last executing test programs: 1.149508415s ago: executing program 0 (id=968): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 1.091740414s ago: executing program 0 (id=969): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, 0x0}) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000200)={'bond0\x00', @ifru_data=&(0x7f0000000000)="efed7ca040a1110529deda82157cb31cb400000000000000000000002300"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100, 0x1, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000002000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x9, @any, 0x7f, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r4, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x4008000) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) 1.001827186s ago: executing program 3 (id=970): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8000) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000240)=[0x5, 0x47f]) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x8}, 0x2) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="67a9fdffffff7f00000000800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newnexthop={0x24, 0x68, 0x300, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x4, 0x0, 0x10}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r8, 0x0, 0x4, 0xe) 1.001258217s ago: executing program 0 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0) socket(0x1e, 0x4, 0x14) (async) r2 = socket(0x1e, 0x4, 0x14) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) 630.98979ms ago: executing program 2 (id=978): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) (async) ftruncate(r0, 0x51a9497) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) (async) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000600)={0x5e}, 0x8) (async) getsockopt$inet6_opts(r6, 0x29, 0x39, 0x0, &(0x7f0000001d00)) (async) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000024c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xf4a, 0x3a, '&\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r8}, 0x48) (async) close_range(r1, 0xffffffffffffffff, 0x0) 461.511036ms ago: executing program 2 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000340)=ANY=[], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0xfffffffd, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x6, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200080003, 0x0, 0xde, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0xbba, 0xc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000400)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r5, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@binder={0x73682a85, 0x1100}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000180)={0xfffffffffffffed0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000c00200080d13373956dd4dc4f1fb4bad9d943ff0600000006000000"]) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) fcntl$setflags(r11, 0x2, 0x0) 461.253711ms ago: executing program 2 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) r2 = syz_io_uring_setup(0x7426, &(0x7f0000000080)={0x0, 0x9de5, 0x400, 0x3, 0x6f}, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x6078, &(0x7f00000001c0)={0x0, 0x4a4b, 0x2000, 0x1, 0xc8, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 460.712426ms ago: executing program 2 (id=981): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000000)=@raw=[@generic={0x20}], &(0x7f0000000040)='GPL\x00'}, 0x94) 391.78154ms ago: executing program 2 (id=982): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000aa5500", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) 327.958802ms ago: executing program 2 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffe) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000080)=0x84) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={r8, 0xe000000}, &(0x7f0000000380)=0x8) r9 = dup(r1) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000080)={0xa, 0x0, 0x7, @remote, 0x0, 0x4}, 0x20) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0xfc, 0xfc, 0xff, 0xe7, 0xc4, 0x3, 0x6, 0xa, 0xff, 0x40, 0x347, 0x0, 0x2, 0x38, 0x1, 0x3, 0x3c10, 0x6}, [{0x2, 0xc, 0x8, 0x1, 0x2cf, 0x7, 0x4, 0x53}], "c4c2f82a3ce08fd860dd82565fa6b300aa6d07a7ffa527132d7630c6f81224a75eddd0f3b104ebd12ac113d8edb136bedff9849db9b3e8b59f32fd8205b192dd284faf5881ba70a24241f0e43fd8d9e30382c5c00b3e776047f35e5f4a10e7c47b599a44881005a0ef1ecb662a640a20ca3f10cbc0443748", ['\x00', '\x00', '\x00', '\x00']}, 0x4f0) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, r12}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2d6b8d0d2a3ea9b02c4b5f589fe20c414cb6bced2c7dde624564271d6516fac06b0df6cea2ac081700c10caa576ada3afa"]) r13 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x400, 0x212c81) ftruncate(r13, 0x1) 181.874066ms ago: executing program 1 (id=989): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0xc, &(0x7f0000000040)=""/133, &(0x7f0000000100)=0x85) 181.701231ms ago: executing program 1 (id=990): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x184800) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x460c0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x53, 0x0, 0x81, {0x200, 0x64f}, {0x2, 0x6}, @cond=[{0x1, 0x2, 0x0, 0x1, 0x7, 0x5}, {0x1000, 0x6, 0x1, 0x8000, 0x29, 0x2c}]}) 181.422868ms ago: executing program 3 (id=991): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munlockall() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x6a, 0x1, 0x4, 0x12, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7800, 0x700, 0x3}}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f00000011c0)={0x4c, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xb}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10, 0x80000) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, r0}, 0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x180000}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfff9}, 0x92f5e}, 0x6d) read$rfkill(r4, &(0x7f0000000080), 0xffffff1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x20, &(0x7f00000001c0)={&(0x7f00000000c0)=""/111, 0x6f, 0x0, &(0x7f0000000140)=""/115, 0x73}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r8, 0x4) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,afid=0x0000000000000000,access=', @ANYRESDEC=r9, @ANYBLOB=',ignoreqv,access=client,context=system_u,fsname=!$[\x00,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r0, @fallback=0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$video4linux(&(0x7f00000003c0), 0x80000000, 0x54002) madvise(&(0x7f0000691000/0x1000)=nil, 0x1000, 0x12) 181.251472ms ago: executing program 1 (id=992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0xcc, 0x0, 0x0) (async) getsockopt$inet6_buf(r2, 0x29, 0xcc, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000300)=""/215, 0xd7, 0x433) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe99, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="54010000100033060900000000000000fc0000000000000000000000000000ffffffff000000000073000000000000000040000000800400000000000000000035a04506446f5e416a53c6efc4be436f5d839b8f3fc3802d57207633c55ed5ee16b8e7e3e454641afc087f4b4c8e8ab5cd737efcb10a5c1a259e5f136b935ba4c6493d1b0db804818e52eb30fa5ddca01c3bd86b99e4371c5c777be9ee9a0c09f65c9141370e285ec013fc9e995496b1a1ad30e07979b831b82a11e419a96dceafafd03d", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c000000fe80000000000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108f00000000000000010000002fbd7000000000000a0002ff00000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c2900"/268], 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x4004000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe99, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="54010000100033060900000000000000fc0000000000000000000000000000ffffffff000000000073000000000000000040000000800400000000000000000035a04506446f5e416a53c6efc4be436f5d839b8f3fc3802d57207633c55ed5ee16b8e7e3e454641afc087f4b4c8e8ab5cd737efcb10a5c1a259e5f136b935ba4c6493d1b0db804818e52eb30fa5ddca01c3bd86b99e4371c5c777be9ee9a0c09f65c9141370e285ec013fc9e995496b1a1ad30e07979b831b82a11e419a96dceafafd03d", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c000000fe80000000000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108f00000000000000010000002fbd7000000000000a0002ff00000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c2900"/268], 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x4004000) syz_open_dev$vcsu(&(0x7f0000000040), 0xdbb, 0x4102) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0xdbb, 0x4102) write$tun(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="000000f74a8000920068000080069078ac1414bbac1414bb071b5ee0000001e0000001ffffffff00000000fffffffd7f000001890bc1ac14162c7f000001880c89b2ddd158c079a108cd830b1364010100ac1414bb860a4def8711bf31070bd4000000000000000000000000000000000000000000000000000100004e2400004e24000000010000000300000000000000000000102a0027fab6b912a0c3ef2a59163617339456ea1d4ddfa784ab2b1416f8b2cd33e4c1f75efc336a22993e6f2e5b08b1551106eef42496c384e66ca4f0e4d546515b28c6164899e56df1873783ba82cec833ac1e07f3a694cef59b440357ff5914e55451c37cbc91dd84733dee094373e6d36e6b2517ba05ce0f7bc500cff028d0c97e0e8023d371082bd73912cfab3effce4152c53c948fce27c3549f4a6dc1feca78fb1d4bae07bdf1b889cd7f13797e32939e24b4ef4d4183c0d85c200a0a9b89aa69d0f867d4fcf46192aa7935bcea39000000"], 0x96) 76.728151ms ago: executing program 0 (id=993): r0 = syz_open_pts(0xffffffffffffffff, 0x501000) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) pipe2(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) waitid$P_PIDFD(0x2, r3, 0x0, 0x4, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003240)=@gettaction={0x28, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x2fb785f3c8a819a2, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x48880) 75.043308ms ago: executing program 1 (id=994): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000055aa00", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) 74.796037ms ago: executing program 1 (id=995): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x6, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f98530fddefda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0xa]}}) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000001c0)='a', 0x1, 0x5, 0xc00}]) 74.270366ms ago: executing program 0 (id=996): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32], 0x74}}, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x1, "da7f5b4c103ebf993ddeaeb558fd61f55a215d92e4b39cdd8152b94fa92da377", 0x0, 0x1}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x2]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x4800) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040108000000000000000003000006054f6b4aa6000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) 74.157923ms ago: executing program 3 (id=997): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x5, 0xffffffff, 0x7, 0x3, 0x8801be, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) 2.032509ms ago: executing program 3 (id=998): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010050000000500000006000100050008000b000000000008000c00020000000c00160004000000000000000500140000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.684896ms ago: executing program 3 (id=999): syz_open_dev$tty1(0xc, 0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x3810050, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.332419ms ago: executing program 0 (id=1000): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8c803) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000040)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x800, 0xfffc, {0x4, 0x1}, {0x7f, 0x2}, @cond=[{0x7, 0x3, 0x200, 0xfe2d, 0xb, 0xfbfe}, {0x9, 0xb, 0x6, 0x801, 0x0, 0x529}]}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4}}, &(0x7f0000000400)=0xe8) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, r5, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x37}, 0x94) r7 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7ffffffe, 0x400000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000440)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, &(0x7f0000000580)="788ee248c9673b6b3edbce43019f398512b53b47e1be27baa8ca4142115f480df677880c02023359e799222c5d497b7220447daa7086dbb507ef183928c11d357aca78a9b8527ab7a5ec2826dca20910e8cf145afa88e320fcb5052fdcba26621861348198c07d2bd5d8004bbe76dd052e5633c6789dce0796941cbcb5178af198da37eef85b8b00af2147"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000640)={0x10, 0x1, r9}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000210045013a68f5714c3dce0100000000000c00146bb49b73315f61590e2b2f6dd721e2fe71b6f7d9e5906230b6cd654a7c2c5e2b2a8e33c0ff5d143a8ab7f79c1008b459bd8a2c83a45c90143d2d97101c85d62e7541138400bad2aebfba35129ef61d7f8839a18fa855199881bf8bd2a94b2580476b0eb0df14ebbee4ac5cf801b1db4f1d4eb6d6f8dc4ce4141d588e36a3c0b4b80ac75f739736daf52d535edc698c634eb4e63bc8c91417e81282b1e5caff02541b1216665e6ae7151690b18492fe07e1c89b72aa6512e6c09b6a82f5fb9eeb", @ANYRES32=r6], 0x28}}, 0x800) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r8, &(0x7f0000000340)="7633135fcea6493aa69cbf5afed62f4926f3b9307e79ab5adf4f68afa974be7c4c953ae6eaaeca35d5e30a50de714115904194d55ef8e8cdcbf57fd4e647c5ca5db4493143cd213d253f9f9c40c8148b6247d11c73cc6012e122b4604b5d89463c6c405add9bd831528ece9e32d3056bd5fe3cbc96e8c26ae42c836fb89913a28200f4d5614627892d32e06956a214eba069926b2e9802479c6a83d9747f0db6176d00aaf008a0a7a101398fefd432", &(0x7f0000000200)=""/198, 0x4}, 0x20) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) close_range(r0, 0xffffffffffffffff, 0x0) 751.342µs ago: executing program 3 (id=1001): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000901020000000000000000000000000900010073797a30000000001800020014000180010001000000000008000200ac1e0001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = socket(0x840000000002, 0x3, 0x9) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYRES16=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r8, &(0x7f00000003c0)='ns/time\x00') ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000240)) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="80", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf250a0000000c0003800800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf25090000000800040008000000080004002e00000008000600020000000800040001040000240056780498390c0fe4e9718d205ee8790280060002004e2000000800040000000000080007000600000006000b0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0xb, 0xffffffffffffffff}) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x62c, 0x9, &(0x7f0000000200)=0x4}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=1002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2, {0x3, 0x0, 0x200003, 0x9}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) kernel console output (not intermixed with test programs): ============ [ 52.000456][ T6512] SELinux: policydb string does not match my string SE Linux [ 52.002961][ T6512] SELinux: failed to load policy [ 52.020585][ T6516] loop7: detected capacity change from 0 to 7 [ 52.023126][ T6516] ldm_validate_partition_table(): Disk read failed. [ 52.027538][ T6516] Dev loop7: unable to read RDB block 0 [ 52.029804][ T6516] loop7: unable to read partition table [ 52.031679][ T6516] loop7: partition table beyond EOD, truncated [ 52.033666][ T6516] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 52.074709][ T5979] Bluetooth: hci2: command 0x041b tx timeout [ 52.074747][ T5973] Bluetooth: hci3: command 0x041b tx timeout [ 52.154284][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 52.179941][ T6521] delete_channel: no stack [ 52.631845][ T6528] loop6: detected capacity change from 0 to 7 [ 52.636372][ T5967] Dev loop6: unable to read RDB block 7 [ 52.638407][ T5967] loop6: AHDI p1 [ 52.639837][ T5967] loop6: partition table partially beyond EOD, truncated [ 52.645178][ T6528] Dev loop6: unable to read RDB block 7 [ 52.647007][ T6528] loop6: AHDI p1 [ 52.648162][ T6528] loop6: partition table partially beyond EOD, truncated [ 52.928736][ T6540] loop7: detected capacity change from 0 to 7 [ 52.931725][ T5967] ldm_validate_partition_table(): Disk read failed. [ 52.934095][ T5967] Dev loop7: unable to read RDB block 0 [ 52.936531][ T5967] loop7: unable to read partition table [ 52.938419][ T5967] loop7: partition table beyond EOD, truncated [ 52.941671][ T6540] ldm_validate_partition_table(): Disk read failed. [ 52.944475][ T6540] Dev loop7: unable to read RDB block 0 [ 52.946688][ T6540] loop7: unable to read partition table [ 52.948579][ T6540] loop7: partition table beyond EOD, truncated [ 52.950606][ T6540] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 53.110179][ T6543] random: crng reseeded on system resumption [ 53.186711][ T6556] loop6: detected capacity change from 0 to 7 [ 53.189112][ T6556] Dev loop6: unable to read RDB block 7 [ 53.190941][ T6556] loop6: AHDI p1 [ 53.192169][ T6556] loop6: partition table partially