last executing test programs: 4.5404306s ago: executing program 2 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x978}]}, 0x24}}, 0x0) (async) pwritev2(r0, &(0x7f0000001640)=[{&(0x7f0000000000)="7722ff5ef9841da3ddf8", 0xa}, {&(0x7f0000000080)="0ec2ac", 0x3}, {&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="323507d3301ffae2f31b3a64caa1e5f760433208dc6ae420103865d0b05747b63e99799fe77acb617b706f127f37f4b42c1702d0433d545dbed5f374fd21700991e47d6bfbe294c7341224a0112ad35ff5f37fb59a9352fc481b5ddb151c22957f2c65341d96e786f10e2564a10aa7eb5fb71890ebb0e750076376b563c47b579040d2ebb6343275f97e65176ce9ee504b8baefe29e840be0fd61eb9e74036498d916e7ba64b", 0xa6}, {&(0x7f0000000280)="591ad3da0a35104452267f1afe675c674d964af1330581", 0x17}, {&(0x7f00000002c0)="2d4c679ea765c0546b507c1263e7082c3ec69b5cedbdc8feee459831c0ad1b8c18d59a6295b73a237c9a9d4b487db9f699cb3cd0e4a85babda2ebe6291bf85051ddb3ac61b4a0ac7b26f21c3f44005ca39be5732036e78627ac61476061f4ccbac4d98cc71934f06c1fdea7e58a3b2ab3a2485ed44a9a191624cadc7a99242670586fcc220c3d6df6a97fd7f6a8eaf875a642dcd98d5f6bfe3f9104c078422accde82c", 0xa3}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000380)="84f39eee277c633888ff05cbeaacbe2f2f437a48d7315441e36cc8018a5c35d268b15703078f052bca329c8c88c0c4cdd245a4b29354e141e62def4e016a9d2e2c5dd12ddab10faa8cf7335a57d7e430f2ae431023df25ab0952a09a761ce61d47743c3091606e89ad8e13204d9a77e1ebe0537896cc794531dd7fd289754bc1e3f9388d2b74f256825c4b8dd8bbd66338fb2724a0cc2a3b28a7b33495e0f6f12caf530a1b63839ac39ff345faa8b301a8aff4dea44ae540206f9fdda55f", 0xbe}, {&(0x7f0000000440)="27e5f4a8c1c626b6ea15bfeb62d634ceb6803bfa18bf868c5f49fa50c52fd1469c5b7f1492db3d05be39458765e4121e25356d83fe4c925e767b5bf225f8ee78f9bc1d740c9b8b5f5503c7f77992bfe11a7fdb67d91e4c1c48c511c58868128d49aff25bd0d9398e9b773b52101c2453592c57c21dabc9ec8e3862700992f00ea74bb7f1c9350df03088b7ec20ac2fdd930c0e3e077d914fdf12c0f9627c", 0x9e}, {&(0x7f0000000500)="cc30aa9c26bdfbeceac8c9f0afffe1dac5fdc21fce71d5dc3e06a24501e309770de8fd39059ee4e579db65db07f0bc3f7ec3", 0x32}], 0xa, 0x40, 0xffff1775, 0xb) 4.540138009s ago: executing program 2 (id=766): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x134, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_ACT={0x104, 0x1, [@m_skbmod={0x100, 0x20, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x95, 0x6, "3b414dd7fd53894871cba75de7167bbefb32c605ef119679fe04978799203df6ec19c708d23e601236d1d84146d083ec41272ddc015bb4840983b9b34e70d5819fd4c94a35add57446619586d27337965acb69814331375a13a2d6b4af4d28ab8177311128cf677e84c23842c75e3fcdc97d589ce0c0926c10b925ee86751eb5f7aa767f23d0c49e762d424e5cf8cc1968"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x134}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x124, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcd3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1054}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc015}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x13b}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c919399b2318e3d0d81713d5eaec84646649414d02a64275"}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "fe42f61108154c801d138684317b8f613092c0b3d853d547"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x944}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfb}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000eaeca1b12c8360a02f5837d7115df5a5643868955ccca50a3fe463b4f020bc6783e3f1c09198e45f743d2035733c05cf6f0177b5093e9c13e7eb1d549604a569bc2c36d42ae81047b43bc89a13dcfe76b0a900a21eb9ddf57c5a5fd12cdefc27e471cdb60c7554b635cc60f793b386ba420f28411a9576207e5340fc4f6c4653bb1808488d03ec2c8029c05d7ab767e23130eb66951b6e642183f9cb2a6e91897ffdb286dcba394db4d6c45422cf7bae87a054", @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c0001800500020001000000"], 0x20}}, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r12, 0x104, 0x6, &(0x7f00000024c0)=0xfb, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d08", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f0000000040)={0x7, 0xfffffffd}, 0x8) 2.840300183s ago: executing program 3 (id=798): r0 = socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x55, 0x1, {0x4, '\x00', 0x5, 0x3, 0x6, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8094}, 0x0) 2.747462257s ago: executing program 3 (id=801): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '_\x00\x00\x00\x00\x00'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x67}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 2.680220489s ago: executing program 3 (id=803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x48090}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) close(0x3) write$cgroup_int(r7, &(0x7f0000000000)=0x2, 0x12) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x800800, @mcast2={0xff, 0x3}, 0x2}, 0x1c) 2.569776444s ago: executing program 3 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, @void, @value}, 0x94) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) writev(r6, &(0x7f0000001080)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000001440)="c5674dc9fbeb539005273e1eed7253e4be757abea2c83242749b0763fe9d53f2315853998dd21f751d3c5712352fb6", 0x2f}], 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}], 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}]}, 0x44}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x20000080) 2.059893767s ago: executing program 0 (id=810): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0x8, 0x803, 0xfffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000071039a1d001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x201) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 1.63018523s ago: executing program 1 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg(r3, &(0x7f0000000bc0), 0x0, 0x840) 1.629812749s ago: executing program 1 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgget(0x0, 0x44) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c014}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.460355168s ago: executing program 2 (id=816): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0xffff}, {0x6, 0x2}, 0xab4, [0x5, 0x7b, 0x3, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x4, 0x8, 0x10, 0x11, 0x6, 0xffdffffffffffff7, 0x621, 0xe4]}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x4913, 0x770e, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="2000000005140100a7bd7000fbdbdf250800010000000000080203089e000000"], 0x20}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000008"], 0x50) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000740), 0x0}, 0x20) 1.410136744s ago: executing program 0 (id=817): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) recvfrom$packet(r0, &(0x7f0000000000)=""/40, 0x28, 0x20, &(0x7f0000000040)={0x11, 0x3, r1, 0x1, 0x7, 0x6, @broadcast}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x5411, &(0x7f0000000100)={'veth1\x00', 0x17, 0x2}) 1.409836152s ago: executing program 2 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010000100000000000000000f0000000a80000000050a03000000000080000000020000000c000240000000000000000108000b40000000040900010073797a30000000004a000c007f2785572cf743a7cd745fbde0904cd4972af9d9065bbcb7a4f36f350a3a34c01cfb26344b49d131f7c19f2ff496fa9ce44017dcc95fcfb9fc1f4c940d436c58c595db8aff2e00002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0xe8}, 0x1, 0x0, 0x0, 0x58fe7ab67a980db6}, 0x0) 1.371967479s ago: executing program 2 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x4d, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1.365904905s ago: executing program 0 (id=820): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x5, 0xa2, {0xa2, 0xd, "4aebf06d82100f80c888b5f6403c9dcd2e8a61f319540c43c105c5d52d6a67350621a84ff6c093dffbb4b7a52d79f48b20f64311c864c35879a6186eb59f05869ccc8a7647b9457b24bb5ad814aa1b5ae6429aceae1a063b81074c687da16ad022d383a4a7e9ef731864e5e68181594d7945863be5c2d853af0897e07e8aba4215a749c565ee2e2647de6e08bcd4c879b914ebe74b42b15ddb5778c530e13697"}}, &(0x7f00000001c0)={0x0, 0x3, 0x83, @string={0x83, 0x3, "140544bff82ca7c1e278601dd43fe9872cc11d3195cec9407c7b47a98532f395b0d194207e7b3c641f95e691369b3201479811e1b50d035f0d37128d9d2af1348d7bc772c84a1b1bbcf683594a36952614b5cbfb39f794b6f2e8ef9c6b64b000aeeb030cf597335126e0ff2c933eb76143d396c9101c10f748c5bda3c37401b7cc"}}, &(0x7f0000000440)={0x0, 0xf, 0xc9, {0x5, 0xf, 0xc9, 0x4, [@generic={0x7e, 0x10, 0xa, "e5ce7422ff1f43a647dca064e68c8f57d57e59aa05651955ae224ed21457aa81c8dfb687d6e2589be34a7383c27c520ed1624555ce0402d2db422013bb64ca9bd1c80c3623bddeb92a469bf00925b3198badd18eb462147aa62807870c1509850d5dcbc318e3b807e2ec1d8a3569310353469b7866d8264902f285"}, @ptm_cap={0x3}, @generic={0x3c, 0x10, 0x3, "ba4476eef01ab0eb55a986634d401cbe1d39046a8e7e3508ecdf8a3277256349a3403b00728882203ae8aa45cc285e3ea2a002925436a2f502"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x7, 0x2}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x80, 0x9, 0xf, "6f9a3796", "29cc990f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x0, 0x7, 0x7, 0x3, 0xfee9, 0xe}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000540)={0x40, 0x17, 0xcf, "6049809933565fa9db47c4d7a0184d7e2399d0bd7a1802f7b69cda6de2ebc969feb1d310cebf9af277bb8e21be97bc26119ba65297d3137d5e5eddc33cc4323451c31746ed154a926c14a7504f5b038744a5cc40048bf453aab88e52d500316daef600a8d47b0180f68db473255fb493a7229fd9c1eac838d16782dfe0903ef40361635ab710a98154fedde9ccfbd2d739cc75097bed3cc889f24fc1deb334082f7097bea20e227a35819ff4a7045433f7d2b3ec3e733f3ed46bb3c24d6417ee37c7e6e10acd39dd068597ded99d6f"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xc0}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x100, 0x4}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "40a9"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="4e8f7e9f329c"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e4b7"}, &(0x7f0000000940)={0x40, 0x1a, 0x2}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xe}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x4e}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x2008000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) 1.220200351s ago: executing program 3 (id=821): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x1, &(0x7f0000000100)=[r3]) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002240)={0xa0, 0x0, r1, {{0x6, 0x1, 0x9, 0x3, 0xff, 0xd835, {0x5, 0x9, 0x80000000, 0x9, 0x8, 0x2a0, 0x9, 0x4, 0x9, 0x8000, 0x8, 0xffffffffffffffff, r4, 0x9, 0xd}}, {0x0, 0x8}}}, 0xa0) fstat(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f0000002380)={[{@verity_require}], [{@permit_directio}, {@uid_gt={'uid>', r2}}, {@obj_role={'obj_role', 0x3d, 'syz\x00'}}, {@appraise_type}, {@fowner_lt={'fowner<', r5}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xae2c}}, {@fsname={'fsname', 0x3d, '/dev/cuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0x3}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) 1.13810229s ago: executing program 3 (id=822): socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000001400)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000fe8041"], 0x20}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000fe8041"], 0x20}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io(r3, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0xf, 0x49, {0x49, 0xe, "51a058a55bd9314b67f4719aa2b29a3e39ba8367f4cede655d161e886e09e5144f6e407e8c673d1cebacf0a252f565e0a1882fa3520c95c0b7ae104acbba29030389ddc933f80d"}}, &(0x7f0000000340)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "72cb672085b85c2203514a2f9958e08404cc74b8b512b9d462966f45ab652627bce6df06e4bfdfd37204f2df505d5e0933d16cc88928bb5a73045f3f2a21e2611b943e534383657cfed2273aa7023a08e91443e56b22542241a556d9238956e2a1314b93ae74eb58187c9675773ebd18f7f5e2978ec0aa819772fa1c7a1a4233d865184330cb79f19144ca0ca3516e093b17c29010027022765df7a6597131b84ab638c45f53d5cb8f74e2b931bbc6a2a01942f18f3ff108b5e220288b0f4dc2"}}, &(0x7f0000000000)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x49, 0x7, 0x2, 0x7, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xe, 0x8f, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4d6080be53f1eb4f9530adf6a0d72c81"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6a, 0x1, 0x3, 0xb, "88669579", "69715ed1"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x2, 0xd, 0x5, 0x8, 0x8, 0xfff}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0xd, 0x45, "b62a133734d374f91d2156d32bfb96bcc1622d52c5366e265fa17d466fbddf1dd6ded6e54c7d4842afb870a66147e4859c35dcffb25552d799a82e46bed81f00aa4f54675b"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6b}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf0]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000680)={0x40, 0xb, 0x2, "4e83"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "192a"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xfc}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x9}}) close_range(r2, 0xffffffffffffffff, 0x0) 795.790481ms ago: executing program 1 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x547a, 0x103d, 0x6, 0x0, 0x100000000000032a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 689.358363ms ago: executing program 2 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000020000000000000f01"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xdddd1000, 0x2, 0x3, 0xeffffdff, 0x0, [{0x9b, 0x80, 0xfc}, {0x19, 0x5, 0x0, '\x00', 0xe}, {0xfc, 0x6, 0x0, '\x00', 0x7}, {0x5, 0xf9, 0x7f, '\x00', 0x2}, {0x8, 0x4, 0x5, '\x00', 0x9}, {}, {0x0, 0x85, 0xbe, '\x00', 0x4}, {0x0, 0x6, 0x0, '\x00', 0xeb}, {0x0, 0x0, 0x3, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2, 0x10}, {0x0, 0x50, 0x3, '\x00', 0x1}, {0x4, 0x9, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0x20}, {0xfe, 0x2, 0x45, '\x00', 0x9}, {0x0, 0x9f}, {0x1, 0xff, 0x1, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0xb0, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xf, 0x4, 0xe}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40000) 266.879272ms ago: executing program 0 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000b6bbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000680000000187515d11c14322a4de3fe300007f0000017f00000100186371ae9b1c03"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 266.669488ms ago: executing program 1 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40088d0}, 0xc000) 420.924µs ago: executing program 1 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010000100000000000000fff50000000a80000000050a03000000000080000000020000000c000240000000000000000108000b40000000040900010073797a30000000004a000c007f2785572cf743a7cd745fbde0904cd4972af9d9065bbcb7a4f36f350a3a34c01cfb26344b49d131f7c19f2ff496fa9ce44017dcc95fcfb9fc1f4c940d436c58c595db8aff2e00002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0xe8}, 0x1, 0x0, 0x0, 0x58fe7ab67a980db6}, 0x0) 0s ago: executing program 0 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x400}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000080) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x400}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r4) (async) r6 = dup2(r5, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f000000d6c0)={0x0, 0x0, &(0x7f000000d680)={&(0x7f000000d580)=ANY=[@ANYBLOB="240000000408030000000000000000000700000a05000300ffffffff060002"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): : command tx timeout [ 54.478733][ T5944] Bluetooth: hci1: command tx timeout [ 54.566873][ T5936] Bluetooth: hci0: command tx timeout [ 