.783042][ T6693] slab_reclaimable:12046 slab_unreclaimable:67477 [ 72.783042][ T6693] mapped:25107 shmem:2905 pagetables:1120 [ 72.783042][ T6693] sec_pagetables:305 bounce:0 [ 72.783042][ T6693] kernel_misc_reclaimable:0 [ 72.783042][ T6693] free:451674 free_pcp:23257 free_cma:0 [ 72.804976][ T6693] Node 0 active_anon:36668kB inactive_anon:0kB active_file:60184kB inactive_file:162328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100428kB dirty:7084kB writeback:0kB shmem:8084kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:12752kB pagetables:4324kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 72.818428][ T6693] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 72.831114][ T6693] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.846131][ T6693] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 72.848981][ T6693] Node 0 DMA32 free:190204kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36668kB inactive_anon:0kB active_file:60184kB inactive_file:162328kB unevictable:3536kB writepending:7084kB zspages:0kB present:2080628kB managed:1270756kB mlocked:0kB bounce:0kB free_pcp:73352kB local_pcp:18772kB free_cma:0kB [ 72.862979][ T6693] lowmem_reserve[]: 0 0 0 0 0 [ 72.865278][ T6693] Node 1 Normal free:1603240kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:17428kB local_pcp:4048kB free_cma:0kB [ 72.878854][ T6693] lowmem_reserve[]: 0 0 0 0 0 [ 72.881090][ T6693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.887413][ T6693] Node 0 DMA32: 573*4kB (UME) 422*8kB (UME) 513*16kB (UM) 629*32kB (UM) 229*64kB (UME) 225*128kB (UME) 83*256kB (UME) 39*512kB (UM) 16*1024kB (UME) 6*2048kB (UME) 11*4096kB (UM) = 192404kB [ 72.894030][ T6693] Node 1 Normal: 29*4kB (UME) 44*8kB (UME) 41*16kB (UME) 46*32kB (UME) 22*64kB (UME) 12*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 388*4096kB (M) = 1603492kB [ 72.901381][ T6693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.904484][ T6693] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.908059][ T6693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.912029][ T6693] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.915061][ T6693] 57633 total pagecache pages [ 72.916781][ T6693] 0 pages in swap cache [ 72.918092][ T6693] Free swap = 124996kB [ 72.919400][ T6693] Total swap = 124996kB [ 72.920730][ T6693] 1048443 pages RAM [ 72.921936][ T6693] 0 pages HighMem/MovableOnly [ 72.923458][ T6693] 281441 pages reserved [ 72.924913][ T6693] 0 pages cma reserved [ 73.056310][ T6701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.098415][ T6703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6703 comm=syz.1.199 [ 73.152138][ T6709] fuse: Bad value for 'fd' [ 73.158311][ T6709] fuse: Bad value for 'fd' [ 73.160364][ T6709] fuse: Bad value for 'fd' [ 73.162302][ T6709] fuse: Bad value for 'fd' [ 73.164315][ T6709] fuse: Bad value for 'fd' [ 73.167464][ T6709] fuse: Bad value for 'fd' [ 73.172117][ T6709] fuse: Bad value for 'fd' [ 73.173987][ T6709] fuse: Bad value for 'fd' [ 73.180498][ T6709] fuse: Bad value for 'fd' [ 73.182704][ T6709] fuse: Bad value for 'fd' [ 73.185605][ T6709] fuse: Bad value for 'fd' [ 73.187909][ T6709] fuse: Bad value for 'fd' [ 73.189870][ T6709] fuse: Bad value for 'fd' [ 73.201756][ T6709] fuse: Bad value for 'fd' [ 73.203902][ T6709] fuse: Bad value for 'fd' [ 73.358705][ T5962] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 73.629193][ T6696] syz.0.195 (6696): drop_caches: 1 [ 73.876156][ T6726] delete_channel: no stack [ 76.481107][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.484287][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.436420][ T5962] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 77.440685][ T5962] Bluetooth: hci1: Injecting HCI hardware error event [ 77.446606][ T5962] Bluetooth: hci1: hardware error 0x00 [ 79.504936][ T5962] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.725216][ T53] cfg80211: failed to load regulatory.db [ 89.981659][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 89.981669][ T40] audit: type=1400 audit(1759627338.169:38249): avc: denied { execute } for pid=6741 comm="syz.2.209" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.982533][ T6745] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 89.991222][ T6743] __nla_validate_parse: 1 callbacks suppressed [ 89.991237][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 90.006930][ T40] audit: type=1400 audit(1759627338.199:38250): avc: denied { read } for pid=6741 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.015016][ T6745] overlayfs: overlapping lowerdir path [ 90.020036][ T6744] netem: incorrect ge model size [ 90.020532][ T40] audit: type=1400 audit(1759627338.209:38251): avc: denied { module_load } for pid=6746 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 90.021826][ T6744] netem: change failed [ 90.036111][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 90.094024][ T40] audit: type=1400 audit(1759627338.279:38252): avc: denied { connect } for pid=6753 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.104886][ T40] audit: type=1400 audit(1759627338.289:38253): avc: denied { read } for pid=6753 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.126969][ T6760] binder: 6759:6760 ioctl c0306201 0 returned -14 [ 90.128022][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 90.128320][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 90.139717][ T6764] netlink: 'syz.2.216': attribute type 11 has an invalid length. [ 90.144427][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 90.149038][ T6764] netlink: 'syz.2.216': attribute type 11 has an invalid length. [ 90.152921][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.212'. [ 90.156758][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.212'. [ 90.168571][ T40] audit: type=1400 audit(1759627338.349:38254): avc: denied { ioctl } for pid=6753 comm="syz.1.212" path="socket:[13010]" dev="sockfs" ino=13010 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.176623][ T40] audit: type=1400 audit(1759627338.359:38255): avc: denied { getopt } for pid=6768 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.198035][ T40] audit: type=1400 audit(1759627338.389:38256): avc: denied { connect } for pid=6770 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.206344][ T40] audit: type=1400 audit(1759627338.399:38257): avc: denied { getopt } for pid=6770 comm="syz.0.219" laddr=fe80::a8aa:aaff:feaa:aaaa lport=39805 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.287530][ T6787] overlay: filesystem on ./bus not supported as upperdir [ 90.385061][ T6796] mmap: syz.3.221 (6796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.451105][ T40] audit: type=1400 audit(1759627338.639:38258): avc: denied { listen } for pid=6798 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.502066][ T6807] netlink: 1744 bytes leftover after parsing attributes in process `syz.2.227'. [ 90.504914][ T6806] netlink: 1744 bytes leftover after parsing attributes in process `syz.2.227'. [ 90.601291][ T6818] netlink: 'syz.0.229': attribute type 2 has an invalid length. [ 90.619004][ T6821] netlink: 'syz.2.230': attribute type 2 has an invalid length. [ 90.703424][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 91.161956][ T6874] bridge_slave_0: default FDB implementation only supports local addresses [ 91.181830][ T6871] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 91.186541][ T6871] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 91.200947][ T6878] trusted_key: encrypted_key: insufficient parameters specified [ 91.239600][ T6871] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 91.242896][ T6871] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 91.591298][ T6676] IPVS: starting estimator thread 0... [ 91.685220][ T6931] IPVS: using max 26 ests per chain, 62400 per kthread [ 91.808724][ T6948] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 91.812335][ T6948] CPU: 3 UID: 0 PID: 6948 Comm: syz.1.270 Not tainted syzkaller #0 PREEMPT(full) [ 91.812351][ T6948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.812357][ T6948] Call Trace: [ 91.812371][ T6948] [ 91.812376][ T6948] dump_stack_lvl+0x16c/0x1f0 [ 91.812408][ T6948] sysfs_warn_dup+0x7f/0xa0 [ 91.812425][ T6948] sysfs_create_dir_ns+0x24b/0x2b0 [ 91.812440][ T6948] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 91.812455][ T6948] ? find_held_lock+0x2b/0x80 [ 91.812473][ T6948] ? class_dir_child_ns_type+0xd/0x60 [ 91.812499][ T6948] kobject_add_internal+0x2c4/0x9b0 [ 91.812517][ T6948] kobject_add+0x16e/0x240 [ 91.812532][ T6948] ? __pfx_kobject_add+0x10/0x10 [ 91.812547][ T6948] ? get_device_parent+0x1c5/0x4e0 [ 91.812578][ T6948] ? kobject_put+0xab/0x5a0 [ 91.812593][ T6948] ? device_add+0xbff/0x1aa0 [ 91.812605][ T6948] device_add+0x288/0x1aa0 [ 91.812615][ T6948] ? lockdep_init_map_type+0x5c/0x280 [ 91.812628][ T6948] ? __pfx_device_add+0x10/0x10 [ 91.812650][ T6948] ? lockdep_init_map_type+0x5c/0x280 [ 91.812662][ T6948] ? __init_waitqueue_head+0xca/0x150 [ 91.812681][ T6948] tty_register_device_attr+0x38e/0x7c0 [ 91.812695][ T6948] ? __pfx_tty_register_device_attr+0x10/0x10 [ 91.812711][ T6948] ? tty_port_init+0x156/0x1c0 [ 91.812726][ T6948] gsm_activate_mux+0x157/0x2e0 [ 91.812740][ T6948] gsmld_ioctl+0xc98/0x1550 [ 91.812757][ T6948] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.812771][ T6948] ? __pfx_gsmld_ioctl+0x10/0x10 [ 91.812788][ T6948] ? __ldsem_down_read_nested+0xf3/0x8a0 [ 91.812805][ T6948] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 91.812825][ T6948] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.812844][ T6948] ? __pfx_gsmld_ioctl+0x10/0x10 [ 91.812858][ T6948] tty_ioctl+0x6fd/0x1680 [ 91.812871][ T6948] ? __pfx_tty_ioctl+0x10/0x10 [ 91.812884][ T6948] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 91.812902][ T6948] ? hook_file_ioctl_common+0x145/0x410 [ 91.812921][ T6948] ? selinux_file_ioctl+0x180/0x270 [ 91.812933][ T6948] ? selinux_file_ioctl+0xb4/0x270 [ 91.812946][ T6948] ? __pfx_tty_ioctl+0x10/0x10 [ 91.812959][ T6948] __x64_sys_ioctl+0x18e/0x210 [ 91.812977][ T6948] do_syscall_64+0xcd/0x4e0 [ 91.812991][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.813003][ T6948] RIP: 0033:0x7fa7e4d8eec9 [ 91.813012][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.813023][ T6948] RSP: 002b:00007fa7e5c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.813033][ T6948] RAX: ffffffffffffffda RBX: 00007fa7e4fe6090 RCX: 00007fa7e4d8eec9 [ 91.813040][ T6948] RDX: 0000200000000100 RSI: 0000000040204706 RDI: 0000000000000004 [ 91.813046][ T6948] RBP: 00007fa7e4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.813052][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.813058][ T6948] R13: 00007fa7e4fe6128 R14: 00007fa7e4fe6090 R15: 00007ffe2ac8f508 [ 91.813071][ T6948] [ 91.814063][ T6948] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.939923][ T6956] tmpfs: Unknown parameter 'usrquotaf ăf' [ 92.275433][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.314924][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.414935][ T5952] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.444964][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 92.450483][ T54] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 92.453290][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.459111][ T54] usb 5-1: Product: syz [ 92.460459][ T54] usb 5-1: Manufacturer: syz [ 92.461921][ T54] usb 5-1: SerialNumber: syz [ 92.464638][ T54] usb 5-1: config 0 descriptor?? [ 92.498296][ T6992] vlan2: entered promiscuous mode [ 92.501236][ T6992] bridge0: entered promiscuous mode [ 92.574821][ T5952] usb 7-1: device descriptor read/64, error -71 [ 92.670213][ T54] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 92.675180][ T54] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 92.680135][ T54] usb 5-1: USB disconnect, device number 5 [ 92.772929][ T7001] use of bytesused == 0 is deprecated and will be removed in the future, [ 92.777732][ T7001] use the actual size instead. [ 92.825655][ T5952] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.836314][ T7001] gfs2: not a GFS2 filesystem [ 92.964874][ T5952] usb 7-1: device descriptor read/64, error -71 [ 93.084928][ T5952] usb usb7-port1: attempt power cycle [ 93.311747][ T7021] netlink: zone id is out of range [ 93.324000][ T7021] netlink: set zone limit has 8 unknown bytes [ 93.382087][ T7027] xt_time: unknown flags 0xf4 [ 93.434882][ T5952] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.456567][ T5952] usb 7-1: device descriptor read/8, error -71 [ 93.541024][ T7040] hugetlbfs: Bad value for 'size' [ 93.542957][ T7042] tipc: Started in network mode [ 93.546619][ T7042] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 93.549696][ T7042] tipc: Enabling of bearer rejected, failed to enable media [ 93.587521][ T7050] vlan3: entered promiscuous mode [ 93.649444][ T7056] binder: BINDER_SET_CONTEXT_MGR already set [ 93.651905][ T7056] binder: 7055:7056 ioctl 4018620d 200000000040 returned -16 [ 93.655453][ T7056] syz.0.301(7056): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 93.703502][ T7062] netlink: 'syz.1.305': attribute type 29 has an invalid length. [ 93.707005][ T5952] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.716142][ T7062] netlink: 'syz.1.305': attribute type 29 has an invalid length. [ 93.727161][ T5952] usb 7-1: device descriptor read/8, error -71 [ 93.835793][ T5952] usb usb7-port1: unable to enumerate USB device [ 93.843942][ T7069] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 94.036509][ T7081] ip6tnl1: entered promiscuous mode [ 94.038596][ T7081] ip6tnl1: entered allmulticast mode [ 94.084440][ T7075] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 94.454885][ T6676] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.489375][ T7117] netlink: 'syz.3.322': attribute type 29 has an invalid length. [ 94.492936][ T7115] netlink: 'syz.3.322': attribute type 29 has an invalid length. [ 94.604871][ T6676] usb 5-1: device descriptor read/64, error -71 [ 94.642479][ T7125] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 94.844667][ T7135] overlayfs: failed to clone upperpath [ 94.855038][ T6676] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.937943][ T7143] overlayfs: failed to clone upperpath [ 94.985050][ T6676] usb 5-1: device descriptor read/64, error -71 [ 95.105670][ T6676] usb usb5-port1: attempt power cycle [ 95.188145][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 95.188163][ T40] audit: type=1400 audit(1759627343.379:38301): avc: denied { accept } for pid=7156 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.313371][ T7171] nbd: couldn't find device at index -1605786504 [ 95.315546][ T7172] nbd: couldn't find device at index -1605786504 [ 95.320280][ T40] audit: type=1400 audit(1759627343.509:38302): avc: denied { validate_trans } for pid=7170 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.370068][ T40] audit: type=1400 audit(1759627343.559:38303): avc: denied { read } for pid=7170 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.379906][ T40] audit: type=1400 audit(1759627343.559:38304): avc: denied { write } for pid=7170 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.445975][ T6676] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.475461][ T6676] usb 5-1: device descriptor read/8, error -71 [ 95.734897][ T6676] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.765542][ T6676] usb 5-1: device descriptor read/8, error -71 [ 95.885752][ T6676] usb usb5-port1: unable to enumerate USB device [ 95.933406][ T7186] veth0: entered promiscuous mode [ 96.063580][ T7189] netlink: 'syz.1.343': attribute type 16 has an invalid length. [ 96.067878][ T7189] netlink: 'syz.1.343': attribute type 17 has an invalid length. [ 96.081420][ T7189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.172433][ T40] audit: type=1400 audit(1759627344.359:38305): avc: denied { create } for pid=7197 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.209738][ T40] audit: type=1400 audit(1759627344.399:38306): avc: denied { append } for pid=7202 comm="syz.2.347" name="hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.265803][ T7210] __nla_validate_parse: 4 callbacks suppressed [ 96.265816][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 96.276554][ T40] audit: type=1400 audit(1759627344.469:38307): avc: denied { setopt } for pid=7201 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.762628][ T7217] autofs: Bad value for 'fd' [ 96.788615][ T40] audit: type=1400 audit(1759627344.979:38308): avc: denied { ioctl } for pid=7216 comm="syz.3.352" path="socket:[16709]" dev="sockfs" ino=16709 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.932079][ T40] audit: type=1400 audit(1759627345.119:38309): avc: denied { setopt } for pid=7219 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.956602][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.985141][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.015549][ T7224] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 97.019132][ T7224] netlink: 'syz.2.354': attribute type 5 has an invalid length. [ 97.031508][ T40] audit: type=1400 audit(1759627345.229:38310): avc: denied { create } for pid=7225 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 97.177898][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 97.185035][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.216871][ T7244] overlayfs: failed to clone upperpath [ 97.268358][ T7250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=7250 comm=syz.3.363 [ 97.313687][ T7254] uprobe: syz.3.365:7254 failed to unregister, leaking uprobe [ 97.451987][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.370'. [ 97.455816][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 97.515089][ T7279] input: syz0 as /devices/virtual/input/input8 [ 97.517870][ T7279] input: failed to attach handler leds to device input8, error: -6 [ 97.630428][ T7294] netlink: 360 bytes leftover after parsing attributes in process `syz.3.377'. [ 97.695845][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 97.795511][ T7304] netlink: 'syz.3.380': attribute type 4 has an invalid length. [ 97.803316][ T7304] netlink: 'syz.3.380': attribute type 4 has an invalid length. [ 97.826296][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.927222][ T7314] capability: warning: `syz.2.383' uses 32-bit capabilities (legacy support in use) [ 97.951225][ T7316] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 97.953737][ T7316] netlink: 212 bytes leftover after parsing attributes in process `syz.0.385'. [ 97.956596][ T7316] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 98.075878][ T7333] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 98.095790][ T7336] __vm_enough_memory: pid: 7336, comm: syz.3.391, bytes: 21200413175808 not enough memory for the allocation [ 98.234914][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.245662][ T5967] Bluetooth: hci3: unexpected cc 0x2003 length: 4 < 9 [ 98.249023][ T5967] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 98.395198][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 98.400872][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.406105][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.411202][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.418760][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 98.422557][ T29] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 98.426674][ T29] usb 5-1: Product: syz [ 98.428424][ T29] usb 5-1: Manufacturer: syz [ 98.430347][ T29] usb 5-1: SerialNumber: syz [ 98.443550][ T29] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input9 [ 98.726559][ T29] IPVS: starting estimator thread 0... [ 98.834916][ T7361] IPVS: using max 41 ests per chain, 98400 per kthread [ 98.882057][ T7368] btrfs: Unknown parameter 'discard' [ 98.896688][ T7366] binder: Unknown parameter 'defcoUtext' [ 98.962863][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 98.967244][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 