beyond EOD, truncated [ 53.311025][ T6560] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 53.357238][ T6568] loop7: detected capacity change from 0 to 7 [ 53.360255][ T5967] ldm_validate_partition_table(): Disk read failed. [ 53.362661][ T5967] Dev loop7: unable to read RDB block 0 [ 53.365694][ T5967] loop7: unable to read partition table [ 53.368123][ T5967] loop7: partition table beyond EOD, truncated [ 53.372144][ T6568] ldm_validate_partition_table(): Disk read failed. [ 53.375421][ T6568] Dev loop7: unable to read RDB block 0 [ 53.377989][ T6568] loop7: unable to read partition table [ 53.379796][ T6568] loop7: partition table beyond EOD, truncated [ 53.382326][ T6568] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 53.701486][ T6578] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 53.710015][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.720430][ T6578] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 53.728467][ T6578] vlan2: entered allmulticast mode [ 53.730443][ T6578] veth1: entered allmulticast mode [ 53.733009][ T6578] veth1: entered promiscuous mode [ 53.735856][ T6578] veth1: left promiscuous mode [ 53.738854][ T6578] bond1: (slave vlan2): making interface the new active one [ 53.741528][ T6578] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 53.747935][ T6578] veth1: entered promiscuous mode [ 53.749879][ T6578] vlan2: entered promiscuous mode [ 53.751626][ T6578] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 53.756212][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 53.780409][ T6581] loop6: detected capacity change from 0 to 7 [ 53.783098][ T5967] Dev loop6: unable to read RDB block 7 [ 53.785078][ T5967] loop6: AHDI p1 [ 53.786270][ T5967] loop6: partition table partially beyond EOD, truncated [ 53.790182][ T6581] Dev loop6: unable to read RDB block 7 [ 53.791938][ T6581] loop6: AHDI p1 [ 53.793095][ T6581] loop6: partition table partially beyond EOD, truncated [ 54.144295][ T5972] Bluetooth: hci3: command 0x041b tx timeout [ 54.154311][ T5972] Bluetooth: hci2: command 0x041b tx timeout [ 54.433182][ T40] kauditd_printk_skb: 206 callbacks suppressed [ 54.433198][ T40] audit: type=1400 audit(1755651639.994:439): avc: denied { ioctl } for pid=6590 comm="syz.2.190" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 54.451235][ T40] audit: type=1400 audit(1755651640.014:440): avc: denied { sqpoll } for pid=6592 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.477180][ T6601] loop7: detected capacity change from 0 to 7 [ 54.480464][ T6601] ldm_validate_partition_table(): Disk read failed. [ 54.483269][ T6601] Dev loop7: unable to read RDB block 0 [ 54.487106][ T6601] loop7: unable to read partition table [ 54.489570][ T6601] loop7: partition table beyond EOD, truncated [ 54.492105][ T6601] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 54.631539][ T40] audit: type=1400 audit(1755651640.194:441): avc: denied { bind } for pid=6606 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.639421][ T40] audit: type=1400 audit(1755651640.194:442): avc: denied { listen } for pid=6606 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.647863][ T40] audit: type=1400 audit(1755651640.194:443): avc: denied { connect } for pid=6606 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.656568][ T40] audit: type=1400 audit(1755651640.194:444): avc: denied { write } for pid=6606 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.664722][ T6613] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 54.673995][ T40] audit: type=1400 audit(1755651640.234:445): avc: denied { mounton } for pid=6612 comm="syz.0.196" path="/syzcgroup/net/syz0/syz0/file1/file0" dev="cgroup" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 54.678352][ T6615] loop6: detected capacity change from 0 to 7 [ 54.684054][ T5967] Dev loop6: unable to read RDB block 7 [ 54.684208][ T59] IPVS: starting estimator thread 0... [ 54.687668][ T5967] loop6: AHDI p1 [ 54.689224][ T5967] loop6: partition table partially beyond EOD, truncated [ 54.692904][ T6615] Dev loop6: unable to read RDB block 7 [ 54.693827][ T40] audit: type=1400 audit(1755651640.254:446): avc: denied { getopt } for pid=6606 comm="syz.2.194" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.694801][ T6615] loop6: AHDI p1 [ 54.702174][ T6616] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.703193][ T6615] loop6: partition table partially beyond EOD, [ 54.707436][ T5972] Bluetooth: hci4: command 0xfc11 tx timeout [ 54.709196][ T6615] truncated [ 54.710142][ T63] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 54.731070][ T40] audit: type=1400 audit(1755651640.294:447): avc: denied { create } for pid=6620 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.743128][ T6624] fuse: Bad value for 'user_id' [ 54.744839][ T6624] fuse: Bad value for 'user_id' [ 54.747828][ T40] audit: type=1400 audit(1755651640.314:448): avc: denied { getopt } for pid=6623 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.774277][ T6617] IPVS: using max 52 ests per chain, 124800 per kthread [ 54.819390][ T6638] loop7: detected capacity change from 0 to 7 [ 54.819435][ T6639] comedi comedi0: Minor -2147450880 is invalid! [ 54.821879][ T6638] ldm_validate_partition_table(): Disk read failed. [ 54.825976][ T6638] Dev loop7: unable to read RDB block 0 [ 54.827980][ T6638] loop7: unable to read partition table [ 54.829817][ T6638] loop7: partition table beyond EOD, truncated [ 54.831708][ T6638] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 54.886601][ T6643] bridge0: entered allmulticast mode [ 54.915930][ T6646] loop6: detected capacity change from 0 to 7 [ 54.921031][ T6646] Dev loop6: unable to read RDB block 7 [ 54.922823][ T6646] loop6: AHDI p1 [ 54.923959][ T6646] loop6: partition table partially beyond EOD, truncated [ 55.011836][ T6660] futex_wake_op: syz.3.208 tries to shift op by 32; fix this program [ 55.055609][ T6669] rtc_cmos 00:05: Alarms can be up to one day in the future [ 55.155684][ T6681] loop6: detected capacity change from 0 to 7 [ 55.158630][ T6681] Dev loop6: unable to read RDB block 7 [ 55.160425][ T6681] loop6: AHDI p1 [ 55.161579][ T6681] loop6: partition table partially beyond EOD, truncated [ 55.176179][ T6683] loop7: detected capacity change from 0 to 7 [ 55.179174][ T6683] ldm_validate_partition_table(): Disk read failed. [ 55.183809][ T6683] Dev loop7: unable to read RDB block 0 [ 55.186067][ T6683] loop7: unable to read partition table [ 55.187928][ T6683] loop7: partition table beyond EOD, truncated [ 55.190014][ T6683] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 55.304609][ T6691] block nbd1: shutting down sockets [ 55.319105][ T6697] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.224'. [ 55.343750][ T6705] tmpfs: Unknown parameter 'mol' [ 55.367804][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 55.458169][ T6715] loop6: detected capacity change from 0 to 7 [ 55.460530][ T6715] Dev loop6: unable to read RDB block 7 [ 55.462283][ T6715] loop6: AHDI p1 [ 55.464127][ T6715] loop6: partition table partially beyond EOD, truncated [ 55.492403][ T6717] loop7: detected capacity change from 0 to 7 [ 55.495652][ T6717] ldm_validate_partition_table(): Disk read failed. [ 55.499101][ T6717] Dev loop7: unable to read RDB block 0 [ 55.501564][ T6717] loop7: unable to read partition table [ 55.503591][ T6717] loop7: partition table beyond EOD, truncated [ 55.507154][ T6717] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 55.552925][ T6722] program syz.0.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.553007][ T6721] netlink: 96 bytes leftover after parsing attributes in process `syz.0.233'. [ 55.658042][ T6724] kvm: kvm [6723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 55.662134][ T6724] kvm: kvm [6723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 55.686245][ T6724] kvm: kvm [6723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 55.711150][ T6724] kvm: kvm [6723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 55.715320][ T6724] kvm: kvm [6723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 55.734288][ T59] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.735048][ T6724] kvm_intel: kvm [6723]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 55.842992][ T6744] loop6: detected capacity change from 0 to 7 [ 55.845824][ T6744] Dev loop6: unable to read RDB block 7 [ 55.847642][ T6744] loop6: AHDI p1 [ 55.848790][ T6744] loop6: partition table partially beyond EOD, truncated [ 55.884339][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 55.887739][ T59] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.891511][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.895203][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.898480][ T59] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.902902][ T59] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.906831][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.939425][ T6750] loop7: detected capacity change from 0 to 7 [ 55.942153][ C1] blk_print_req_error: 287 callbacks suppressed [ 55.942163][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.948202][ C1] buffer_io_error: 275 callbacks suppressed [ 55.948211][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.952994][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.955930][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.965978][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.969189][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.972134][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.975249][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.977870][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.980700][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.983209][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.986054][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.988574][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.991418][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 55.994600][ T5967] ldm_validate_partition_table(): Disk read failed. [ 55.995454][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.000290][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.003025][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.006166][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.009238][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.011899][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.014742][ T5967] Dev loop7: unable to read RDB block 0 [ 56.016704][ T5967] loop7: unable to read partition table [ 56.018583][ T5967] loop7: partition table beyond EOD, truncated [ 56.022154][ T6750] ldm_validate_partition_table(): Disk read failed. [ 56.024886][ T6750] Dev loop7: unable to read RDB block 0 [ 56.027054][ T6750] loop7: unable to read partition table [ 56.029035][ T6750] loop7: partition table beyond EOD, truncated [ 56.031631][ T6750] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 56.040392][ T6755] netlink: 'syz.2.245': attribute type 11 has an invalid length. [ 56.112149][ T59] usb 8-1: GET_CAPABILITIES returned 0 [ 56.114125][ T59] usbtmc 8-1:16.0: can't read capabilities [ 56.189277][ T6764] loop6: detected capacity change from 0 to 7 [ 56.224655][ T5972] Bluetooth: hci3: command 0x041b tx timeout [ 56.226312][ T63] Bluetooth: hci2: command 0x041b tx timeout [ 56.236833][ T6764] Dev loop6: unable to read RDB block 7 [ 56.238662][ T6764] loop6: unable to read partition table [ 56.240564][ T6764] loop6: partition table beyond EOD, truncated [ 56.240861][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 56.243243][ T6764] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 56.246536][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 56.317082][ T6774] loop6: detected capacity change from 0 to 7 [ 56.319887][ T5967] Dev loop6: unable to read RDB block 7 [ 56.321691][ T5967] loop6: AHDI p1 [ 56.322857][ T5967] loop6: partition table partially beyond EOD, truncated [ 56.334328][ T6774] Dev loop6: unable to read RDB block 7 [ 56.336159][ T6774] loop6: AHDI p1 [ 56.337470][ T6774] loop6: partition table partially beyond EOD, truncated [ 56.355426][ T839] usb 8-1: USB disconnect, device number 2 [ 56.561167][ T6793] loop7: detected capacity change from 0 to 7 [ 56.564293][ T6793] ldm_validate_partition_table(): Disk read failed. [ 56.566650][ T6793] Dev loop7: unable to read RDB block 0 [ 56.569119][ T6793] loop7: unable to read partition table [ 56.570900][ T6793] loop7: partition table beyond EOD, truncated [ 56.572844][ T6793] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 56.704528][ T6788] nbd0: detected capacity change from 0 to 127 [ 56.709331][ T63] block nbd0: Receive control failed (result -104) [ 56.709334][ T5972] block nbd0: Receive control failed (result -32) [ 56.777527][ T6802] overlayfs: failed to resolve './file1': -2 [ 56.852355][ T6815] loop7: detected capacity change from 0 to 7 [ 56.855213][ T6815] ldm_validate_partition_table(): Disk read failed. [ 56.858519][ T6815] Dev loop7: unable to read RDB block 0 [ 56.861140][ T6815] loop7: unable to read partition table [ 56.863471][ T6815] loop7: partition table beyond EOD, truncated [ 56.865863][ T6815] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 56.939621][ T6825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.266'. [ 56.964234][ T6742] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.003848][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 57.046756][ T6832] loop6: detected capacity change from 0 to 7 [ 57.049382][ T6832] Dev loop6: unable to read RDB block 7 [ 57.051122][ T6832] loop6: AHDI p1 [ 57.052270][ T6832] loop6: partition table partially beyond EOD, truncated [ 57.076430][ T5380] ldm_validate_partition_table(): Disk read failed. [ 57.079624][ T5380] Dev loop7: unable to read RDB block 0 [ 57.082114][ T5380] loop7: unable to read partition table [ 57.083851][ T5380] loop7: partition table beyond EOD, truncated [ 57.115633][ T6742] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.119213][ T6742] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 57.122886][ T6742] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 57.126591][ T6742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.130218][ T6800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.135309][ T6742] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.221798][ T6843] Illegal XDP return value 8 on prog (id 33) dev N/A, expect packet loss! [ 57.311401][ T6860] loop6: detected capacity change from 0 to 7 [ 57.315081][ T5984] Dev loop6: unable to read RDB block 7 [ 57.316899][ T5984] loop6: AHDI p1 [ 57.318077][ T5984] loop6: partition table partially beyond EOD, truncated [ 57.321120][ T6860] Dev loop6: unable to read RDB block 7 [ 57.322992][ T6860] loop6: AHDI p1 [ 57.324491][ T6860] loop6: partition table partially beyond EOD, truncated [ 57.335792][ T6742] usb 6-1: USB disconnect, device number 2 [ 57.384829][ T5380] ldm_validate_partition_table(): Disk read failed. [ 57.387337][ T5380] Dev loop7: unable to read RDB block 0 [ 57.389293][ T5380] loop7: unable to read partition table [ 57.391129][ T5380] loop7: partition table beyond EOD, truncated [ 57.511462][ T6869] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.569678][ T6882] loop6: detected capacity change from 0 to 7 [ 57.569974][ T6881] rtc_cmos 00:05: Alarms can be up to one day in the future [ 57.574132][ T6882] Dev loop6: unable to read RDB block 7 [ 57.575841][ T6884] CUSE: unknown device info "" [ 57.576103][ T6882] loop6: AHDI p1 [ 57.577699][ T6884] CUSE: zero length info key specified [ 57.578831][ T6882] loop6: partition table partially beyond EOD, truncated [ 57.584829][ T6884] [U] ^R [ 57.607371][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'. [ 57.628206][ T5380] ldm_validate_partition_table(): Disk read failed. [ 57.630680][ T5380] Dev loop7: unable to read RDB block 0 [ 57.632689][ T5380] loop7: unable to read partition table [ 57.635487][ T5380] loop7: partition table beyond EOD, truncated [ 57.759398][ T6904] bond1: entered promiscuous mode [ 57.761690][ T6904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.799659][ T6910] loop6: detected capacity change from 0 to 7 [ 57.802060][ T6910] Dev loop6: unable to read RDB block 7 [ 57.803802][ T6910] loop6: AHDI p1 [ 57.805428][ T6910] loop6: partition table partially beyond EOD, truncated [ 57.826088][ T6912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=6912 comm=syz.2.297 [ 57.830351][ T6912] syz_tun: entered allmulticast mode [ 57.833959][ T6912] overlayfs: failed to resolve './file1/file0': -2 [ 57.838667][ T6911] syz_tun: left allmulticast mode [ 57.873639][ T6924] fuse: Bad value for 'fd' [ 57.877594][ T6924] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 57.879852][ T6924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.880759][ T6928] loop7: detected capacity change from 0 to 7 [ 57.882196][ T6924] vhci_hcd vhci_hcd.0: Device