54.577134][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.591309][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.609753][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.629592][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.661245][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.667305][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.674313][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.682838][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.742266][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.749772][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.754116][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.760286][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.818131][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.822762][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.831369][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.842609][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.867492][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.903197][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.911020][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.925663][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.928529][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.933450][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.935712][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.956264][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.976379][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.979502][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.002252][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.004531][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.027622][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.054689][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.067453][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.074289][ T40] audit: type=1400 audit(1749313076.499:89): avc: denied { sys_module } for pid=5945 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.085080][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.091346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.094398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.109901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.112823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.127966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.130946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.149764][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.152719][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.203931][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.246080][ T5945] veth0_vlan: entered promiscuous mode [ 55.253794][ T5945] veth1_vlan: entered promiscuous mode [ 55.271273][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.315898][ T5935] veth0_vlan: entered promiscuous mode [ 55.320432][ T5945] veth0_macvtap: entered promiscuous mode [ 55.328714][ T5935] veth1_vlan: entered promiscuous mode [ 55.331625][ T5945] veth1_macvtap: entered promiscuous mode [ 55.347594][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.357130][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.366133][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.369797][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372469][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.375146][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.383947][ T5935] veth0_macvtap: entered promiscuous mode [ 55.394542][ T5935] veth1_macvtap: entered promiscuous mode [ 55.399731][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.431060][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.439669][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.454400][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.466909][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.469888][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.474275][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.479017][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.481867][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.484728][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.511935][ T5942] veth0_vlan: entered promiscuous mode [ 55.519836][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.521486][ T5942] veth1_vlan: entered promiscuous mode [ 55.522294][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.562287][ T5942] veth0_macvtap: entered promiscuous mode [ 55.564817][ T5934] veth0_vlan: entered promiscuous mode [ 55.570401][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.572808][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.578969][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.584980][ T5942] veth1_macvtap: entered promiscuous mode [ 55.592371][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.595383][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.595880][ T5934] veth1_vlan: entered promiscuous mode [ 55.611082][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.628640][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.634203][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.637811][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.641126][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.644154][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.668207][ T5934] veth0_macvtap: entered promiscuous mode [ 55.675476][ T5934] veth1_macvtap: entered promiscuous mode [ 55.687418][ T6027] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 55.716328][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.719249][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.741504][ T6030] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.1' resets device [ 55.772214][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.778904][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.814178][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.818829][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.824994][ T6027] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.829220][ T6027] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.832079][ T6027] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.834860][ T6027] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.870033][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.900833][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.903673][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.907768][ T6030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.914381][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.922892][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.923599][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.926028][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.932166][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.935046][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.937886][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.979336][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.988039][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.037765][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.041041][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.046527][ T6021] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.071309][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.075202][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.084757][ T6041] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 56.213598][ T6021] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.217396][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.220562][ T6021] usb 8-1: Product: syz [ 56.222226][ T6021] usb 8-1: Manufacturer: syz [ 56.224070][ T6021] usb 8-1: SerialNumber: syz [ 56.235602][ T6021] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 56.257247][ T5977] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 56.323718][ T6047] geneve2: entered promiscuous mode [ 56.325259][ T6065] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 56.325426][ T6047] geneve2: entered allmulticast mode [ 56.488305][ T6003] usb 8-1: USB disconnect, device number 2 [ 56.557543][ T5936] Bluetooth: hci3: command tx timeout [ 56.559233][ T5936] Bluetooth: hci2: command tx timeout [ 56.567072][ T5936] Bluetooth: hci1: command tx timeout [ 56.637617][ T5936] Bluetooth: hci0: command tx timeout [ 56.743119][ T6115] SET target dimension over the limit! [ 56.844636][ T6122] nftables ruleset with unbound chain [ 56.858603][ T6122] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 56.975378][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 57.024542][ T6130] kvm: pic: non byte write [ 57.027781][ T6130] kvm: MWAIT instruction emulated as NOP! [ 57.089181][ T6122] block nbd3: NBD_DISCONNECT [ 57.093221][ T6122] block nbd3: Send disconnect failed -107 [ 57.095861][ T6122] block nbd3: Disconnected due to user request. [ 57.099612][ T6122] block nbd3: shutting down sockets [ 57.210998][ T6140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6140 comm=syz.2.33 [ 57.215121][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 57.276788][ T5977] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 57.280156][ T5977] ath9k_htc: Failed to initialize the device [ 57.283608][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 57.283616][ T40] audit: type=1400 audit(1749313079.711:226): avc: denied { create } for pid=6145 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.293418][ T6003] usb 8-1: ath9k_htc: USB layer deinitialized [ 57.293557][ T40] audit: type=1400 audit(1749313079.711:227): avc: denied { bind } for pid=6145 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.302179][ T40] audit: type=1400 audit(1749313079.711:228): avc: denied { setopt } for pid=6145 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.308132][ T40] audit: type=1400 audit(1749313079.711:229): avc: denied { accept } for pid=6145 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.314310][ T40] audit: type=1400 audit(1749313079.711:230): avc: denied { write } for pid=6145 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.320842][ T40] audit: type=1400 audit(1749313079.731:231): avc: denied { mounton } for pid=6145 comm="syz.2.35" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.322501][ T6146] ======================================================= [ 57.322501][ T6146] WARNING: The mand mount option has been deprecated and [ 57.322501][ T6146] and is ignored by this kernel. Remove the mand [ 57.322501][ T6146] option from the mount to silence this warning. [ 57.322501][ T6146] ======================================================= [ 57.327860][ T40] audit: type=1400 audit(1749313079.741:232): avc: denied { mount } for pid=6145 comm="syz.2.35" name="/" dev="9p" ino=36047785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.346185][ T40] audit: type=1400 audit(1749313079.741:233): avc: denied { write } for pid=6145 comm="syz.2.35" name="file0" dev="9p" ino=36047787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.352999][ T40] audit: type=1400 audit(1749313079.741:234): avc: denied { open } for pid=6145 comm="syz.2.35" path="/5/file0/file0" dev="9p" ino=36047787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.360428][ T40] audit: type=1400 audit(1749313079.761:235): avc: denied { read } for pid=6145 comm="syz.2.35" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.402932][ T6153] tmpfs: Unknown parameter 'usrquota_blocĘrdP?<' [ 57.746628][ T6022] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 57.898711][ T6022] usb 6-1: not running at top speed; connect to a high speed hub [ 57.902493][ T6022] usb 6-1: config 1 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 57.906806][ T6022] usb 6-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.910970][ T6022] usb 6-1: config 1 interface 0 has no altsetting 0 [ 57.915118][ T6022] usb 6-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 57.918826][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.921377][ T6022] usb 6-1: Product: Д [ 57.922693][ T6022] usb 6-1: Manufacturer: ж [ 57.924144][ T6022] usb 6-1: SerialNumber: э [ 57.929151][ T6155] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.931527][ T6155] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.167530][ T6022] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input5 [ 58.172953][ T5333] bcm5974 6-1:1.0: could not read from device [ 58.179248][ T5333] bcm5974 6-1:1.0: could not read from device [ 58.181280][ T6022] usb 6-1: USB disconnect, device number 2 [ 58.191347][ T5952] udevd[5952]: setting mode of /dev/bus/usb/006/002 to 020664 failed: No such file or directory [ 58.195823][ T5952] udevd[5952]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory [ 58.636916][ T5936] Bluetooth: hci2: command tx timeout [ 58.637299][ T5299] Bluetooth: hci3: command tx timeout [ 58.646565][ T5299] Bluetooth: hci1: command tx timeout [ 58.716669][ T5299] Bluetooth: hci0: command tx timeout [ 58.771041][ T6176] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 58.787490][ T6176] erspan0: entered promiscuous mode [ 58.792382][ T6176] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 58.835983][ T6184] Zero length message leads to an empty skb [ 58.859328][ T6182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.861630][ T6182] overlayfs: failed to set xattr on upper [ 58.863507][ T6182] overlayfs: ...falling back to redirect_dir=nofollow. [ 58.865666][ T6182] overlayfs: ...falling back to index=off. [ 58.865705][ T6186] nfs: Unknown parameter 'ek' [ 58.868862][ T6182] overlayfs: ...falling back to uuid=null. [ 59.116547][ T6079] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.121729][ T6205] netlink: 277 bytes leftover after parsing attributes in process `syz.0.55'. [ 59.286547][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.287785][ T6079] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 59.291834][ T6079] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.296737][ T6079] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 59.299629][ T6079] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 59.302118][ T6079] usb 8-1: Manufacturer: syz [ 59.304904][ T6079] usb 8-1: config 0 descriptor?? [ 59.369943][ T6079] rc_core: IR keymap rc-hauppauge not found [ 59.371949][ T6079] Registered IR keymap rc-empty [ 59.380263][ T6079] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 59.384366][ T6079] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input6 [ 59.460802][ T24] usb 6-1: config 32 has an invalid interface number: 179 but max is 0 [ 59.464610][ T24] usb 6-1: config 32 has no interface number 0 [ 59.467788][ T24] usb 6-1: config 32 interface 179 altsetting 15 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 59.472124][ T24] usb 6-1: config 32 interface 179 altsetting 15 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 59.476997][ T24] usb 6-1: config 32 interface 179 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 59.481518][ T24] usb 6-1: config 32 interface 179 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 59.486229][ T24] usb 6-1: config 32 interface 179 altsetting 15 has an endpoint descriptor with address 0x45, changing to 0x5 [ 59.491706][ T24] usb 6-1: config 32 interface 179 altsetting 15 endpoint 0x5 has an invalid bInterval 180, changing to 11 [ 59.496838][ T24] usb 6-1: config 32 interface 179 altsetting 15 endpoint 0x5 has invalid maxpacket 42635, setting to 1024 [ 59.501646][ T24] usb 6-1: config 32 interface 179 altsetting 15 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 59.507361][ T24] usb 6-1: config 32 interface 179 has no altsetting 0 [ 59.512477][ T24] usb 6-1: Dual-Role OTG device on HNP port [ 59.515279][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=60.cf [ 59.519507][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.522648][ T24] usb 6-1: Product: syz [ 59.524366][ T24] usb 6-1: Manufacturer: syz [ 59.526351][ T24] usb 6-1: SerialNumber: syz [ 59.526625][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.532810][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.533753][ T6196] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.655226][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 60.138496][ T6241] xt_l2tp: invalid flags combination: c [ 60.146343][ T6233] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.209928][ T837] usb 8-1: USB disconnect, device number 3 [ 60.251105][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.253977][ T24] usb 6-1: invalid MIDI in EP 0 [ 60.262020][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 60.264689][ T6250] bridge_slave_0: default FDB implementation only supports local addresses [ 60.291995][ T24] snd-usb-audio 6-1:32.179: probe with driver snd-usb-audio failed with error -22 [ 60.292623][ T6252] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 60.299967][ T24] usb 6-1: USB disconnect, device number 3 [ 60.324363][ T6253] udevd[6253]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:32.179/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.716654][ T5299] Bluetooth: hci1: command tx timeout [ 60.717091][ T5936] Bluetooth: hci2: command tx timeout [ 60.718776][ T5299] Bluetooth: hci3: command tx timeout [ 60.794920][ T6265] SELinux: ebitmap: map size 1952543845 does not match my size 64 (high bit was 422516) [ 60.796625][ T5936] Bluetooth: hci0: command tx timeout [ 60.799528][ T6265] SELinux: failed to load policy [ 60.805152][ T6265] warning: `syz.3.