99.017946][ T7379] fuse: Bad value for 'fd' [ 99.068783][ T7382] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 99.071996][ T7382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.115408][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 99.184705][ T7393] tipc: Enabling of bearer rejected, failed to enable media [ 99.260606][ T7400] qnx6: unable to read the first superblock [ 99.262821][ T7400] qnx6: unable to read the first superblock [ 99.265115][ T7400] qnx6: unable to read the first superblock [ 99.269217][ T7400] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 99.284409][ T7400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.305513][ T7400] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.313661][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.318268][ T7400] bond1: (slave team0): making interface the new active one [ 99.322076][ T7400] team0: entered promiscuous mode [ 99.323979][ T7400] team_slave_0: entered promiscuous mode [ 99.326049][ T7400] team_slave_1: entered promiscuous mode [ 99.328278][ T7400] bond1: (slave team0): Enslaving as an active interface with an up link [ 99.332013][ T7400] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 99.364224][ T7406] bond1: (slave veth5): Enslaving as an active interface with a down link [ 99.393981][ T7412] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 99.408474][ T7412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.418850][ T7412] bond2: (slave geneve2): making interface the new active one [ 99.422798][ T7412] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 99.455233][ T5967] Bluetooth: hci0: unexpected event for opcode 0x200c [ 99.478296][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.481265][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.484555][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 99.487020][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 99.489565][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.496732][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.501294][ T5967] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 99.618364][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.621763][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.856190][ T7455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.917846][ T7464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.921122][ T7464] fuse: Bad value for 'fd' [ 99.922924][ T7464] fuse: Bad value for 'fd' [ 100.063804][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52760 sclass=netlink_route_socket pid=7487 comm=syz.1.434 [ 100.069530][ T7488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.176778][ T7504] kvm: kvm [7503]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 100.180336][ T7504] kvm: kvm [7503]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 100.256420][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 100.256432][ T40] audit: type=1400 audit(1759627348.449:38347): avc: denied { setopt } for pid=7513 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.332220][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.339906][ T7519] pim6reg: entered allmulticast mode [ 100.342359][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.346267][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.350084][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.471500][ T7525] team0 (unregistering): Port device team_slave_0 removed [ 100.476302][ T7525] team0 (unregistering): Port device team_slave_1 removed [ 100.628853][ T40] audit: type=1400 audit(1759627348.819:38348): avc: denied { module_load } for pid=7542 comm="syz.1.448" path="/103/bus" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 100.645531][ T7545] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.662150][ T40] audit: type=1400 audit(1759627348.849:38349): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.731619][ T7553] sctp: [Deprecated]: syz.1.453 (pid 7553) Use of int in max_burst socket option deprecated. [ 100.731619][ T7553] Use struct sctp_assoc_value instead [ 100.763662][ T7555] vlan2: entered allmulticast mode [ 100.767675][ T7555] bond0: entered allmulticast mode [ 100.769876][ T7555] bond_slave_0: entered allmulticast mode [ 100.772892][ T7555] bond_slave_1: entered allmulticast mode [ 101.796659][ T40] audit: type=1400 audit(1759627349.989:38350): avc: denied { create } for pid=7592 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.824616][ T40] audit: type=1400 audit(1759627349.999:38351): avc: denied { write } for pid=7592 comm="syz.1.463" path="socket:[15200]" dev="sockfs" ino=15200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.886935][ T7607] __nla_validate_parse: 6 callbacks suppressed [ 101.886952][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 101.894997][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 101.895757][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 101.901295][ T7607] validate_nla: 2 callbacks suppressed [ 101.901309][ T7607] netlink: 'syz.3.466': attribute type 14 has an invalid length. [ 101.901887][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 101.911055][ T7608] netlink: 'syz.3.466': attribute type 14 has an invalid length. [ 101.924028][ T7610] vivid-002: disconnect [ 101.929252][ T7609] vivid-002: reconnect [ 102.028873][ T40] audit: type=1400 audit(1759627350.219:38352): avc: denied { remount } for pid=7620 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.048477][ T40] audit: type=1400 audit(1759627350.239:38353): avc: denied { accept } for pid=7625 comm="syz.3.473" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.079506][ T7632] overlayfs: failed to clone upperpath [ 102.121368][ T7636] vlan2: entered promiscuous mode [ 102.123171][ T7636] bridge0: entered promiscuous mode [ 102.158469][ T7639] macsec1: entered promiscuous mode [ 102.183822][ T40] audit: type=1400 audit(1759627350.369:38354): avc: denied { getopt } for pid=7640 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.185580][ T7641] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 102.196840][ T7641] SELinux: failed to load policy [ 102.200942][ T40] audit: type=1400 audit(1759627350.389:38355): avc: denied { setopt } for pid=7640 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.201049][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 102.210928][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.478'. [ 102.290888][ T7651] kvm: kvm [7650]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 102.294640][ T7651] kvm: kvm [7650]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 102.359120][ T7664] netlink: 'syz.2.487': attribute type 64 has an invalid length. [ 102.361989][ T7664] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 102.364561][ T7664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.487'. [ 102.386624][ T5962] Bluetooth: hci4: sending frame failed (-49) [ 102.389088][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 102.558157][ T7672] netlink: 56 bytes leftover after parsing attributes in process `syz.1.489'. [ 102.676962][ T40] audit: type=1400 audit(1759627350.869:38356): avc: denied { append } for pid=7682 comm="syz.0.491" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.730866][ T7688] [U] v3f"S/4:XTzWtlW= [ 102.781082][ T7694] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 102.788866][ T7694] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 103.125731][ T7711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.129730][ T7711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.145412][ T7713] tipc: Started in network mode [ 103.147221][ T7713] tipc: Node identity 5218d4037b68, cluster identity 4711 [ 103.148628][ T7715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55316 sclass=netlink_route_socket pid=7715 comm=syz.2.497 [ 103.150661][ T7713] tipc: Enabled bearer , priority 0 [ 103.176874][ T7712] tipc: Resetting bearer [ 103.507229][ T7724] netlink: 'syz.3.501': attribute type 28 has an invalid length. [ 103.510425][ T7724] netlink: 'syz.3.501': attribute type 3 has an invalid length. [ 103.513003][ T7724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.501'. [ 103.906352][ T7736] fuse: Bad value for 'fd' [ 103.908591][ T7736] fuse: Bad value for 'fd' [ 104.156884][ T1347] tipc: Node number set to 695260163 [ 104.245993][ T7712] tipc: Disabling bearer [ 104.260776][ T7711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.264308][ T7711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.321033][ T7740] 9p: Unknown access argument 18446744073709551615: -34 [ 104.359859][ T7711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.364281][ T7711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.402069][ T7748] comedi: No check for data length of config insn id 3 is implemented [ 104.408990][ T7748] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 104.412978][ T7748] comedi: Assuming n=15 is correct [ 104.457426][ T7711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.461173][ T7711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.510321][ T7751] veth0: entered promiscuous mode [ 104.541620][ T7753] veth0: left promiscuous mode [ 104.560730][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.562936][ T7758] new mount options do not match the existing superblock, will be ignored [ 104.563704][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.566198][ T70] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.566238][ T70] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.566277][ T70] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.566291][ T70] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.573411][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.589970][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.607566][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.611189][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.663326][ T7765] netlink: 36 bytes leftover after parsing attributes in process `syz.3.514'. [ 104.731738][ T7776] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 