attached [ 57.885882][ T6928] ldm_validate_partition_table(): Disk read failed. [ 57.889575][ T6928] Dev loop7: unable to read RDB block 0 [ 57.890111][ T6926] vhci_hcd: connection closed [ 57.891638][ T1147] vhci_hcd: stop threads [ 57.891753][ T6928] loop7: unable to read partition table [ 57.893153][ T1147] vhci_hcd: release socket [ 57.893160][ T1147] vhci_hcd: disconnect device [ 57.901930][ T6928] loop7: partition table beyond EOD, truncated [ 57.905041][ T6928] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 58.021427][ T6930] syz.2.302: attempt to access beyond end of device [ 58.021427][ T6930] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 58.026214][ T6930] qnx4: unable to read the superblock [ 58.068543][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 58.094009][ T6940] loop6: detected capacity change from 0 to 7 [ 58.098132][ T6940] Dev loop6: unable to read RDB block 7 [ 58.100190][ T6940] loop6: AHDI p1 [ 58.101412][ T6940] loop6: partition table partially beyond EOD, truncated [ 58.124085][ T6942] netlink: 'syz.2.306': attribute type 12 has an invalid length. [ 58.128046][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'. [ 58.151335][ T6944] loop7: detected capacity change from 0 to 7 [ 58.155269][ T6944] ldm_validate_partition_table(): Disk read failed. [ 58.158380][ T6944] Dev loop7: unable to read RDB block 0 [ 58.161245][ T6944] loop7: unable to read partition table [ 58.163427][ T6944] loop7: partition table beyond EOD, truncated [ 58.166495][ T6944] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 58.300358][ T6952] loop7: detected capacity change from 0 to 7 [ 58.303818][ T5984] ldm_validate_partition_table(): Disk read failed. [ 58.304294][ T5972] Bluetooth: hci2: command 0x041b tx timeout [ 58.306626][ T5984] Dev loop7: unable to read RDB block 0 [ 58.310015][ T5984] loop7: unable to read partition table [ 58.311900][ T5984] loop7: partition table beyond EOD, truncated [ 58.314347][ T5972] Bluetooth: hci3: command 0x041b tx timeout [ 58.316082][ T6952] ldm_validate_partition_table(): Disk read failed. [ 58.318902][ T6952] Dev loop7: unable to read RDB block 0 [ 58.320919][ T6952] loop7: unable to read partition table [ 58.322742][ T6952] loop7: partition table beyond EOD, truncated [ 58.324817][ T6952] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 58.413246][ T6954] netlink: 'syz.0.311': attribute type 29 has an invalid length. [ 58.416187][ T6954] netlink: 'syz.0.311': attribute type 29 has an invalid length. [ 58.424950][ T6954] netlink: 524 bytes leftover after parsing attributes in process `syz.0.311'. [ 58.424960][ T59] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 58.427866][ T6954] unsupported nla_type 58 [ 58.451844][ T6957] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 58.465147][ T6960] loop6: detected capacity change from 0 to 7 [ 58.467612][ T6960] Dev loop6: unable to read RDB block 7 [ 58.469445][ T6960] loop6: AHDI p1 [ 58.470684][ T6960] loop6: partition table partially beyond EOD, truncated [ 58.510993][ T6964] syz.2.316: attempt to access beyond end of device [ 58.510993][ T6964] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 58.515984][ T6964] XFS (nbd2): SB validate failed with error -5. [ 58.540548][ T7030] netlink: 92 bytes leftover after parsing attributes in process `syz.2.318'. [ 58.547865][ T7031] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 58.552623][ T7031] team0: Port device dummy0 added [ 58.571820][ T7034] loop4: detected capacity change from 0 to 7 [ 58.576080][ T7034] ldm_validate_partition_table(): Disk read failed. [ 58.580273][ T7034] Dev loop4: unable to read RDB block 0 [ 58.582779][ T7034] loop4: unable to read partition table [ 58.586236][ T7034] loop4: partition table beyond EOD, truncated [ 58.588839][ T7034] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 58.588983][ T59] usb 8-1: No LPM exit latency info found, disabling LPM. [ 58.599696][ T59] usb 8-1: config 8 has an invalid interface number: 222 but max is 1 [ 58.602810][ T59] usb 8-1: config 8 has an invalid interface number: 4 but max is 1 [ 58.607416][ T59] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 58.610746][ T59] usb 8-1: config 8 has an invalid interface number: 10 but max is 1 [ 58.613807][ T59] usb 8-1: config 8 has an invalid interface descriptor of length 3, skipping [ 58.617464][ T59] usb 8-1: config 8 has an invalid interface association descriptor of length 4, skipping [ 58.621204][ T59] usb 8-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 58.626968][ T59] usb 8-1: config 8 has 4 interfaces, different from the descriptor's value: 2 [ 58.630569][ T59] usb 8-1: config 8 has no interface number 0 [ 58.632881][ T59] usb 8-1: config 8 has no interface number 2 [ 58.635391][ T59] usb 8-1: config 8 has no interface number 3 [ 58.637875][ T59] usb 8-1: config 8 interface 222 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 58.642863][ T59] usb 8-1: too many endpoints for config 8 interface 1 altsetting 12: 39, using maximum allowed: 30 [ 58.647829][ T59] usb 8-1: config 8 interface 1 altsetting 12 endpoint 0x4 has invalid wMaxPacketSize 0 [ 58.653003][ T59] usb 8-1: config 8 interface 1 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 39 [ 58.662579][ T59] usb 8-1: config 8 interface 4 altsetting 20 endpoint 0x9 has invalid maxpacket 64, setting to 0 [ 58.666843][ T59] usb 8-1: config 8 interface 4 altsetting 20 has a duplicate endpoint with address 0x4, skipping [ 58.670863][ T59] usb 8-1: config 8 interface 4 altsetting 20 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 58.676067][ T59] usb 8-1: config 8 interface 4 altsetting 20 endpoint 0x3 has invalid maxpacket 1088, setting to 8 [ 58.680641][ T59] usb 8-1: config 8 interface 4 altsetting 20 has an invalid descriptor for endpoint zero, skipping [ 58.682260][ T7043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7043 comm=syz.1.321 [ 58.685083][ T59] usb 8-1: config 8 interface 4 altsetting 20 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 58.692962][ T59] usb 8-1: config 8 interface 4 altsetting 20 has a duplicate endpoint with address 0x84, skipping [ 58.697230][ T59] usb 8-1: config 8 interface 4 altsetting 20 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 58.701140][ T59] usb 8-1: config 8 interface 4 altsetting 20 has a duplicate endpoint with address 0x9, skipping [ 58.705379][ T59] usb 8-1: config 8 interface 4 altsetting 20 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 58.709339][ T59] usb 8-1: config 8 interface 4 altsetting 20 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 58.712314][ T7046] loop7: detected capacity change from 0 to 7 [ 58.713250][ T59] usb 8-1: config 8 interface 4 altsetting 20 has 11 endpoint descriptors, different from the interface descriptor's value: 30 [ 58.716251][ T7046] ldm_validate_partition_table(): Disk read failed. [ 58.720608][ T59] usb 8-1: config 8 interface 10 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 58.722694][ T7046] Dev loop7: unable to read RDB block 0 [ 58.727821][ T59] usb 8-1: config 8 interface 222 has no altsetting 0 [ 58.729464][ T7046] loop7: unable to read partition table [ 58.731737][ T59] usb 8-1: config 8 interface 1 has no altsetting 0 [ 58.733637][ T7046] loop7: partition table beyond EOD, [ 58.736422][ T59] usb 8-1: config 8 interface 4 has no altsetting 0 [ 58.736631][ T7046] truncated [ 58.738595][ T59] usb 8-1: config 8 interface 10 has no altsetting 0 [ 58.743976][ T7046] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 59.088111][ T7054] loop6: detected capacity change from 0 to 7 [ 59.090786][ T5984] Dev loop6: unable to read RDB block 7 [ 59.092593][ T5984] loop6: AHDI p1 [ 59.093840][ T5984] loop6: partition table partially beyond EOD, truncated [ 59.100491][ T7054] Dev loop6: unable to read RDB block 7 [ 59.102866][ T7054] loop6: AHDI p1 [ 59.104110][ T7054] loop6: partition table partially beyond EOD, truncated [ 59.382923][ T7086] loop7: detected capacity change from 0 to 7 [ 59.388307][ T7086] ldm_validate_partition_table(): Disk read failed. [ 59.390803][ T7086] Dev loop7: unable to read RDB block 0 [ 59.392876][ T7086] loop7: unable to read partition table [ 59.394791][ T7086] loop7: partition table beyond EOD, truncated [ 59.397378][ T7086] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 59.536681][ T7094] loop6: detected capacity change from 0 to 7 [ 59.539390][ T7094] Dev loop6: unable to read RDB block 7 [ 59.541469][ T7094] loop6: AHDI p1 [ 59.542797][ T7094] loop6: partition table partially beyond EOD, truncated [ 59.623008][ T7102] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 59.628182][ T7102] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 59.631300][ T7102] netlink: 216 bytes leftover after parsing attributes in process `syz.2.337'. [ 59.635342][ T7102] NCSI netlink: No device for ifindex 33022 [ 59.638838][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 59.638850][ T40] audit: type=1400 audit(1755651645.204:529): avc: denied { mount } for pid=7103 comm="syz.1.338" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.711509][ T7114] loop7: detected capacity change from 0 to 7 [ 59.715138][ T7114] ldm_validate_partition_table(): Disk read failed. [ 59.717564][ T7114] Dev loop7: unable to read RDB block 0 [ 59.719670][ T7114] loop7: unable to read partition table [ 59.721443][ T7114] loop7: partition table beyond EOD, truncated [ 59.723886][ T7114] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 59.859530][ T7119] loop7: detected capacity change from 0 to 7 [ 59.863291][ T7119] ldm_validate_partition_table(): Disk read failed. [ 59.866456][ T7119] Dev loop7: unable to read RDB block 0 [ 59.868490][ T7119] loop7: unable to read partition table [ 59.870481][ T7119] loop7: partition table beyond EOD, truncated [ 59.872437][ T7119] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 59.880350][ T40] audit: type=1400 audit(1755651645.444:530): avc: denied { execute } for pid=7118 comm="syz.2.343" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.884630][ T7119] openvswitch: netlink: Flow actions attr not present in new flow. [ 59.889534][ T40] audit: type=1400 audit(1755651645.444:531): avc: denied { audit_read } for pid=7118 comm="syz.2.343" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.899570][ T40] audit: type=1400 audit(1755651645.444:532): avc: denied { ioctl } for pid=7118 comm="syz.2.343" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.903266][ T7119] tmpfs: Unknown parameter 'hueEjRB0)' [ 59.922639][ T5380] ldm_validate_partition_table(): Disk read failed. [ 59.925258][ T5380] Dev loop7: unable to read RDB block 0 [ 59.927393][ T5380] loop7: unable to read partition table [ 59.929212][ T5380] loop7: partition table beyond EOD, truncated [ 60.093081][ T7122] loop6: detected capacity change from 0 to 7 [ 60.096521][ T7122] Dev loop6: unable to read RDB block 7 [ 60.098778][ T7122] loop6: AHDI p1 [ 60.100304][ T7122] loop6: partition table partially beyond EOD, truncated [ 60.175585][ T40] audit: type=1400 audit(1755651645.744:533): avc: denied { mount } for pid=7123 comm="syz.2.345" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.384278][ T5972] Bluetooth: hci3: command 0x041b tx timeout [ 60.571583][ T7137] loop7: detected capacity change from 0 to 7 [ 60.576008][ T7137] ldm_validate_partition_table(): Disk read failed. [ 60.581187][ T7137] Dev loop7: unable to read RDB block 0 [ 60.583442][ T40] audit: type=1400 audit(1755651646.144:534): avc: denied { unlink } for pid=7138 comm="syz.1.351" name="#3" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.584438][ T7137] loop7: unable to read partition table [ 60.590171][ T40] audit: type=1400 audit(1755651646.144:535): avc: denied { mount } for pid=7138 comm="syz.1.351" name="/" dev="overlay" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.591831][ T7137] loop7: partition table beyond EOD, truncated [ 60.599295][ T40] audit: type=1800 audit(1755651646.144:536): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.351" name="bus" dev="overlay" ino=471 res=0 errno=0 [ 60.601077][ T7137] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 60.613158][ T40] audit: type=1400 audit(1755651646.174:537): avc: denied { unmount } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.636842][ T7141] loop7: detected capacity change from 0 to 7 [ 60.639678][ T7141] ldm_validate_partition_table(): Disk read failed. [ 60.642152][ T7141] Dev loop7: unable to read RDB block 0 [ 60.644379][ T7141] loop7: unable to read partition table [ 60.646229][ T7141] loop7: partition table beyond EOD, truncated [ 60.648120][ T7141] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 60.735376][ T7143] loop6: detected capacity change from 0 to 7 [ 60.737953][ T7143] Dev loop6: unable to read RDB block 7 [ 60.739794][ T7143] loop6: AHDI p1 [ 60.741324][ T7143] loop6: partition table partially beyond EOD, truncated [ 60.809326][ T40] audit: type=1400 audit(1755651646.374:538): avc: denied { create } for pid=7152 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.827802][ T7157] tmpfs: Group quota inode hardlimit too large. [ 60.867788][ T7163] loop7: detected capacity change from 0 to 7 [ 60.870849][ T7163] ldm_validate_partition_table(): Disk read failed. [ 60.873489][ T7163] Dev loop7: unable to read RDB block 0 [ 60.875670][ T7163] loop7: unable to read partition table [ 60.877506][ T7163] loop7: partition table beyond EOD, truncated [ 60.879432][ T7163] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 60.888458][ T7167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7167 comm=syz.0.362 [ 60.974630][ T7169] loop7: detected capacity change from 0 to 7 [ 60.977328][ C3] blk_print_req_error: 390 callbacks suppressed [ 60.977337][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.982237][ C3] buffer_io_error: 375 callbacks suppressed [ 60.982245][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.986879][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.990003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.992597][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.995555][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.998269][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.001229][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.004236][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.008087][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.011335][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.014178][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.016002][ T7173] loop6: detected capacity change from 0 to 7 [ 61.019470][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.019607][ T7173] Dev loop6: unable to read RDB block 7 [ 61.023276][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.025551][ T7173] loop6: AHDI p1 [ 61.028271][ T5984] ldm_validate_partition_table(): Disk read failed. [ 61.029624][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.029945][ T7173] loop6: partition table partially beyond EOD, truncated [ 61.032646][ T5972] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 61.041476][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.041478][ T7176] sctp: [Deprecated]: syz.1.366 (pid 7176) Use of int in max_burst socket option. [ 61.041478][ T7176] Use struct sctp_assoc_value instead [ 61.041493][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.051586][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.055061][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.058531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.061824][ T5984] Dev loop7: unable to read RDB block 0 [ 61.062046][ T7179] netlink: 'syz.1.368': attribute type 23 has an invalid length. [ 61.063940][ T5984] loop7: unable to read partition table [ 61.067817][ T7179] netlink: 'syz.1.368': attribute type 23 has an invalid length. [ 61.068198][ T5984] loop7: partition table beyond EOD, truncated [ 61.075904][ T7169] ldm_validate_partition_table(): Disk read failed. [ 61.078688][ T7169] Dev loop7: unable to read RDB block 0 [ 61.080713][ T7169] loop7: unable to read partition table [ 61.082696][ T7169] loop7: partition table beyond EOD, truncated [ 61.087761][ T7169] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 61.170969][ T7196] loop7: detected capacity change from 0 to 7 [ 61.173665][ T7196] ldm_validate_partition_table(): Disk read failed. [ 61.177143][ T7196] Dev loop7: unable to read RDB block 0 [ 61.177737][ T7198] sch_fq: defrate 0 ignored. [ 61.179162][ T7196] loop7: unable to read partition table [ 61.182255][ T7196] loop7: partition table beyond EOD, truncated [ 61.184127][ T7196] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 61.185477][ T7198] bond_slave_0: entered promiscuous mode [ 61.190950][ T7198] bond_slave_1: entered promiscuous mode [ 61.192864][ T7198] macvlan2: entered allmulticast mode [ 61.195183][ T7198] bond0: entered allmulticast mode [ 61.196816][ T59] usb 