last executing test programs: 1.370320868s ago: executing program 2 (id=1183): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x21000008, &(0x7f0000000140)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000040)={r2}) 1.320110789s ago: executing program 2 (id=1184): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x4008080) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 1.230604041s ago: executing program 2 (id=1185): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x1, 0x2, 0x4, 0xc971}) recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/157, 0x9d}, {&(0x7f0000000200)=""/207, 0xcf}], 0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, ""/42}], 0x40, 0x1}, 0x38, 0x10002) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={0x0}) 1.230089918s ago: executing program 2 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$1(0x1, &(0x7f0000000000)='[(\x97\'#.\x00') r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x40c0) 1.171013625s ago: executing program 2 (id=1188): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x6, "0c14c0", 0x1, 0x0, "1664157c2d3e8c644910ffc5d5e7d55db3f399f66360c93350c9d3f6f5e7b47e0d31619c46a473cea78b1eb253e05c84c101ff1f5c89f00b5b088d5faa9ddbc607cba4c98a6782010133f281822405f27dd4c46539961a3815cfe76523ae54c270273171984f9590d5db39611b8cd5bc31d9dda1e3c45bb7c635a5f136bef00588df0e2ea1f1e8bf122c5f5776db65e96573ff9b7f761b54a7e3f015404bef77aefc931f88cff761a42b52a8f5fd4019b6053ad598fbc9aec350466fee1d5918d9442266a0a96a28304444aba15bd0f2b6720ad029f01deb765d4e5c20a89716785fe03a4f85743686766b7919ba5492"}]}}}, 0x102) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000007cc0)=[{{&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000a80)}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) socket$kcm(0x10, 0x3, 0x10) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, 0x0, 0x0) write$dsp(r7, &(0x7f0000000500)="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", 0x800) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) 966.531521ms ago: executing program 1 (id=1190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) (rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="3e64430f01c966410f3882670066b864008ed8430f30660fc7730066ba4000b800000000ef660f388106400f01b962e500000f20e035040000000f22e0410f0118", 0x41}], 0x1, 0x69, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000280)="4fa8ab29e585a46879410a00e2050005000b17cbe679aa62685b03b8edbd59af9e34662b51529a6228b0138c583febdd0d0ed447cd1886df77af7a47bafa1b5a0262d18fb3af2fddfe448583d919797371f5eb744b0c3c2b346d332df20e0000000000", 0x63) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) sendfile(r0, r0, &(0x7f00000000c0)=0x2, 0x8000) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000800070303000200140000004510002800000000082f9078ac1e0001e0000001810088a4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020200590780000"], 0x36) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$qrtrtun(r11, &(0x7f00000014c0)="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", 0x1000) (async, rerun: 64) r12 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) 830.877827ms ago: executing program 1 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000200000001000000000000000b000000070000b29ba2"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 690.195321ms ago: executing program 1 (id=1198): io_setup(0x4000007f, &(0x7f0000000040)=0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="62000000180001000000000000000000020000040003000900000000060015000400000014001680100008800c0003800800020000000190"], 0x38}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04b0040460"], 0x7) io_pgetevents(r0, 0x2, 0x1, &(0x7f0000000180)=[{}], &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) getsockname$packet(r1, 0x0, &(0x7f0000000600)) io_submit(r0, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) socket(0x6, 0x80000, 0x200) ppoll(&(0x7f0000000240)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ce108e8331eeaaaaaaaaaa0008004510001c0000000000029078000000007f00000111009078000000014d398df5c59e71f08a02cbd96a16a5c9e80743fc78b9f628ae6b56480734482b607b2fbefe63080ecde3bee8e7f856d3eabbd4ffb6dc722620c11094d5fa7babf52d1bfe535f62ba8f9d2f83f77382d83073ce4a56c638bffb8cf99bfb515c9dd61689e909142cb69af24ed29a9d0a9f0590ff10090d3b9f7ea8bece3ba11d1ff8473af0b81ff694653a2953c30f6001fec6f2f0b22facc3c9d61dcf5b16bed6780b4b9a51a581f4ed8ba0483651ef0d0886b4be16a7b415d8778072387d2a61812ffd"], 0x0) 675.24795ms ago: executing program 1 (id=1199): memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x100000}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x80) getsockopt$inet_mreqn(r5, 0x0, 0x5f, &(0x7f00000002c0)={@broadcast, @initdev}, &(0x7f0000000300)=0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048085}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) poll(&(0x7f0000000480)=[{r6, 0x300}], 0x1, 0x3e) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 566.831707ms ago: executing program 0 (id=1203): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setpriority(0x2, 0x0, 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) unshare(0x22020400) r1 = eventfd(0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x251b9, 0x26, 0x6, 0x2d7, 0x0, r1}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0xbd, &(0x7f0000000180)=0x2) 489.612661ms ago: executing program 1 (id=1204): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x47, 0x0, 0x13, {[@timestamp={0x5, 0xa, 0x460000c1, 0x4000}]}}, {"2244070000bc0be4bdf9da"}}}}}, 0x4d) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r3 = timerfd_create(0x8, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa88a8104c6b4dfefd1ace40a1de6676e42a1422bbb655b8ff4e0b190081003300080045050014006700"], 0x0) r4 = getpgrp(0xffffffffffffffff) syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') timerfd_settime(r3, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001fc0)=""/4095, 0xfff}], 0x1) pread64(r2, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0xb7c, 0x0, 0x8}, {0xa2c, 0x0, 0xb9}, {0xdc0, 0x0, 0x3}, {0x4000009c, 0x0, 0xf0}, {0xa81, 0x0, 0x5f1}]}) 483.138376ms ago: executing program 0 (id=1206): mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x100000c, &(0x7f0000000100)={'trans=virtio,', {[{@dfltuid}]}}) r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x1f1b) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close_range(r5, r5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73"], 0x34}}, 0x4040) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000180)={0x0, 0x8, 0x1000, '\x00', &(0x7f0000000140)=0x2}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r10, 0x2c93a000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x10, r10, 0x0) 400.493417ms ago: executing program 0 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x13c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7cd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23d8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff813}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20084000}, 0x4000) 399.747857ms ago: executing program 0 (id=1210): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x6, 0x9}, 0x8) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000300)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2a54, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd528, 0x1, 0x5, 0x5, 0x3, {0xa, 0x1, 0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0x8001, 0x9fb, 0x0, 0xfff}, 0x2, 0x80000001, 0x80000001}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0x0) (async) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 399.469633ms ago: executing program 1 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xba01}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000800108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xba01}, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000800108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) (async) 340.478872ms ago: executing program 0 (id=1213): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@l={0x92, 0x1, 0xb0, 0x6, 0x7, 0x2, 0x7}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r0, 0x0, 0xfffffe59) mmap(&(0x7f000055c000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x20010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000237000/0x4000)=nil, 0x4000, 0x9) timer_create(0x7, 0x0, &(0x7f0000000740)) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000300)) timer_settime(r2, 0x1, &(0x7f00000002c0), 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700242c0020010000000000000000000000000001ff020000000000000000000000000001080000000000000001010000000000008700907800000000020000000000000000000001e22084730720a971fbbb03814013fafb9a3a0c5ac7589e37f29dfb25ccf5cd6719a13281626278642922d8f849915b7b6f3dc6bd27b18ffc7c4523bd33ccac55ae869c49167e82a170d17bb5fd32cef327e48b25bfdaca"], 0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x569240, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x8, r4, 0x1, 0x0) tkill(r4, 0x1b) ioctl$TIOCMGET(r3, 0x5415, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delneigh={0x24, 0x1d, 0x400, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x0, r6, 0x4, 0x15, 0x2}, [@NDA_SRC_VNI={0x8, 0xb, 0x7ff}]}, 0x24}}, 0x8000) 339.912925ms ago: executing program 2 (id=1214): socket(0x15, 0x5, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = fanotify_init(0x16, 0x0) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) ftruncate(r1, 0x3) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000010, r2, 0x0) execveat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r4 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="002395000000952451fe59741cb4b89bf750983b00eb9aa9c57ddb8be090bf6de1ac804371248b1e75ecd5494ee4e02bd85122f334420a8abff9b83860c4dbff3f252a348d4f728cdb48a68920931fd8723a23b71f39e5191b44cb840a12cb74f2453ae87970c980d1941d844313938be227ad909f489fce75d4f8e3e2a858fe209b8d3b3d932126b876713cfaf6d1eef4db504a49e2b800000000"], &(0x7f00000000c0)={0x0, 0x3, 0x31, @string={0x31, 