104.750013][ T7776] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 104.762725][ T7776] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 104.778984][ T7776] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 105.266335][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 105.266352][ T40] audit: type=1400 audit(1759627353.459:38368): avc: denied { block_suspend } for pid=7810 comm="syz.0.527" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.423069][ T7821] erspan1: entered promiscuous mode [ 105.561311][ T40] audit: type=1400 audit(1759627353.749:38369): avc: denied { write } for pid=7837 comm="syz.0.534" path="socket:[20485]" dev="sockfs" ino=20485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.569563][ T7838] veth1_to_batadv: entered promiscuous mode [ 105.934578][ T7860] binder: BINDER_SET_CONTEXT_MGR already set [ 105.937192][ T7860] binder: 7858:7860 ioctl 4018620d 200000000100 returned -16 [ 105.941231][ T7859] binder: 7858:7859 ioctl 81f8943c 200000000440 returned -22 [ 105.941324][ T7860] binder: 7858:7860 ioctl 81f8943c 200000000440 returned -22 [ 105.952519][ T7859] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 105.956304][ T7859] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 105.962548][ T40] audit: type=1400 audit(1759627354.159:38370): avc: denied { firmware_load } for pid=7858 comm="syz.0.542" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.962559][ T7859] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 106.250710][ T7871] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 106.263629][ T7872] geneve3: entered promiscuous mode [ 106.265839][ T7872] geneve3: entered allmulticast mode [ 106.510093][ T40] audit: type=1400 audit(1759627354.699:38371): avc: denied { mount } for pid=7889 comm="syz.1.551" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 107.000592][ T40] audit: type=1400 audit(1759627355.189:38372): avc: denied { mount } for pid=7912 comm="syz.0.562" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.008966][ T40] audit: type=1400 audit(1759627355.199:38373): avc: denied { search } for pid=7912 comm="syz.0.562" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.011974][ T7913] program syz.0.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.017310][ T40] audit: type=1400 audit(1759627355.199:38374): avc: denied { read open } for pid=7912 comm="syz.0.562" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.028258][ T40] audit: type=1400 audit(1759627355.199:38375): avc: denied { append } for pid=7912 comm="syz.0.562" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.070840][ T7925] __nla_validate_parse: 9 callbacks suppressed [ 107.070858][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 107.078873][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 107.088408][ T7927] /dev/nbd3: Can't lookup blockdev [ 107.124444][ T7932] dlm: no locking on control device [ 107.203051][ T7943] netlink: 'syz.3.571': attribute type 11 has an invalid length. [ 107.229673][ T40] audit: type=1400 audit(1759627355.419:38376): avc: denied { read } for pid=7937 comm="syz.0.569" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.229755][ T40] audit: type=1400 audit(1759627355.419:38377): avc: denied { open } for pid=7937 comm="syz.0.569" path="/131/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.231321][ T7939] sd 0:0:0:0: PR command failed: 1026 [ 107.250049][ T7939] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 107.250078][ T7939] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 107.262965][ T7951] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan2 [ 107.310493][ T7955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7955 comm=syz.3.573 [ 107.318714][ T7955] overlayfs: failed to clone upperpath [ 107.330775][ T7955] bond2: entered promiscuous mode [ 107.333930][ T7955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.337485][ T1155] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x91 [ 107.338015][ T7955] bond0: (slave bond2): Enslaving as an active interface with an up link [ 107.342700][ T7945] affs: No valid root block on device nullb0 [ 107.487101][ T5967] Bluetooth: hci0: unexpected cc 0x2003 length: 4 < 9 [ 107.490157][ T5967] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 108.080140][ T7971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.579'. [ 108.097588][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 108.100724][ T7976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.579'. [ 108.444293][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 108.451635][ T7993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.586'. [ 108.721299][ T8023] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 109.031001][ T8062] netlink: 'syz.3.607': attribute type 11 has an invalid length. [ 109.053623][ T8062] netlink: 'syz.3.607': attribute type 11 has an invalid length. [ 109.091205][ T8069] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 109.110869][ T8069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.115430][ T8072] netlink: 'syz.3.610': attribute type 8 has an invalid length. [ 109.130499][ T8069] bond3: (slave geneve2): making interface the new active one [ 109.134261][ T8069] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 109.143182][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 109.169128][ T8078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=8078 comm=syz.1.614 [ 109.173552][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.614'. [ 109.181972][ T8082] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.183165][ T8078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8078 comm=syz.1.614 [ 109.262026][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 109.276750][ T8098] overlayfs: failed to clone upperpath [ 109.421429][ T8116] af_packet: tpacket_rcv: packet too big, clamped from 666 to 4294967272. macoff=96 [ 109.463054][ T8125] syz_tun: refused to change device tx_queue_len [ 109.510729][ T8128] 9pnet_fd: Insufficient options for proto=fd [ 109.700813][ T8140] xt_policy: neither incoming nor outgoing policy selected [ 109.831188][ T8155] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 109.848022][ T8151] overlay: Bad value for 'xino' [ 109.898570][ T8158] overlayfs: missing 'lowerdir' [ 109.910897][ T8157] veth3: entered promiscuous mode [ 110.050915][ T8173] SELinux: failed to load policy [ 110.064018][ T8176] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 110.085577][ T5967] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 110.172480][ T8184] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 110.197290][ T8184] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 110.202342][ T8184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8184 comm=syz.3.650 [ 110.227576][ T8184] veth3: entered promiscuous mode [ 110.230967][ T8184] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 110.282354][ T8189] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.348581][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 110.348596][ T40] audit: type=1400 audit(1759627358.539:38396): avc: denied { read } for pid=8192 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.427328][ T8208] netlink: 'syz.2.658': attribute type 12 has an invalid length. [ 110.432183][ T8208] syz_tun: entered allmulticast mode [ 110.436635][ T40] audit: type=1400 audit(1759627358.629:38397): avc: denied { connect } for pid=8207 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.484667][ T40] audit: type=1400 audit(1759627358.669:38398): avc: denied { read } for pid=8209 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.492748][ T40] audit: type=1400 audit(1759627358.669:38399): avc: denied { remount } for pid=8209 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.505618][ T1149] team0: left promiscuous mode [ 110.509163][ T1149] team_slave_0: left promiscuous mode [ 110.514354][ T1149] team_slave_1: left promiscuous mode [ 110.538008][ T40] audit: type=1400 audit(1759627358.729:38400): avc: denied { write } for pid=8213 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.596880][ T40] audit: type=1400 audit(1759627358.789:38401): avc: denied { read } for pid=8213 comm="syz.0.661" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 110.607029][ T40] audit: type=1400 audit(1759627358.789:38402): avc: denied { open } for pid=8213 comm="syz.0.661" path="/148/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 110.610119][ T5967] block nbd1: Receive control failed (result -32) [ 110.615230][ T40] audit: type=1400 audit(1759627358.789:38403): avc: denied { ioctl } for pid=8213 comm="syz.0.661" path="/148/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 110.634509][ T8214] block nbd1: shutting down sockets [ 110.702953][ T40] audit: type=1400 audit(1759627358.889:38404): avc: denied { read } for pid=8219 comm="syz.0.662" name="loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.712446][ T40] audit: type=1400 audit(1759627358.889:38405): avc: denied { open } for pid=8219 comm="syz.0.662" path="/dev/loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.882187][ T8226] tipc: New replicast peer: 0.0.0.0 [ 110.884701][ T8226] tipc: Enabled bearer , priority 10 [ 110.887783][ T8226] tipc: New replicast peer: 255.255.255.255 [ 110.972131][ T8237] bond1: (slave team0): Releasing active interface [ 111.008840][ T8235] overlay: Bad value for 'xino' [ 111.398213][ T8282] loop4: detected capacity change from 0 to 2560 [ 111.401669][ T8282] buffer_io_error: 48 callbacks suppressed [ 111.401680][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.413375][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.417298][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.421429][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.425408][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.428482][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.431601][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.434647][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.438153][ T8282] ldm_validate_partition_table(): Disk read failed. [ 111.440709][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.443323][ T8282] Buffer I/O error on dev loop4, logical block 0, async page read [ 111.446836][ T8282] Dev loop4: unable to read RDB block 0 [ 111.449773][ T8282] loop4: unable to read partition table [ 111.463593][ T8282] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 111.619964][ T8319] sctp: [Deprecated]: syz.3.692 (pid 8319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.619964][ T8319] Use struct sctp_sack_info instead [ 111.724474][ T8335] loop9: detected capacity change from 0 to 7 [ 111.732867][ T6967] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 111.735228][ T6967] loop9: partition table partially beyond EOD, truncated [ 111.739643][ T6967] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 111.756752][ T8335] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 111.759041][ T8335] loop9: partition table partially beyond EOD, truncated [ 111.762122][ T8335] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 111.944201][ T5952] IPVS: starting estimator thread 0... [ 111.967204][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 112.044024][ T8376] overlayfs: failed to clone upperpath [ 112.050932][ T8376] overlayfs: failed to clone lowerpath [ 112.054990][ T8364] IPVS: using max 42 ests per chain, 100800 per kthread [ 112.120487][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 112.125643][ T29] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 112.129378][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.132638][ T29] usb 6-1: Product: syz [ 112.134678][ T29] usb 6-1: Manufacturer: syz [ 112.138485][ T29] usb 6-1: SerialNumber: syz [ 112.143548][ T29] usb 6-1: config 0 descriptor?? [ 112.362079][ T29] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 112.367670][ T29] usb 6-1: USB disconnect, device number 7 [ 112.626262][ T8417] 9pnet_virtio: no channels available for device syz [ 112.814928][ T53] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 112.968033][ T53] usb 6-1: not running at top speed; connect to a high speed hub [ 112.982178][ T53] usb 6-1: config 9 has an invalid interface number: 56 but max is 0 [ 112.985504][ T53] usb 6-1: config 9 has no interface number 0 [ 112.987480][ T53] usb 6-1: config 9 interface 56 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 112.991685][ T53] usb 6-1: config 9 interface 56 altsetting 227 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 112.996856][ T53] usb 6-1: config 9 interface 56 has no altsetting 0 [ 113.001099][ T53] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=41.5d [ 113.004060][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.006937][ T53] usb 6-1: Product: syz [ 113.008330][ T53] usb 6-1: Manufacturer: И [ 113.009882][ T53] usb 6-1: SerialNumber: syz [ 113.224598][ T8406] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 113.252896][ T8406] bond4: entered promiscuous mode [ 113.257441][ T8406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.259258][ T8492] __nla_validate_parse: 8 callbacks suppressed [ 113.259269][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 113.295579][ T8406] 8021q: adding VLAN 0 to HW filter on device bond5 [ 113.301659][ T8406] bond4: (slave bond5): making interface the new active one [ 113.304285][ T8406] bond5: entered promiscuous mode [ 113.307355][ T8406] bond4: (slave bond5): Enslaving as an active interface with an up link [ 113.312625][ T8492] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 113.319718][ T53] ftdi_sio 6-1:9.56: FTDI USB Serial Device converter detected [ 113.330133][ T53] ftdi_sio ttyUSB0: unknown device type: 0x415d [ 113.347278][ T53] usb 6-1: USB disconnect, device number 8 [ 113.359935][ T53] ftdi_sio 6-1:9.56: device disconnected [ 113.402996][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 113.915744][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.113268][ T8531] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 114.116900][ T8531] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 114.317932][ T8548] blk_print_req_error: 19 callbacks suppressed [ 114.317952][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.328878][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.333553][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.338719][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.342252][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.345378][ T8548] ldm_validate_partition_table(): Disk read failed. [ 114.348491][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.352200][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.355677][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.358716][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.361640][ T8548] Dev nbd0: unable to read RDB block 0 [ 114.363507][ T8548] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.366882][ T8548] nbd0: unable to read partition table [ 114.368893][ T8548] nbd0: partition table beyond EOD, truncated [ 114.371286][ T8548] (syz.0.742,8548,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 114.377265][ T8548] (syz.0.742,8548,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 114.379830][ T8548] (syz.0.742,8548,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 114.382790][ T8548] (syz.0.742,8548,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 114.586572][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 114.589516][ T8561] nbd: illegal input index 1879048192 [ 114.591392][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 114.595565][ T8560] nbd: illegal input index 1879048192 [ 114.647393][ T8556] cgroup: release_agent respecified [ 114.809004][ T8580] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 114.826735][ T8580] Bluetooth: MGMT ver 1.23 [ 114.834295][ T8580] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 114.853505][ T8580] veth3: entered promiscuous mode [ 114.857582][ T8580] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 114.944101][ T8595] /dev/nullb0: Can't open blockdev [ 114.984111][ T8604] overlayfs: maximum fs stacking depth exceeded [ 114.990025][ T8604] overlayfs: maximum fs stacking depth exceeded [ 115.704386][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 115.704404][ T40] audit: type=1326 audit(1759627363.889:38416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.2.768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce558eec9 code=0x7ffc0000 [ 115.730767][ T40] audit: type=1400 audit(1759627363.919:38417): avc: denied { mount } for pid=8668 comm="syz.2.769" name="/" dev="configfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.741867][ T40] audit: type=1400 audit(1759627363.919:38418): avc: denied { search } for pid=8668 comm="syz.2.769" name="/" dev="configfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.751584][ T40] audit: type=1400 audit(1759627363.919:38419): avc: denied { read open } for pid=8668 comm="syz.2.769" path="/" dev="configfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.811846][ T8671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.815970][ T8671] batadv_slave_0: entered promiscuous mode [ 116.034692][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 116.039061][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 116.098638][ T40] audit: type=1400 audit(1759627364.289:38420): avc: denied { ioctl } for pid=8699 comm="syz.0.775" path="socket:[24596]" dev="sockfs" ino=24596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.170200][ T40] audit: type=1400 audit(1759627364.359:38421): avc: denied { create } for pid=8703 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.179536][ T40] audit: type=1400 audit(1759627364.359:38422): avc: denied { read } for pid=8703 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.372277][ T8720] QAT: failed to copy from user. [ 116.968547][ T8736] team0: No ports can be present during mode change [ 116.971717][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 116.984181][ T8736] bond6: entered promiscuous mode [ 116.992918][ T8738] netlink: 248 bytes leftover after parsing attributes in process `syz.3.788'. [ 117.135367][ T8757] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 117.138044][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 117.141553][ T40] audit: type=1400 audit(1759627365.329:38423): avc: denied { map } for pid=8758 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.152992][ T40] audit: type=1400 audit(1759627365.329:38424): avc: denied { execute } for pid=8758 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.175957][ T40] audit: type=1800 audit(1759627365.369:38425): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.796" name="bus" dev="tmpfs" ino=1289 res=0 errno=0 [ 117.320481][ T8769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.799'. [ 117.401332][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.958520][ T8787] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 118.059265][ T8821] 9pnet_fd: p9_fd_create_unix (8821): problem connecting socket: ./file0: -111 [ 118.093493][ T8824] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 118.172146][ T8834] bond5 (unregistering): Released all slaves [ 118.217730][ T8841] program syz.1.