8-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=ba.d5 [ 61.196866][ T7198] bond_slave_0: entered allmulticast mode [ 61.199795][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.204209][ T59] usb 8-1: can't set config #8, error -71 [ 61.205484][ T7198] bond_slave_1: entered allmulticast mode [ 61.209741][ T7198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.210885][ T59] usb 8-1: USB disconnect, device number 3 [ 61.212432][ T7200] loop6: detected capacity change from 0 to 7 [ 61.212831][ T7200] Dev loop6: unable to read RDB block 7 [ 61.213102][ T7198] bridge0: port 3(macvlan2) entered blocking state [ 61.213131][ T7198] bridge0: port 3(macvlan2) entered disabled state [ 61.215409][ T7198] macvlan2: entered promiscuous mode [ 61.217093][ T7200] loop6: AHDI p1 [ 61.218480][ T7198] bond0: entered promiscuous mode [ 61.220873][ T7200] loop6: partition table partially beyond EOD, [ 61.223367][ T7198] bridge0: port 3(macvlan2) entered blocking state [ 61.225060][ T7200] truncated [ 61.225726][ T7198] bridge0: port 3(macvlan2) entered forwarding state [ 61.255358][ T7207] cgroup: release_agent respecified [ 61.258588][ T7208] cgroup: release_agent respecified [ 61.259997][ T7210] nbd: socks must be embedded in a SOCK_ITEM attr [ 61.270718][ T7210] No control pipe specified [ 61.273125][ T7213] __nla_validate_parse: 7 callbacks suppressed [ 61.273136][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 61.340479][ T7233] loop6: detected capacity change from 0 to 7 [ 61.342693][ T7233] Dev loop6: unable to read RDB block 7 [ 61.346285][ T7233] loop6: AHDI p1 [ 61.347421][ T7233] loop6: partition table partially beyond EOD, truncated [ 61.366067][ T7242] loop7: detected capacity change from 0 to 7 [ 61.368733][ T7242] ldm_validate_partition_table(): Disk read failed. [ 61.373166][ T7242] Dev loop7: unable to read RDB block 0 [ 61.375720][ T7242] loop7: unable to read partition table [ 61.377505][ T7242] loop7: partition table beyond EOD, truncated [ 61.380103][ T7242] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 61.456820][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.458752][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.460547][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.461826][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.465467][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.466411][ T7254] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 61.468217][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.471324][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.474822][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.476537][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.484555][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.486138][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.488717][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.492052][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.495613][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.498822][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.501272][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.505301][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.505361][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.516675][ T7251] binder_alloc: binder_alloc_mmap_handler: 7250 200000ffd000-200001000000 already mapped failed -16 [ 61.525283][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.527969][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.532734][ T7260] Bluetooth: MGMT ver 1.23 [ 61.533227][ T7258] binder: 7250:7258 ioctl 54a6 0 returned -22 [ 61.533607][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.533672][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.533678][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.533732][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.533738][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.533789][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.533795][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.533847][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.533853][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.533919][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.533925][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.533976][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.533982][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.534034][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.534041][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.534091][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.534097][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.535475][ T7252] binder: BINDER_SET_CONTEXT_MGR already set [ 61.537758][ T7263] Invalid logical block size (4) [ 61.539745][ T7252] binder: 7250:7252 ioctl 4018620d 200000004a80 returned -16 [ 61.626647][ T7274] loop6: detected capacity change from 0 to 7 [ 61.629879][ T7274] Dev loop6: unable to read RDB block 7 [ 61.632298][ T7274] loop6: AHDI p1 [ 61.633897][ T7274] loop6: partition table partially beyond EOD, truncated [ 61.719253][ T7293] loop7: detected capacity change from 0 to 7 [ 61.721865][ T7293] ldm_validate_partition_table(): Disk read failed. [ 61.724063][ T7293] Dev loop7: unable to read RDB block 0 [ 61.726057][ T7293] loop7: unable to read partition table [ 61.727821][ T7293] loop7: partition table beyond EOD, truncated [ 61.729801][ T7293] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 61.739667][ T7016] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 62.562990][ T7307] bridge2: entered promiscuous mode [ 62.583472][ T7312] loop6: detected capacity change from 0 to 7 [ 62.586147][ T7312] Dev loop6: unable to read RDB block 7 [ 62.588040][ T7312] loop6: AHDI p1 [ 62.589719][ T7312] loop6: partition table partially beyond EOD, truncated [ 62.591006][ T7309] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 62.616405][ T7316] loop7: detected capacity change from 0 to 7 [ 62.619374][ T7316] ldm_validate_partition_table(): Disk read failed. [ 62.621796][ T7316] Dev loop7: unable to read RDB block 0 [ 62.623893][ T7316] loop7: unable to read partition table [ 62.626224][ T7316] loop7: partition table beyond EOD, truncated [ 62.628326][ T7316] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 62.639846][ T5380] ldm_validate_partition_table(): Disk read failed. [ 62.642306][ T5380] Dev loop7: unable to read RDB block 0 [ 62.648980][ T5380] loop7: unable to read partition table [ 62.650934][ T5380] loop7: partition table beyond EOD, truncated [ 62.821613][ T7329] trusted_key: syz.3.418 sent an empty control message without MSG_MORE. [ 62.843982][ T7331] netlink: 48 bytes leftover after parsing attributes in process `syz.3.419'. [ 62.854085][ T7333] dvmrp8: entered allmulticast mode [ 63.117395][ T5972] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 63.126506][ T7350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7350 comm=syz.1.426 [ 63.130415][ T7350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7350 comm=syz.1.426 [ 63.330902][ T7359] overlayfs: failed to resolve './file1': -2 [ 63.510704][ T7367] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 63.518529][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.526949][ T7367] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 63.536166][ T7367] vlan2: entered allmulticast mode [ 63.538072][ T7367] veth1: entered allmulticast mode [ 63.540356][ T7367] veth1: entered promiscuous mode [ 63.542160][ T7367] veth1: left promiscuous mode [ 63.545023][ T7367] bond2: (slave vlan2): making interface the new active one [ 63.547685][ T7367] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 63.553337][ T7367] veth1: entered promiscuous mode [ 63.556098][ T7367] vlan2: entered promiscuous mode [ 63.557894][ T7367] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 63.663887][ T7373] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 63.666641][ T7373] netlink: 172 bytes leftover after parsing attributes in process `syz.2.436'. [ 63.669476][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 63.672874][ T7373] loop7: detected capacity change from 0 to 7 [ 63.676115][ T7373] ldm_validate_partition_table(): Disk read failed. [ 63.679148][ T34] cfg80211: failed to load regulatory.db [ 63.680398][ T7373] Dev loop7: unable to read RDB block 0 [ 63.683084][ T7373] loop7: unable to read partition table [ 63.691720][ T7373] loop7: partition table beyond EOD, truncated [ 63.693277][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 63.693742][ T7373] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 63.742216][ T7379] Invalid source name [ 63.743598][ T7379] UBIFS error (pid: 7379): cannot open "ubifs", error -22 [ 63.744997][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 63.769272][ T7388] loop6: detected capacity change from 0 to 7 [ 63.772522][ T7388] Dev loop6: unable to read RDB block 7 [ 63.776998][ T7388] loop6: AHDI p1 [ 63.778233][ T7388] loop6: partition table partially beyond EOD, truncated [ 63.805546][ T7397] loop7: detected capacity change from 0 to 7 [ 63.808031][ T7399] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 63.809497][ T7397] ldm_validate_partition_table(): Disk read failed. [ 63.815719][ T7397] Dev loop7: unable to read RDB block 0 [ 63.818469][ T7397] loop7: unable to read partition table [ 63.820853][ T7397] loop7: partition table beyond EOD, truncated [ 63.825959][ T7397] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 63.857330][ T7410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.976262][ T7436] openvswitch: netlink: Flow actions attr not present in new flow. [ 63.984694][ T7438] tmpfs: Bad value for 'mpol' [ 63.987095][ T7438] tmpfs: Bad value for 'mpol' [ 63.988829][ T7438] tmpfs: Bad value for 'mpol' [ 63.990766][ T7438] tmpfs: Bad value for 'mpol' [ 63.992459][ T7438] tmpfs: Bad value for 'mpol' [ 63.995571][ T7438] tmpfs: Bad value for 'mpol' [ 63.997684][ T7438] tmpfs: Bad value for 'mpol' [ 63.999333][ T7438] tmpfs: Bad value for 'mpol' [ 64.000923][ T7438] tmpfs: Bad value for 'mpol' [ 64.002493][ T7438] tmpfs: Bad value for 'mpol' [ 64.004059][ T7438] tmpfs: Bad value for 'mpol' [ 64.006018][ T7438] tmpfs: Bad value for 'mpol' [ 64.007666][ T7438] tmpfs: Bad value for 'mpol' [ 64.009295][ T7438] tmpfs: Bad value for 'mpol' [ 64.010925][ T7438] tmpfs: Bad value for 'mpol' [ 64.012505][ T7438] tmpfs: Bad value for 'mpol' [ 64.014106][ T7438] tmpfs: Bad value for 'mpol' [ 64.015905][ T7438] tmpfs: Bad value for 'mpol' [ 64.017511][ T7438] tmpfs: Bad value for 'mpol' [ 64.019133][ T7438] tmpfs: Bad value for 'mpol' [ 64.020691][ T7438] tmpfs: Bad value for 'mpol' [ 64.022424][ T7438] tmpfs: Bad value for 'mpol' [ 64.023993][ T7438] tmpfs: Bad value for 'mpol' [ 64.026217][ T7438] tmpfs: Bad value for 'mpol' [ 64.027826][ T7438] tmpfs: Bad value for 'mpol' [ 64.029646][ T7438] tmpfs: Bad value for 'mpol' [ 64.031316][ T7438] tmpfs: Bad value for 'mpol' [ 64.032979][ T7438] tmpfs: Bad value for 'mpol' [ 64.034970][ T7438] tmpfs: Bad value for 'mpol' [ 64.036559][ T7438] tmpfs: Bad value for 'mpol' [ 64.038186][ T7438] tmpfs: Bad value for 'mpol' [ 64.039828][ T7438] tmpfs: Bad value for 'mpol' [ 64.041423][ T7438] tmpfs: Bad value for 'mpol' [ 64.109999][ T7464] loop6: detected capacity change from 0 to 7 [ 64.113530][ T7464] Dev loop6: unable to read RDB block 7 [ 64.113819][ T7466] loop7: detected capacity change from 0 to 7 [ 64.116561][ T7464] loop6: AHDI p1 [ 64.119366][ T7466] ldm_validate_partition_table(): Disk read failed. [ 64.119832][ T7464] loop6: partition table partially beyond EOD, truncated [ 64.122154][ T7466] Dev loop7: unable to read RDB block 0 [ 64.130381][ T7466] loop7: unable to read partition table [ 64.132216][ T7466] loop7: partition table beyond EOD, truncated [ 64.136055][ T7466] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 64.143981][ T5380] ldm_validate_partition_table(): Disk read failed. [ 64.147363][ T5380] Dev loop7: unable to read RDB block 0 [ 64.149608][ T5380] loop7: unable to read partition table [ 64.151463][ T5380] loop7: partition table beyond EOD, truncated [ 64.172940][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 64.172954][ T7477] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 64.282887][ T7470] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.466'. [ 64.309196][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 64.311983][ T7489] netlink: 'syz.2.471': attribute type 12 has an invalid length. [ 64.314641][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 64.319822][ T1146] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.319874][ T7489] netlink: 'syz.2.471': attribute type 12 has an invalid length. [ 64.324394][ T1146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.328390][ T1146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.331444][ T1146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.475819][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 64.505099][ T7511] vxlan1: entered promiscuous mode [ 64.588467][ T7483] syz.0.470 (7483): drop_caches: 2 [ 64.753680][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 64.753694][ T40] audit: type=1400 audit(1755651650.314:596): avc: denied { mount } for pid=7526 comm="syz.1.485" name="/" dev="gadgetfs" ino=6137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.758352][ T7528] overlayfs: failed to clone lowerpath [ 64.782149][ T7533] loop6: detected capacity change from 0 to 7 [ 64.785391][ T5984] Dev loop6: unable to read RDB block 7 [ 64.787238][ T5984] loop6: AHDI p1 [ 64.788563][ T5984] loop6: partition table partially beyond EOD, truncated [ 64.793502][ T7533] Dev loop6: unable to read RDB block 7 [ 64.795810][ T7533] loop6: AHDI p1 [ 64.797367][ T7533] loop6: partition table partially beyond EOD, truncated [ 64.821395][ T7535] loop7: detected capacity change from 0 to 7 [ 64.824602][ T7535] ldm_validate_partition_table(): Disk read failed. [ 64.826909][ T7535] Dev loop7: unable to read RDB block 0 [ 64.828957][ T7535] loop7: unable to read partition table [ 64.831300][ T7535] loop7: partition table beyond EOD, truncated [ 64.833834][ T7535] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 64.914412][ T7005] vlan2: left promiscuous mode [ 65.035135][ T7540] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 65.150140][ T7541] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 65.342048][ T40] audit: type=1400 audit(1755651650.904:597): avc: denied { accept } for pid=7553 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.345028][ T7005] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.350496][ T7556] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.380388][ T40] audit: type=1400 audit(1755651650.944:598): avc: denied { connect } for pid=7559 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.581943][ T7565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7565 comm=syz.1.500 [ 65.601612][ T7565] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.723512][ T7575] ceph: No mds server is up or the cluster is laggy [ 65.725985][ T59] libceph: connect (1)[c::]:6789 error -101 [ 65.727970][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 65.743891][ T40] audit: type=1400 audit(1755651651.304:599): avc: denied { create } for pid=7581 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 65.753841][ T7585] loop6: detected capacity change from 0 to 7 [ 65.756386][ T7585] Dev loop6: unable to read RDB block 7 [ 65.758203][ T7585] loop6: AHDI p1 [ 65.759410][ T7585] loop6: partition table partially beyond EOD, truncated [ 65.767216][ T7582] team0 (unregistering): Port device team_slave_0 removed [ 65.771846][ T7582] team0 (unregistering): Port device team_slave_1 removed [ 65.826526][ T7589] loop7: detected capacity change from 0 to 7 [ 65.829424][ T7589] ldm_validate_partition_table(): Disk read failed. [ 65.831802][ T7589] Dev loop7: unable to read RDB block 0 [ 65.833869][ T7589] loop7: unable to read partition table [ 65.836174][ T7589] loop7: partition table beyond EOD, truncated [ 65.838080][ T7589] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 65.861117][ T7594] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 65.962706][ T7610] loop6: detected capacity change from 0 to 7 [ 65.966556][ T5984] Dev loop6: unable to read RDB block 7 [ 65.968333][ T5984] loop6: AHDI p1 [ 65.969588][ T5984] loop6: partition table partially beyond EOD, truncated [ 65.973013][ T7610] Dev loop6: unable to read RDB block 7 [ 65.975230][ T7610] loop6: AHDI p1 [ 65.976718][ T7610] loop6: partition table partially beyond EOD, truncated [ 66.098517][ T40] audit: type=1400 audit(1755651651.664:600): avc: denied { getattr } for pid=7620 comm="syz.3.520" name="/" dev="9p" ino=35913836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.105028][ T7621] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.209185][ T7619] trusted_key: encrypted_key: insufficient parameters