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.919945][ T6275] tmpfs: Cannot change global quota limit on remount [ 61.042977][ T6278] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.323467][ T6283] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 61.539518][ T6296] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.83'. [ 61.863778][ T6320] random: crng reseeded on system resumption [ 61.872887][ T6320] ./cgroup: Can't lookup blockdev [ 62.080792][ T6337] netlink: 'syz.3.94': attribute type 9 has an invalid length. [ 62.115772][ T6338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.242388][ T6345] IPVS: Scheduler module ip_vs_sip not found [ 62.317746][ T6353] overlay: filesystem on ./bus not supported as upperdir [ 62.381661][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 62.381672][ T40] audit: type=1400 audit(1749313084.811:358): avc: denied { ioctl } for pid=6355 comm="syz.3.99" path="socket:[9657]" dev="sockfs" ino=9657 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.395382][ T6358] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 62.406562][ T40] audit: type=1400 audit(1749313084.811:359): avc: denied { create } for pid=6355 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.412349][ T40] audit: type=1400 audit(1749313084.811:360): avc: denied { ioctl } for pid=6355 comm="syz.3.99" path="socket:[9658]" dev="sockfs" ino=9658 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.426626][ T40] audit: type=1400 audit(1749313084.811:361): avc: denied { ioctl } for pid=6355 comm="syz.3.99" path="socket:[9654]" dev="sockfs" ino=9654 ioctlcmd=0x8930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.434131][ T40] audit: type=1400 audit(1749313084.811:362): avc: denied { setattr } for pid=6355 comm="syz.3.99" name="misdn" dev="sockfs" ino=9658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.452193][ T40] audit: type=1400 audit(1749313084.861:363): avc: denied { create } for pid=6359 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.452219][ T40] audit: type=1400 audit(1749313084.861:364): avc: denied { read } for pid=6359 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.452240][ T40] audit: type=1400 audit(1749313084.861:365): avc: denied { map } for pid=6359 comm="syz.0.101" path="socket:[11425]" dev="sockfs" ino=11425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.452261][ T40] audit: type=1400 audit(1749313084.871:366): avc: denied { mount } for pid=6359 comm="syz.0.101" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.452722][ T6360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.453599][ T6361] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 62.471943][ T40] audit: type=1400 audit(1749313084.901:367): avc: denied { create } for pid=6367 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.545897][ T6366] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 62.648904][ T5944] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 62.648973][ T5944] Bluetooth: hci2: Malformed LE Event: 0x02 [ 62.753568][ T6403] netlink: zone id is out of range [ 62.755744][ T6403] netlink: zone id is out of range [ 62.795583][ T6403] netlink: set zone limit has 4 unknown bytes [ 62.815623][ T6408] netlink: 'syz.2.116': attribute type 64 has an invalid length. [ 62.825881][ T6408] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 62.832465][ T6408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.116'. [ 63.110564][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 63.114141][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.126'. [ 63.116555][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.204342][ T6450] ip6erspan0: entered promiscuous mode [ 63.214219][ T6448] bridge0: port 3(batadv0) entered blocking state [ 63.216403][ T6448] bridge0: port 3(batadv0) entered disabled state [ 63.220811][ T6448] batadv0: entered allmulticast mode [ 63.223423][ T6448] batadv0: entered promiscuous mode [ 63.226050][ T6448] bridge0: port 3(batadv0) entered blocking state [ 63.228245][ T6448] bridge0: port 3(batadv0) entered forwarding state [ 63.234681][ T6448] batadv0: left allmulticast mode [ 63.236138][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 63.237615][ T6448] batadv0: left promiscuous mode [ 63.242177][ T6448] bridge0: port 3(batadv0) entered disabled state [ 63.277079][ T5944] Bluetooth: hci3: command 0x0405 tx timeout [ 63.285129][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.291684][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.295488][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.316019][ T9] usb 8-1: SerialNumber: syz [ 63.392835][ T6466] netlink: 'syz.2.135': attribute type 5 has an invalid length. [ 63.458083][ T6476] binder: 6475:6476 ioctl c0306201 200000000480 returned -14 [ 63.475455][ T6479] syz.0.139: attempt to access beyond end of device [ 63.475455][ T6479] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 63.748338][ T9] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 63.753644][ T9] usb 8-1: USB disconnect, device number 4 [ 63.852424][ T6519] tmpfs: Bad value for 'size' [ 64.196602][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 64.251021][ T6543] 9p: Unknown Cache mode or invalid value fs [ 64.352553][ T6546] loop4: detected capacity change from 0 to 524255232 [ 64.368318][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.372267][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.375865][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 64.382327][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.385437][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.388423][ T9] usb 8-1: Product: syz [ 64.389836][ T9] usb 8-1: Manufacturer: syz [ 64.391326][ T9] usb 8-1: SerialNumber: syz [ 64.408194][ T6415] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.618360][ T9] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 64.713322][ T6079] IPVS: starting estimator thread 0... [ 64.731955][ T6564] kvm: emulating exchange as write [ 64.806641][ T6565] IPVS: using max 27 ests per chain, 64800 per kthread [ 65.179050][ T6547] Dev loop4: unable to read RDB block 8 [ 65.181750][ T6547] loop4: unable to read partition table [ 65.184386][ T6547] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 65.233049][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 65.240236][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 65.243274][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 65.253602][ T6574] macsec1: entered promiscuous mode [ 65.477272][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 65.489645][ T6589] ip6t_REJECT: ECHOREPLY is not supported [ 66.196047][ T838] usb 8-1: USB disconnect, device number 5 [ 66.214605][ T838] usblp0: removed [ 67.395596][ T6614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1824 sclass=netlink_route_socket pid=6614 comm=syz.0.179 [ 67.395645][ T6616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1824 sclass=netlink_route_socket pid=6616 comm=syz.0.179 [ 67.414537][ T1265] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.436047][ T6615] tmpfs: Bad value for 'mpol' [ 67.461115][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 67.461126][ T40] audit: type=1400 audit(2000000004.149:431): avc: denied { setopt } for pid=6624 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.497883][ T40] audit: type=1400 audit(2000000004.149:432): avc: denied { bind } for pid=6624 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.537063][ T40] audit: type=1400 audit(2000000004.229:433): avc: denied { mounton } for pid=6633 comm="syz.2.184" path="/41/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 67.591323][ T40] audit: type=1400 audit(2000000004.279:434): avc: denied { write } for pid=6633 comm="syz.2.184" name="/" dev="configfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.602639][ T40] audit: type=1400 audit(2000000004.289:435): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.610687][ T40] audit: type=1400 audit(2000000004.299:436): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.611895][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6640 comm=syz.1.186 [ 67.673128][ T6645] xt_hashlimit: size too large, truncated to 1048576 [ 67.744499][ T40] audit: type=1400 audit(2000000004.429:437): avc: denied { mount } for pid=6644 comm="syz.0.189" name="/" dev="autofs" ino=12551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 67.759689][ T40] audit: type=1400 audit(2000000004.449:438): avc: denied { ioctl } for pid=6644 comm="syz.0.189" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.789307][ T6654] exFAT-fs (nullb0): invalid boot record signature [ 67.791467][ T6654] exFAT-fs (nullb0): failed to read boot sector [ 67.793436][ T6654] exFAT-fs (nullb0): failed to recognize exfat type [ 67.800765][ T40] audit: type=1400 audit(2000000004.489:439): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 67.861694][ T6660] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 67.877606][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 67.881210][ T6657] bridge_slave_1: left allmulticast mode [ 67.883515][ T6657] bridge_slave_1: left promiscuous mode [ 67.886130][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.893230][ T6657] bridge_slave_0: left allmulticast mode [ 67.895107][ T6657] bridge_slave_0: left promiscuous mode [ 67.898404][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.019318][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'. [ 68.122481][ T40] audit: type=1400 audit(2000000004.809:440): avc: denied { bind } for pid=6663 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.143363][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 68.333483][ T6680] netfs: Couldn't get user pages (rc=-14) [ 68.346906][ T6678] block nbd2: shutting down sockets [ 68.376101][ T6684] capability: warning: `syz.0.199' uses 32-bit capabilities (legacy support in use) [ 68.495638][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 68.502283][ T6692] binder: 6689:6692 ioctl c0485660 200000000140 returned -22 [ 68.524692][ T6691] ALSA: seq fatal error: cannot create timer (-19) [ 68.527829][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'. [ 68.565589][ T6696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.591580][ T5936] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 68.735332][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 68.738465][ T6717] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 68.741122][ T6717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.780474][ T6722] hugetlbfs: Bad value 'e' for mount option 'size' [ 68.780474][ T6722] [ 68.786811][ T6722] hugetlbfs: Bad value 'e' for mount option 'size' [ 68.786811][ T6722] [ 68.843795][ T6733] loop3: detected capacity change from 0 to 1 [ 68.851159][ T5952] Dev loop3: unable to read RDB block 1 [ 68.853586][ T5952] loop3: unable to read partition table [ 68.856123][ T5952] loop3: partition table beyond EOD, truncated [ 68.863982][ T6733] Dev loop3: unable to read RDB block 1 [ 68.865905][ T6733] loop3: unable to read partition table [ 68.868198][ T6733] loop3: partition table beyond EOD, truncated [ 68.870946][ T6733] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 68.877819][ T6733] Dev loop3: unable to read RDB block 1 [ 68.879840][ T6733] loop3: unable to read partition table [ 68.881823][ T6733] loop3: partition table beyond EOD, truncated [ 68.924162][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 68.927877][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 68.931526][ T6746] netlink: 'syz.0.217': attribute type 13 has an invalid length. [ 69.194190][ T6764] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 69.199036][ T6764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.201988][ T6766] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 69.207217][ T6766] Error validating options; rc = [-22] [ 69.284620][ T6777] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 69.470711][ T6793] bpf: Bad value for 'gid' [ 69.523637][ T6803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 69.559338][ T1172] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.034115][ T6827] process 'syz.1.242' launched '/dev/fd/4' with NULL argv: empty string added [ 70.057620][ T1334] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 70.140883][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 70.206510][ T1334] usb 8-1: Using ep0 maxpacket: 32 [ 70.209854][ T1334] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1024 [ 70.214360][ T1334] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 70.218601][ T1334] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 70.222560][ T1334] usb 8-1: config 1 interface 0 has no altsetting 0 [ 70.227827][ T1334] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.231579][ T1334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.234827][ T1334] usb 8-1: Product: 䰊 [ 70.237320][ T1334] usb 8-1: Manufacturer: Ь [ 70.239225][ T1334] usb 8-1: SerialNumber: 쳮勎敨撗嬯￳욋ࣥ叵偍ॾソ⛰ࠌ㎉鸣땠㩘好뫫쨛꠬䁺绕젿拞ꨥ짪쎓暏㏴詋媩앓ꍏ母푖갖ꏽ묠㛲誕괜놳๗읭嚐殉뛟ﯪ྇늙禄ꉳ䱋轒彵마ꌟ⺱㴧㣝䨚ꯓ [ 70.250692][ T6820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.254186][ T6820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.624759][ T6853] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 70.636774][ T6853] bond1: entered promiscuous mode [ 70.638510][ T6853] bond1: entered allmulticast mode [ 70.645455][ T6853] geneve2: entered allmulticast mode [ 70.649770][ T6853] bond1: (slave geneve2): making interface the new active one [ 70.652141][ T6853] geneve2: entered promiscuous mode [ 70.655490][ T6853] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 70.668339][ T6853] bond1: left promiscuous mode [ 70.670393][ T6853] geneve2: left promiscuous mode [ 70.672584][ T6853] bond1: left allmulticast mode [ 70.675879][ T6853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.905001][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.988283][ T6862] SELinux: syz.2.251 (6862) set checkreqprot to 1. This is no longer supported. [ 71.200094][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202541][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.286573][ T838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.448389][ T838] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.453104][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.457558][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.461394][ T838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.466747][ T838] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.470437][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.475487][ T838] usb 7-1: config 0 descriptor?? [ 71.597734][ T5944] Bluetooth: hci4: command 0x1003 tx timeout [ 71.600074][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.676656][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 71.723918][ T6873] x_tables: duplicate underflow at hook 1 [ 71.807699][ T6881] fuse: Bad value for 'fd' [ 71.896366][ T838] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 71.904934][ T6884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.908065][ T6884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.910791][ T6884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.913511][ T6884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.914561][ T838] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 71.921114][ T6893] overlay: Unknown parameter 'dont_measure' [ 72.070386][ T6903] trusted_key: syz.0.263 sent an empty control message without MSG_MORE. [ 72.095687][ T6906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.145847][ T6910] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 72.277519][ T5942] cgroup: fork rejected by pids controller in /syz1 [ 72.308405][ T6922] dlm: non-version read from control device 0 [ 72.510285][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 72.510298][ T40] audit: type=1400 audit(2000000009.199:488): avc: denied { ioctl } for pid=6921 comm="syz.0.270" path="socket:[12055]" dev="sockfs" ino=12055 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.605995][ T1265] tipc: Subscription rejected, illegal request [ 72.606002][ T40] audit: type=1400 audit(2000000009.289:489): avc: denied { read } for pid=6924 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.637251][ T1172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.689908][ T40] audit: type=1400 audit(2000000009.379:490): avc: denied { execute } for pid=6926 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.698092][ T40] audit: type=1400 audit(2000000009.379:491): avc: denied { execute_no_trans } for pid=6926 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.743711][ T1172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.818890][ T40] audit: type=1400 audit(2000000009.509:492): avc: denied { ioctl } for pid=6932 comm="syz.0.274" path="socket:[12065]" dev="sockfs" ino=12065 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.837367][ T1334] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 72.854632][ T1172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.861592][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.866355][ T1334] usb 8-1: USB disconnect, device number 6 [ 72.869010][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.873472][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.878559][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.881720][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.896566][ T40] audit: type=1400 audit(2000000009.579:493): avc: denied { mounton } for pid=6934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.949905][ T1172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.972200][ T6944] __nla_validate_parse: 12 callbacks suppressed [ 72.972211][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 72.977401][ T6944] bridge_slave_0: default FDB implementation only supports local addresses [ 73.007236][ T40] audit: type=1400 audit(2000000009.699:494): avc: denied { append } for pid=6949 comm="syz.3.279" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.014946][ T40] audit: type=1400 audit(2000000009.699:495): avc: denied { open } for pid=6949 comm="syz.3.279" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.045495][ T6934] chnl_net:caif_netlink_parms(): no params data found [ 73.062655][ T40] audit: type=1400 audit(2000000009.749:496): avc: denied { getopt } for pid=6941 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.155512][ T1172] bridge_slave_1: left allmulticast mode [ 73.158280][ T1172] bridge_slave_1: left promiscuous mode [ 73.160965][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.165850][ T1172] bridge_slave_0: left allmulticast mode [ 73.168207][ T1172] bridge_slave_0: left promiscuous mode [ 73.170561][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.316951][ T6023] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.406676][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.411359][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.416241][ T1172] bond0 (unregistering): Released all slaves [ 73.427851][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.430128][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.432551][ T6934] bridge_slave_0: entered allmulticast mode [ 73.435484][ T6934] bridge_slave_0: entered promiscuous mode [ 73.439002][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.441563][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.443992][ T6934] bridge_slave_1: entered allmulticast mode [ 73.447272][ T6934] bridge_slave_1: entered promiscuous mode [ 73.466619][ T6023] usb 5-1: device descriptor read/64, error -71 [ 73.498529][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.512589][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.587907][ T6934] team0: Port device team_slave_0 added [ 73.592682][ T6934] team0: Port device team_slave_1 added [ 73.639889][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.642852][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.653519][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.661283][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.664109][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.674884][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.736750][ T6023] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.786622][ T40] audit: type=1400 audit(2000000010.469:497): avc: denied { read open } for pid=6966 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.808970][ T6934] hsr_slave_0: entered promiscuous mode [ 73.811306][ T6934] hsr_slave_1: entered promiscuous mode [ 73.813441][ T6934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.816276][ T6934] Cannot create hsr debugfs directory [ 73.831733][ T1172] hsr_slave_0: left promiscuous mode [ 73.835461][ T1172] hsr_slave_1: left promiscuous mode [ 73.838734][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.841678][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.849859][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.852911][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.876759][ T6023] usb 5-1: device descriptor read/64, error -71 [ 73.889787][ T1172] veth1_macvtap: left promiscuous mode [ 73.892724][ T1172] veth0_macvtap: left promiscuous mode [ 73.895379][ T1172] veth1_vlan: left promiscuous mode [ 73.897455][ T1172] veth0_vlan: left promiscuous mode [ 73.986215][ T1334] usb 7-1: USB disconnect, device number 2 [ 73.996875][ T6023] usb usb5-port1: attempt power cycle [ 74.346563][ T6023] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.376996][ T6023] usb 5-1: device descriptor read/8, error -71 [ 74.554198][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 74.624365][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 74.626524][ T6023] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.646952][ T6023] usb 5-1: device descriptor read/8, error -71 [ 74.766811][ T6023] usb usb5-port1: unable to enumerate USB device [ 74.959478][ T5944] Bluetooth: hci2: command tx timeout [ 75.189581][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 75.194365][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 75.357980][ T6993] binder: 6992:6993 ioctl 4018aee2 200000000200 returned -22 [ 75.431811][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 75.555817][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'. [ 75.782904][ T6934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.788577][ T6934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.790286][ T7019] ip6t_REJECT: ECHOREPLY is not supported [ 75.796016][ T6934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.800474][ T6934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.867889][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.887225][ T6934] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.900177][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.904205][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.918341][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.921508][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.017913][ T7038] netlink: 'syz.0.296': attribute type 12 has an invalid length. [ 76.140345][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.189152][ T6934] veth0_vlan: entered promiscuous mode [ 76.197757][ T6934] veth1_vlan: entered promiscuous mode [ 76.214315][ T6934] veth0_macvtap: entered promiscuous mode [ 76.219493][ T6934] veth1_macvtap: entered promiscuous mode [ 76.229473][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.243051][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.248551][ T6934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.251300][ T6934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.254164][ T6934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.258055][ T6934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.269232][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 76.318792][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.327052][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.358197][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.361180][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.373341][ T7073] JFS: charset not found [ 76.429612][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 76.491825][ T7088] wg1: entered promiscuous mode [ 76.493555][ T7088] wg1: entered allmulticast mode [ 76.814697][ T7126] i2c i2c-1: Invalid block write size 34 [ 76.816589][ T6023] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.868134][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 76.979761][ T6023] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.982789][ T6023] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.985876][ T6023] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 76.990839][ T6023] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.993786][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.997210][ T6023] usb 6-1: Product: syz [ 76.998676][ T6023] usb 6-1: Manufacturer: syz [ 77.000731][ T6023] usb 6-1: SerialNumber: syz [ 77.015309][ T7096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.039524][ T5944] Bluetooth: hci2: command tx timeout [ 77.238993][ T6023] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 77.435145][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 77.443582][ C1] usblp0: nonzero read bulk status received: -71 [ 77.450511][ T7167] xfrm1: entered allmulticast mode [ 77.475764][ T838] usb 6-1: USB disconnect, device number 4 [ 77.480777][ T838] usblp0: removed [ 77.487009][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 77.492790][ T7169] vti0: entered promiscuous mode [ 77.602888][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 77.602904][ T40] audit: type=1400 audit(2000000014.289:540): avc: denied { ioctl } for pid=7177 comm="syz.2.339" path="socket:[15505]" dev="sockfs" ino=15505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.094369][ T7190] bridge_slave_0: invalid flags given to default FDB implementation [ 78.168455][ T40] audit: type=1400 audit(2000000014.859:541): avc: denied { connect } for pid=7191 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.414606][ T7195] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 78.484155][ T7197] __nla_validate_parse: 5 callbacks suppressed [ 78.484166][ T7197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.346'. [ 78.666534][ T1334] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 78.796555][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.817740][ T1334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 78.821147][ T1334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.824198][ T1334] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.829154][ T1334] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.831909][ T1334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.834332][ T1334] usb 7-1: SerialNumber: syz [ 78.837653][ T7195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.840947][ T1334] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 78.956629][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 78.960991][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 78.964010][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 78.968760][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.971494][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.973966][ T24] usb 8-1: Product: syz [ 78.975265][ T24] usb 8-1: Manufacturer: syz [ 78.976826][ T24] usb 8-1: SerialNumber: syz [ 79.039690][ T40] audit: type=1400 audit(2000000015.729:542): avc: denied { ioctl } for pid=7204 comm="syz.0.350" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.052375][ T838] usb 7-1: USB disconnect, device number 3 [ 79.095289][ T40] audit: type=1400 audit(2000000015.779:543): avc: denied { mounton } for pid=7206 comm="syz.0.351" path="/105/file0" dev="autofs" ino=14111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 79.117594][ T5944] Bluetooth: hci2: command tx timeout [ 79.132956][ T40] audit: type=1400 audit(2000000015.819:544): avc: denied { sqpoll } for pid=7211 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.146614][ T1334] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 79.148889][ T40] audit: type=1400 audit(2000000015.839:545): avc: denied { write } for pid=7211 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.185556][ T24] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 79.189019][ T24] cdc_ncm 8-1:1.0: bind() failure [ 79.192772][ T24] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 79.195001][ T24] cdc_ncm 8-1:1.1: bind() failure [ 79.198588][ T24] usb 8-1: USB disconnect, device number 7 [ 79.287559][ T7215] mmap: syz.0.353 (7215): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 79.317675][ T1334] usb 6-1: No LPM exit latency info found, disabling LPM. [ 79.324407][ T1334] usb 6-1: config 8 has an invalid interface number: 179 but max is 2 [ 79.327525][ T1334] usb 6-1: config 8 has an invalid interface number: 168 but max is 2 [ 79.330215][ T1334] usb 6-1: config 8 has an invalid interface number: 83 but max is 2 [ 79.332836][ T1334] usb 6-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 79.335490][ T1334] usb 6-1: config 8 has no interface number 1 [ 79.337410][ T1334] usb 6-1: config 8 has no interface number 2 [ 79.339790][ T1334] usb 6-1: config 8 has no interface number 3 [ 79.342034][ T1334] usb 6-1: config 8 interface 179 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 79.345887][ T1334] usb 6-1: config 8 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 79.349922][ T1334] usb 6-1: config 8 interface 179 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 79.353210][ T1334] usb 6-1: config 8 interface 179 altsetting 6 endpoint 0x82 has invalid maxpacket 33858, setting to 8 [ 79.356827][ T1334] usb 6-1: config 8 interface 179 altsetting 6 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 79.361005][ T1334] usb 6-1: too many endpoints for config 8 interface 168 altsetting 41: 238, using maximum allowed: 30 [ 79.364876][ T1334] usb 6-1: config 8 interface 168 altsetting 41 has a duplicate endpoint with address 0x5, skipping [ 79.369121][ T1334] usb 6-1: config 8 interface 168 altsetting 41 endpoint 0xF has invalid maxpacket 32, setting to 8 [ 79.372476][ T1334] usb 6-1: config 8 interface 168 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 79.375828][ T1334] usb 6-1: config 8 interface 168 altsetting 41 has a duplicate endpoint with address 0xD, skipping [ 79.379254][ T1334] usb 6-1: config 8 interface 168 altsetting 41 has a duplicate endpoint with address 0x5, skipping [ 79.382507][ T1334] usb 6-1: config 8 interface 168 altsetting 41 has 5 endpoint descriptors, different from the interface descriptor's value: 238 [ 79.386665][ T1334] usb 6-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0x91, changing to 0x81 [ 79.390306][ T1334] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x81 is Bulk; changing to Interrupt [ 79.393423][ T1334] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 79.396817][ T1334] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 79.400082][ T1334] usb 6-1: config 8 interface 0 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 79.403396][ T1334] usb 6-1: config 8 interface 0 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 79.406747][ T1334] usb 6-1: config 8 interface 0 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 79.410134][ T1334] usb 6-1: config 8 interface 0 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 79.413398][ T1334] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 79.416818][ T1334] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 79.420169][ T1334] usb 6-1: config 8 interface 0 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 79.423559][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has an invalid descriptor for endpoint zero, skipping [ 79.427072][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0x3, skipping [ 79.430622][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0xA, skipping [ 79.434152][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0xD, skipping [ 79.437583][ T1334] usb 6-1: config 8 interface 83 altsetting 138 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 79.440927][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0xE, skipping [ 79.444258][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0xC, skipping [ 79.447806][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has