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.224281][ T8841] netlink: 'syz.1.821': attribute type 20 has an invalid length. [ 118.243931][ T63] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.244103][ T8841] netlink: 'syz.1.821': attribute type 20 has an invalid length. [ 118.247802][ T63] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.247835][ T63] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.247854][ T63] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.270870][ T8845] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 118.279858][ T8845] CIFS mount error: No usable UNC path provided in device string! [ 118.279858][ T8845] [ 118.281575][ T8841] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 118.283204][ T8845] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.283566][ T8842] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 118.381120][ T8849] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.529356][ T8847] __nla_validate_parse: 8 callbacks suppressed [ 118.529375][ T8847] netlink: 104 bytes leftover after parsing attributes in process `syz.3.823'. [ 119.061291][ T8855] cgroup: none used incorrectly [ 119.064516][ T8855] cgroup: none used incorrectly [ 119.425046][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 119.425080][ T5962] Bluetooth: hci4: command 0x1003 tx timeout [ 119.521848][ T8877] team0: entered promiscuous mode [ 119.523681][ T8877] team_slave_0: entered promiscuous mode [ 119.526277][ T8877] team_slave_1: entered promiscuous mode [ 119.532818][ T8877] team0: Cannot enslave team device to itself [ 120.066319][ T8879] pimreg3: entered allmulticast mode [ 120.205929][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 120.209911][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 120.643726][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 120.744189][ T8927] netlink: 'syz.3.849': attribute type 9 has an invalid length. [ 120.889655][ T8936] bond0: (slave caif0): Error: Device type is different from other slaves [ 120.956942][ T8922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8922 comm=syz.0.847 [ 120.961364][ T8922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8922 comm=syz.0.847 [ 121.582529][ T8972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.854'. [ 121.691706][ T8978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.856'. [ 121.730477][ T8987] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 121.737853][ T8989] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 121.739114][ T8978] bond6: entered allmulticast mode [ 121.840136][ T8994] program syz.1.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.095967][ T54] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 122.256619][ T54] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.261162][ T54] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 122.266101][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 65458, setting to 64 [ 122.270690][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.279617][ T54] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 122.283443][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.286928][ T54] usb 6-1: Product: syz [ 122.288681][ T54] usb 6-1: Manufacturer: syz [ 122.290599][ T54] usb 6-1: SerialNumber: syz [ 122.295820][ T54] usb 6-1: config 0 descriptor?? [ 122.299539][ T8994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.307665][ T54] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11 [ 122.361781][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 122.361792][ T40] audit: type=1400 audit(1759627370.549:38439): avc: denied { ioctl } for pid=9012 comm="syz.3.867" path="socket:[24959]" dev="sockfs" ino=24959 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.396390][ T9014] delete_channel: no stack [ 122.399251][ T9014] delete_channel: no stack [ 122.423493][ T9018] overlayfs: failed to clone upperpath [ 122.431121][ T40] audit: type=1800 audit(1759627370.619:38440): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.868" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 122.526699][ T40] audit: type=1400 audit(1759627370.719:38441): avc: denied { connect } for pid=9023 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.569650][ T54] usb 6-1: USB disconnect, device number 9 [ 122.571564][ T40] audit: type=1400 audit(1759627370.759:38442): avc: denied { setopt } for pid=9025 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.984970][ T9055] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.053404][ T9058] pvfs2: Unknown parameter '/dev/sr0' [ 123.054288][ T40] audit: type=1400 audit(1759627371.239:38443): avc: denied { mounton } for pid=9057 comm="syz.2.884" path="/194/file0/file1" dev="9p" ino=75760103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.064995][ T40] audit: type=1400 audit(1759627371.259:38444): avc: denied { remove_name } for pid=9057 comm="syz.2.884" name="file1" dev="9p" ino=75760103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.073165][ T40] audit: type=1400 audit(1759627371.259:38445): avc: denied { unlink } for pid=9057 comm="syz.2.884" name="file1" dev="9p" ino=75760103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.091758][ T40] audit: type=1400 audit(1759627371.279:38446): avc: denied { remount } for pid=9057 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.092498][ T9058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.884'. [ 123.141124][ T9060] netlink: 'syz.1.886': attribute type 13 has an invalid length. [ 123.145371][ T9060] trusted_key: encrypted_key: insufficient parameters specified [ 123.148683][ T9061] trusted_key: encrypted_key: insufficient parameters specified [ 123.188429][ T40] audit: type=1400 audit(1759627371.379:38447): avc: denied { bind } for pid=9062 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.269862][ T9070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9070 comm=syz.2.885 [ 123.295305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.295471][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 123.301716][ T9071] nbd: illegal input index 1879048192 [ 123.436276][ T9080] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 123.440080][ T9080] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.446477][ T9080] vhci_hcd vhci_hcd.0: Device attached [ 123.526194][ T9081] vhci_hcd: connection closed [ 123.529170][ T63] vhci_hcd: stop threads [ 123.534332][ T63] vhci_hcd: release socket [ 123.536628][ T63] vhci_hcd: disconnect device [ 123.600039][ T9091] serio: Serial port ptm0 [ 123.654048][ T40] audit: type=1400 audit(1759627371.839:38448): avc: denied { setattr } for pid=9092 comm="syz.3.893" name="NETLINK" dev="sockfs" ino=25824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.667485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.672526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.700132][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 123.703225][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 123.776005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.872449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.885131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.921664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.085222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.155650][ T1147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.160997][ T1147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.164326][ T1147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.168343][ T1147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.378129][ T5967] Bluetooth: hci2: Malformed Event: 0x13 [ 124.487812][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 124.491611][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 124.496011][ T9175] netlink: 'syz.1.918': attribute type 12 has an invalid length. [ 124.619464][ T9192] Bluetooth: MGMT ver 1.23 [ 124.622842][ T9192] binder: 9191:9192 ioctl 81f8943c 200000000440 returned -22 [ 124.654072][ T9195] netlink: 48 bytes leftover after parsing attributes in process `syz.3.924'. [ 124.662448][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 124.801574][ T9215] input: syz1 as /devices/virtual/input/input12 [ 124.812375][ T9215] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 124.815742][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 124.830891][ T9215] team0: Port device geneve0 added [ 125.284205][ T9248] vivid-001: ================= START STATUS ================= [ 125.287861][ T9248] vivid-001: Radio HW Seek Mode: Bounded [ 125.292951][ T9248] vivid-001: Radio Programmable HW Seek: false [ 125.296656][ T9248] vivid-001: RDS Rx I/O Mode: Block I/O [ 125.299447][ T9248] vivid-001: Generate RBDS Instead of RDS: false [ 125.302269][ T9248] vivid-001: RDS Reception: true [ 125.304881][ T9248] vivid-001: RDS Program Type: 0 inactive [ 125.307504][ T9248] vivid-001: RDS PS Name: inactive [ 125.309901][ T9248] vivid-001: RDS Radio Text: inactive [ 125.312496][ T9248] vivid-001: RDS Traffic Announcement: false inactive [ 125.315865][ T9248] vivid-001: RDS Traffic Program: false inactive [ 125.319675][ T9248] vivid-001: RDS Music: false inactive [ 125.322247][ T9248] vivid-001: ================== END STATUS ================== [ 125.326789][ T9248] cgroup: No subsys list or none specified [ 125.420241][ T9253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=9253 comm=syz.0.941 [ 125.424845][ T9253] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 125.437397][ T9253] bond4: entered promiscuous mode [ 125.439675][ T9253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.453945][ T9250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.457208][ T9250] bond4: (slave bond5): making interface the new active one [ 125.460021][ T9250] bond5: entered promiscuous mode [ 125.462324][ T9250] bond4: (slave bond5): Enslaving as an active interface with an up link [ 126.231604][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.236764][ T9297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.562814][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 126.575181][ T9303] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 126.750337][ T9314] /dev/nullb0: Can't open blockdev [ 126.767301][ T9318] gfs2: error -5 reading superblock [ 126.777128][ T9320] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.069555][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.969'. [ 127.133684][ T9345] bond5 (unregistering): Released all slaves [ 127.809702][ T9375] hpfs: hpfs_map_sector(): read error [ 127.816742][ T9375] hpfs: hpfs_map_sector(): read error [ 127.825469][ T9375] hpfs: hpfs_map_sector(): read error [ 127.831109][ T9375] hpfs: hpfs_map_sector(): read error [ 127.839298][ T9375] hpfs: hpfs_map_sector(): read error [ 127.843930][ T9375] hpfs: hpfs_map_sector(): read error [ 127.850644][ T9375] hpfs: hpfs_map_sector(): read error [ 127.851268][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 127.853925][ T9375] : Can't lookup blockdev [ 127.859470][ T9375] : Can't lookup blockdev [ 127.861051][ T9375] : Can't lookup blockdev [ 127.862588][ T9375] : Can't lookup blockdev [ 127.864121][ T9375] : Can't lookup blockdev [ 127.865854][ T9375] : Can't lookup blockdev [ 127.867509][ T9375] : Can't lookup blockdev [ 127.869068][ T9375] : Can't lookup blockdev [ 127.870826][ T9375] : Can't lookup blockdev [ 127.872626][ T9375] : Can't lookup blockdev [ 127.874137][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 127.874149][ T40] audit: type=1400 audit(1759627376.059:38454): avc: denied { ioctl } for pid=9381 comm="syz.0.980" path="socket:[25433]" dev="sockfs" ino=25433 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.874482][ T9375] : Can't lookup blockdev [ 127.888158][ T9375] : Can't lookup blockdev [ 127.889721][ T9375] : Can't lookup blockdev [ 127.891520][ T9375] : Can't lookup blockdev [ 127.893382][ T9375] : Can't lookup blockdev [ 127.895042][ T9375] : Can't lookup blockdev [ 127.897257][ T9375] : Can't lookup blockdev [ 127.899093][ T9375] : Can't lookup blockdev [ 127.900759][ T9375] : Can't lookup blockdev [ 127.902402][ T9375] : Can't lookup blockdev [ 127.904211][ T9375] : Can't lookup blockdev [ 127.907855][ T9375] : Can't lookup blockdev [ 127.909378][ T9375] : Can't lookup blockdev [ 127.910876][ T9375] : Can't lookup blockdev [ 127.912510][ T9375] : Can't lookup blockdev [ 127.914081][ T9375] : Can't lookup blockdev [ 128.128863][ T40] audit: type=1326 audit(1759627376.305:38455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9397 comm="syz.0.984" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94bb8eec9 code=0x0 [ 128.289500][ T9416] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 128.291366][ T9418] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 128.304698][ T9416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.448063][ T9430] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 128.448063][ T9430] program syz.2.991 not setting count and/or reply_len properly [ 128.493344][ T9432] netlink: 'syz.2.992': attribute type 6 has an invalid length. [ 128.525461][ T9434] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 128.540674][ T9434] CUSE: unknown device info "&b%ZW)3\my " [ 128.543023][ T9434] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 128.548636][ T9434] CUSE: DEVNAME unspecified [ 128.552612][ T40] audit: type=1800 audit(1759627376.707:38456): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.994" name="nullb0" dev="tmpfs" ino=354 res=0 errno=0 [ 128.592251][ T9441] bond7: entered promiscuous mode [ 128.595640][ T9441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 128.598763][ T9441] bond7: entered allmulticast mode [ 128.602313][ T9441] bond0: (slave bond7): Enslaving as an active interface with an up link [ 128.752089][ T9467] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 128.757705][ T40] audit: type=1400 audit(1759627376.894:38457): avc: denied { relabelto } for pid=9465 comm="syz.2.1002" name="219" dev="tmpfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 128.766885][ T40] audit: type=1400 audit(1759627376.894:38458): avc: denied { associate } for pid=9465 comm="syz.2.1002" name="219" dev="tmpfs" ino=1175 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 128.778748][ T40] audit: type=1400 audit(1759627376.894:38459): avc: denied { write } for pid=9465 comm="syz.2.1002" name="219" dev="tmpfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 128.789736][ T40] audit: type=1400 audit(1759627376.894:38460): avc: denied { add_name } for pid=9465 comm="syz.2.1002" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 128.799433][ T40] audit: type=1400 audit(1759627376.894:38461): avc: denied { create } for pid=9465 comm="syz.2.1002" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.806634][ T40] audit: type=1400 audit(1759627376.894:38462): avc: denied { associate } for pid=9465 comm="syz.2.1002" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.814170][ T40] audit: type=1400 audit(1759627376.894:38463): avc: denied { mounton } for pid=9465 comm="syz.2.1002" path="/219/file0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.871819][ T9477] overlayfs: conflicting options: nfs_export=on,index=off [ 129.131668][ T9488] orangefs_devreq_open: device cannot be opened in blocking mode [ 129.322123][ T9504] __nla_validate_parse: 4 callbacks suppressed [ 129.322144][ T9504] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1014'. [ 129.330206][ T9504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1014'. [ 129.385040][ T9509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1014'. [ 130.167198][ T9510] Falling back ldisc for ttyS3. [ 130.357223][ T9525] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1021'. [ 130.645376][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 130.648361][ T9535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1024'. [ 131.615896][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 131.663121][ T9566] overlayfs: missing 'workdir' [ 131.731993][ T9570] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 131.736708][ T9571] ipvlan2: entered promiscuous mode [ 131.740525][ T9571] bridge0: port 3(ipvlan2) entered blocking state [ 131.745052][ T9571] bridge0: port 3(ipvlan2) entered disabled state [ 131.748476][ T9571] ipvlan2: entered allmulticast mode [ 131.750370][ T9571] bridge0: entered allmulticast mode [ 131.754798][ T9571] ipvlan2: left allmulticast mode [ 131.756858][ T9571] bridge0: left allmulticast mode [ 131.765099][ T9573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1036'. [ 131.931483][ T9585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9585 comm=syz.0.1039 [ 132.146681][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 132.151059][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 132.239254][ T9610] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 132.272810][ T9617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9617 comm=syz.2.1049 [ 132.289118][ T5962] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 132.350347][ T9627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.368617][ T9627] comedi comedi3: comedi_config --init_data is deprecated [ 132.371718][ T9627] comedi comedi3: comedi_config --init_data is deprecated [ 132.853503][ T9653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.857825][ T9653] bond_slave_0: left allmulticast mode [ 132.863362][ T9653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.866998][ T9653] bond_slave_1: left allmulticast mode [ 132.870913][ T9653] bond0 (unregistering): (slave bond7): Releasing backup interface [ 132.873956][ T9653] bond7: left allmulticast mode [ 132.878440][ T9653] bond0 (unregistering): Released all slaves [ 133.746679][ T5962] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 133.762040][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 133.762060][ T40] audit: type=1400 audit(1759627381.571:38479): avc: denied { name_connect } for pid=9666 comm="syz.2.1068" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 133.782340][ T9668] ================================================================== [ 133.782354][ T9668] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 133.782405][ T9668] Write of size 8 at addr ffffc90005071000 by task syz.2.1068/9668 [ 133.782419][ T9668] [ 133.782427][ T9668] CPU: 2 UID: 0 PID: 9668 Comm: syz.2.1068 Not tainted syzkaller #0 PREEMPT(full) [ 133.782446][ T9668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.782456][ T9668] Call Trace: [ 133.782461][ T9668] [ 133.782467][ T9668] dump_stack_lvl+0x116/0x1f0 [ 133.782497][ T9668] print_report+0xcd/0x630 [ 133.782517][ T9668] ? __virt_addr_valid+0x81/0x610 [ 133.782534][ T9668] ? sys_imageblit+0x1a6f/0x1e60 [ 133.782556][ T9668] kasan_report+0xe0/0x110 [ 133.782574][ T9668] ? sys_imageblit+0x1a6f/0x1e60 [ 133.782599][ T9668] sys_imageblit+0x1a6f/0x1e60 [ 133.782622][ T9668] ? kasan_save_stack+0x42/0x60 [ 133.782638][ T9668] ? kasan_save_stack+0x33/0x60 [ 133.782655][ T9668] ? __pfx_sys_imageblit+0x10/0x10 [ 133.782678][ T9668] ? lock_acquire+0x179/0x350 [ 133.782696][ T9668] ? __page_table_check_ptes_set+0x1ae/0x420 [ 133.782712][ T9668] ? find_held_lock+0x2b/0x80 [ 133.782734][ T9668] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 133.782750][ T9668] ? pfn_valid+0x26a/0x4d0 [ 133.782771][ T9668] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 133.782790][ T9668] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 133.782810][ T9668] bit_putcs+0x912/0xde0 [ 133.782833][ T9668] ? __pfx_bit_putcs+0x10/0x10 [ 133.782850][ T9668] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 133.782871][ T9668] ? fb_get_color_depth+0x120/0x250 [ 133.782887][ T9668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.782911][ T9668] ? __pfx_bit_putcs+0x10/0x10 [ 133.782933][ T9668] fbcon_putcs+0x387/0x450 [ 133.782950][ T9668] do_update_region+0x2e9/0x3f0 [ 133.782975][ T9668] invert_screen+0x1e4/0x590 [ 133.782993][ T9668] ? __pfx_invert_screen+0x10/0x10 [ 133.783009][ T9668] ? __pfx_complement_pos+0x10/0x10 [ 133.783026][ T9668] ? vc_do_resize+0x24d/0x10e0 [ 133.783040][ T9668] ? __vmalloc_node_noprof+0xad/0xf0 [ 133.783062][ T9668] clear_selection+0x59/0x70 [ 133.783076][ T9668] vc_do_resize+0xd9b/0x10e0 [ 133.783097][ T9668] ? __pfx_vc_do_resize+0x10/0x10 [ 133.783116][ T9668] fbcon_set_disp+0x7ad/0xe50 [ 133.783133][ T9668] set_con2fb_map+0x703/0x1080 [ 133.783152][ T9668] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 133.783171][ T9668] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 133.783192][ T9668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.783214][ T9668] do_fb_ioctl+0x328/0x7e0 [ 133.783234][ T9668] ? __pfx_do_fb_ioctl+0x10/0x10 [ 133.783290][ T9668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.783322][ T9668] ? selinux_file_ioctl+0x180/0x270 [ 133.783342][ T9668] fb_ioctl+0xe5/0x150 [ 133.783361][ T9668] ? __pfx_fb_ioctl+0x10/0x10 [ 133.783381][ T9668] __x64_sys_ioctl+0x18e/0x210 [ 133.783405][ T9668] do_syscall_64+0xcd/0x4e0 [ 133.783426][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.783442][ T9668] RIP: 0033:0x7f7ce558eec9 [ 133.783454][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.783470][ T9668] RSP: 002b:00007f7ce6427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.783486][ T9668] RAX: ffffffffffffffda RBX: 00007f7ce57e6090 RCX: 00007f7ce558eec9 [ 133.783497][ T9668] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000008 [ 133.783507][ T9668] RBP: 00007f7ce5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.783516][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.783525][ T9668] R13: 00007f7ce57e6128 R14: 00007f7ce57e6090 R15: 00007ffdfe1b5b58 [ 133.783541][ T9668] [ 133.783547][ T9668] [ 133.783551][ T9668] The buggy address belongs to a vmalloc virtual mapping [ 133.783562][ T9668] Memory state around the buggy address: [ 133.783571][ T9668] ffffc90005070f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 133.783582][ T9668] ffffc90005070f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 133.783593][ T9668] >ffffc90005071000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 133.783602][ T9668] ^ [ 133.783610][ T9668] ffffc90005071080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 133.783621][ T9668] ffffc90005071100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 133.783629][ T9668] ================================================================== [ 133.783638][ T9668] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.783649][ T9668] CPU: 2 UID: 0 PID: 9668 Comm: syz.2.1068 Not tainted syzkaller #0 PREEMPT(full) [ 133.783666][ T9668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.783676][ T9668] Call Trace: [ 133.783682][ T9668] [ 133.783688][ T9668] dump_stack_lvl+0x3d/0x1f0 [ 133.783707][ T9668] vpanic+0x640/0x6f0 [ 133.783723][ T9668] panic+0xca/0xd0 [ 133.783739][ T9668] ? __pfx_panic+0x10/0x10 [ 133.783757][ T9668] ? check_panic_on_warn+0x1f/0xb0 [ 133.783774][ T9668] check_panic_on_warn+0xab/0xb0 [ 133.783792][ T9668] end_report+0x107/0x170 [ 133.783810][ T9668] kasan_report+0xee/0x110 [ 133.783830][ T9668] ? sys_imageblit+0x1a6f/0x1e60 [ 133.783854][ T9668] sys_imageblit+0x1a6f/0x1e60 [ 133.783879][ T9668] ? kasan_save_stack+0x42/0x60 [ 133.783895][ T9668] ? kasan_save_stack+0x33/0x60 [ 133.783911][ T9668] ? __pfx_sys_imageblit+0x10/0x10 [ 133.783940][ T9668] ? lock_acquire+0x179/0x350 [ 133.783958][ T9668] ? __page_table_check_ptes_set+0x1ae/0x420 [ 133.783974][ T9668] ? find_held_lock+0x2b/0x80 [ 133.783995][ T9668] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 133.784011][ T9668] ? pfn_valid+0x26a/0x4d0 [ 133.784031][ T9668] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 133.784051][ T9668] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 133.784070][ T9668] bit_putcs+0x912/0xde0 [ 133.784093][ T9668] ? __pfx_bit_putcs+0x10/0x10 [ 133.784111][ T9668] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 133.784133][ T9668] ? fb_get_color_depth+0x120/0x250 [ 133.784149][ T9668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.784171][ T9668] ? __pfx_bit_putcs+0x10/0x10 [ 133.784189][ T9668] fbcon_putcs+0x387/0x450 [ 133.784207][ T9668] do_update_region+0x2e9/0x3f0 [ 133.784231][ T9668] invert_screen+0x1e4/0x590 [ 133.784248][ T9668] ? __pfx_invert_screen+0x10/0x10 [ 133.784265][ T9668] ? __pfx_complement_pos+0x10/0x10 [ 133.784301][ T9668] ? vc_do_resize+0x24d/0x10e0 [ 133.784316][ T9668] ? __vmalloc_node_noprof+0xad/0xf0 [ 133.784338][ T9668] clear_selection+0x59/0x70 [ 133.784352][ T9668] vc_do_resize+0xd9b/0x10e0 [ 133.784374][ T9668] ? __pfx_vc_do_resize+0x10/0x10 [ 133.784394][ T9668] fbcon_set_disp+0x7ad/0xe50 [ 133.784411][ T9668] set_con2fb_map+0x703/0x1080 [ 133.784430][ T9668] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 133.784449][ T9668] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 133.784470][ T9668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.784492][ T9668] do_fb_ioctl+0x328/0x7e0 [ 133.784512][ T9668] ? __pfx_do_fb_ioctl+0x10/0x10 [ 133.784536][ T9668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.784568][ T9668] ? selinux_file_ioctl+0x180/0x270 [ 133.784587][ T9668] fb_ioctl+0xe5/0x150 [ 133.784606][ T9668] ? __pfx_fb_ioctl+0x10/0x10 [ 133.784627][ T9668] __x64_sys_ioctl+0x18e/0x210 [ 133.784650][ T9668] do_syscall_64+0xcd/0x4e0 [ 133.784670][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.784685][ T9668] RIP: 0033:0x7f7ce558eec9 [ 133.784697][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.784712][ T9668] RSP: 002b:00007f7ce6427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.784727][ T9668] RAX: ffffffffffffffda RBX: 00007f7ce57e6090 RCX: 00007f7ce558eec9 [ 133.784737][ T9668] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000008 [ 133.784747][ T9668] RBP: 00007f7ce5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.784758][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.784768][ T9668] R13: 00007f7ce57e6128 R14: 00007f7ce57e6090 R15: 00007ffdfe1b5b58 [ 133.784783][ T9668] [ 133.785447][ T9668] Kernel Offset: disabled VM DIAGNOSIS: 01:18:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff815ffdd0 RDX=ffffffff8de97a00 RSI=ffffffff815ffe18 RDI=ffffffff937fbfe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff26ff7fc R10=ffffffff937fbfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815ffe19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e75000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7ce6405f98 CR3=000000005e492000 CR4=00350ef0 DR0=ffffffffffffffff DR1=0000000000000000 DR2=0000000004000007 DR3=fffffdfffffffffe DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000fffff0fe Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfe1b6066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfe1b6066 00007ffdfe1b606c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce561305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce561313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce57b74a8 00007f7ce57b74a0 00007f7ce57b7498 00007f7ce57b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce631d100 00007f7ce57b7460 00007f7ce57b7478 00007f7ce57b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce57b74b8 00007f7ce57b74b0 00007f7ce57b74a8 00007f7ce57b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff815ffdd0 RDX=ffff8880431dc900 RSI=ffffffff815ffe18 RDI=ffffffff937fbfe0 RBP=0000000000000001 RSP=ffffc90003f8ff18 R8 =0000000000000001 R9 =fffffbfff26ff7fc R10=ffffffff937fbfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815ffe19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f680fc9a6c0 ffffffff 00c00000 GS =0000 ffff8880d6f75000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=00000000566b1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000f8000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a65b7e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a65b7e6 00007ffd3a65b7ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680ee12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680ee12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680ee12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680ee12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680ee1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680ee1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680efb74a8 00007f680efb74a0 00007f680efb7498 00007f680efb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680fb1d100 00007f680efb7460 00007f680efb7478 00007f680efb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f680efb74b8 00007f680efb74b0 00007f680efb74a8 00007f680efb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85231e15 RDI=ffffffff9ab67a80 RBP=ffffffff9ab67a40 RSP=ffffc90006edefa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366666666 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9ab67a40 R15=ffffffff85231db0 RIP=ffffffff85231e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7ce64276c0 ffffffff 00c00000 GS =0000 ffff8880d7075000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7ce6406d58 CR3=000000005e492000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000fffff0fe Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfe1b5ee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfe1b6066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfe1b6066 00007ffdfe1b606c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce5612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce561305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ce561313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff815ffdd0 RDX=ffff888027280000 RSI=ffffffff815ffe18 RDI=ffffffff937fbfe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff26ff7fc R10=ffffffff937fbfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815ffe19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7175000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000005000 CR3=0000000063c0b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80ab0ba3f9e3e2a2 ae1046118c2b2ca6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0496e27e6f5e03d 5dfcb2bbe8d3db10 7eb7f29e57218c97 cd5ae746a292b2b1 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a2248ed96c804d6 a2f24b3a5338fc68 e2cc117f47280004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2439242ace8c9c37 a658892da85a9ced 018e28de0417fec4 84bd2c38da796a72 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d24e958ece6e9205 1b08aa4f7d8bbc89 c0cbefc74965865e 8aa07c479710fbc0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 41a4d659e1243924 2ace8c9c37a65889 2da85a9ced018e28 de0417fec484bd2c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38da796a726a2248 ed96c804d6a2f24b 3a5338fc68e2cc11 7f472898af47c312 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 059eaaa6d9809d3b eb771f3775d5a34b 167c16e05de83533 0f8c619d9b1bb082 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000