0x3, "e115fc03a0ca6eb5b0d193745059192919393df76755e007a69422c68530e5214bef8a62caa2ae7179697a3c3a29f3"}}, &(0x7f0000000200)={0x0, 0xf, 0x85, {0x5, 0xf, 0x85, 0x3, [@generic={0x28, 0x10, 0xb, "7f1dfcd087893d71dd604e6685ebe653eae87ea968e14b6572652d7dea007f992f80043932"}, @generic={0x51, 0x10, 0x2, "d8a406e347eec11d39dcc63c486b79ebf8048ebbecdfa940b1796f2fe8811b9620ba4847ac4a24fc01f9a6c414eeae8011e0d7aec49bfd673eae97da705a201191d12d079df9c30d22bc4745e4ab"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0x6}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x1, 0x6, "21e6d5d3", "3d650e2f"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x5, 0x0, 0x6, 0x2, 0xb564}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x16, 0x7d, "a81d0cee614fb7c8da8985261db96fbbaeb8d7bdaefdb798bd85aa7f47dc47a15f3ba23d08c2e29c67da9476cdd16bb6d4b8b09298c5fb9afd9fac4cc0a7df95519964dea1e525b0b57abce2a763296d7624a4912df79fd8a871f7abdb512d7eefcf849174ad68367ad1955085cfb80bbe60dcf42d0542feab5a8636e6"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9e45"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "0c01"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xbe}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xb, 0x8}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000008140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4a8c01077d96d3960a927b5125607dd576383531b87a7d684ffbae04166a410148da94b2874844c88cfd9b92410e918558af", 0x32}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) r8 = signalfd(r3, &(0x7f00000009c0), 0x8) io_cancel(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000008c0)="fd4b1b19d4d1e36f195c283b0a61f6f64a96de108cca9ab82d15ed5627cc57777d19c9ffb9a194606af4b5d9d52d8cb17e7d1946f288e5c5c958c9ad57250aadc4e9b93f3a034fe92e12ec6d8ab8926d223961b32506ed37ba4a18522e4bbf253349d305905d67380d57de74c4abe24210263aa7d4c50d9362744b3fbfdb71574ee65f5b507df138d8c014ff7977c3af4d561cbaa62408ece7853ac35288e38874b643cf69983214a0f24ae369502ea491504df51daa199924a49469ef76da23cd10713cb70c31dc34ba9bf612ad9dd3fcc3b8623c374df9bcd76a3af5ba14836e6f35f33d761e8a465ef927095b33ea3987e20d", 0xf4, 0x7, 0x0, 0x1, r8}, &(0x7f0000000a40)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019580)=ANY=[@ANYBLOB="02005ad34947e21c930b15e1b26269e968ab77444f24b67641c6dac962648e8897ee8464578b8b928036ddefc5773b6d78660ab5a3f16781b0f7f98b3790a973514afb78332660a3de987920191742641901abe60ac4a3d1b39f9c3e2f343c4deb3abda529f0cb6381e132d305dd64dcd6c2a5e07ae8f43196b8aa88ec2f9dbf49adf9aa9c24afb8bf067f004557b58d54dca8247ccf4909484c864b15ef9a74c66d1d8f2678fee3d47f790f0860f304", @ANYRES16=r11, @ANYBLOB="010028bd7000fddbdf254100000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 337.979451ms ago: executing program 0 (id=1215): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x40000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000040)="35f93c"}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0x21, 0xd2, {0xd2, 0x23, "0d02f06c2b83e6b9d902a3f533a08d73618f5cb9b5669662aac31028dcffbde63e76c91772be19982a4f1ca3d9211e7cd9337215a1e33ec388413797cc75fd5a9d4a4afe9288946bd82ab84cf62c149050721f39584303b61a5523ca72d26aefa10af49a3004faf0575059ba420ce1dc673cb2f8fca1ebafb297e66dc392807f7ebc16464f7fb5055df654385c9d6d1cff54a435cdffb98583170ab91c6b6e1f0904194e68cbf7d72ef9c5b5fb44b90bbcd59ed458f31e85ded35bc90bdcb014c3bc68e556d85afacef45a9851ebfd70"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000280)={0x0, 0xf, 0xea, {0x5, 0xf, 0xea, 0x3, [@ptm_cap={0x3}, @generic={0xd8, 0x10, 0xb, "bf1b371318a314df5296e465f8d5f5cd3b683c00668c6476810ad433c28d8369d4fe954858337d96bd52146eee54bd0500e62af5d3263ab5f7b8d3d842812c5776fb72d7c775daafbda36bc23de14fa436f8c788510406e909e16b276676a2261e6fb67cb6c578c89b9101b9e60c60c12e65871682605313d6d9c4b2ce58fa8f43c3f84d93c042f280c8ae450e705fba127f3bdb650f0b2bf08e0cbd7d6e3bca02ff45fd893716f9bef69dea58cf36118b514b719c31ff69c2d485907a1041dc2a8bc1c110ac416432cee4571c399de0d8bf90a6db"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x80, 0x4}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x80, 0x0, "80ff71e7", "374b7099"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb3, 0x10, 0x7, 0x0, 0x0, 0x2, 0x9}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0xa, 0x32, "4df9080db6031c95239c37200469f43607062512658edb427a95dcf883ba864a6a263c68da13c4817d91f4bae20a43cbfe5a"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1c00, 0x10, [0xff11]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000600)={0x40, 0xb, 0x2, "63e3"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, "8a59"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xf0}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x40}}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) r2 = userfaultfd(0x800) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000900)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x5) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x5) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x5) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x6) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xa) r3 = semget$private(0x0, 0x1, 0x90) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000940)=""/168) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000a00)=0x100, 0x4) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x4) 210.685646ms ago: executing program 3 (id=1217): r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) 210.243676ms ago: executing program 3 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) ppoll(&(0x7f0000000140)=[{r1, 0x1100}], 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) r6 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) 100.885591ms ago: executing program 3 (id=1219): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r4, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r4, 0x0, 0x20}, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x31, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @value64}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x6c}}, 0x0) 100.666938ms ago: executing program 3 (id=1220): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) r1 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 97.60194ms ago: executing program 3 (id=1221): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x2, 0xba, {}, 0x0, 0x94cbe5c89abd043b, 0x1}) io_uring_enter(r4, 0x567, 0x2191, 0x2f, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 3 (id=1222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xe8, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x0, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x8], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@x86={0xb, 0xf, 0xf8, 0x0, 0x1, 0x6, 0x2, 0x9, 0x8, 0x1, 0x1, 0x2e, 0x0, 0x4, 0x8, 0x5, 0x2, 0x6, 0x10, '\x00', 0x1, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) kernel console output (not intermixed with test programs): : batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.277273][ T5972] hsr_slave_0: entered promiscuous mode [ 54.279756][ T5972] hsr_slave_1: entered promiscuous mode [ 54.283994][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.289897][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.307891][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.310921][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.321788][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.425962][ T5980] team0: Port device team_slave_0 added [ 54.433480][ T5967] hsr_slave_0: entered promiscuous mode [ 54.436778][ T5967] hsr_slave_1: entered promiscuous mode [ 54.439612][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 54.442069][ T5967] Cannot create hsr debugfs directory [ 54.474009][ T5980] team0: Port device team_slave_1 added [ 54.555636][ T5974] hsr_slave_0: entered promiscuous mode [ 54.559288][ T5974] hsr_slave_1: entered promiscuous mode [ 54.562208][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 54.564638][ T5974] Cannot create hsr debugfs directory [ 54.585163][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.588518][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.596456][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.604159][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.606453][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.615089][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.745434][ T5980] hsr_slave_0: entered promiscuous mode [ 54.748666][ T5980] hsr_slave_1: entered promiscuous mode [ 54.750740][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 54.752661][ T5980] Cannot create hsr debugfs directory [ 54.877225][ T5975] Bluetooth: hci1: command tx timeout [ 54.886510][ T5975] Bluetooth: hci0: command tx timeout [ 54.956685][ T5975] Bluetooth: hci3: command tx timeout [ 54.957400][ T5979] Bluetooth: hci2: command tx timeout [ 55.025623][ T5972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.033404][ T5972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.038466][ T5972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.050645][ T5972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.082155][ T5974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.087876][ T5974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.092226][ T5974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.097353][ T5974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.161809][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.178238][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.182214][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.187538][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.245784][ T5980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.251561][ T5980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.256531][ T5980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.261041][ T5980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.306479][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.317251][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.333841][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.350396][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.352717][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.366163][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.372243][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.375310][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.382881][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.393017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.396054][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.410389][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.413439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.439705][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.451752][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.454063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.472933][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.475912][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.519185][ T40] audit: type=1400 audit(1758878501.909:89): avc: denied { sys_module } for pid=5974 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.528445][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.554181][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.561796][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.564066][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.579926][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.582161][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.631829][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.683281][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.696181][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.706915][ T5974] veth0_vlan: entered promiscuous mode [ 55.717601][ T5974] veth1_vlan: entered promiscuous mode [ 55.745332][ T5972] veth0_vlan: entered promiscuous mode [ 55.756661][ T5972] veth1_vlan: entered promiscuous mode [ 55.773398][ T5967] veth0_vlan: entered promiscuous mode [ 55.789225][ T5974] veth0_macvtap: entered promiscuous mode [ 55.799995][ T5967] veth1_vlan: entered promiscuous mode [ 55.808273][ T5974] veth1_macvtap: entered promiscuous mode [ 55.817706][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.827201][ T5972] veth0_macvtap: entered promiscuous mode [ 55.832559][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.837776][ T5972] veth1_macvtap: entered promiscuous mode [ 55.850892][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.868277][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.872047][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.881157][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.885034][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.889398][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.906267][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.919368][ T5967] veth0_macvtap: entered promiscuous mode [ 55.937230][ T5967] veth1_macvtap: entered promiscuous mode [ 55.944189][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.959812][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.963513][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.983688][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.988340][ T5980] veth0_vlan: entered promiscuous mode [ 56.008425][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.010317][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.011171][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.023983][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.031885][ T5980] veth1_vlan: entered promiscuous mode [ 56.067281][ T102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.071439][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.073828][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.079476][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.081945][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.086707][ T102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.090401][ T102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.109907][ T102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.122013][ T5980] veth0_macvtap: entered promiscuous mode [ 56.128578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.131568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.137151][ T5980] veth1_macvtap: entered promiscuous mode [ 56.140423][ T5974] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.155076][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.166816][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.182408][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.189592][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.190926][ T6055] xt_l2tp: missing protocol rule (udp|l2tpip) [ 56.201959][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.205422][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.236660][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.239697][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.273566][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.275973][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.296111][ T6057] Zero length message leads to an empty skb [ 56.300415][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.305569][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.341090][ T6063] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 56.357086][ T6066] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.357177][ T6063] usb usb8: usbfs: process 6063 (syz.3.6) did not claim interface 0 before use [ 56.367747][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.370415][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.378496][ T6066] XFS (nullb0): Invalid superblock magic number [ 56.398367][ T6066] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7'. [ 56.399026][ T6067] o2cb: This node has not been configured. [ 56.402731][ T6066] netlink: zone id is out of range [ 56.405414][ T6067] o2cb: Cluster check failed. Fix errors before retrying. [ 56.408618][ T6066] netlink: zone id is out of range [ 56.412627][ T6066] netlink: zone id is out of range [ 56.413646][ T6067] (syz.2.3,6067,1):user_dlm_register:674 ERROR: status = -22 [ 56.417746][ T6066] netlink: zone id is out of range [ 56.419569][ T6067] (syz.2.3,6067,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 56.420249][ T6066] netlink: zone id is out of range [ 56.426134][ T6066] netlink: zone id is out of range [ 56.428752][ T6074] ucma_write: process 7 (syz.3.6) changed security contexts after opening file descriptor, this is not allowed. [ 56.429009][ T6066] netlink: zone id is out of range [ 56.435455][ T6066] netlink: get zone limit has 8 unknown bytes [ 56.435719][ T6075] tipc: Started in network mode [ 56.441853][ T6075] tipc: Node identity e6a8a4f4f0c3, cluster identity 4711 [ 56.444534][ T6075] tipc: Enabled bearer , priority 0 [ 56.447589][ T6076] tipc: Enabling of bearer rejected, already enabled [ 56.458518][ T6067] kvm: user requested TSC rate below hardware speed [ 56.561999][ T6075] syzkaller0: entered promiscuous mode [ 56.563674][ T6075] syzkaller0: entered allmulticast mode [ 56.568837][ T6076] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 56.575300][ T6075] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 56.581485][ T6073] tipc: Resetting bearer [ 56.591098][ T6073] tipc: Disabling bearer [ 56.654860][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 56.669162][ T6088] bond1 (unregistering): Released all slaves [ 56.761268][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 56.928152][ T6106] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.956800][ T5979] Bluetooth: hci0: command tx timeout [ 56.957153][ T5975] Bluetooth: hci1: command tx timeout [ 57.036891][ T5975] Bluetooth: hci2: command tx timeout [ 57.036925][ T5979] Bluetooth: hci3: command tx timeout [ 57.138306][ T5969] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.306411][ T5969] usb 6-1: Using ep0 maxpacket: 8 [ 57.310072][ T5969] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 57.312387][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 57.315923][ T5969] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.321437][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.324890][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.330075][ T5969] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 57.332427][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 57.335891][ T5969] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.341203][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.344761][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.355201][ T5969] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 57.357672][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 57.361108][ T5969] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.364747][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.368243][ T5969] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.374876][ T5969] usb 6-1: string descriptor 0 read error: -22 [ 57.377080][ T5969] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 57.379857][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.392242][ T5969] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 57.555673][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 57.555685][ T40] audit: type=1400 audit(1758878503.939:188): avc: denied { unmount } for pid=5980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.584532][ T40] audit: type=1400 audit(1758878503.969:189): avc: denied { map_read map_write } for pid=6146 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.590774][ T40] audit: type=1400 audit(1758878503.969:190): avc: denied { ioctl } for pid=6146 comm="syz.3.20" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.650609][ T6036] usb 6-1: USB disconnect, device number 2 [ 57.692307][ T40] audit: type=1400 audit(1758878504.079:191): avc: denied { ioctl } for pid=6104 comm="syz.2.14" path="socket:[8735]" dev="sockfs" ino=8735 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.811143][ T40] audit: type=1400 audit(1758878504.199:192): avc: denied { setopt } for pid=6166 comm="syz.2.23" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.878368][ T40] audit: type=1400 audit(1758878504.269:193): avc: denied { mount } for pid=6171 comm="syz.2.24" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.894262][ T40] audit: type=1400 audit(1758878504.279:194): avc: denied { create } for pid=6171 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.902539][ T40] audit: type=1400 audit(1758878504.289:195): avc: denied { write } for pid=6171 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.953746][ T40] audit: type=1400 audit(1758878504.339:196): avc: denied { create } for pid=6179 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.959973][ T40] audit: type=1400 audit(1758878504.349:197): avc: denied { bind } for pid=6179 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.062506][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 58.201732][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30'. [ 58.687660][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 58.786645][ T6226] io-wq is not configured for unbound workers [ 58.836162][ T54] cfg80211: failed to load regulatory.db [ 58.840210][ T6229] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 58.930834][ T6246] trusted_key: syz.0.39 sent an empty control message without MSG_MORE. [ 58.987732][ T6249] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.42'. [ 59.024197][ T6256] syzkaller1: entered promiscuous mode [ 59.026747][ T6256] syzkaller1: entered allmulticast mode [ 59.039941][ T5979] Bluetooth: hci0: command tx timeout [ 59.039984][ T5975] Bluetooth: hci1: command tx timeout [ 59.046468][ T6258] netlink: 'syz.1.45': attribute type 11 has an invalid length. [ 59.116400][ T5975] Bluetooth: hci3: command tx timeout [ 59.214178][ T6256] capability: warning: `syz.0.44' uses 32-bit capabilities (legacy support in use) [ 59.219409][ T6256] mmap: syz.0.44 (6256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.234661][ T6258] tmpfs: Too few inodes for current use [ 59.245414][ T6272] netlink: 'syz.3.48': attribute type 9 has an invalid length. [ 59.408795][ T6288] syz.2.54 uses obsolete (PF_INET,SOCK_PACKET) [ 59.786687][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.863655][ T6319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 59.896146][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 59.899960][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 59.936421][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.947244][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 59.950010][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.953529][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.959919][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.964336][ T34] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 59.968841][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.973928][ T34] usb 5-1: config 0 descriptor?? [ 60.106540][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 60.117791][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 60.122312][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 60.127039][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.134245][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 60.141293][ T24] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 60.144454][ T6338] process 'syz.1.66' launched '/dev/fd/3' with NULL argv: empty string added [ 60.144470][ T24] usb 7-1: Product: syz [ 60.148795][ T24] usb 7-1: Manufacturer: syz [ 60.150481][ T24] usb 7-1: SerialNumber: syz [ 60.160648][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input5 [ 60.372770][ T6035] usb 7-1: USB disconnect, device number 2 [ 60.390529][ T6035] appletouch 7-1:1.0: input: appletouch disconnected [ 60.409828][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 60.436234][ T34] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 60.440819][ T34] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 60.490257][ T6348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6348 comm=syz.1.70 [ 60.615682][ T1469] usb 5-1: USB disconnect, device number 2 [ 60.616679][ T2299] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 60.624458][ T2299] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 60.631894][ T2299] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 60.641960][ T2299] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 60.677212][ T6376] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 60.823731][ T6378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.961120][ T6385] fuse: Unknown parameter '÷ÿ' [ 61.025951][ T6387] netlink: 'syz.2.78': attribute type 4 has an invalid length. [ 61.117773][ T5975] Bluetooth: hci1: command tx timeout [ 61.126528][ T5975] Bluetooth: hci0: command tx timeout [ 61.162032][ T6393] random: crng reseeded on system resumption [ 61.186892][ T6393] tun0: tun_chr_ioctl cmd 1074025676 [ 61.189209][ T6393] tun0: owner set to 0 [ 61.191691][ T6391] overlayfs: failed to resolve './file1/file0': -20 [ 61.196739][ T5975] Bluetooth: hci3: command tx timeout [ 61.358215][ T5975] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 61.362255][ T5975] Bluetooth: hci2: Injecting HCI hardware error event [ 61.364821][ T5975] Bluetooth: hci2: hardware error 0x00 [ 61.450316][ T6404] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 61.456426][ T6404] block nbd0: Attempted send on invalid socket [ 61.460505][ T6404] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.777553][ T6471] __nla_validate_parse: 2 callbacks suppressed [ 62.777565][ T6471] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.104'. [ 62.782518][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 62.786265][ T6471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6471 comm=syz.1.104 [ 62.792454][ T6471] netlink: 160 bytes leftover after parsing attributes in process `syz.1.104'. [ 62.823935][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 62.823950][ T40] audit: type=1400 audit(1758878765.204:305): avc: denied { read write } for pid=6466 comm="syz.0.103" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.830096][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.836038][ T40] audit: type=1400 audit(1758878765.204:306): avc: denied { open } for pid=6466 comm="syz.0.103" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.856757][ T24] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 62.879001][ T6478] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 62.897690][ T6480] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 62.919490][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.923495][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.932383][ T6476] kvm: kvm [6475]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 63.058450][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 63.066680][ T40] audit: type=1400 audit(1758878765.444:307): avc: denied { read write } for pid=6490 comm="syz.0.110" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.073790][ T40] audit: type=1400 audit(1758878765.444:308): avc: denied { open } for pid=6490 comm="syz.0.110" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.081351][ T40] audit: type=1400 audit(1758878765.454:309): avc: denied { mount } for pid=6492 comm="syz.3.111" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.090322][ T40] audit: type=1400 audit(1758878765.454:310): avc: denied { setopt } for pid=6492 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.097411][ T40] audit: type=1400 audit(1758878765.454:311): avc: denied { connect } for pid=6492 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.104001][ T40] audit: type=1400 audit(1758878765.454:312): avc: denied { ioctl } for pid=6492 comm="syz.3.111" path="socket:[9208]" dev="sockfs" ino=9208 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.111852][ T40] audit: type=1400 audit(1758878765.484:313): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.122131][ T40] audit: type=1400 audit(1758878765.504:314): avc: denied { write } for pid=6494 comm="syz.2.113" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.259075][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'. [ 63.301233][ T6525] binder: 6524:6525 ioctl 40089413 200000000600 returned -22 [ 63.333570][ T6534] syz_tun: entered allmulticast mode [ 63.343587][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.349346][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.353423][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.357465][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.360146][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.362685][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.365565][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.369414][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.372230][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.374972][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.378049][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.380758][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.384200][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.387168][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.390813][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.393578][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.396095][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.399452][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.401792][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.404429][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.407917][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.411059][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.413835][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.418394][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.420951][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.423490][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.425993][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.430387][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.433650][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.437318][ T5975] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 63.440123][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.443272][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.446114][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.450209][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.452729][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.455231][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.459082][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.462848][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.466241][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.470098][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.473832][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.477505][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.482072][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.485427][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.489029][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.492485][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.496565][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.499880][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.503133][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.507074][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.510391][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.513650][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.518129][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.520768][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.523677][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.526925][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.530092][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.532597][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.535215][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.537107][ T6544] kernel read not supported for file /cpuset.effective_cpus (pid: 6544 comm: syz.3.124) [ 63.537918][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.543588][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.546202][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.549411][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.552206][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.555125][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.558183][ T6535] trusted_key: encrypted_key: insufficient parameters specified [ 63.610369][ T5975] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 63.612636][ T5975] Bluetooth: Wrong link type (-22) [ 63.614595][ T5975] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 63.616720][ T5975] Bluetooth: Wrong link type (-22) [ 63.672469][ T6557] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.691291][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'. [ 63.723800][ T6563] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 63.726609][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.1.132'. [ 63.789570][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 63.804292][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.808191][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.811296][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.814003][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.209031][ T6592] tmpfs: Bad value for 'mpol' [ 64.470100][ T6613] serio: Serial port ptm1 [ 64.588021][ T6621] netlink: 'syz.3.148': attribute type 6 has an invalid length. [ 64.591277][ T6621] netlink: 'syz.3.148': attribute type 5 has an invalid length. [ 64.594366][ T6621] netlink: 'syz.3.148': attribute type 4 has an invalid length. [ 64.674320][ T6572] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 64.848582][ T6649] netlink: 'syz.1.155': attribute type 7 has an invalid length. [ 64.972774][ T6665] tipc: Trying to set illegal importance in message [ 64.979945][ T6670] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio0-cursor) [ 65.263539][ T6689] IPVS: Error joining to the multicast group [ 65.395350][ T6696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6696 comm=syz.3.167 [ 65.918329][ T6729] batman_adv: batadv0: Adding interface: gretap1 [ 65.920828][ T6729] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.930897][ T6729] batman_adv: batadv0: Interface activated: gretap1 [ 66.270147][ T6036] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.436398][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 66.439895][ T6036] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 66.443570][ T6036] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 66.446997][ T6036] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.453389][ T6036] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.456697][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.459420][ T6036] usb 6-1: Product: syz [ 66.460726][ T6036] usb 6-1: Manufacturer: syz [ 66.462208][ T6036] usb 6-1: SerialNumber: syz [ 66.466622][ T6734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.469538][ T6734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.556435][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.684546][ T6036] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 66.693105][ T6036] usb 6-1: USB disconnect, device number 3 [ 66.726366][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 66.731249][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 66.734867][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 66.738806][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 66.742493][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.746914][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.750810][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.756816][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 66.760470][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.775164][ T34] usb 7-1: config 0 descriptor?? [ 66.846766][ T6747] trusted_key: encrypted_key: master key parameter is missing [ 66.925279][ T6752] erspan1: entered promiscuous mode [ 66.982157][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 67.004068][ T6758] geneve2: entered promiscuous mode [ 67.005758][ T6758] geneve2: entered allmulticast mode [ 67.136522][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 67.270360][ T6335] usb 7-1: USB disconnect, device number 3 [ 67.282672][ T6335] usblp0: removed [ 67.287595][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.289987][ T6770] comedi comedi3: comedi_config --init_data is deprecated [ 67.293313][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.295462][ T6771] comedi comedi3: Buffer allocation failed [ 67.297686][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.302543][ T24] usb 6-1: Product: syz [ 67.303960][ T24] usb 6-1: Manufacturer: syz [ 67.305842][ T24] usb 6-1: SerialNumber: syz [ 67.349117][ T6768] netlink: 'syz.3.193': attribute type 9 has an invalid length. [ 67.362325][ T6776] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 67.388606][ T6778] netlink: 'syz.2.196': attribute type 28 has an invalid length. [ 67.391193][ T6778] netlink: 'syz.2.196': attribute type 3 has an invalid length. [ 67.504697][ T6787] delete_channel: no stack [ 67.694714][ T6802] trusted_key: encrypted_key: insufficient parameters specified [ 67.746124][ T6808] cgroup: release_agent respecified [ 67.849456][ T12] Bluetooth: (null): Invalid header checksum [ 67.851544][ T12] Bluetooth: (null): Invalid header checksum [ 67.958537][ T12] Bluetooth: (null): Invalid header checksum [ 68.031741][ T6829] ISOFS: Unable to identify CD-ROM format. [ 68.066639][ T12] Bluetooth: (null): Invalid header checksum [ 68.100451][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 68.100460][ T40] audit: type=1400 audit(1758878770.484:386): avc: denied { read write } for pid=6836 comm="syz.2.213" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.110744][ T40] audit: type=1400 audit(1758878770.484:387): avc: denied { open } for pid=6836 comm="syz.2.213" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.143627][ T40] audit: type=1400 audit(1758878770.524:388): avc: denied { bind } for pid=6838 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.177331][ T13] Bluetooth: (null): Invalid header checksum [ 68.192260][ T6844] __nla_validate_parse: 11 callbacks suppressed [ 68.192275][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 68.198658][ T6844] netlink: 'syz.2.215': attribute type 30 has an invalid length. [ 68.201785][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 68.286621][ T74] Bluetooth: (null): Invalid header checksum [ 68.298790][ T40] audit: type=1800 audit(1758878770.684:389): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.216" name="file0" dev="overlay" ino=434 res=0 errno=0 [ 68.299429][ T6846] veth0: entered promiscuous mode [ 68.308639][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 68.342207][ T6846] veth0 (unregistering): left promiscuous mode [ 68.373440][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 68.377845][ T24] usb 6-1: USB disconnect, device number 4 [ 68.406106][ T74] Bluetooth: (null): Invalid header checksum [ 68.484239][ T40] audit: type=1400 audit(1758878770.864:390): avc: denied { ioctl } for pid=6847 comm="syz.2.217" path="socket:[13113]" dev="sockfs" ino=13113 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.507284][ T74] Bluetooth: (null): Invalid header checksum [ 68.567400][ T40] audit: type=1400 audit(1758878770.954:391): avc: denied { kexec_image_load } for pid=6849 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 68.697168][ T40] audit: type=1400 audit(1758878771.084:392): avc: denied { connect } for pid=6859 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.761009][ T6861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.764187][ T6861] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 68.777943][ T6861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.780504][ T6861] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 