an invalid descriptor for endpoint zero, skipping [ 79.451273][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0xC, skipping [ 79.455228][ T1334] usb 6-1: config 8 interface 83 altsetting 138 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 79.458786][ T1334] usb 6-1: config 8 interface 83 altsetting 138 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 79.462046][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0xC, skipping [ 79.465380][ T1334] usb 6-1: config 8 interface 83 altsetting 138 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 79.468904][ T1334] usb 6-1: config 8 interface 83 altsetting 138 has a duplicate endpoint with address 0x2, skipping [ 79.472210][ T1334] usb 6-1: config 8 interface 179 has no altsetting 0 [ 79.474303][ T1334] usb 6-1: config 8 interface 168 has no altsetting 0 [ 79.476402][ T1334] usb 6-1: config 8 interface 0 has no altsetting 0 [ 79.478545][ T1334] usb 6-1: config 8 interface 83 has no altsetting 0 [ 79.772146][ T7235] misc userio: No port type given on /dev/userio [ 79.777883][ T40] audit: type=1400 audit(2000000016.469:546): avc: denied { create } for pid=7234 comm="syz.2.360" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.874452][ T40] audit: type=1400 audit(2000000016.559:547): avc: denied { unlink } for pid=5934 comm="syz-executor" name="file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.910475][ T7238] bridge1: entered promiscuous mode [ 79.966350][ T7242] netlink: 64 bytes leftover after parsing attributes in process `syz.3.362'. [ 80.000950][ T7251] syz.3.364: attempt to access beyond end of device [ 80.000950][ T7251] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 80.006137][ T7251] (syz.3.364,7251,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 80.010062][ T7251] (syz.3.364,7251,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 80.012421][ T7251] (syz.3.364,7251,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 80.015142][ T7251] (syz.3.364,7251,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 80.081149][ T7262] netlink: 'syz.2.368': attribute type 32 has an invalid length. [ 80.129904][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.133006][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.137529][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.140660][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.143857][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.147902][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.152267][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.156712][ T7268] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.369'. [ 80.249189][ T7276] mmap: syz.0.372 (7276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.251682][ T7274] input: syz0 as /devices/virtual/input/input13 [ 80.295845][ T7274] openvswitch: netlink: Flow key attribute not present in set flow. [ 80.299325][ T40] audit: type=1400 audit(2000000016.989:548): avc: denied { read write } for pid=7277 comm="syz.2.373" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.299359][ T40] audit: type=1400 audit(2000000016.989:549): avc: denied { open } for pid=7277 comm="syz.2.373" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.591598][ T7305] bridge2: entered promiscuous mode [ 80.660140][ T7310] block device autoloading is deprecated and will be removed. [ 80.784278][ T7320] syzkaller1: entered promiscuous mode [ 80.786173][ T7320] syzkaller1: entered allmulticast mode [ 80.799423][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 80.973656][ T7335] kAFS: unable to lookup cell 'sz1' [ 81.168639][ T7362] xt_TCPMSS: Only works on TCP SYN packets [ 81.196645][ T5944] Bluetooth: hci2: command tx timeout [ 81.256610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.271515][ T7374] program syz.0.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.277263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.281998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.434892][ T7388] binder: BINDER_SET_CONTEXT_MGR already set [ 81.447168][ T61] cfg80211: failed to load regulatory.db [ 81.452320][ T7388] binder: 7386:7388 ioctl 4018620d 200000000100 returned -16 [ 81.687010][ T7410] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.730823][ T7412] geneve3: entered promiscuous mode [ 81.732697][ T7412] geneve3: entered allmulticast mode [ 81.811945][ T7416] input: syz0 as /devices/virtual/input/input14 [ 81.816719][ T7418] cgroup: none used incorrectly [ 81.823009][ T7416] netlink: 'syz.3.412': attribute type 3 has an invalid length. [ 81.878089][ T7420] syzkaller1: entered promiscuous mode [ 81.879950][ T7420] syzkaller1: entered allmulticast mode [ 81.915834][ T1334] usb 6-1: New USB device found, idVendor=2001, idProduct=3c25, bcdDevice=37.18 [ 81.926529][ T1334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.935428][ T1334] usb 6-1: can't set config #8, error -71 [ 81.942702][ T1334] usb 6-1: USB disconnect, device number 5 [ 82.314294][ T7463] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 82.331681][ T7463] bond1 (unregistering): Released all slaves [ 82.377701][ T7466] netlink: 'syz.0.431': attribute type 21 has an invalid length. [ 82.484169][ T7471] loop3: detected capacity change from 0 to 1 [ 82.489768][ T5952] Dev loop3: unable to read RDB block 1 [ 82.491616][ T5952] loop3: unable to read partition table [ 82.494089][ T5952] loop3: partition table beyond EOD, truncated [ 82.498709][ T7471] Dev loop3: unable to read RDB block 1 [ 82.501176][ T7471] loop3: unable to read partition table [ 82.503764][ T7471] loop3: partition table beyond EOD, truncated [ 82.512992][ T7471] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 82.517064][ T7471] Dev loop3: unable to read RDB block 1 [ 82.519178][ T7471] loop3: unable to read partition table [ 82.521722][ T7471] loop3: partition table beyond EOD, truncated [ 82.729444][ T7490] FAULT_INJECTION: forcing a failure. [ 82.729444][ T7490] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.733341][ T7490] CPU: 2 UID: 0 PID: 7490 Comm: syz.1.438 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 82.733356][ T7490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.733363][ T7490] Call Trace: [ 82.733367][ T7490] [ 82.733371][ T7490] dump_stack_lvl+0x16c/0x1f0 [ 82.733393][ T7490] should_fail_ex+0x512/0x640 [ 82.733411][ T7490] _copy_from_iter+0x29f/0x16f0 [ 82.733431][ T7490] ? __pfx__copy_from_iter+0x10/0x10 [ 82.733448][ T7490] ? find_held_lock+0x2b/0x80 [ 82.733464][ T7490] ? dev_get_by_index+0x17c/0x380 [ 82.733485][ T7490] packet_sendmsg+0x1c47/0x5880 [ 82.733503][ T7490] ? avc_has_perm+0x4a/0x1c0 [ 82.733516][ T7490] ? __lock_acquire+0xb8a/0x1c90 [ 82.733536][ T7490] ? sock_has_perm+0x259/0x2f0 [ 82.733549][ T7490] ? __pfx_sock_has_perm+0x10/0x10 [ 82.733564][ T7490] ? __pfx_packet_sendmsg+0x10/0x10 [ 82.733586][ T7490] __sys_sendto+0x4a3/0x520 [ 82.733603][ T7490] ? __pfx___sys_sendto+0x10/0x10 [ 82.733629][ T7490] ? ksys_write+0x1ac/0x250 [ 82.733644][ T7490] ? __pfx_ksys_write+0x10/0x10 [ 82.733660][ T7490] __x64_sys_sendto+0xe0/0x1c0 [ 82.733675][ T7490] ? do_syscall_64+0x91/0x4c0 [ 82.733685][ T7490] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.733701][ T7490] do_syscall_64+0xcd/0x4c0 [ 82.733712][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.733724][ T7490] RIP: 0033:0x7ff6df78e929 [ 82.733732][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.733743][ T7490] RSP: 002b:00007ff6e05c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.733753][ T7490] RAX: ffffffffffffffda RBX: 00007ff6df9b5fa0 RCX: 00007ff6df78e929 [ 82.733760][ T7490] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 82.733766][ T7490] RBP: 00007ff6e05c8090 R08: 0000200000000140 R09: 0000000000000014 [ 82.733772][ T7490] R10: ffffffffffffc117 R11: 0000000000000246 R12: 0000000000000001 [ 82.733778][ T7490] R13: 0000000000000000 R14: 00007ff6df9b5fa0 R15: 00007fff8772da38 [ 82.733791][ T7490] [ 82.816339][ C2] vkms_vblank_simulate: vblank timer overrun [ 82.854727][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 82.854743][ T40] audit: type=1400 audit(2000000019.539:574): avc: denied { read write } for pid=7497 comm="syz.1.441" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.868288][ T40] audit: type=1400 audit(2000000019.539:575): avc: denied { open } for pid=7497 comm="syz.1.441" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 83.098144][ T1121] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.102096][ T1121] sr 2:0:0:0: [sr0] tag#7 Sense Key : Illegal Request [current] [ 83.105251][ T1121] sr 2:0:0:0: [sr0] tag#7 Add. Sense: Invalid command operation code [ 83.118297][ T1121] sr 2:0:0:0: [sr0] tag#7 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 83.121942][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 83.126396][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 83.239772][ T40] audit: type=1400 audit(2000000019.929:576): avc: denied { read } for pid=7539 comm="syz.2.454" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 83.247276][ T40] audit: type=1400 audit(2000000019.929:577): avc: denied { open } for pid=7539 comm="syz.2.454" path="/123/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 83.326183][ T40] audit: type=1400 audit(2000000020.009:578): avc: denied { setattr } for pid=7545 comm="syz.3.457" name="tty27" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 83.368889][ T7548] efs: device does not support 512 byte blocks [ 83.371467][ T7548] device does not support 512 byte blocks [ 83.371467][ T7548] [ 83.386755][ T61] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.386968][ T7540] orangefs_mount: mount request failed with -4 [ 83.512963][ T7555] __nla_validate_parse: 73 callbacks suppressed [ 83.512983][ T7555] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.460'. [ 83.527936][ T7555] openvswitch: netlink: Duplicate or invalid key (type 0). [ 83.530893][ T7555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.538503][ T61] usb 6-1: config index 0 descriptor too short (expected 46, got 36) [ 83.547174][ T61] usb 6-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.550708][ T61] usb 6-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.559276][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.561394][ T61] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 83.564174][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.569941][ T61] usb 6-1: config 0 descriptor?? [ 83.573437][ T61] usbhid 6-1:0.0: can't add hid device: -22 [ 83.575516][ T61] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 83.601665][ T40] audit: type=1400 audit(2000000020.289:579): avc: denied { append } for pid=7562 comm="syz.2.461" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.602750][ T7563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.461'. [ 83.679554][ T40] audit: type=1400 audit(2000000020.369:580): avc: denied { append } for pid=7567 comm="syz.0.464" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.695721][ T7569] kvm: kvm [7567]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000000 [ 83.774232][ T7531] ip6t_srh: unknown srh invflags 7D00 [ 83.787576][ T7572] /dev/sg0: Can't lookup blockdev [ 83.860119][ T6079] usb 6-1: USB disconnect, device number 6 [ 83.891100][ T7581] batadv_slave_0: entered promiscuous mode [ 83.899859][ T7579] batadv_slave_0: left promiscuous mode [ 83.976922][ T40] audit: type=1400 audit(2000000020.669:581): avc: denied { map } for pid=7594 comm="syz.0.473" path="socket:[18690]" dev="sockfs" ino=18690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.030959][ T40] audit: type=1400 audit(2000000020.719:582): avc: denied { map } for pid=7599 comm="syz.1.474" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.053134][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 84.058453][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 84.062899][ T40] audit: type=1400 audit(2000000020.749:583): avc: denied { accept } for pid=7601 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.313006][ T7626] dvmrp1: entered allmulticast mode [ 84.350998][ T7628] netlink: 'syz.3.484': attribute type 21 has an invalid length. [ 84.353576][ T7628] netlink: 156 bytes leftover after parsing attributes in process `syz.3.484'. [ 84.356722][ T61] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.461718][ T7630] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 84.464923][ T7630] exFAT-fs (nullb0): invalid boot record signature [ 84.468148][ T7630] exFAT-fs (nullb0): failed to read boot sector [ 84.470055][ T7630] exFAT-fs (nullb0): failed to recognize exfat type [ 84.507368][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 84.518161][ T61] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 84.521714][ T61] usb 6-1: config 0 has no interface number 0 [ 84.536484][ T61] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 84.539428][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.541903][ T61] usb 6-1: Product: syz [ 84.542778][ T7639] random: crng reseeded on system resumption [ 84.543240][ T61] usb 6-1: Manufacturer: syz [ 84.556133][ T7639] netlink: 344 bytes leftover after parsing attributes in process `syz.3.489'. [ 84.562904][ T61] usb 6-1: SerialNumber: syz [ 84.572012][ T61] usb 6-1: config 0 descriptor?? [ 84.576677][ T61] hub 6-1:0.145: bad descriptor, ignoring hub [ 84.578621][ T61] hub 6-1:0.145: probe with driver hub failed with error -5 [ 84.590763][ T61] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.145/input/input15 [ 84.701942][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 84.708317][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.493'. [ 84.724707][ T7650] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 84.907714][ T7664] netlink: 72 bytes leftover after parsing attributes in process `syz.3.499'. [ 85.051003][ T5977] usb 6-1: USB disconnect, device number 7 [ 85.052686][ T7682] sp0: Synchronizing with TNC [ 85.385521][ T7698] netlink: 176 bytes leftover after parsing attributes in process `syz.2.510'. [ 85.451115][ T7708] CUSE: unknown device info "" [ 85.453037][ T7708] CUSE: zero length info key specified [ 85.537860][ T5936] Bluetooth: hci4: sending frame failed (-49) [ 85.540369][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 85.571616][ T7724] binder: 7723:7724 ioctl 800454d2 200000000280 returned -22 [ 85.640945][ T7731] vim2m vim2m.0: vidioc_s_fmt queue busy [ 85.916800][ T5977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 86.004887][ T7739] netlink: 'syz.0.524': attribute type 12 has an invalid length. [ 86.045546][ T7742] Cannot find del_set index 4 as target [ 86.085292][ T5977] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.090443][ T5977] usb 6-1: config 0 interface 0 has no altsetting 0 [ 86.095207][ T5977] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.099039][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.102270][ T5977] usb 6-1: Product: syz [ 86.104029][ T5977] usb 6-1: Manufacturer: syz [ 86.106047][ T5977] usb 6-1: SerialNumber: syz [ 86.114651][ T5977] usb 6-1: config 0 descriptor?? [ 86.122471][ T5977] usb 6-1: selecting invalid altsetting 0 [ 86.340859][ T5977] usb 6-1: USB disconnect, device number 8 [ 86.602104][ T7787] kernel profiling enabled (shift: 63) [ 86.604682][ T7787] profiling shift: 63 too large [ 86.916747][ T1334] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.068397][ T1334] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.071999][ T1334] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.075059][ T1334] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.078410][ T1334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.083819][ T7790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.093469][ T1334] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.296799][ T1334] usb 8-1: USB disconnect, device number 8 [ 87.344558][ T7821] FAULT_INJECTION: forcing a failure. [ 87.344558][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.349717][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.2.550 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 87.349732][ T7821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.349739][ T7821] Call Trace: [ 87.349742][ T7821] [ 87.349746][ T7821] dump_stack_lvl+0x16c/0x1f0 [ 87.349767][ T7821] should_fail_ex+0x512/0x640 [ 87.349786][ T7821] _copy_from_iter+0x29f/0x16f0 [ 87.349804][ T7821] ? _copy_from_iter+0x15d/0x16f0 [ 87.349821][ T7821] ? __pfx__copy_from_iter+0x10/0x10 [ 87.349839][ T7821] ? __pfx__copy_from_iter+0x10/0x10 [ 87.349855][ T7821] ? _copy_from_iter+0x15d/0x16f0 [ 87.349874][ T7821] copy_page_from_iter+0xde/0x180 [ 87.349892][ T7821] skb_copy_datagram_from_iter+0x2a0/0x740 [ 87.349913][ T7821] packet_sendmsg+0x21eb/0x5880 [ 87.349930][ T7821] ? avc_has_perm+0x4a/0x1c0 [ 87.349947][ T7821] ? sock_has_perm+0x259/0x2f0 [ 87.349960][ T7821] ? __pfx_sock_has_perm+0x10/0x10 [ 87.349975][ T7821] ? __pfx_packet_sendmsg+0x10/0x10 [ 87.349998][ T7821] __sys_sendto+0x4a3/0x520 [ 87.350013][ T7821] ? __pfx___sys_sendto+0x10/0x10 [ 87.350040][ T7821] ? ksys_write+0x1ac/0x250 [ 87.350055][ T7821] ? __pfx_ksys_write+0x10/0x10 [ 87.350071][ T7821] __x64_sys_sendto+0xe0/0x1c0 [ 87.350085][ T7821] ? do_syscall_64+0x91/0x4c0 [ 87.350095][ T7821] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.350112][ T7821] do_syscall_64+0xcd/0x4c0 [ 87.350123][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.350134][ T7821] RIP: 0033:0x7ff245d8e929 [ 87.350143][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.350153][ T7821] RSP: 002b:00007ff246cdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.350163][ T7821] RAX: ffffffffffffffda RBX: 00007ff245fb5fa0 RCX: 00007ff245d8e929 [ 87.350170][ T7821] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 87.350177][ T7821] RBP: 00007ff246cdd090 R08: 0000200000000140 R09: 0000000000000014 [ 87.350183][ T7821] R10: ffffffffffffc117 R11: 0000000000000246 R12: 0000000000000002 [ 87.350189][ T7821] R13: 0000000000000000 R14: 00007ff245fb5fa0 R15: 00007fffd73c9de8 [ 87.350203][ T7821] [ 87.499048][ T7828] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 87.584435][ T7829] bridge2: entered promiscuous mode [ 87.615181][ T7833] can0: slcan on ptm0. [ 87.797081][ T7832] can0 (unregistered): slcan off ptm0. [ 87.874726][ T7857] FAULT_INJECTION: forcing a failure. [ 87.874726][ T7857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.879150][ T7857] CPU: 2 UID: 0 PID: 7857 Comm: syz.1.559 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 87.879166][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.879173][ T7857] Call Trace: [ 87.879177][ T7857] [ 87.879181][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 87.879203][ T7857] should_fail_ex+0x512/0x640 [ 87.879221][ T7857] _copy_from_iter+0x29f/0x16f0 [ 87.879240][ T7857] ? _copy_from_iter+0x15d/0x16f0 [ 87.879256][ T7857] ? __pfx__copy_from_iter+0x10/0x10 [ 87.879275][ T7857] ? __pfx__copy_from_iter+0x10/0x10 [ 87.879291][ T7857] ? _copy_from_iter+0x15d/0x16f0 [ 87.879310][ T7857] copy_page_from_iter+0xde/0x180 [ 87.879328][ T7857] skb_copy_datagram_from_iter+0x2a0/0x740 [ 87.879350][ T7857] packet_sendmsg+0x21eb/0x5880 [ 87.879367][ T7857] ? avc_has_perm+0x4a/0x1c0 [ 87.879385][ T7857] ? sock_has_perm+0x259/0x2f0 [ 87.879401][ T7857] ? __pfx_sock_has_perm+0x10/0x10 [ 87.879421][ T7857] ? __pfx_packet_sendmsg+0x10/0x10 [ 87.879455][ T7857] __sys_sendto+0x4a3/0x520 [ 87.879477][ T7857] ? __pfx___sys_sendto+0x10/0x10 [ 87.879521][ T7857] ? ksys_write+0x1ac/0x250 [ 87.879542][ T7857] ? __pfx_ksys_write+0x10/0x10 [ 87.879563][ T7857] __x64_sys_sendto+0xe0/0x1c0 [ 87.879584][ T7857] ? do_syscall_64+0x91/0x4c0 [ 87.879597][ T7857] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.879614][ T7857] do_syscall_64+0xcd/0x4c0 [ 87.879625][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.879637][ T7857] RIP: 0033:0x7ff6df78e929 [ 87.879646][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.879657][ T7857] RSP: 002b:00007ff6e05c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.879668][ T7857] RAX: ffffffffffffffda RBX: 00007ff6df9b5fa0 RCX: 00007ff6df78e929 [ 87.879675][ T7857] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 87.879682][ T7857] RBP: 00007ff6e05c8090 R08: 0000200000000140 R09: 0000000000000014 [ 87.879688][ T7857] R10: ffffffffffffc117 R11: 0000000000000246 R12: 0000000000000002 [ 87.879695][ T7857] R13: 0000000000000000 R14: 00007ff6df9b5fa0 R15: 00007fff8772da38 [ 87.879708][ T7857] [ 87.956206][ C2] vkms_vblank_simulate: vblank timer overrun [ 88.086374][ T7859] veth1_macvtap: left promiscuous mode [ 88.088294][ T7859] macsec0: entered promiscuous mode [ 88.190509][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 88.375873][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 88.375891][ T40] audit: type=1400 audit(2000000025.059:601): avc: denied { ioctl } for pid=7887 comm="syz.2.571" path="socket:[19748]" dev="sockfs" ino=19748 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.397093][ T40] audit: type=1400 audit(2000000025.069:602): avc: denied { ioctl } for pid=7887 comm="syz.2.571" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 88.464480][ T7893] bridge_slave_0: left allmulticast mode [ 88.466389][ T7893] bridge_slave_0: left promiscuous mode [ 88.472280][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.478424][ T7893] bridge_slave_1: left promiscuous mode [ 88.480778][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.490888][ T7893] bond0: (slave bond_slave_0): Releasing backup interface [ 88.498823][ T7893] bond0: (slave bond_slave_1): Releasing backup interface [ 88.514867][ T7893] team0: Port device team_slave_0 removed [ 88.522045][ T7893] team0: Port device team_slave_1 removed [ 88.524206][ T7902] Bluetooth: MGMT ver 1.23 [ 88.524249][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.528686][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.538755][ T7901] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.575' sets config #256 [ 88.538775][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.544029][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.554265][ T7893] bond1: (slave geneve2): Releasing active interface [ 88.606839][ T7903] geneve3: entered promiscuous mode [ 88.659846][ T7908] new mount options do not match the existing superblock, will be ignored [ 88.667534][ T40] audit: type=1400 audit(2000000025.359:603): avc: denied { remount } for pid=7907 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 88.670576][ T7908] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 88.719251][ T7917] pim6reg1: entered promiscuous mode [ 88.721241][ T7917] pim6reg1: entered allmulticast mode [ 88.787213][ T838] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.883067][ T40] audit: type=1400 audit(2000000025.569:604): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 88.959026][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 88.966578][ T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.971041][ T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.971065][ T838] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.973805][ T838] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 88.975745][ T40] audit: type=1400 audit(2000000025.659:605): avc: denied { accept } for pid=7922 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.980391][ T838] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 88.995378][ T838] usb 6-1: Product: syz [ 88.999977][ T838] usb 6-1: Manufacturer: syz [ 89.001969][ T838] usb 6-1: SerialNumber: syz [ 89.029522][ T838] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input16 [ 89.032170][ T7898] syz.0.576 (7898): drop_caches: 2 [ 89.065003][ T7925] cgroup: Need name or subsystem set [ 89.083856][ T7925] syzkaller0: entered promiscuous mode [ 89.085811][ T7925] syzkaller0: entered allmulticast mode [ 89.106047][ T7932] __nla_validate_parse: 14 callbacks suppressed [ 89.106058][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'. [ 89.151051][ T40] audit: type=1400 audit(2000000025.839:606): avc: denied { ioctl } for pid=7924 comm="syz.3.583" path="socket:[17997]" dev="sockfs" ino=17997 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.185451][ T7938] xt_l2tp: wrong L2TP version: 0 [ 89.223430][ T6079] usb 6-1: USB disconnect, device number 10 [ 89.238886][ T6079] appletouch 6-1:1.0: input: appletouch disconnected [ 89.249119][ T40] audit: type=1400 audit(2000000025.939:607): avc: denied { write } for pid=7941 comm="syz.0.589" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.303916][ T40] audit: type=1400 audit(2000000025.989:608): avc: denied { mounton } for pid=7945 comm="syz.0.591" path="/168/file1" dev="9p" ino=36047785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.303947][ T7948] 9pnet_virtio: no channels available for device syz [ 89.315501][ T7948] 9pnet_virtio: no channels available for device syz [ 89.321550][ T7948] 9pnet_virtio: no channels available for device syz [ 89.323855][ T7948] 9pnet_virtio: no channels available for device syz [ 89.326135][ T7948] 9pnet_virtio: no channels available for device syz [ 89.328573][ T7948] 9pnet_virtio: no channels available for device syz [ 89.330829][ T7948] 9pnet_virtio: no channels available for device syz [ 89.333093][ T7948] 9pnet_virtio: no channels available for device syz [ 89.335356][ T7948] 9pnet_virtio: no channels available for device syz [ 89.337758][ T7948] 9pnet_virtio: no channels available for device syz [ 89.339993][ T7948] 9pnet_virtio: no channels available for device syz [ 89.342253][ T7948] 9pnet_virtio: no channels available for device syz [ 89.344428][ T7948] 9pnet_virtio: no channels available for device syz [ 89.346770][ T7948] 9pnet_virtio: no channels available for device syz [ 89.349364][ T7948] 9pnet_virtio: no channels available for device syz [ 89.351588][ T7948] 9pnet_virtio: no channels available for device syz [ 89.353821][ T7948] 9pnet_virtio: no channels available for device syz [ 89.355963][ T7948] 9pnet_virtio: no channels available for device syz [ 89.358453][ T7948] 9pnet_virtio: no channels available for device syz [ 89.360679][ T7948] 9pnet_virtio: no channels available for device syz [ 89.362922][ T7948] 9pnet_virtio: no channels available for device syz [ 89.365170][ T7948] 9pnet_virtio: no channels available for device syz [ 89.367887][ T7948] 9pnet_virtio: no channels available for device syz [ 89.370376][ T7948] 9pnet_virtio: no channels available for device syz [ 89.372666][ T7948] 9pnet_virtio: no channels available for device syz [ 89.375087][ T7948] 9pnet_virtio: no channels available for device syz [ 89.377998][ T7948] 9pnet_virtio: no channels available for device syz [ 89.380783][ T7948] 9pnet_virtio: no channels available for device syz [ 89.383585][ T7948] 9pnet_virtio: no channels available for device syz [ 89.386383][ T7948] 9pnet_virtio: no channels available for device syz [ 89.389302][ T7948] 9pnet_virtio: no channels available for device syz [ 89.392085][ T7948] 9pnet_virtio: no channels available for device syz [ 89.395234][ T7948] 9pnet_virtio: no channels available for device syz [ 89.398232][ T7948] 9pnet_virtio: no channels available for device syz [ 89.401126][ T7948] 9pnet_virtio: no channels available for device syz [ 89.403424][ T7948] 9pnet_virtio: no channels available for device syz [ 89.405709][ T7948] 9pnet_virtio: no channels available for device syz [ 89.408307][ T7948] 9pnet_virtio: no channels available for device syz [ 89.410558][ T7948] 9pnet_virtio: no channels available for device syz [ 89.412792][ T7948] 9pnet_virtio: no channels available for device syz [ 89.415010][ T7948] 9pnet_virtio: no channels available for device syz [ 89.417448][ T7948] 9pnet_virtio: no channels available for device syz [ 89.419629][ T7948] 9pnet_virtio: no channels available for device syz [ 89.421959][ T7948] 9pnet_virtio: no channels available for device syz [ 89.424163][ T7948] 9pnet_virtio: no channels available for device syz [ 89.426783][ T7948] 9pnet_virtio: no channels available for device syz [ 89.429071][ T7948] 9pnet_virtio: no channels available for device syz [ 89.431315][ T7948] 9pnet_virtio: no channels available for device syz [ 89.433912][ T7948] 9pnet_virtio: no channels available for device syz [ 89.436192][ T7948] 9pnet_virtio: no channels available for device syz [ 89.439232][ T7948] 9pnet_virtio: no channels available for device syz [ 89.441503][ T7948] 9pnet_virtio: no channels available for device syz [ 89.443756][ T7948] 9pnet_virtio: no channels available for device syz [ 89.446037][ T7948] 9pnet_virtio: no channels available for device syz [ 89.448354][ T7948] 9pnet_virtio: no channels available for device syz [ 89.450604][ T7948] 9pnet_virtio: no channels available for device syz [ 89.452846][ T7948] 9pnet_virtio: no channels available for device syz [ 89.455124][ T7948] 9pnet_virtio: no channels available for device syz [ 89.457510][ T7948] 9pnet_virtio: no channels available for device syz [ 89.459757][ T7948] 9pnet_virtio: no channels available for device syz [ 89.461921][ T7948] 9pnet_virtio: no channels available for device syz [ 89.562521][ T40] audit: type=1400 audit(2000000026.249:609): avc: denied { accept } for pid=7953 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.569656][ T40] audit: type=1400 audit(2000000026.259:610): avc: denied { write } for pid=7953 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.810341][ T7972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.599'. [ 89.886500][ T7974] rdma_op ffff8881000fe9f0 conn xmit_rdma 0000000000000000 [ 89.943103][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.947272][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.951277][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.955319][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.959316][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.963281][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.968082][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.972244][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.987627][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 89.993349][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7976 comm=syz.1.601 [ 90.030357][ T7983] FAULT_INJECTION: forcing a failure. [ 90.030357][ T7983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.034477][ T7983] CPU: 2 UID: 0 PID: 7983 Comm: syz.1.605 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 90.034497][ T7983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.034504][ T7983] Call Trace: [ 90.034508][ T7983] [ 90.034512][ T7983] dump_stack_lvl+0x16c/0x1f0 [ 90.034533][ T7983] should_fail_ex+0x512/0x640 [ 90.034552][ T7983] _copy_from_iter+0x29f/0x16f0 [ 90.034570][ T7983] ? _copy_from_iter+0x15d/0x16f0 [ 90.034587][ T7983] ? __pfx__copy_from_iter+0x10/0x10 [ 90.034606][ T7983] ? __pfx__copy_from_iter+0x10/0x10 [ 90.034622][ T7983] ? _copy_from_iter+0x15d/0x16f0 [ 90.034641][ T7983] copy_page_from_iter+0xde/0x180 [ 90.034660][ T7983] skb_copy_datagram_from_iter+0x2a0/0x740 [ 90.034681][ T7983] packet_sendmsg+0x21eb/0x5880 [ 90.034698][ T7983] ? avc_has_perm+0x4a/0x1c0 [ 90.034716][ T7983] ? sock_has_perm+0x259/0x2f0 [ 90.034729][ T7983] ? __pfx_sock_has_perm+0x10/0x10 [ 90.034744][ T7983] ? __pfx_packet_sendmsg+0x10/0x10 [ 90.034767][ T7983] __sys_sendto+0x4a3/0x520 [ 90.034782][ T7983] ? __pfx___sys_sendto+0x10/0x10 [ 90.034809][ T7983] ? ksys_write+0x1ac/0x250 [ 90.034824][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 90.034840][ T7983] __x64_sys_sendto+0xe0/0x1c0 [ 90.034855][ T7983] ? do_syscall_64+0x91/0x4c0 [ 90.034865][ T7983] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.034882][ T7983] do_syscall_64+0xcd/0x4c0 [ 90.034893][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.034905][ T7983] RIP: 0033:0x7ff6df78e929 [ 90.034914][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.034925][ T7983] RSP: 002b:00007ff6e05c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.034935][ T7983] RAX: ffffffffffffffda RBX: 00007ff6df9b5fa0 RCX: 00007ff6df78e929 [ 90.034942][ T7983] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 90.034948][ T7983] RBP: 00007ff6e05c8090 R08: 0000200000000140 R09: 0000000000000014 [ 90.034955][ T7983] R10: ffffffffffffc117 R11: 0000000000000246 R12: 0000000000000002 [ 90.034961][ T7983] R13: 0000000000000000 R14: 00007ff6df9b5fa0 R15: 00007fff8772da38 [ 90.034974][ T7983] [ 90.106200][ C2] vkms_vblank_simulate: vblank timer overrun [ 90.137257][ T7987] bridge0: port 3(veth0_to_bridge) entered blocking state [ 90.139704][ T7987] bridge0: port 3(veth0_to_bridge) entered disabled state [ 90.142501][ T7987] veth0_to_bridge: entered allmulticast mode [ 90.146642][ T7987] veth0_to_bridge: entered promiscuous mode [ 90.149057][ T7987] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.153593][ T7987] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 90.157696][ T7987] bridge0: port 3(veth0_to_bridge) entered blocking state [ 90.159971][ T7987] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 90.267990][ T8002] raw_sendmsg: syz.3.610 forgot to set AF_INET. Fix it! [ 90.461016][ T8021] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 90.465884][ T8021] SELinux: failed to load policy [ 90.649297][ T8040] ptrace attach of "/syz-executor exec"[5935] was attempted by ""[8040] [ 90.680064][ T8042] program syz.0.