specified [ 66.301236][ T7635] loop6: detected capacity change from 0 to 7 [ 66.303574][ T7635] Dev loop6: unable to read RDB block 7 [ 66.305578][ T7635] loop6: AHDI p1 [ 66.306762][ T7635] loop6: partition table partially beyond EOD, truncated [ 66.382840][ T7639] netlink: 'syz.1.528': attribute type 5 has an invalid length. [ 66.387407][ T7639] ip6erspan0: entered promiscuous mode [ 66.410190][ T7641] __nla_validate_parse: 11 callbacks suppressed [ 66.410202][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.529'. [ 66.459723][ T40] audit: type=1400 audit(1755651652.024:601): avc: denied { create } for pid=7644 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 66.467932][ T40] audit: type=1400 audit(1755651652.024:602): avc: denied { setopt } for pid=7644 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 66.475843][ T40] audit: type=1400 audit(1755651652.024:603): avc: denied { ioctl } for pid=7644 comm="syz.1.530" path="socket:[17467]" dev="sockfs" ino=17467 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 66.499649][ T40] audit: type=1400 audit(1755651652.064:604): avc: denied { getopt } for pid=7646 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.574255][ T34] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 66.745736][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 66.749466][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.752287][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.754873][ T34] usb 8-1: Product: syz [ 66.756132][ T34] usb 8-1: Manufacturer: syz [ 66.757559][ T34] usb 8-1: SerialNumber: syz [ 66.786777][ T7657] loop6: detected capacity change from 0 to 7 [ 66.789288][ T7657] Dev loop6: unable to read RDB block 7 [ 66.791161][ T7657] loop6: AHDI p1 [ 66.792322][ T7657] loop6: partition table partially beyond EOD, truncated [ 66.813408][ T7659] loop7: detected capacity change from 0 to 7 [ 66.816457][ C0] blk_print_req_error: 247 callbacks suppressed [ 66.816466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.821472][ C0] buffer_io_error: 235 callbacks suppressed [ 66.821481][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.826323][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.830169][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.833527][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.836425][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.839403][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.842593][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.845258][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.848175][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.850775][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.853606][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.856621][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.859542][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.862047][ T7659] ldm_validate_partition_table(): Disk read failed. [ 66.864763][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.867727][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.870454][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.873513][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.876766][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.879888][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.882574][ T7659] Dev loop7: unable to read RDB block 0 [ 66.884933][ T7659] loop7: unable to read partition table [ 66.886815][ T7659] loop7: partition table beyond EOD, truncated [ 66.890055][ T7659] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 67.363306][ T34] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 67.424242][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 67.424330][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.468719][ T40] audit: type=1400 audit(1755651653.034:605): avc: denied { read } for pid=7684 comm="syz.2.544" path="socket:[13238]" dev="sockfs" ino=13238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.489384][ T7689] loop6: detected capacity change from 0 to 7 [ 67.492062][ T7689] Dev loop6: unable to read RDB block 7 [ 67.493889][ T7689] loop6: AHDI p1 [ 67.495687][ T7689] loop6: partition table partially beyond EOD, truncated [ 67.505918][ T7690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.574049][ T7694] loop7: detected capacity change from 0 to 7 [ 67.577281][ T7694] ldm_validate_partition_table(): Disk read failed. [ 67.579719][ T7694] Dev loop7: unable to read RDB block 0 [ 67.581807][ T7694] loop7: unable to read partition table [ 67.583771][ T7694] loop7: partition table beyond EOD, truncated [ 67.586106][ T7694] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 67.933669][ T7703] netlink: 'syz.0.550': attribute type 3 has an invalid length. [ 67.937879][ T7703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.550'. [ 67.996525][ T7712] hfs: can't find a HFS filesystem on dev sr0 [ 68.001511][ T7713] hfs: can't find a HFS filesystem on dev sr0 [ 68.023609][ T7715] loop6: detected capacity change from 0 to 7 [ 68.027401][ T7715] Dev loop6: unable to read RDB block 7 [ 68.029162][ T7715] loop6: AHDI p1 [ 68.030368][ T7715] loop6: partition table partially beyond EOD, truncated [ 68.057160][ T7717] SELinux: ebitmap start bit (4279173126) is not a multiple of the map unit size (64) [ 68.061291][ T7717] SELinux: failed to load policy [ 68.089908][ T7719] loop7: detected capacity change from 0 to 7 [ 68.093968][ T7719] ldm_validate_partition_table(): Disk read failed. [ 68.097396][ T7719] Dev loop7: unable to read RDB block 0 [ 68.100421][ T7719] loop7: unable to read partition table [ 68.102862][ T7719] loop7: partition table beyond EOD, truncated [ 68.106305][ T7719] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 68.553200][ T7747] loop7: detected capacity change from 0 to 7 [ 68.556002][ T7747] ldm_validate_partition_table(): Disk read failed. [ 68.556353][ T7749] loop6: detected capacity change from 0 to 7 [ 68.558453][ T7747] Dev loop7: unable to read RDB block 0 [ 68.560404][ T7749] Dev loop6: unable to read RDB block 7 [ 68.561959][ T7747] loop7: unable to read partition table [ 68.563510][ T7749] loop6: AHDI p1 [ 68.565594][ T7747] loop7: partition table beyond EOD, [ 68.566807][ T7749] loop6: partition table partially beyond EOD, truncated [ 68.570910][ T7747] truncated [ 68.572185][ T7747] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 68.793354][ T7776] Bluetooth: MGMT ver 1.23 [ 68.810081][ T7780] loop6: detected capacity change from 0 to 7 [ 68.812517][ T7780] Dev loop6: unable to read RDB block 7 [ 68.815267][ T7780] loop6: AHDI p1 [ 68.816541][ T7780] loop6: partition table partially beyond EOD, truncated [ 68.826476][ T7782] loop7: detected capacity change from 0 to 7 [ 68.831267][ T7782] ldm_validate_partition_table(): Disk read failed. [ 68.833708][ T7782] Dev loop7: unable to read RDB block 0 [ 68.842847][ T7782] loop7: unable to read partition table [ 68.844980][ T7782] loop7: partition table beyond EOD, truncated [ 68.846950][ T7782] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 68.952160][ T5972] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 68.972963][ T7797] warning: `syz.2.583' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.167991][ T7810] loop6: detected capacity change from 0 to 7 [ 69.170512][ T7810] Dev loop6: unable to read RDB block 7 [ 69.172426][ T7810] loop6: AHDI p1 [ 69.173689][ T7810] loop6: partition table partially beyond EOD, truncated [ 69.334671][ T6026] usb 8-1: USB disconnect, device number 4 [ 69.343318][ T6026] usblp0: removed [ 69.417751][ T7836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.597'. [ 69.439878][ T7832] input: syz1 as /devices/virtual/input/input8 [ 69.493476][ T7844] overlay: Unknown parameter 'measure' [ 69.524234][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 69.533818][ T7849] netlink: 64 bytes leftover after parsing attributes in process `syz.1.600'. [ 69.585663][ T7849] bridge0: port 3(macvlan2) entered disabled state [ 69.587878][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.590200][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.643845][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 69.670732][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.677799][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 69.680659][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.681644][ T29] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 69.688159][ T29] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.692739][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 69.696701][ T29] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.40 [ 69.700021][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.702756][ T29] usb 5-1: Product: ဇ [ 69.704763][ T29] usb 5-1: Manufacturer: 켙靍⏰炛팗骆쏺쯪睉㷀柅䉉쒌甬씴鞌髋⑁굫㸓뗊갨⼤쑲 [ 69.709624][ T29] usb 5-1: SerialNumber: ဇ [ 69.712880][ T7823] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 69.716324][ T7823] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 69.791473][ T7867] netlink: 'syz.3.604': attribute type 21 has an invalid length. [ 69.794017][ T7867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.604'. [ 69.805066][ T7849] bond0: left allmulticast mode [ 69.807081][ T7849] bond_slave_0: left allmulticast mode [ 69.814340][ T7849] bond_slave_1: left allmulticast mode [ 69.816091][ T7849] bond0: left promiscuous mode [ 69.817566][ T7849] bond_slave_0: left promiscuous mode [ 69.819362][ T7849] bond_slave_1: left promiscuous mode [ 69.826272][ T7849] vlan2: left allmulticast mode [ 69.828031][ T7849] veth1: left allmulticast mode [ 69.831406][ T7849] ip6erspan0: left promiscuous mode [ 69.835092][ T6999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.837951][ T6999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.840895][ T6999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.841518][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 69.841528][ T40] audit: type=1400 audit(1755651655.404:619): avc: denied { read write } for pid=7866 comm="syz.3.604" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.843629][ T6999] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.848478][ T40] audit: type=1400 audit(1755651655.404:620): avc: denied { open } for pid=7866 comm="syz.3.604" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.881221][ T7872] loop7: detected capacity change from 0 to 7 [ 69.883913][ T7872] ldm_validate_partition_table(): Disk read failed. [ 69.886529][ T7872] Dev loop7: unable to read RDB block 0 [ 69.888600][ T7872] loop7: unable to read partition table [ 69.890531][ T7872] loop7: partition table beyond EOD, truncated [ 69.893067][ T7872] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 69.927756][ T29] usbhid 5-1:1.0: can't add hid device: -71 [ 69.930090][ T29] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 69.933332][ T29] usb 5-1: USB disconnect, device number 3 [ 69.944636][ T7881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.609'. [ 69.955538][ T7883] overlayfs: unescaped trailing colons in lowerdir mount option. [ 69.967180][ T7885] netlink: 'syz.0.612': attribute type 63 has an invalid length. [ 69.994099][ T40] audit: type=1400 audit(1755651655.554:621): avc: denied { ioctl } for pid=7886 comm="syz.0.613" path="socket:[17771]" dev="sockfs" ino=17771 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 70.002397][ T40] audit: type=1400 audit(1755651655.554:622): avc: denied { getopt } for pid=7886 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 70.010151][ T40] audit: type=1400 audit(1755651655.554:623): avc: denied { bind } for pid=7886 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 70.017072][ T40] audit: type=1400 audit(1755651655.554:624): avc: denied { bind } for pid=7888 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.026013][ T40] audit: type=1400 audit(1755651655.594:625): avc: denied { watch watch_reads } for pid=7890 comm="syz.0.615" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.052238][ T7900] loop6: detected capacity change from 0 to 7 [ 70.055482][ T5984] Dev loop6: unable to read RDB block 7 [ 70.057572][ T5984] loop6: AHDI p1 [ 70.058813][ T5984] loop6: partition table partially beyond EOD, truncated [ 70.062519][ T7900] Dev loop6: unable to read RDB block 7 [ 70.065241][ T7900] loop6: AHDI p1 [ 70.066399][ T7900] loop6: partition table partially beyond EOD, truncated [ 70.068594][ T40] audit: type=1400 audit(1755651655.634:626): avc: denied { create } for pid=7901 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 70.085612][ T40] audit: type=1400 audit(1755651655.654:627): avc: denied { create } for pid=7901 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 70.087540][ T7902] netlink: del zone limit has 4 unknown bytes [ 70.091584][ T40] audit: type=1400 audit(1755651655.654:628): avc: denied { bind } for pid=7901 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 70.140724][ T7909] loop7: detected capacity change from 0 to 7 [ 70.144266][ T7909] ldm_validate_partition_table(): Disk read failed. [ 70.147236][ T7909] Dev loop7: unable to read RDB block 0 [ 70.149917][ T7909] loop7: unable to read partition table [ 70.152101][ T7909] loop7: partition table beyond EOD, truncated [ 70.156706][ T7909] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 70.188522][ T7919] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.624'. [ 70.306508][ T7932] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 70.308474][ T1147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.313195][ T1147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.322858][ T7932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.326446][ T1147] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.330978][ T7932] bond2: (slave wlan0): Releasing active interface [ 70.333095][ T7932] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 70.339834][ T7932] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 70.342468][ T1147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.483956][ T7955] SELinux: Context is not valid (left unmapped). [ 70.516130][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.519169][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.521981][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.524951][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.528057][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.530873][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.533642][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.536970][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.539781][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.542572][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.611475][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 70.642281][ T7969] loop6: detected capacity change from 0 to 7 [ 70.645258][ T7969] Dev loop6: unable to read RDB block 7 [ 70.647153][ T7969] loop6: AHDI p1 [ 70.648374][ T7969] loop6: partition table partially beyond EOD, truncated [ 70.682250][ T7977] IPVS: Error connecting to the multicast addr [ 70.837805][ T7998] overlayfs: failed to clone upperpath [ 70.843495][ T7998] overlayfs: failed to clone upperpath [ 70.995202][ T8007] binder: 8001:8007 ioctl c0306201 0 returned -14 [ 70.997708][ T8007] binder: 8001:8007 ioctl 4018620d 0 returned -22 [ 71.036207][ T8008] bridge0: entered allmulticast mode [ 71.038338][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 71.041122][ T8008] macvlan2: left allmulticast mode [ 71.042759][ T8008] macvlan2: left promiscuous mode [ 71.044642][ T8008] bridge0: port 3(macvlan2) entered disabled state [ 71.047509][ T8008] bridge_slave_1: left allmulticast mode [ 71.049233][ T8008] bridge_slave_1: left promiscuous mode [ 71.050948][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.053834][ T8008] bridge_slave_0: left allmulticast mode [ 71.055683][ T8008] bridge_slave_0: left promiscuous mode [ 71.057563][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.060929][ T8008] bridge0 (unregistering): left allmulticast mode [ 71.186473][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.188612][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.389051][ T8010] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 71.585766][ T8026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=8026 comm=syz.1.660 [ 71.600646][ T8028] loop7: detected capacity change from 0 to 7 [ 71.603495][ T8028] ldm_validate_partition_table(): Disk read failed. [ 71.606419][ T8028] Dev loop7: unable to read RDB block 0 [ 71.608434][ T8028] loop7: unable to read partition table [ 71.610214][ T8028] loop7: partition table beyond EOD, truncated [ 71.613115][ T8028] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 71.688174][ T8039] tipc: Started in network mode [ 71.689741][ T8039] tipc: Node identity aaaaaaaaaa2e, cluster identity 4711 [ 71.691969][ T8039] tipc: Enabled bearer , priority 10 [ 71.807720][ T8053] loop6: detected capacity change from 0 to 63 [ 