68.801973][ T6861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.810309][ T6861] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 68.988822][ T40] audit: type=1400 audit(1758878771.364:393): avc: denied { setopt } for pid=6877 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.004240][ T6878] 9pnet_fd: Insufficient options for proto=fd [ 69.012994][ T6878] erspan1: entered promiscuous mode [ 69.090611][ T6893] netlink: 'syz.0.228': attribute type 30 has an invalid length. [ 69.092113][ T40] audit: type=1400 audit(1758878771.474:394): avc: denied { ioctl } for pid=6884 comm="syz.1.226" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.102314][ T40] audit: type=1400 audit(1758878771.494:395): avc: denied { getopt } for pid=6894 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.109373][ T6893] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 69.393827][ T6935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.238'. [ 69.450578][ T6947] xt_policy: neither incoming nor outgoing policy selected [ 69.487670][ T6954] xt_policy: neither incoming nor outgoing policy selected [ 69.547257][ T6962] erspan0: entered promiscuous mode [ 69.554522][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 69.564085][ T6962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6962 comm=syz.0.243 [ 69.629599][ T6968] IPVS: persistence engine module ip_vs_pe_s not found [ 69.684083][ T6974] netlink: 348 bytes leftover after parsing attributes in process `syz.0.246'. [ 69.861330][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 69.864299][ T6990] netlink: 3 bytes leftover after parsing attributes in process `syz.0.251'. [ 70.229301][ T7007] Bluetooth: MGMT ver 1.23 [ 70.409590][ T7022] tun0: tun_chr_ioctl cmd 1074025677 [ 70.411381][ T7022] tun0: linktype set to 280 [ 70.596420][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.671780][ T7043] kvm: MONITOR instruction emulated as NOP! [ 70.738829][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 70.747564][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.750361][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.756382][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.759163][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.763901][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.768752][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.771243][ T24] usb 7-1: Product: syz [ 70.772580][ T24] usb 7-1: Manufacturer: syz [ 70.781648][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 70.783306][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 70.788194][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 70.790288][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 70.842282][ T7080] block nbd3: Attempted send on invalid socket [ 70.845103][ T7080] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 70.850390][ T7080] EXT4-fs (nbd3): unable to read superblock [ 70.887236][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 70.890052][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 70.982541][ T6036] usb 7-1: USB disconnect, device number 4 [ 71.220434][ T7113] validate_nla: 1 callbacks suppressed [ 71.220444][ T7113] netlink: 'syz.3.282': attribute type 39 has an invalid length. [ 71.444270][ T54] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.459925][ T7119] sctp: [Deprecated]: syz.3.283 (pid 7119) Use of int in max_burst socket option deprecated. [ 71.459925][ T7119] Use struct sctp_assoc_value instead [ 71.609737][ T54] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.613528][ T54] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.617611][ T54] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.621276][ T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.627368][ T54] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.631072][ T54] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.634481][ T54] usb 7-1: Product: syz [ 71.636477][ T54] usb 7-1: Manufacturer: syz [ 71.652936][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 71.654873][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 71.659248][ T54] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 71.661813][ T54] cdc_wdm 7-1:1.0: Unknown control protocol [ 71.760076][ T7134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.858157][ T34] usb 7-1: USB disconnect, device number 5 [ 71.858157][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 71.862887][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 71.865553][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 72.105418][ T7177] infiniband syz0: set active [ 72.109067][ T7177] infiniband syz0: added bond_slave_0 [ 72.145128][ T7177] RDS/IB: syz0: added [ 72.149485][ T7177] smc: adding ib device syz0 with port count 1 [ 72.151542][ T7177] smc: ib device syz0 port 1 has pnetid [ 72.739192][ T7219] 9pnet_fd: Insufficient options for proto=fd [ 73.052095][ T7280] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 73.055802][ T7280] bond0: (slave wlan1): Opening slave failed [ 73.098366][ T7288] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.482666][ T7304] overlayfs: missing 'lowerdir' [ 73.518502][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 73.518519][ T40] audit: type=1400 audit(1758878775.904:443): avc: denied { setopt } for pid=7306 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.527377][ T40] audit: type=1400 audit(1758878775.904:444): avc: denied { connect } for pid=7306 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.534739][ T40] audit: type=1400 audit(1758878775.904:445): avc: denied { write } for pid=7306 comm="syz.2.316" laddr=fe80::6cb0:21ff:fed5:47d2 lport=1 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.542951][ T40] audit: type=1400 audit(1758878775.904:446): avc: denied { read } for pid=7306 comm="syz.2.316" laddr=fe80::6cb0:21ff:fed5:47d2 lport=1 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.550931][ T40] audit: type=1400 audit(1758878775.904:447): avc: denied { execmem } for pid=7306 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.728591][ T40] audit: type=1326 audit(1758878776.114:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.0.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x7ffc0000 [ 73.738071][ T40] audit: type=1326 audit(1758878776.114:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.0.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x7ffc0000 [ 73.748029][ T40] audit: type=1326 audit(1758878776.114:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.0.317" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f412d58eec9 code=0x7ffc0000 [ 73.757667][ T40] audit: type=1326 audit(1758878776.114:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.0.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x7ffc0000 [ 73.769295][ T40] audit: type=1326 audit(1758878776.114:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.0.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x7ffc0000 [ 73.805599][ T7322] __nla_validate_parse: 7 callbacks suppressed [ 73.805610][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 73.894851][ T7342] IPVS: set_ctl: invalid protocol: 2 172.20.20.17:20000 [ 73.931277][ T7348] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 73.959998][ T7384] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.033233][ T7394] 9pnet_fd: Insufficient options for proto=fd [ 74.207919][ T7436] netlink: 'syz.0.333': attribute type 11 has an invalid length. [ 74.482122][ T7462] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.569381][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 74.695455][ T7495] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 74.698797][ T7495] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 74.698938][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 74.701945][ T7495] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.344'. [ 74.827420][ T7583] random: crng reseeded on system resumption [ 74.838603][ T7583] kvm: kvm [7582]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x6666666666666626 [ 74.964151][ T7610] Illegal XDP return value 3722763588 on prog (id 42) dev N/A, expect packet loss! [ 74.964175][ T7615] 9pnet_fd: Insufficient options for proto=fd [ 75.136724][ T7660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.144637][ T7652] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 75.169651][ T7652] gretap1: entered allmulticast mode [ 75.173643][ T7652] bond2: (slave gretap1): making interface the new active one [ 75.175671][ T7701] program syz.2.