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.875092][ T8059] bond0: (slave erspan0): Releasing backup interface [ 90.881849][ T8059] bridge_slave_0: left allmulticast mode [ 90.883734][ T8059] bridge_slave_0: left promiscuous mode [ 90.885600][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.889209][ T8059] bridge_slave_1: left allmulticast mode [ 90.890981][ T8059] bridge_slave_1: left promiscuous mode [ 90.892847][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.897439][ T8059] bond0: (slave bond_slave_0): Releasing backup interface [ 90.901268][ T8059] bond0: (slave bond_slave_1): Releasing backup interface [ 90.905145][ T8063] netlink: 'syz.2.627': attribute type 9 has an invalid length. [ 90.908978][ T8063] netlink: 'syz.2.627': attribute type 7 has an invalid length. [ 90.909919][ T8059] team0: Port device team_slave_0 removed [ 90.912247][ T8063] netlink: 'syz.2.627': attribute type 8 has an invalid length. [ 90.921564][ T8059] team0: Port device team_slave_1 removed [ 90.923623][ T8059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.926395][ T8059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.959829][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 91.223362][ T8083] 9p: Unknown Cache mode or invalid value fs [ 91.583456][ T8100] FAULT_INJECTION: forcing a failure. [ 91.583456][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.588846][ T8100] CPU: 2 UID: 0 PID: 8100 Comm: syz.3.640 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 91.588869][ T8100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.588880][ T8100] Call Trace: [ 91.588886][ T8100] [ 91.588894][ T8100] dump_stack_lvl+0x16c/0x1f0 [ 91.588938][ T8100] should_fail_ex+0x512/0x640 [ 91.588985][ T8100] _copy_from_iter+0x29f/0x16f0 [ 91.589014][ T8100] ? _copy_from_iter+0x15d/0x16f0 [ 91.589039][ T8100] ? __pfx__copy_from_iter+0x10/0x10 [ 91.589067][ T8100] ? __pfx__copy_from_iter+0x10/0x10 [ 91.589092][ T8100] ? _copy_from_iter+0x15d/0x16f0 [ 91.589121][ T8100] copy_page_from_iter+0xde/0x180 [ 91.589149][ T8100] skb_copy_datagram_from_iter+0x2a0/0x740 [ 91.589188][ T8100] packet_sendmsg+0x21eb/0x5880 [ 91.589215][ T8100] ? avc_has_perm+0x4a/0x1c0 [ 91.589248][ T8100] ? sock_has_perm+0x259/0x2f0 [ 91.589268][ T8100] ? __pfx_sock_has_perm+0x10/0x10 [ 91.589291][ T8100] ? __pfx_packet_sendmsg+0x10/0x10 [ 91.589327][ T8100] __sys_sendto+0x4a3/0x520 [ 91.589352][ T8100] ? __pfx___sys_sendto+0x10/0x10 [ 91.589395][ T8100] ? ksys_write+0x1ac/0x250 [ 91.589418][ T8100] ? __pfx_ksys_write+0x10/0x10 [ 91.589443][ T8100] __x64_sys_sendto+0xe0/0x1c0 [ 91.589466][ T8100] ? do_syscall_64+0x91/0x4c0 [ 91.589482][ T8100] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.589507][ T8100] do_syscall_64+0xcd/0x4c0 [ 91.589524][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.589542][ T8100] RIP: 0033:0x7f6f1178e929 [ 91.589555][ T8100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.589572][ T8100] RSP: 002b:00007f6f12588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 91.589589][ T8100] RAX: ffffffffffffffda RBX: 00007f6f119b5fa0 RCX: 00007f6f1178e929 [ 91.589599][ T8100] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 91.589608][ T8100] RBP: 00007f6f12588090 R08: 0000200000000140 R09: 0000000000000014 [ 91.589620][ T8100] R10: ffffffffffffc117 R11: 0000000000000246 R12: 0000000000000002 [ 91.589629][ T8100] R13: 0000000000000000 R14: 00007f6f119b5fa0 R15: 00007ffdf809b6a8 [ 91.589657][ T8100] [ 91.671267][ C2] vkms_vblank_simulate: vblank timer overrun [ 92.049832][ T8129] tipc: Started in network mode [ 92.052122][ T8129] tipc: Node identity 4, cluster identity 4711 [ 92.054767][ T8129] tipc: Node number set to 4 [ 92.251477][ T8136] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 92.255996][ T8138] FAULT_INJECTION: forcing a failure. [ 92.255996][ T8138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.266554][ T8138] CPU: 2 UID: 0 PID: 8138 Comm: syz.2.652 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 92.266582][ T8138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.266592][ T8138] Call Trace: [ 92.266598][ T8138] [ 92.266605][ T8138] dump_stack_lvl+0x16c/0x1f0 [ 92.266637][ T8138] should_fail_ex+0x512/0x640 [ 92.266666][ T8138] _copy_from_iter+0x29f/0x16f0 [ 92.266697][ T8138] ? _copy_from_iter+0x15d/0x16f0 [ 92.266724][ T8138] ? __pfx__copy_from_iter+0x10/0x10 [ 92.266752][ T8138] ? __pfx__copy_from_iter+0x10/0x10 [ 92.266779][ T8138] ? _copy_from_iter+0x15d/0x16f0 [ 92.266808][ T8138] copy_page_from_iter+0xde/0x180 [ 92.266838][ T8138] skb_copy_datagram_from_iter+0x2a0/0x740 [ 92.266872][ T8138] packet_sendmsg+0x21eb/0x5880 [ 92.266898][ T8138] ? avc_has_perm+0x4a/0x1c0 [ 92.266926][ T8138] ? sock_has_perm+0x259/0x2f0 [ 92.266947][ T8138] ? __pfx_sock_has_perm+0x10/0x10 [ 92.266970][ T8138] ? __pfx_packet_sendmsg+0x10/0x10 [ 92.267008][ T8138] __sys_sendto+0x4a3/0x520 [ 92.267033][ T8138] ? __pfx___sys_sendto+0x10/0x10 [ 92.267078][ T8138] ? ksys_write+0x1ac/0x250 [ 92.267104][ T8138] ? __pfx_ksys_write+0x10/0x10 [ 92.267129][ T8138] __x64_sys_sendto+0xe0/0x1c0 [ 92.267162][ T8138] ? do_syscall_64+0x91/0x4c0 [ 92.267177][ T8138] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.267206][ T8138] do_syscall_64+0xcd/0x4c0 [ 92.267224][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.267243][ T8138] RIP: 0033:0x7ff245d8e929 [ 92.267257][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.267292][ T8138] RSP: 002b:00007ff246cdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.267310][ T8138] RAX: ffffffffffffffda RBX: 00007ff245fb5fa0 RCX: 00007ff245d8e929 [ 92.267321][ T8138] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 92.267334][ T8138] RBP: 00007ff246cdd090 R08: 0000200000000140 R09: 0000000000000014 [ 92.267344][ T8138] R10: ffffffffffffc117 R11: 0000000000000246 R12: 0000000000000002 [ 92.267354][ T8138] R13: 0000000000000000 R14: 00007ff245fb5fa0 R15: 00007fffd73c9de8 [ 92.267379][ T8138] [ 92.360245][ C2] vkms_vblank_simulate: vblank timer overrun [ 92.496805][ T8150] Cannot find set identified by id 3 to match [ 92.745725][ T8171] loop6: detected capacity change from 0 to 524287999 [ 93.450161][ T1265] tipc: Subscription rejected, illegal request [ 93.569088][ T8211] syzkaller0: entered promiscuous mode [ 93.570865][ T8211] syzkaller0: entered allmulticast mode [ 95.421694][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 95.421705][ T40] audit: type=1400 audit(2000000032.109:640): avc: denied { setattr } for pid=8233 comm="syz.0.679" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.468942][ T40] audit: type=1400 audit(2000000032.159:641): avc: denied { watch } for pid=8238 comm="syz.3.681" path="/151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.471263][ T8239] bpf: Bad value for 'uid' [ 95.488186][ T40] audit: type=1400 audit(2000000032.159:642): avc: denied { watch_sb } for pid=8238 comm="syz.3.681" path="/151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.700514][ T40] audit: type=1400 audit(2000000032.379:643): avc: denied { read } for pid=8257 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.094536][ T6003] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 96.184352][ T8276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 96.186551][ T8276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.192329][ T8276] vhci_hcd vhci_hcd.0: Device attached [ 96.213675][ T8278] vhci_hcd: connection closed [ 96.215449][ T47] vhci_hcd: stop threads [ 96.218777][ T47] vhci_hcd: release socket [ 96.220208][ T47] vhci_hcd: disconnect device [ 96.247959][ T6003] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 96.254693][ T6003] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.260454][ T6003] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.264276][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.267217][ T6003] usb 5-1: Product: syz [ 96.268696][ T6003] usb 5-1: Manufacturer: syz [ 96.270335][ T6003] usb 5-1: SerialNumber: syz [ 96.274320][ T8264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.510481][ T6003] usb 5-1: USB disconnect, device number 6 [ 96.825299][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 96.827927][ T5944] Bluetooth: Wrong link type (-22) [ 96.861491][ T8303] affs: No valid root block on device nullb0 [ 96.982715][ T8312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 96.984821][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.988253][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 96.995396][ T8315] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 97.004089][ T46] vhci_hcd: stop threads [ 97.005528][ T46] vhci_hcd: release socket [ 97.007537][ T46] vhci_hcd: disconnect device [ 97.110220][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.131539][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.155551][ T40] audit: type=1400 audit(2000000033.839:644): avc: denied { name_bind } for pid=8335 comm="syz.2.709" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 97.193030][ T40] audit: type=1400 audit(2000000033.879:645): avc: denied { read } for pid=8344 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.287081][ T8358] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 97.292713][ T8357] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 97.296542][ T8358] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.298154][ T8357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.356664][ T6003] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 97.401660][ T8366] QAT: Stopping all acceleration devices. [ 97.446818][ T1334] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.472440][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 97.475629][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.718'. [ 97.498075][ T6003] usb 8-1: device descriptor read/64, error -71 [ 97.586499][ T1334] usb 5-1: device descriptor read/64, error -71 [ 97.603240][ T8380] syzkaller1: entered promiscuous mode [ 97.605014][ T8380] syzkaller1: entered allmulticast mode [ 97.613289][ T8380] JFS: discard option not supported on device [ 97.616370][ T8380] syz.1.720: attempt to access beyond end of device [ 97.616370][ T8380] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 97.622787][ T8380] syz.1.720: attempt to access beyond end of device [ 97.622787][ T8380] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 97.628707][ T8380] Mount JFS Failure: -5 [ 97.650570][ T8382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'. [ 97.661710][ T8380] overlayfs: conflicting lowerdir path [ 97.693330][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 97.753105][ T6003] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 97.760776][ T40] audit: type=1400 audit(2000000034.449:646): avc: denied { bind } for pid=8388 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.826584][ T1334] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.876639][ T6003] usb 8-1: device descriptor read/64, error -71 [ 97.956599][ T1334] usb 5-1: device descriptor read/64, error -71 [ 98.001240][ T6003] usb usb8-port1: attempt power cycle [ 98.069721][ T1334] usb usb5-port1: attempt power cycle [ 98.087679][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.329912][ T8415] SET target dimension over the limit! [ 98.346574][ T6003] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 98.371292][ T6003] usb 8-1: device descriptor read/8, error -71 [ 98.406544][ T1334] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.437237][ T1334] usb 5-1: device descriptor read/8, error -71 [ 98.619658][ T40] audit: type=1400 audit(2000000035.309:647): avc: denied { write } for pid=8430 comm="syz.1.737" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 98.629059][ T6003] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 98.648039][ T6003] usb 8-1: device descriptor read/8, error -71 [ 98.691702][ T1334] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.719333][ T1334] usb 5-1: device descriptor read/8, error -71 [ 98.756955][ T6003] usb usb8-port1: unable to enumerate USB device [ 98.828199][ T1334] usb usb5-port1: unable to enumerate USB device [ 98.898382][ T837] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 99.053978][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'. [ 99.060717][ T837] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.064523][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.070104][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.073190][ T837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.078251][ T837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.081159][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.085422][ T837] usb 6-1: config 0 descriptor?? [ 99.116844][ T8447] mkiss: ax0: crc mode is auto. [ 99.506922][ T837] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 99.510869][ T837] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 99.519911][ T837] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 99.540494][ T5348] udevd[5348]: worker [6253] terminated by signal 33 (Unknown signal 33) [ 99.543025][ T5348] udevd[5348]: worker [6253] failed while handling '/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:047F:FFFF.0003/hidraw/hidraw1' [ 99.723728][ T1334] usb 6-1: USB disconnect, device number 11 [ 100.119695][ T40] audit: type=1326 audit(2000000036.809:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.748" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff245d8e929 code=0x0 [ 100.157982][ T8476] syzkaller1: entered promiscuous mode [ 100.167611][ T8476] syzkaller1: entered allmulticast mode [ 100.224824][ T8481] overlayfs: conflicting lowerdir path [ 100.261433][ T8479] syz.2.751: attempt to access beyond end of device [ 100.261433][ T8479] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 100.265544][ T8479] FAT-fs (nbd2): unable to read boot sector [ 100.360671][ T8484] batadv_slave_1: entered promiscuous mode [ 100.384386][ T40] audit: type=1804 audit(2000000037.069:649): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.756" name="/newroot/75/bus/bus" dev="overlay" ino=436 res=1 errno=0 [ 100.391427][ T8505] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.414183][ T8477] batadv_slave_1: left promiscuous mode [ 100.507196][ T8517] overlay: Bad value for 'workdir' [ 100.538910][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.544751][ T40] audit: type=1400 audit(2000000037.229:650): avc: denied { bind } for pid=8519 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.132618][ T40] audit: type=1326 audit(2000000037.819:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.764" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c9518e929 code=0x7dff0000 [ 101.501577][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 101.901023][ T8560] program syz.0.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.908401][ T40] audit: type=1400 audit(2000000038.599:652): avc: denied { setattr } for pid=8559 comm="syz.0.772" name="TIPC" dev="sockfs" ino=22183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.915521][ T8560] program syz.0.