71.810313][ T5984] ldm_validate_partition_table(): Disk read failed. [ 71.812381][ T5984] Dev loop6: unable to read RDB block 0 [ 71.814290][ T5984] loop6: unable to read partition table [ 71.816595][ T8053] ldm_validate_partition_table(): Disk read failed. [ 71.818709][ T8053] Dev loop6: unable to read RDB block 0 [ 71.820524][ T8053] loop6: unable to read partition table [ 71.825144][ T8053] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 71.828791][ T8055] buffer_io_error: 189 callbacks suppressed [ 71.828799][ T8055] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 71.833268][ T8055] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 71.836189][ T8055] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 71.838703][ T8055] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 71.841278][ T8055] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 71.843902][ T8055] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 71.846952][ T8055] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 71.858593][ T5380] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.861021][ T5380] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.863365][ T5380] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.866106][ T5380] ldm_validate_partition_table(): Disk read failed. [ 71.868221][ T5380] Dev loop6: unable to read RDB block 0 [ 71.870002][ T5380] loop6: unable to read partition table [ 71.933694][ T8073] loop7: detected capacity change from 0 to 7 [ 71.937065][ C0] blk_print_req_error: 157 callbacks suppressed [ 71.937075][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.942468][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.945595][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.948459][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.951580][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.955156][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.958272][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.961093][ T8073] ldm_validate_partition_table(): Disk read failed. [ 71.963165][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.967070][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.970137][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.973577][ T8073] Dev loop7: unable to read RDB block 0 [ 71.975629][ T8073] loop7: unable to read partition table [ 71.977398][ T8073] loop7: partition table beyond EOD, truncated [ 71.979324][ T8073] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 71.997772][ T6976] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 72.082815][ T8097] loop6: detected capacity change from 0 to 7 [ 72.085826][ T8097] Dev loop6: unable to read RDB block 7 [ 72.087617][ T8097] loop6: AHDI p1 [ 72.088788][ T8097] loop6: partition table partially beyond EOD, truncated [ 72.104557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.200915][ T8112] could not allocate digest TFM handle rmd128 [ 72.224141][ T8126] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 72.257823][ T8131] loop7: detected capacity change from 0 to 7 [ 72.261166][ T8131] ldm_validate_partition_table(): Disk read failed. [ 72.264310][ T8126] bond4: (slave bridge0): making interface the new active one [ 72.264438][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 72.267881][ T8126] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 72.269887][ T8131] Dev loop7: unable to read RDB block 0 [ 72.277225][ T8131] loop7: unable to read partition table [ 72.279861][ T8131] loop7: partition table beyond EOD, truncated [ 72.283494][ T8131] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 72.303401][ T8137] loop6: detected capacity change from 0 to 7 [ 72.305871][ T8137] Dev loop6: unable to read RDB block 7 [ 72.307613][ T8137] loop6: AHDI p1 [ 72.308750][ T8137] loop6: partition table partially beyond EOD, truncated [ 72.452853][ T8162] macvlan2: entered promiscuous mode [ 72.456856][ T8162] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 72.461302][ T8164] cgroup: Name too long [ 72.462722][ T8164] cgroup: Name too long [ 72.464218][ T8164] cgroup: Name too long [ 72.464632][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 72.465840][ T8164] cgroup: Name too long [ 72.470984][ T8164] cgroup: Name too long [ 72.472336][ T8164] cgroup: Name too long [ 72.473695][ T8164] cgroup: Name too long [ 72.476976][ T8164] cgroup: Name too long [ 72.478464][ T8164] cgroup: Name too long [ 72.480015][ T8164] cgroup: Name too long [ 72.481738][ T8164] cgroup: Name too long [ 72.483141][ T8164] cgroup: Name too long [ 72.484668][ T8164] cgroup: Name too long [ 72.486043][ T8164] cgroup: Name too long [ 72.487485][ T8164] cgroup: Name too long [ 72.488906][ T8164] cgroup: Name too long [ 72.490333][ T8164] cgroup: Name too long [ 72.491711][ T8164] cgroup: Name too long [ 72.493099][ T8164] cgroup: Name too long [ 72.494694][ T8164] cgroup: Name too long [ 72.496110][ T8164] cgroup: Name too long [ 72.497550][ T8164] cgroup: Name too long [ 72.499005][ T8164] cgroup: Name too long [ 72.500419][ T8164] cgroup: Name too long [ 72.501853][ T8164] cgroup: Name too long [ 72.503242][ T8164] cgroup: Name too long [ 72.504874][ T8164] cgroup: Name too long [ 72.506178][ T8170] loop6: detected capacity change from 0 to 7 [ 72.506237][ T8164] cgroup: Name too long [ 72.509521][ T8164] cgroup: Name too long [ 72.510870][ T8164] cgroup: Name too long [ 72.512234][ T8164] cgroup: Name too long [ 72.513595][ T8164] cgroup: Name too long [ 72.513698][ T8170] Dev loop6: unable to read RDB block 7 [ 72.516528][ T8164] cgroup: Name too long [ 72.517286][ T8170] loop6: AHDI p1 [ 72.519616][ T8170] loop6: partition table partially beyond EOD, truncated [ 72.550514][ T8177] loop7: detected capacity change from 0 to 7 [ 72.553137][ T8177] ldm_validate_partition_table(): Disk read failed. [ 72.558940][ T8177] Dev loop7: unable to read RDB block 0 [ 72.560973][ T8177] loop7: unable to read partition table [ 72.562924][ T8177] loop7: partition table beyond EOD, truncated [ 72.566750][ T8177] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 72.669138][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 72.690688][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 72.709487][ T8207] loop6: detected capacity change from 0 to 7 [ 72.711747][ T8207] Dev loop6: unable to read RDB block 7 [ 72.713554][ T8207] loop6: AHDI p1 [ 72.715529][ T8207] loop6: partition table partially beyond EOD, truncated [ 72.734005][ T8209] mkiss: ax0: crc mode is auto. [ 72.804364][ T6026] tipc: Node number set to 8694442 [ 72.852631][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 72.859863][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.864441][ T24] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 72.974902][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 73.014224][ T59] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.078602][ T8238] loop7: detected capacity change from 0 to 7 [ 73.081555][ T5984] ldm_validate_partition_table(): Disk read failed. [ 73.084105][ T5984] Dev loop7: unable to read RDB block 0 [ 73.088984][ T5984] loop7: unable to read partition table [ 73.090938][ T5984] loop7: partition table beyond EOD, truncated [ 73.094463][ T8238] ldm_validate_partition_table(): Disk read failed. [ 73.096712][ T8238] Dev loop7: unable to read RDB block 0 [ 73.098667][ T8238] loop7: unable to read partition table [ 73.100483][ T8238] loop7: partition table beyond EOD, truncated [ 73.102450][ T8238] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 73.104732][ T10] usb 7-1: device descriptor read/64, error -71 [ 73.164417][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 73.167157][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.170485][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.173362][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.177358][ T59] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.180118][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.183076][ T59] usb 5-1: config 0 descriptor?? [ 73.344261][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 73.387699][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.390432][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.393469][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.396422][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.399211][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.401846][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.404687][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.407416][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.410204][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.412779][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.421935][ T59] HID 045e:07da: Invalid code 65791 type 1 [ 73.426031][ T59] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input9 [ 73.436720][ T59] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 73.445070][ T59] usb 5-1: USB disconnect, device number 4 [ 73.458163][ T8242] fido_id[8242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 73.467938][ T8246] loop6: detected capacity change from 0 to 7 [ 73.470427][ T8246] Dev loop6: unable to read RDB block 7 [ 73.472298][ T8246] loop6: AHDI p1 [ 73.473870][ T8246] loop6: partition table partially beyond EOD, truncated [ 73.474286][ T10] usb 7-1: device descriptor read/64, error -71 [ 73.584665][ T10] usb usb7-port1: attempt power cycle [ 73.924307][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 73.945271][ T10] usb 7-1: device descriptor read/8, error -71 [ 74.184495][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 74.216586][ T10] usb 7-1: device descriptor read/8, error -71 [ 74.238603][ T1147] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 74.241660][ T1147] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 74.244450][ T1147] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 74.247266][ T1147] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 74.331640][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.736'. [ 74.334509][ T10] usb usb7-port1: unable to enumerate USB device [ 74.472872][ T8284] loop6: detected capacity change from 0 to 7 [ 74.475415][ T8284] Dev loop6: unable to read RDB block 7 [ 74.477287][ T8284] loop6: AHDI p1 [ 74.478437][ T8284] loop6: partition table partially beyond EOD, truncated [ 74.540758][ T8297] binder: 8294:8297 ioctl c0306201 200000000080 returned -14 [ 74.558150][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 74.599249][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.748'. [ 74.610936][ T8314] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 74.613402][ T8314] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.750'. [ 74.615542][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 74.794856][ T8323] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 74.937305][ T8331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.755'. [ 74.966026][ C2] vkms_vblank_simulate: vblank timer overrun [ 75.666193][ T8340] program syz.0.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.667354][ T8341] netlink: 'syz.1.760': attribute type 12 has an invalid length. [ 75.688528][ T8345] loop6: detected capacity change from 0 to 7 [ 75.691189][ T8345] Dev loop6: unable to read RDB block 7 [ 75.693022][ T8345] loop6: AHDI p1 [ 75.694892][ T8345] loop6: partition table partially beyond EOD, truncated [ 75.761067][ T8352] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53338 sclass=netlink_xfrm_socket pid=8352 comm=syz.2.764 [ 75.767408][ T40] kauditd_printk_skb: 210 callbacks suppressed [ 75.767419][ T40] audit: type=1400 audit(1755651661.334:839): avc: denied { ioctl } for pid=8351 comm="syz.2.764" path="socket:[18345]" dev="sockfs" ino=18345 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.798941][ T40] audit: type=1400 audit(1755651661.364:840): avc: denied { connect } for pid=8353 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.821944][ T8354] ptrace attach of "/syz-executor exec"[5974] was attempted by "/syz-executor exec"[8354] [ 75.834734][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.954290][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.977088][ T8387] loop7: detected capacity change from 0 to 7 [ 75.980192][ T8387] ldm_validate_partition_table(): Disk read failed. [ 75.982539][ T8387] Dev loop7: unable to read RDB block 0 [ 75.988554][ T8387] loop7: unable to read partition table [ 75.990431][ T8387] loop7: partition table beyond EOD, truncated [ 75.992418][ T8387] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 76.084400][ T59] usb 5-1: device descriptor read/64, error -71 [ 76.254876][ T8408] loop6: detected capacity change from 0 to 7 [ 76.257232][ T8408] Dev loop6: unable to read RDB block 7 [ 76.258848][ T8408] loop6: AHDI p1 [ 76.259962][ T8408] loop6: partition table partially beyond EOD, truncated [ 76.324954][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.369898][ T8417] syzkaller0: entered promiscuous mode [ 76.372129][ T8417] syzkaller0: entered allmulticast mode [ 76.455300][ T59] usb 5-1: device descriptor read/64, error -71 [ 76.487774][ T40] audit: type=1400 audit(1755651662.054:841): avc: denied { append } for pid=8418 comm="syz.3.786" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.515421][ T8422] loop7: detected capacity change from 0 to 7 [ 76.518713][ T8422] ldm_validate_partition_table(): Disk read failed. [ 76.521806][ T8422] Dev loop7: unable to read RDB block 0 [ 76.523768][ T8422] loop7: unable to read partition table [ 76.526174][ T8422] loop7: partition table beyond EOD, truncated [ 76.528326][ T8422] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 76.564453][ T59] usb usb5-port1: attempt power cycle [ 76.699614][ T8428] netlink: 'syz.3.790': attribute type 20 has an invalid length. [ 76.702419][ T8428] netlink: 'syz.3.790': attribute type 20 has an invalid length. [ 76.710502][ T8428] bond2: entered promiscuous mode [ 76.732888][ T8431] loop6: detected capacity change from 0 to 7 [ 76.735735][ T8431] Dev loop6: unable to read RDB block 7 [ 76.738279][ T8431] loop6: AHDI p1 [ 76.739578][ T8431] loop6: partition table partially beyond EOD, truncated [ 76.769769][ T40] audit: type=1400 audit(1755651662.334:842): avc: denied { bind } for pid=8434 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.776573][ T40] audit: type=1400 audit(1755651662.334:843): avc: denied { accept } for pid=8434 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.874320][ T63] Bluetooth: hci3: command 0x041b tx timeout [ 76.904321][ T59] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.934636][ T59] usb 5-1: device descriptor read/8, error -71 [ 76.938512][ T40] audit: type=1326 audit(1755651662.504:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.3.795" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f109478ebe9 code=0x0 [ 76.939933][ T8452] afs: Unknown parameter 'flockKlocal' [ 76.965983][ T8456] netlink: 'syz.1.799': attribute type 13 has an invalid length. [ 76.970100][ T8456] gretap0: refused to change device tx_queue_len [ 76.972168][ T8456] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.079182][ T40] audit: type=1400 audit(1755651662.644:845): avc: denied { firmware_load } for pid=8465 comm="syz.1.802" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 77.184568][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.205465][ T59] usb 5-1: device descriptor read/8, error -71 [ 77.315370][ T59] usb usb5-port1: unable to enumerate USB device [ 77.317778][ T8466] __nla_validate_parse: 9 callbacks suppressed [ 77.317788][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 77.322054][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 77.338300][ T8466] syz.1.802 (8466) used greatest stack depth: 19912 bytes left [ 77.773562][ T8478] loop7: detected capacity change from 0 to 7 [ 77.777084][ C3] blk_print_req_error: 125 callbacks suppressed [ 77.777094][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.782489][ C3] buffer_io_error: 155 callbacks suppressed [ 77.782497][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.787371][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.790268][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.792959][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.796065][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.798593][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.801419][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.804013][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.806977][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.809785][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.813370][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.816721][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.819620][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.822075][ T8478] ldm_validate_partition_table(): Disk read failed. [ 