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.176772][ T7652] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 75.214710][ T7709] tipc: Enabling of bearer rejected, failed to enable media [ 75.249568][ T7712] veth0: entered promiscuous mode [ 75.251636][ T7711] veth0: left promiscuous mode [ 75.330468][ T7715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7715 comm=syz.0.372 [ 75.588258][ T7739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 75.973903][ T7784] ======================================================= [ 75.973903][ T7784] WARNING: The mand mount option has been deprecated and [ 75.973903][ T7784] and is ignored by this kernel. Remove the mand [ 75.973903][ T7784] option from the mount to silence this warning. [ 75.973903][ T7784] ======================================================= [ 75.993703][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.996835][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.054794][ T7803] usb usb8: usbfs: process 7803 (syz.2.389) did not claim interface 12 before use [ 76.332023][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.334160][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.543071][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 76.546003][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 76.654252][ T7850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7850 comm=syz.2.399 [ 76.746397][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 76.751616][ T7855] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 76.754890][ T7855] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 77.056317][ T6335] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 77.196333][ T6335] usb 7-1: device descriptor read/64, error -71 [ 77.386529][ T6035] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.446327][ T6335] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 77.536311][ T6035] usb 5-1: Using ep0 maxpacket: 32 [ 77.539201][ T6035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 77.542973][ T6035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 77.546659][ T6035] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.553428][ T6035] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 77.556348][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 77.558917][ T6035] usb 5-1: Product: syz [ 77.560221][ T6035] usb 5-1: Manufacturer: syz [ 77.562022][ T6035] usb 5-1: SerialNumber: syz [ 77.570122][ T6035] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input8 [ 77.586319][ T6335] usb 7-1: device descriptor read/64, error -71 [ 77.697185][ T6335] usb usb7-port1: attempt power cycle [ 77.771217][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.774331][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.781505][ T34] usb 5-1: USB disconnect, device number 3 [ 77.789369][ T34] appletouch 5-1:1.0: input: appletouch disconnected [ 78.036374][ T6335] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 78.056709][ T6335] usb 7-1: device descriptor read/8, error -71 [ 78.296320][ T6335] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 78.327228][ T6335] usb 7-1: device descriptor read/8, error -71 [ 78.437356][ T6335] usb usb7-port1: unable to enumerate USB device [ 78.535398][ T7910] Bluetooth: MGMT ver 1.23 [ 78.583292][ T7914] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 78.609320][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 78.612127][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 78.619349][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 78.619359][ T40] audit: type=1400 audit(1758878781.012:539): avc: denied { write } for pid=7915 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 78.627417][ T40] audit: type=1400 audit(1758878781.012:540): avc: denied { getopt } for pid=7915 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.649325][ T40] audit: type=1400 audit(1758878781.042:541): avc: denied { bind } for pid=7919 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.650594][ T7920] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 78.655506][ T40] audit: type=1400 audit(1758878781.042:542): avc: denied { ioctl } for pid=7919 comm="syz.0.413" path="socket:[18699]" dev="sockfs" ino=18699 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.665333][ T7920] team0: Cannot enslave team device to itself [ 78.770436][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 78.779646][ T7933] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 78.782557][ T7933] team0: Device ipvlan2 is already an upper device of the team interface [ 79.002454][ T40] audit: type=1400 audit(1758878781.392:543): avc: denied { listen } for pid=7938 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 79.008754][ T40] audit: type=1400 audit(1758878781.392:544): avc: denied { accept } for pid=7938 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 79.014984][ T7949] overlayfs: failed to resolve './file1': -2 [ 79.162003][ T7958] loop6: detected capacity change from 0 to 7 [ 79.176188][ T6058] Dev loop6: unable to read RDB block 7 [ 79.178820][ T6058] loop6: unable to read partition table [ 79.181450][ T6058] loop6: partition table beyond EOD, truncated [ 79.194601][ T7958] Dev loop6: unable to read RDB block 7 [ 79.196517][ T7958] loop6: unable to read partition table [ 79.198766][ T7958] loop6: partition table beyond EOD, truncated [ 79.202553][ T7958] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 79.233539][ T40] audit: type=1400 audit(1758878781.622:545): avc: denied { write } for pid=7966 comm="syz.3.423" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.295445][ T7979] overlayfs: conflicting lowerdir path [ 79.354763][ T7991] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 79.357681][ T7991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.427'. [ 79.465593][ T8009] fuse: Unknown parameter 'ÿ0xffffffffffffffff' [ 79.468822][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 79.472016][ T8009] bridge_slave_1: left allmulticast mode [ 79.474106][ T8009] bridge_slave_1: left promiscuous mode [ 79.477400][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.482887][ T8009] bridge_slave_0: left allmulticast mode [ 79.484753][ T8009] bridge_slave_0: left promiscuous mode [ 79.487862][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.649664][ T8014] futex_wake_op: syz.1.431 tries to shift op by -1; fix this program [ 79.656102][ T40] audit: type=1400 audit(1758878782.042:546): avc: denied { name_bind } for pid=8019 comm="syz.3.432" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 79.784701][ T8030] netlink: 536 bytes leftover after parsing attributes in process `syz.0.434'. [ 79.788750][ T8030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.434'. [ 79.826295][ T40] audit: type=1400 audit(1758878782.212:547): avc: denied { cmd } for pid=8032 comm="syz.0.435" path="socket:[17758]" dev="sockfs" ino=17758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.887673][ T40] audit: type=1400 audit(1758878782.282:548): avc: denied { accept } for pid=8050 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.941260][ T8061] netlink: 'syz.0.440': attribute type 3 has an invalid length. [ 79.943777][ T8061] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 79.946194][ T8061] netlink: 220 bytes leftover after parsing attributes in process `syz.0.440'. [ 80.072427][ T8080] 9pnet_fd: p9_fd_create_tcp (8080): problem binding to privport [ 80.073698][ T8081] Can't find ip_set type èash:net,port [ 80.220097][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 80.252239][ T8108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8108 comm=syz.1.453 [ 80.288690][ T8114] netlink: 52 bytes leftover after parsing attributes in process `syz.1.454'. [ 80.395677][ T8128] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 80.402913][ T8128] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 80.476196][ T8139] FAT-fs (nullb0): bogus number of reserved sectors [ 80.478475][ T8139] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 80.779987][ T8174] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.823484][ T8177] netlink: 'syz.1.465': attribute type 2 has an invalid length. [ 80.826166][ T8177] netlink: 244 bytes leftover after parsing attributes in process `syz.1.465'. [ 80.846472][ T8180] netlink: 'syz.2.466': attribute type 7 has an invalid length. [ 81.195446][ T8194] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 81.323163][ T8239] random: crng reseeded on system resumption [ 81.334301][ T8239] vlan3: entered promiscuous mode [ 81.337279][ T8239] vlan3: entered allmulticast mode [ 81.339048][ T8239] hsr_slave_1: entered allmulticast mode [ 81.394166][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 81.539317][ T8259] syz.0.474 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.609796][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 81.618724][ T8281] block nbd0: Attempted send on invalid socket [ 81.621110][ T8281] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.624146][ T8281] (syz.0.478,8281,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 81.627112][ T8281] (syz.0.478,8281,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 81.629363][ T8281] (syz.0.478,8281,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 81.631984][ T8281] (syz.0.478,8281,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 81.667885][ T8286] loop6: detected capacity change from 0 to 2640 [ 81.671856][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.675495][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.682828][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.685406][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.688071][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.690534][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.693031][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.695563][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.700454][ T6058] ldm_validate_partition_table(): Disk read failed. [ 81.703161][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.706588][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.709858][ T6058] Dev loop6: unable to read RDB block 0 [ 81.712588][ T6058] loop6: unable to read partition table [ 81.717823][ T8286] ldm_validate_partition_table(): Disk read failed. [ 81.720856][ T8286] Dev loop6: unable to read RDB block 0 [ 81.723460][ T8286] loop6: unable to read partition table [ 81.726321][ T8286] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 81.837589][ T8323] openvswitch: netlink: IPv4 tunnel dst address is zero [ 81.842820][ T8323] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 81.846011][ T8323] gfs2: error -5 reading superblock [ 81.972550][ T8341] 9pnet: Could not find request transport: vi [ 82.014758][ T8347] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 82.094907][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8353 comm=syz.2.491 [ 82.111080][ T8363] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 82.115783][ T8363] netlink: 'syz.1.493': attribute type 2 has an invalid length. [ 82.257889][ T8373] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 82.340639][ T8382] 9pnet_virtio: no channels available for device syz [ 82.351860][ T8382] syz_tun: entered promiscuous mode [ 82.354221][ T8382] batadv_slave_0: entered promiscuous mode [ 82.890848][ T8413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 82.981549][ T8428] sch_tbf: burst 960 is lower than device lo mtu (65550) ! [ 82.989677][ T8427] sch_tbf: burst 960 is