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.292808][ T8571] batadv0: entered promiscuous mode [ 102.294617][ T8571] batadv0: entered allmulticast mode [ 102.297804][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.358248][ T8578] dlm: non-version read from control device 0 [ 102.361669][ T8579] xt_hashlimit: invalid interval [ 102.361681][ T8578] xt_hashlimit: invalid interval [ 102.479049][ T40] audit: type=1400 audit(2000000039.169:653): avc: denied { bind } for pid=8582 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.523329][ T40] audit: type=1400 audit(2000000039.209:654): avc: denied { watch watch_reads } for pid=8589 comm="syz.0.783" path="/226/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.542001][ T40] audit: type=1400 audit(2000000039.229:655): avc: denied { validate_trans } for pid=8589 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.556567][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.559025][ T5299] Bluetooth: hci4: command 0x1003 tx timeout [ 102.989289][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 102.992251][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 103.051953][ T8627] overlayfs: failed to resolve './file0': -2 [ 103.059321][ T8629] binder: 8624:8629 ioctl c0306201 200000000080 returned -14 [ 103.129766][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'. [ 103.214632][ T5944] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 103.214670][ T5944] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 103.216616][ T8643] cgroup: No subsys list or none specified [ 103.217015][ T5944] Bluetooth: hci2: Malformed LE Event: 0x02 [ 103.266970][ T8646] selinux_netlink_send: 57 callbacks suppressed [ 103.266987][ T8646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8646 comm=syz.3.803 [ 103.614890][ T837] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 103.638675][ T8654] netlink: 244 bytes leftover after parsing attributes in process `syz.0.805'. [ 103.772519][ T837] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 103.775224][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.786508][ T837] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.791905][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.796318][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.810902][ T837] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 103.811750][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 103.815083][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.824307][ T837] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.825144][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 103.836539][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.842729][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.857669][ T837] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 103.860785][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.865063][ T837] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.878511][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.883990][ T837] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.900098][ T837] usb 8-1: string descriptor 0 read error: -22 [ 103.902462][ T837] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 103.912390][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.927296][ T837] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 104.128390][ T8651] netlink: 'syz.3.804': attribute type 11 has an invalid length. [ 104.131255][ T8651] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.804'. [ 104.162714][ T61] usb 8-1: USB disconnect, device number 13 [ 104.271496][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'. [ 104.457587][ T8690] block nbd0: shutting down sockets [ 104.494663][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 104.532875][ T40] audit: type=1400 audit(2000000041.219:656): avc: denied { read } for pid=8699 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.717333][ T8710] overlay: Unknown parameter 'permit_directio' [ 104.794370][ T9] sched: DL replenish lagged too much [ 105.118940][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.124264][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.129527][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.134869][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.139968][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.144749][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.149861][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.155048][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.160251][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.165548][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.436637][ T6003] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 105.596769][ T6003] usb 8-1: Using ep0 maxpacket: 16 [ 105.604053][ T6003] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.613902][ T6003] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.623025][ T6003] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.634915][ T6003] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 105.649642][ T6003] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.665621][ T6003] usb 8-1: config 0 descriptor?? [ 106.034165][ T8736] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.829' resets device [ 106.126113][ T40] audit: type=1400 audit(2000000042.809:657): avc: denied { read } for pid=8741 comm="syz.1.830" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.142743][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 106.146152][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000098: 0000 [#1] SMP KASAN NOPTI [ 106.146177][ C1] KASAN: null-ptr-deref in range [0x00000000000004c0-0x00000000000004c7] [ 106.146194][ C1] CPU: 1 UID: 0 PID: 5888 Comm: sshd-session Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 106.146218][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.146230][ C1] RIP: 0010:veth_xdp_rcv.constprop.0+0x142/0xda0 [ 106.146280][ C1] Code: 84 91 2f fb 45 85 e4 0f 85 db 08 00 00 e8 36 96 2f fb 48 8d bd c0 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 18 0c 00 00 44 8b a5 c0 04 00 [ 106.146298][ C1] RSP: 0018:ffffc900006a09b8 EFLAGS: 00010202 [ 106.146315][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff868c8936 [ 106.146328][ C1] RDX: 0000000000000098 RSI: ffffffff868c804a RDI: 00000000000004c0 [ 106.146341][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 106.146354][ C1] R10: 0000000000000001 R11: ffffc900006a0ff8 R12: 0000000000000001 [ 106.146366][ C1] R13: 1ffff920000d4145 R14: ffffc900006a0e58 R15: ffff888059ce8000 [ 106.146380][ C1] FS: 00007f70a4145300(0000) GS:ffff8880d6854000(0000) knlGS:0000000000000000 [ 106.146419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.146474][ C1] CR2: 000055556e63c808 CR3: 0000000029cc0000 CR4: 0000000000352ef0 [ 106.146489][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.146500][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.146513][ C1] Call Trace: [ 106.146519][ C1] [ 106.146531][ C1] ? __pfx_veth_xdp_rcv.constprop.0+0x10/0x10 [ 106.146565][ C1] veth_poll+0x19c/0x9c0 [ 106.146590][ C1] ? __pfx_veth_poll+0x10/0x10 [ 106.146616][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 106.146657][ C1] ? process_backlog+0x3f0/0x15e0 [ 106.146682][ C1] ? process_backlog+0xcef/0x15e0 [ 106.146708][ C1] ? xdp_do_check_flushed+0x290/0x4e0 [ 106.146733][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 106.146762][ C1] net_rx_action+0xa9f/0xfe0 [ 106.146792][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 106.146818][ C1] ? find_held_lock+0x2b/0x80 [ 106.146842][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 106.146870][ C1] ? sched_clock+0x38/0x60 [ 106.146894][ C1] ? sched_clock_cpu+0x6c/0x530 [ 106.146927][ C1] ? mark_held_locks+0x49/0x80 [ 106.146956][ C1] handle_softirqs+0x219/0x8e0 [ 106.146981][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.147004][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 106.147032][ C1] ? tcp_recvmsg+0x115/0x680 [ 106.147065][ C1] do_softirq+0xb2/0xf0 [ 106.147086][ C1] [ 106.147093][ C1] [ 106.147099][ C1] __local_bh_enable_ip+0x100/0x120 [ 106.147121][ C1] tcp_recvmsg+0x115/0x680 [ 106.147147][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 106.147173][ C1] ? sock_has_perm+0x259/0x2f0 [ 106.147195][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 106.147215][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 106.147236][ C1] inet_recvmsg+0x12a/0x6a0 [ 106.147262][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 106.147290][ C1] sock_recvmsg+0x1b2/0x250 [ 106.147313][ C1] sock_read_iter+0x2b9/0x3b0 [ 106.147331][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 106.147350][ C1] ? __might_fault+0xe3/0x190 [ 106.147370][ C1] ? __might_fault+0x13b/0x190 [ 106.147391][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 106.147405][ C1] ? security_file_permission+0x71/0x210 [ 106.147427][ C1] ? rw_verify_area+0xcf/0x680 [ 106.147446][ C1] vfs_read+0xa98/0xc60 [ 106.147470][ C1] ? __pfx_vfs_read+0x10/0x10 [ 106.147490][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 106.147512][ C1] ? sigprocmask+0xef/0x330 [ 106.147531][ C1] ksys_read+0x1f8/0x250 [ 106.147552][ C1] ? __pfx_ksys_read+0x10/0x10 [ 106.147576][ C1] do_syscall_64+0xcd/0x4c0 [ 106.147591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.147609][ C1] RIP: 0033:0x7f70a3aa7407 [ 106.147619][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.147633][ C1] RSP: 002b:00007ffe75e0e890 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 106.147646][ C1] RAX: ffffffffffffffda RBX: 00007f70a4145300 RCX: 00007f70a3aa7407 [ 106.147655][ C1] RDX: 0000000000008000 RSI: 00007f70a36b4010 RDI: 0000000000000009 [ 106.147664][ C1] RBP: 00007ffe75e0e948 R08: 0000000000000000 R09: 0000000000000000 [ 106.147673][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 106.147681][ C1] R13: 0000000000000009 R14: 000055d4c67ceac0 R15: 000055d4c67d2710 [ 106.147695][ C1] [ 106.147699][ C1] Modules linked in: [ 106.147772][ C1] ---[ end trace 0000000000000000 ]--- [ 106.147781][ C1] RIP: 0010:veth_xdp_rcv.constprop.0+0x142/0xda0 [ 106.147804][ C1] Code: 84 91 2f fb 45 85 e4 0f 85 db 08 00 00 e8 36 96 2f fb 48 8d bd c0 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 18 0c 00 00 44 8b a5 c0 04 00 [ 106.147820][ C1] RSP: 0018:ffffc900006a09b8 EFLAGS: 00010202 [ 106.147835][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff868c8936 [ 106.147848][ C1] RDX: 0000000000000098 RSI: ffffffff868c804a RDI: 00000000000004c0 [ 106.147859][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 106.147870][ C1] R10: 0000000000000001 R11: ffffc900006a0ff8 R12: 0000000000000001 [ 106.147882][ C1] R13: 1ffff920000d4145 R14: ffffc900006a0e58 R15: ffff888059ce8000 [ 106.147896][ C1] FS: 00007f70a4145300(0000) GS:ffff8880d6854000(0000) knlGS:0000000000000000 [ 106.147928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.147938][ C1] CR2: 000055556e63c808 CR3: 0000000029cc0000 CR4: 0000000000352ef0 [ 106.147945][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.147951][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.147958][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 106.148621][ C1] Kernel Offset: disabled VM DIAGNOSIS: 16:18:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010101 RBX=0000000000000000 RCX=ffffffff81607b80 RDX=ffff88801dae4880 RSI=ffffffff81607bc8 RDI=ffffffff93d20040 RBP=0000000000000000 RSP=ffffc90000006b78 R8 =0000000000000001 R9 =fffffbfff27a4008 R10=ffffffff93d20047 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607bc9 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eb20013660 CR3=000000000e382000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000121 Opmask01=0000000000000001 Opmask02=000000000100003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00739f2d67e300e1 cbfea0374e6a9eeb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6b4e7c59733e56d 80cd098bacf00ac2 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71211adca70fc677 6a48a75bffb5fbc8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e708131f86e31467 b7398a2f45bca828 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002440 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100004102 a599f8000068d500 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000040f800004113 2bbaa5da00004113 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000040f8bf5eac00 e1cc720046084600 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5c3fe00b1d3f800 000000006db65000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e5edcc7b3f0750c6 4a4e412b44cec5cc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7d20592be338bd6 d3c266986739412c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00060014 85f1c6c990f7cb30 00000000000080fe 0001001400000007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000c9100000c91 ffffffffffffffff 00060014454000b1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be84c81900000000 000080fe00010014 00000008fd80400a b3cacd256844662d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000c8800000c88 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006001485f1c6c9 90f7cb3000000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20360a6520646136 0a200a3365626520 0a20206261630a20 0032640020203232 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b4c85 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc900006a0438 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b088360 R15=ffffffff855b4c20 RIP=ffffffff855b4caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f70a4145300 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556e63c808 CR3=0000000029cc0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=ff69200d67fb2cd4 bb75b30f37886999 ff69200d67fb2cd4 bb75b30f37886999 ff69200d67fb2cd4 bb75b30f37886999 ff69200d67fb2cd4 bb75b30f37886999 ZMM18=631d1a7795b8503d c1a64447dc6f1dfe 631d1a7795b8503d c1a64447dc6f1dfe 631d1a7795b8503d c1a64447dc6f1dfe 631d1a7795b8503d c1a64447dc6f1dfe ZMM19=d606000000000000 0000000000000007 d606000000000000 0000000000000006 d606000000000000 0000000000000005 d606000000000000 0000000000000004 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffee00000000 0300000000000008 ffffffde000003e6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800040000 0008000800000014 0000002800000048 0000000300000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000062 00000000054e0840 000000140000001c 0000000e0014000c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c1006040e72f6 048a100005a00307 8004059003001000 0580030c80808004 ZMM25=0072b5f00072b5f0 0072b5f00072b5f0 0072b5f00072b5f0 0072b5f00072b5f0 0072b5f00072b5f0 0072b5f00072b5f0 0072b5f00072b5f0 0072b5f00072b5f0 ZMM26=c83a189dc83a189d c83a189dc83a189d c83a189dc83a189d c83a189dc83a189d c83a189dc83a189d c83a189dc83a189d c83a189dc83a189d c83a189dc83a189d ZMM27=5777493c5777493c 5777493c5777493c 5777493c5777493c 5777493c5777493c 5777493c5777493c 5777493c5777493c 5777493c5777493c 5777493c5777493c ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7a0400007a040000 7a0400007a040000 7a0400007a040000 7a0400007a040000 7a0400007a040000 7a0400007a040000 7a0400007a040000 7a0400007a040000 info registers vcpu 2 CPU#2 RAX=0000000000010101 RBX=0000000000000000 RCX=ffffffff81607b80 RDX=ffff88801c318000 RSI=ffffffff81607bc8 RDI=ffffffff93d20040 RBP=0000000000000002 RSP=ffffc90000647778 R8 =0000000000000001 R9 =fffffbfff27a4008 R10=ffffffff93d20047 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607bc9 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff6e05c7f98 CR3=00000000274d5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000070300 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df984488 00007ff6df984480 00007ff6df984478 00007ff6df984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6e04ed100 00007ff6df984440 00007ff6df984458 00007ff6df9844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6df984498 00007ff6df984490 00007ff6df984488 00007ff6df984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000140e8 00000000000005bb 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81607b80 RDX=ffff8880296f0000 RSI=ffffffff81607bc8 RDI=ffffffff93d20040 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27a4008 R10=ffffffff93d20047 R11=ffffc900006f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607bc9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7c95f6c6c0 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001040 CR3=0000000028fd3000 CR4=00350ef0 DR0=0000000000000000 DR1=000000000000000b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95384488 00007f7c95384480 00007f7c95384478 00007f7c95384450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95eed100 00007f7c95384440 00007f7c95384458 00007f7c953844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c95384498 00007f7c95384490 00007f7c95384488 00007f7c95384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000