77.824447][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.828125][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.830767][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.833564][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.836309][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.839214][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 77.842132][ T8478] Dev loop7: unable to read RDB block 0 [ 77.844659][ T8478] loop7: unable to read partition table [ 77.846583][ T8478] loop7: partition table beyond EOD, truncated [ 77.848531][ T8478] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 78.017835][ T40] audit: type=1400 audit(1755651663.584:846): avc: denied { execute_no_trans } for pid=8483 comm="syz.3.807" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=19384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 78.063858][ T8490] loop6: detected capacity change from 0 to 7 [ 78.066497][ T5984] Dev loop6: unable to read RDB block 7 [ 78.068278][ T5984] loop6: AHDI p1 [ 78.069497][ T5984] loop6: partition table partially beyond EOD, truncated [ 78.072804][ T8490] Dev loop6: unable to read RDB block 7 [ 78.074656][ T8490] loop6: AHDI p1 [ 78.075833][ T8490] loop6: partition table partially beyond EOD, truncated [ 78.144509][ T8496] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 78.147689][ T8496] netlink: 224 bytes leftover after parsing attributes in process `syz.3.812'. [ 78.346412][ T8512] vlan3: entered promiscuous mode [ 78.348052][ T8512] hsr0: entered promiscuous mode [ 78.349734][ T8512] vlan3: entered allmulticast mode [ 78.351352][ T8512] hsr0: entered allmulticast mode [ 78.353309][ T8512] hsr_slave_0: entered allmulticast mode [ 78.356136][ T8512] hsr_slave_1: entered allmulticast mode [ 78.362448][ T8516] netlink: 'syz.1.818': attribute type 13 has an invalid length. [ 78.391845][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.397582][ T8520] loop6: detected capacity change from 0 to 7 [ 78.399700][ T8516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.400151][ T8520] Dev loop6: unable to read RDB block 7 [ 78.407871][ T8520] loop6: AHDI p1 [ 78.409118][ T8520] loop6: partition table partially beyond EOD, truncated [ 78.436074][ T40] audit: type=1400 audit(1755651664.004:847): avc: denied { read } for pid=8522 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.485279][ T8530] netlink: 'syz.3.824': attribute type 11 has an invalid length. [ 78.523623][ T8537] loop7: detected capacity change from 0 to 7 [ 78.526908][ T8537] ldm_validate_partition_table(): Disk read failed. [ 78.529299][ T8537] Dev loop7: unable to read RDB block 0 [ 78.531333][ T8537] loop7: unable to read partition table [ 78.533164][ T8537] loop7: partition table beyond EOD, truncated [ 78.535610][ T8537] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 78.633137][ T8544] tmpfs: Bad value for 'mpol' [ 78.740342][ T40] audit: type=1400 audit(1755651664.304:848): avc: denied { setopt } for pid=8559 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.809643][ T8572] netlink: 'syz.0.831': attribute type 7 has an invalid length. [ 78.813760][ T8573] netlink: 'syz.0.831': attribute type 7 has an invalid length. [ 78.832123][ T8579] loop6: detected capacity change from 0 to 7 [ 78.834641][ T8579] Dev loop6: unable to read RDB block 7 [ 78.836416][ T8579] loop6: AHDI p1 [ 78.837595][ T8579] loop6: partition table partially beyond EOD, truncated [ 78.866510][ T8547] cgroup: fork rejected by pids controller in /syz3 [ 79.201915][ T8634] loop7: detected capacity change from 0 to 7 [ 79.204675][ T8634] ldm_validate_partition_table(): Disk read failed. [ 79.207249][ T8634] Dev loop7: unable to read RDB block 0 [ 79.209379][ T8634] loop7: unable to read partition table [ 79.211237][ T8634] loop7: partition table beyond EOD, truncated [ 79.213257][ T8634] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 79.310900][ T8644] netlink: 680 bytes leftover after parsing attributes in process `syz.3.839'. [ 79.314432][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.839'. [ 79.466432][ T8655] (unnamed net_device) (uninitialized): option mode: invalid value (38) [ 79.490446][ T8662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.845'. [ 79.511458][ T8664] IPVS: length: 184 != 24 [ 79.575747][ T8672] loop7: detected capacity change from 0 to 7 [ 79.579870][ T5984] ldm_validate_partition_table(): Disk read failed. [ 79.582684][ T5984] Dev loop7: unable to read RDB block 0 [ 79.585076][ T5984] loop7: unable to read partition table [ 79.587011][ T5984] loop7: partition table beyond EOD, truncated [ 79.600589][ T8672] ldm_validate_partition_table(): Disk read failed. [ 79.602919][ T8672] Dev loop7: unable to read RDB block 0 [ 79.605336][ T8672] loop7: unable to read partition table [ 79.607290][ T8672] loop7: partition table beyond EOD, truncated [ 79.609287][ T8672] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 79.629461][ T8677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=8677 comm=syz.1.852 [ 79.701819][ T8686] syz.2.855 (8686): drop_caches: 2 [ 79.703258][ T8693] dummy0: entered promiscuous mode [ 79.742662][ T8706] loop6: detected capacity change from 0 to 7 [ 79.745693][ T8706] Dev loop6: unable to read RDB block 7 [ 79.747846][ T8706] loop6: AHDI p1 [ 79.747861][ T8706] loop6: partition table partially beyond EOD, truncated [ 79.766690][ T8713] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 79.769738][ T8713] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.865'. [ 79.787895][ T8715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.795022][ T8715] evm: overlay not supported [ 79.972988][ T8737] loop6: detected capacity change from 0 to 7 [ 79.976550][ T5984] Dev loop6: unable to read RDB block 7 [ 79.978423][ T5984] loop6: AHDI p1 [ 79.979890][ T5984] loop6: partition table partially beyond EOD, truncated [ 79.983144][ T8737] Dev loop6: unable to read RDB block 7 [ 79.986108][ T8737] loop6: AHDI p1 [ 79.987414][ T8737] loop6: partition table partially beyond EOD, truncated [ 80.007318][ T8745] netlink: 80 bytes leftover after parsing attributes in process `syz.2.878'. [ 80.026492][ T8752] loop7: detected capacity change from 0 to 7 [ 80.029349][ T8752] ldm_validate_partition_table(): Disk read failed. [ 80.031836][ T8752] Dev loop7: unable to read RDB block 0 [ 80.033872][ T8752] loop7: unable to read partition table [ 80.036593][ T8752] loop7: partition table beyond EOD, truncated [ 80.038792][ T8752] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 80.088734][ T8754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 80.181799][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 80.185815][ T8764] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 80.391078][ T8784] loop7: detected capacity change from 0 to 7 [ 80.395601][ T5982] ldm_validate_partition_table(): Disk read failed. [ 80.398141][ T5982] Dev loop7: unable to read RDB block 0 [ 80.400227][ T5982] loop7: unable to read partition table [ 80.402116][ T5982] loop7: partition table beyond EOD, truncated [ 80.406214][ T8784] ldm_validate_partition_table(): Disk read failed. [ 80.408601][ T8784] Dev loop7: unable to read RDB block 0 [ 80.410628][ T8784] loop7: unable to read partition table [ 80.412486][ T8784] loop7: partition table beyond EOD, truncated [ 80.416458][ T8784] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 80.491894][ T8795] loop6: detected capacity change from 0 to 7 [ 80.494512][ T8795] Dev loop6: unable to read RDB block 7 [ 80.496508][ T8795] loop6: AHDI p1 [ 80.498207][ T8795] loop6: partition table partially beyond EOD, truncated [ 80.512620][ T8800] 9pnet_virtio: no channels available for device syz [ 80.720446][ T8833] loop6: detected capacity change from 0 to 7 [ 80.723094][ T8833] Dev loop6: unable to read RDB block 7 [ 80.725125][ T8833] loop6: AHDI p1 [ 80.726343][ T8833] loop6: partition table partially beyond EOD, truncated [ 80.950304][ T8852] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 81.400951][ T8878] netlink: 'syz.3.924': attribute type 10 has an invalid length. [ 81.407433][ T8878] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.765801][ T8883] loop6: detected capacity change from 0 to 7 [ 81.768372][ T8883] Dev loop6: unable to read RDB block 7 [ 81.770176][ T8883] loop6: AHDI p1 [ 81.771365][ T8883] loop6: partition table partially beyond EOD, truncated [ 81.997786][ C3] vcan0: j1939_tp_rxtimer: 0xffff888053a55c00: rx timeout, send abort [ 82.000478][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888053a55c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 82.005575][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 82.005583][ T40] audit: type=1400 audit(1755651667.574:867): avc: denied { read } for pid=5362 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 82.015860][ T40] audit: type=1400 audit(1755651667.584:868): avc: denied { search } for pid=5362 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.022236][ T40] audit: type=1400 audit(1755651667.584:869): avc: denied { search } for pid=5362 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.028025][ T8897] netlink: 'syz.0.930': attribute type 6 has an invalid length. [ 82.028510][ T8898] loop7: detected capacity change from 0 to 7 [ 82.029872][ T40] audit: type=1400 audit(1755651667.584:870): avc: denied { add_name } for pid=5362 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.029891][ T40] audit: type=1400 audit(1755651667.584:871): avc: denied { create } for pid=5362 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.029908][ T40] audit: type=1400 audit(1755651667.584:872): avc: denied { append open } for pid=5362 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.029926][ T40] audit: type=1400 audit(1755651667.584:873): avc: denied { getattr } for pid=5362 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.031951][ T8897] netlink: 'syz.0.930': attribute type 5 has an invalid length. [ 82.031961][ T8897] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 82.037178][ T8898] ldm_validate_partition_table(): Disk read failed. [ 82.049213][ T8901] hsr0: entered allmulticast mode [ 82.055786][ T8898] Dev loop7: unable to read RDB block 0 [ 82.061758][ T8901] hsr_slave_0: entered allmulticast mode [ 82.065738][ T8898] loop7: unable to read partition table [ 82.067007][ T8901] hsr_slave_1: entered allmulticast mode [ 82.069042][ T8898] loop7: partition table beyond EOD, [ 82.077341][ T40] audit: type=1326 audit(1755651667.644:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.1.933" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc10c585ba7 code=0x0 [ 82.078425][ T8898] truncated [ 82.090967][ T8898] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 82.092520][ T40] audit: type=1400 audit(1755651667.654:875): avc: denied { connect } for pid=8908 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.103675][ T5380] ldm_validate_partition_table(): Disk read failed. [ 82.106129][ T5380] Dev loop7: unable to read RDB block 0 [ 82.108058][ T5380] loop7: unable to read partition table [ 82.109913][ T5380] loop7: partition table beyond EOD, truncated [ 82.232169][ T40] audit: type=1804 audit(1755651667.794:876): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.936" name="/newroot/236/file0" dev="tmpfs" ino=1280 res=1 errno=0 [ 82.250831][ T8915] loop6: detected capacity change from 0 to 7 [ 82.253389][ T8915] Dev loop6: unable to read RDB block 7 [ 82.255861][ T8915] loop6: AHDI p1 [ 82.257056][ T8915] loop6: partition table partially beyond EOD, truncated [ 82.300556][ T8922] can0: slcan on ptm0. [ 82.354542][ T838] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 82.354783][ T8921] can0 (unregistered): slcan off ptm0. [ 82.393539][ T8929] openvswitch: netlink: IP tunnel dst address not specified [ 82.420506][ T8929] __nla_validate_parse: 5 callbacks suppressed [ 82.420518][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 82.508690][ T8938] loop7: detected capacity change from 0 to 7 [ 82.511752][ T8938] ldm_validate_partition_table(): Disk read failed. [ 82.514315][ T8938] Dev loop7: unable to read RDB block 0 [ 82.516556][ T8938] loop7: unable to read partition table [ 82.518543][ T8938] loop7: partition table beyond EOD, truncated [ 82.520538][ T8938] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 82.525252][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 82.528635][ T838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.531821][ T838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.534707][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 82.539223][ T838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 82.543570][ T838] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 82.547539][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.552295][ T838] hub 7-1:1.0: bad descriptor, ignoring hub [ 82.555139][ T838] hub 7-1:1.0: probe with driver hub failed with error -5 [ 82.558131][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 82.560250][ T838] cdc_wdm 7-1:1.0: skipping garbage [ 82.562762][ T838] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 82.565303][ T838] cdc_wdm 7-1:1.0: Unknown control protocol [ 82.661093][ T8942] loop6: detected capacity change from 0 to 7 [ 82.663522][ T8942] Dev loop6: unable to read RDB block 7 [ 82.665624][ T8942] loop6: AHDI p1 [ 82.666854][ T8942] loop6: partition table partially beyond EOD, truncated [ 82.854839][ T10] usb 7-1: USB disconnect, device number 10 [ 82.916147][ T8948] "syz.1.949" (8948) uses obsolete ecb(arc4) skcipher [ 82.917373][ T8956] Bluetooth: MGMT ver 1.23 [ 82.935807][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 82.939035][ T8959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.952'. [ 82.946252][ T8962] loop7: detected capacity change from 0 to 7 [ 82.948577][ C0] blk_print_req_error: 195 callbacks suppressed [ 82.948586][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.953766][ C0] buffer_io_error: 195 callbacks suppressed [ 82.953774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.958431][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.961355][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.965249][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.968083][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.970659][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.973529][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.976164][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.978823][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.981475][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.984351][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.986862][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.989741][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.992237][ T8962] ldm_validate_partition_table(): Disk read failed. [ 82.994544][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.997457][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.000156][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.002958][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.005664][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.008697][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.011323][ T8962] Dev loop7: unable to read RDB block 0 [ 83.013347][ T8962] loop7: unable to read partition table [ 83.015282][ T8962] loop7: partition table beyond EOD, truncated [ 83.017816][ T8962] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 83.174338][ T6026] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.274132][ T8984] fuse: Bad value for 'user_id' [ 83.276169][ T8984] fuse: Bad value for 'user_id' [ 83.337640][ T6026] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.341373][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.344274][ T6026] usb 5-1: Product: syz [ 83.346022][ T6026] usb 5-1: Manufacturer: syz [ 83.347935][ T6026] usb 5-1: SerialNumber: syz [ 83.352903][ T6026] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 83.365908][ T34] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.377725][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 83.380880][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 83.545604][ T8994] netlink: 'syz.2.963': attribute type 30 has an invalid length. [ 83.567434][ T839] usb 5-1: USB disconnect, device number 9 [ 83.984275][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 84.086798][ T9010] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 84.093048][ T9010] batman_adv: batadv0: Adding interface: team0 [ 84.095898][ T9010] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.103659][ T9010] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 84.150404][ T9003] mmap: syz.1.966 (9003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.213370][ T9019] misc userio: No port type given on /dev/userio [ 84.384240][ T34] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 84.386487][ T34] ath9k_htc: Failed to initialize the device [ 84.390161][ T839] usb 5-1: ath9k_htc: USB layer deinitialized [ 84.421153][ T9029] loop6: detected capacity change from 0 to 7 [ 84.423729][ T9029] Dev loop6: unable to read RDB block 7 [ 84.426207][ T9029] loop6: AHDI p1 [ 84.427836][ T9029] loop6: partition table partially beyond EOD, truncated [ 84.450992][ T9031] loop7: detected capacity change from 0 to 7 [ 84.453812][ T9031] ldm_validate_partition_table(): Disk read failed. [ 84.456457][ T9031] Dev loop7: unable to read RDB block 0 [ 84.458552][ T9031] loop7: unable to read partition table [ 84.460379][ T9031] loop7: partition table beyond EOD, truncated [ 84.463143][ T9031] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 84.594235][ T5972] Bluetooth: hci2: unexpected event for opcode 0xa010 [ 84.634271][ T9042] loop6: detected capacity change from 0 to 524287999 [ 84.818477][ T9056] loop6: detected capacity change from 0 to 7 [ 84.821504][ T9056] Dev loop6: unable to read RDB block 7 [ 84.823749][ T9056] loop6: AHDI p1 [ 84.825971][ T9056] loop6: partition table partially beyond EOD, truncated [ 84.911136][ T9061] 9pnet_fd: Insufficient options for proto=fd [ 84.954285][ T63] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 85.108403][ T9079] netlink: 100 bytes leftover after parsing attributes in process `syz.1.992'. [ 85.112468][ T9080] netlink: 100 bytes leftover after parsing attributes in process `syz.1.992'. [ 85.112550][ T9086] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 85.167258][ T9092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.996'. [ 85.208651][ T9097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.998'. [ 85.227214][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 85.263214][ T9106] new mount options do not match the existing superblock, will be ignored [ 85.656209][ C1] ================================================================== [ 85.658780][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x9e5/0xa30 [ 85.661278][ C1] Write of size 8 at addr ffff888058358030 by task swapper/1/0 [ 85.664411][ C1] [ 85.665925][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 85.665938][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.665944][ C1] Call Trace: [ 85.665948][ C1] [ 85.665953][ C1] dump_stack_lvl+0x116/0x1f0 [ 85.665967][ C1] print_report+0xcd/0x630 [ 85.665986][ C1] ? __virt_addr_valid+0x81/0x610 [ 85.665999][ C1] ? __phys_addr+0xe8/0x180 [ 85.666012][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 85.666027][ C1] kasan_report+0xe0/0x110 [ 85.666037][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 85.666053][ C1] __xfrm_state_delete+0x9e5/0xa30 [ 85.666068][ C1] xfrm_timer_handler+0x86c/0xf10 [ 85.666082][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 85.666098][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 85.666112][ C1] ? __hrtimer_run_queues+0x529/0xad0 [ 85.666123][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.666135][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.666148][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 85.666161][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 85.666174][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 85.666186][ C1] ? read_tsc+0x9/0x20 [ 85.666200][ C1] hrtimer_run_softirq+0x17d/0x350 [ 85.666211][ C1] handle_softirqs+0x216/0x8e0 [ 85.666225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.666238][ C1] __irq_exit_rcu+0x109/0x170 [ 85.666249][ C1] irq_exit_rcu+0x9/0x30 [ 85.666260][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 85.666276][ C1] [ 85.666279][ C1] [ 85.666282][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.666293][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.666304][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.666314][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000282 [ 85.666323][ C1] RAX: 00000000000862f4 RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 85.666329][ C1] RDX: ffffed100d4a6656 RSI: ffffffff8c162800 RDI: ffffffff81913321 [ 85.666336][ C1] RBP: ffffed1003c53488 R08: 0000000000000000 R09: ffffed100d4a6655 [ 85.666342][ C1] R10: ffff88806a5332ab R11: 0000000000000000 R12: 0000000000000001 [ 85.666348][ C1] R13: ffff88801e29a440 R14: ffffffff90ab4090 R15: 0000000000000000 [ 85.666356][ C1] ? ct_kernel_exit+0x139/0x190 [ 85.666367][ C1] ? do_idle+0x391/0x510 [ 85.666379][ C1] default_idle+0x13/0x20 [ 85.666390][ C1] default_idle_call+0x6d/0xb0 [ 85.666401][ C1] do_idle+0x391/0x510 [ 85.666412][ C1] ? __pfx_do_idle+0x10/0x10 [ 85.666423][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.666434][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.666454][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.666465][ C1] cpu_startup_entry+0x4f/0x60 [ 85.666476][ C1] start_secondary+0x21d/0x2b0 [ 85.666490][ C1] ? __pfx_start_secondary+0x10/0x10 [ 85.666505][ C1] common_startup_64+0x13e/0x148 [ 85.666519][ C1] [ 85.666522][ C1] [ 85.758647][ C1] Allocated by task 6179: [ 85.760033][ C1] kasan_save_stack+0x33/0x60 [ 85.761515][ C1] kasan_save_track+0x14/0x30 [ 85.762909][ C1] __kasan_slab_alloc+0x89/0x90 [ 85.764432][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 85.766141][ C1] xfrm_state_alloc+0x23/0x5c0 [ 85.767643][ C1] __find_acq_core+0xb59/0x2900 [ 85.769232][ C1] xfrm_find_acq+0x7b/0xa0 [ 85.770631][ C1] xfrm_alloc_userspi+0x58e/0xbb0 [ 85.772211][ C1] xfrm_user_rcv_msg+0x58e/0xc00 [ 85.773793][ C1] netlink_rcv_skb+0x155/0x420 [ 85.775311][ C1] xfrm_netlink_rcv+0x71/0x90 [ 85.776805][ C1] netlink_unicast+0x5aa/0x870 [ 85.778322][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 85.779862][ C1] ____sys_sendmsg+0xa95/0xc70 [ 85.781374][ C1] ___sys_sendmsg+0x134/0x1d0 [ 85.782847][ C1] __sys_sendmsg+0x16d/0x220 [ 85.784303][ C1] do_syscall_64+0xcd/0x4c0 [ 85.785744][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.787584][ C1] [ 85.788349][ C1] Freed by task 839: [ 85.789633][ C1] kasan_save_stack+0x33/0x60 [ 85.791217][ C1] kasan_save_track+0x14/0x30 [ 85.792726][ C1] kasan_save_free_info+0x3b/0x60 [ 85.794321][ C1] __kasan_slab_free+0x60/0x70 [ 85.795861][ C1] kmem_cache_free+0x2d1/0x4d0 [ 85.797386][ C1] xfrm_state_gc_task+0x50a/0x770 [ 85.799003][ C1] process_one_work+0x9cf/0x1b70 [ 85.800557][ C1] worker_thread+0x6c8/0xf10 [ 85.802015][ C1] kthread+0x3c2/0x780 [ 85.803300][ C1] ret_from_fork+0x5d7/0x6f0 [ 85.804746][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.806254][ C1] [ 85.807008][ C1] The buggy address belongs to the object at ffff888058358000 [ 85.807008][ C1] which belongs to the cache xfrm_state of size 928 [ 85.811262][ C1] The buggy address is located 48 bytes inside of [ 85.811262][ C1] freed 928-byte region [ffff888058358000, ffff8880583583a0) [ 85.815343][ C1] [ 85.816115][ C1] The buggy address belongs to the physical page: [ 85.818139][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058358440 pfn:0x58358 [ 85.821253][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.823823][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 85.826144][ C1] page_type: f5(slab) [ 85.827394][ C1] raw: 00fff00000000040 ffff888104299400 dead000000000122 0000000000000000 [ 85.830071][ C1] raw: ffff888058358440 00000000801e001b 00000000f5000000 0000000000000000 [ 85.832705][ C1] head: 00fff00000000040 ffff888104299400 dead000000000122 0000000000000000 [ 85.835373][ C1] head: ffff888058358440 00000000801e001b 00000000f5000000 0000000000000000 [ 85.838046][ C1] head: 00fff00000000003 ffffea000160d601 00000000ffffffff 00000000ffffffff [ 85.840784][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 85.843421][ C1] page dumped because: kasan: bad access detected [ 85.845409][ C1] page_owner tracks the page as allocated [ 85.847158][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6179, tgid 6176 (syz.1.43), ts 47608596645, free_ts 47608413441 [ 85.852914][ C1] post_alloc_hook+0x1c0/0x230 [ 85.854414][ C1] get_page_from_freelist+0x132b/0x38e0 [ 85.856130][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 85.857990][ C1] alloc_pages_mpol+0x1fb/0x550 [ 85.859542][ C1] new_slab+0x247/0x330 [ 85.860830][ C1] ___slab_alloc+0xcf2/0x1740 [ 85.862295][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 85.863959][ C1] kmem_cache_alloc_noprof+0xef/0x3b0 [ 85.865650][ C1] xfrm_state_alloc+0x23/0x5c0 [ 85.867149][ C1] __find_acq_core+0xb59/0x2900 [ 85.868669][ C1] xfrm_find_acq+0x7b/0xa0 [ 85.870132][ C1] xfrm_alloc_userspi+0x58e/0xbb0 [ 85.871712][ C1] xfrm_user_rcv_msg+0x58e/0xc00 [ 85.873279][ C1] netlink_rcv_skb+0x155/0x420 [ 85.874783][ C1] xfrm_netlink_rcv+0x71/0x90 [ 85.876267][ C1] netlink_unicast+0x5aa/0x870 [ 85.877799][ C1] page last free pid 6177 tgid 6176 stack trace: [ 85.879798][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 85.881440][ C1] __put_partials+0x165/0x1c0 [ 85.882922][ C1] qlist_free_all+0x4d/0x120 [ 85.884389][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 85.886108][ C1] __kasan_slab_alloc+0x69/0x90 [ 85.887649][ C1] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 85.889503][ C1] sock_alloc_inode+0x25/0x1c0 [ 85.890981][ C1] alloc_inode+0x61/0x240 [ 85.892343][ C1] sock_alloc+0x40/0x280 [ 85.893688][ C1] __sock_create+0xc1/0x8d0 [ 85.895123][ C1] __sys_socket+0x14d/0x260 [ 85.896552][ C1] __x64_sys_socket+0x72/0xb0 [ 85.898049][ C1] do_syscall_64+0xcd/0x4c0 [ 85.899527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.901391][ C1] [ 85.902155][ C1] Memory state around the buggy address: [ 85.903893][ C1] ffff888058357f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.906513][ C1] ffff888058357f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.909146][ C1] >ffff888058358000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.911613][ C1] ^ [ 85.913376][ C1] ffff888058358080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.915881][ C1] ffff888058358100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.918416][ C1] ================================================================== [ 85.921215][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.923459][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 85.926281][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.929572][ C1] Call Trace: [ 85.930617][ C1] [ 85.931536][ C1] dump_stack_lvl+0x3d/0x1f0 [ 85.933074][ C1] vpanic+0x6e8/0x7a0 [ 85.934354][ C1] ? __pfx_vpanic+0x10/0x10 [ 85.935816][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 85.937493][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 85.939207][ C1] panic+0xca/0xd0 [ 85.940400][ C1] ? __pfx_panic+0x10/0x10 [ 85.941819][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 85.943701][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 85.945342][ C1] check_panic_on_warn+0xab/0xb0 [ 85.947016][ C1] end_report+0x107/0x170 [ 85.948418][ C1] kasan_report+0xee/0x110 [ 85.949917][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 85.951590][ C1] __xfrm_state_delete+0x9e5/0xa30 [ 85.953233][ C1] xfrm_timer_handler+0x86c/0xf10 [ 85.954839][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 85.956779][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 85.958556][ C1] ? __hrtimer_run_queues+0x529/0xad0 [ 85.960292][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.961823][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.963343][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 85.965106][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 85.966753][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 85.968556][ C1] ? read_tsc+0x9/0x20 [ 85.969918][ C1] hrtimer_run_softirq+0x17d/0x350 [ 85.971548][ C1] handle_softirqs+0x216/0x8e0 [ 85.973076][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.974747][ C1] __irq_exit_rcu+0x109/0x170 [ 85.976274][ C1] irq_exit_rcu+0x9/0x30 [ 85.977654][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 85.979478][ C1] [ 85.980420][ C1] [ 85.981370][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.983244][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.985055][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.991017][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000282 [ 85.992927][ C1] RAX: 00000000000862f4 RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 85.995405][ C1] RDX: ffffed100d4a6656 RSI: ffffffff8c162800 RDI: ffffffff81913321 [ 85.997892][ C1] RBP: ffffed1003c53488 R08: 0000000000000000 R09: ffffed100d4a6655 [ 86.000361][ C1] R10: ffff88806a5332ab R11: 0000000000000000 R12: 0000000000000001 [ 86.002842][ C1] R13: ffff88801e29a440 R14: ffffffff90ab4090 R15: 0000000000000000 [ 86.005339][ C1] ? ct_kernel_exit+0x139/0x190 [ 86.006870][ C1] ? do_idle+0x391/0x510 [ 86.008213][ C1] default_idle+0x13/0x20 [ 86.009600][ C1] default_idle_call+0x6d/0xb0 [ 86.011050][ C1] do_idle+0x391/0x510 [ 86.012355][ C1] ? __pfx_do_idle+0x10/0x10 [ 86.013773][ C1] ? rcu_is_watching+0x12/0xc0 [ 86.015277][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.017077][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.018689][ C1] cpu_startup_entry+0x4f/0x60 [ 86.020235][ C1] start_secondary+0x21d/0x2b0 [ 86.021754][ C1] ? __pfx_start_secondary+0x10/0x10 [ 86.023411][ C1] common_startup_64+0x13e/0x148 [ 86.025008][ C1] [ 86.026904][ C1] Kernel Offset: disabled [ 86.028280][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:01:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000075f94 RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc10c780708 CR3=0000000051141000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6b46d440 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6b46d5c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6b46d5c6 00007ffc6b46d5cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55f8e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55f8e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55f8e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55f8e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55f8e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55f8e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856437c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc900006a0750 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b10dfe0 R15=ffffffff85643760 RIP=ffffffff856437ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd7212bc90 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff8564ce3b4ddc99 87882c35e526fe91 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f4f1501b56db65d a473feb953aa8c56 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f372b2398def8a5 9d86fa11d061fc62 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c71eadbe08436be9 e162d024e3411d5d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000a880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001b000034f1 9b443d00e55cb400 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000034f100000000 6ecc279e00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000dd618a00 973f1d00b8609a00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a0a4000791c9200 000034f1fcb2da00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b73b1843f000d312 5030481ac0e4a521 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd4da820ae3122d3 0f8df7c04987a523 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000097724 RBX=0000000000000002 RCX=ffffffff8b939c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc10c780708 CR3=0000000034415000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0070234423436d63 702f646e732f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6b4f28a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6b4f28a6 00007ffd6b4f28ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa934212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa934212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa934212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa934212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa934212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa934212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa3ada6a57aa0cc1 001708aca2cef60d 6bc0fa16651d2764 4562de7d2cedbcb6 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0000e47e40 RCX=ffffffff8222c6df RDX=ffff88801cfda440 RSI=0000000000000000 RDI=ffffea0000e47e40 RBP=0000000000000771 RSP=ffffc900007cf2a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=ffffea000119fb80 R14=dffffc0000000000 R15=ffff88803cc397d8 RIP=ffffffff82227b83 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555f624510 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7212bf20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7212c0a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7212c0a6 00007ffd7212c0ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc10c612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc10c612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc10c612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc10c612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc10c612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc10c612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000