lower than device lo mtu (65550) ! [ 83.033022][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.036984][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.665081][ T8465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=8465 comm=syz.1.513 [ 83.669686][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 83.669700][ T40] audit: type=1400 audit(1758878786.062:574): avc: denied { write } for pid=8467 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.796067][ T8541] 9p: Unknown access argument 0xffffffffffffffff: -22 [ 83.902060][ T40] audit: type=1400 audit(1758878786.292:575): avc: denied { mounton } for pid=8539 comm="syz.2.516" path="/132/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.980330][ T8555] input: syz0 as /devices/virtual/input/input10 [ 84.024525][ T40] audit: type=1400 audit(1758878786.412:576): avc: denied { read } for pid=8561 comm="syz.1.520" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.024599][ T8562] random: crng reseeded on system resumption [ 84.243781][ T8576] openvswitch: netlink: IP tunnel TTL not specified. [ 84.607551][ T8591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 84.610660][ T8591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 84.898741][ T40] audit: type=1400 audit(1758878787.292:577): avc: denied { setopt } for pid=8601 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.905815][ T40] audit: type=1400 audit(1758878787.292:578): avc: denied { bind } for pid=8601 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.912099][ T40] audit: type=1400 audit(1758878787.292:579): avc: denied { nlmsg_write } for pid=8601 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.973309][ T8603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.053808][ T8603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.120414][ T8603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.186824][ T8603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.253095][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.265391][ T102] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.277438][ T102] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.284398][ T102] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588303][ T40] audit: type=1400 audit(1758878787.982:580): avc: denied { wake_alarm } for pid=8625 comm="syz.1.529" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.651665][ T8636] libceph: resolve '40' (ret=-3): failed [ 85.730839][ T8642] block nbd1: NBD_DISCONNECT [ 85.758773][ T40] audit: type=1400 audit(1758878788.152:581): avc: denied { create } for pid=8644 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.765042][ T40] audit: type=1400 audit(1758878788.152:582): avc: denied { ioctl } for pid=8644 comm="syz.1.534" path="socket:[21593]" dev="sockfs" ino=21593 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.776008][ T40] audit: type=1400 audit(1758878788.152:583): avc: denied { connect } for pid=8644 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.841642][ T8662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 85.958500][ T8674] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 85.962914][ T8674] __nla_validate_parse: 5 callbacks suppressed [ 85.962926][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 85.971324][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 85.975911][ T8674] overlay: filesystem on ./bus not supported as upperdir [ 85.995207][ T8680] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 85.998444][ T8680] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.542'. [ 86.085821][ T8693] team0: Device gtp0 is of different type [ 86.314334][ T8726] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 86.318676][ T8726] veth0_macvtap: left promiscuous mode [ 86.382501][ T8732] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 86.386051][ T8732] netlink: 2 bytes leftover after parsing attributes in process `syz.1.551'. [ 86.393039][ T8732] team0: entered promiscuous mode [ 86.395382][ T8732] team_slave_0: entered promiscuous mode [ 86.398469][ T8732] team_slave_1: entered promiscuous mode [ 86.401432][ T8732] bridge0: port 3(team0) entered blocking state [ 86.404410][ T8732] bridge0: port 3(team0) entered disabled state [ 86.407491][ T8732] team0: entered allmulticast mode [ 86.409826][ T8732] team_slave_0: entered allmulticast mode [ 86.412309][ T8732] team_slave_1: entered allmulticast mode [ 86.417551][ T8732] bridge0: port 3(team0) entered blocking state [ 86.420372][ T8732] bridge0: port 3(team0) entered forwarding state [ 86.427148][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 86.451433][ T8732] SELinux: policydb magic number 0x76650006 does not match expected magic number 0xf97cff8c [ 86.457379][ T8732] SELinux: failed to load policy [ 86.634396][ T8748] bond2: entered allmulticast mode [ 86.922606][ T8805] cgroup: Unknown subsys name 'rlimit' [ 86.926047][ T8805] fuse: Unknown parameter ' ' [ 87.046749][ T8812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.564'. [ 87.143996][ T8819] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 87.397695][ T8839] kvm: user requested TSC rate below hardware speed [ 87.402442][ T8839] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 87.423573][ T8844] netlink: 188 bytes leftover after parsing attributes in process `syz.1.569'. [ 87.560367][ T8867] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.786388][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.860826][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 87.936332][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 87.940370][ T9] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.944206][ T9] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.947759][ T9] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.951902][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 87.956113][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 87.959764][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.962574][ T9] usb 6-1: Product: syz [ 87.964265][ T9] usb 6-1: Manufacturer: syz [ 87.966703][ T9] usb 6-1: SerialNumber: syz [ 88.173086][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 88.426127][ T8862] usblp0:failed reading printer status (-32) [ 88.429481][ T8862] tmpfs: Too few inodes for current use [ 88.433038][ T54] usb 6-1: USB disconnect, device number 5 [ 88.436581][ T54] usblp0: removed [ 88.778141][ T8908] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 89.033832][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 89.033844][ T40] audit: type=1400 audit(1758878791.422:605): avc: denied { name_bind } for pid=8923 comm="syz.1.580" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 89.114837][ T40] audit: type=1400 audit(1758878791.502:606): avc: denied { bind } for pid=8927 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.227857][ T8928] delete_channel: no stack [ 89.699328][ T8965] netlink: 596 bytes leftover after parsing attributes in process `syz.3.588'. [ 89.699336][ T8962] netlink: 596 bytes leftover after parsing attributes in process `syz.3.588'. [ 89.859732][ T40] audit: type=1400 audit(1758878792.252:607): avc: denied { append } for pid=8973 comm="syz.3.590" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.862670][ T8974] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 89.871002][ T8974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.877603][ T8974] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 89.883275][ T8974] cramfs: wrong magic [ 89.953103][ T40] audit: type=1804 audit(1758878792.342:608): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.593" name="/newroot/175/file0" dev="tmpfs" ino=961 res=1 errno=0 [ 89.955137][ T8983] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 89.967903][ T8983] ref_ctr increment failed for inode: 0x3c1 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888030e1ab00 [ 90.135023][ T9006] No control pipe specified [ 90.211727][ T9010] syzkaller0: entered allmulticast mode [ 90.216653][ T9010] program syz.2.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.243216][ T9020] kvm: pic: non byte write [ 90.398847][ T40] audit: type=1400 audit(1758878792.792:609): avc: denied { link } for pid=9016 comm="syz.3.603" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 90.462475][ T40] audit: type=1400 audit(1758878792.852:610): avc: denied { getopt } for pid=9032 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.568717][ T9101] hid-generic 0003:0627:0001.0001: pid 9101 passed too large report [ 90.574576][ T40] audit: type=1400 audit(1758878792.962:611): avc: denied { name_connect } for pid=9100 comm="syz.2.607" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 90.631793][ T40] audit: type=1400 audit(1758878793.022:612): avc: denied { mount } for pid=9106 comm="syz.2.608" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 90.663507][ T40] audit: type=1400 audit(1758878793.052:613): avc: denied { mount } for pid=9108 comm="syz.2.609" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 90.665638][ T9110] fuse: Bad value for 'fd' [ 90.672543][ T40] audit: type=1400 audit(1758878793.052:614): avc: denied { unmount } for pid=9108 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 91.024548][ T9147] overlayfs: failed lookup in lower (newroot/179, name='file0', err=-40): overlapping layers [ 91.142019][ T9162] tmpfs: Bad value for 'mpol' [ 91.194156][ T9171] __nla_validate_parse: 2 callbacks suppressed [ 91.194172][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 91.201503][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 92.259639][ T9247] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 92.263197][ T839] IPVS: starting estimator thread 0... [ 92.303503][ T9257] fuse: Bad value for 'group_id' [ 92.305808][ T9257] fuse: Bad value for 'group_id' [ 92.346462][ T9250] IPVS: using max 26 ests per chain, 62400 per kthread [ 92.354510][ T9264] openvswitch: netlink: Key 27 has unexpected len 0 expected 40 [ 92.371766][ T9266] batman_adv: batadv0: Adding interface: gretap1 [ 92.374672][ T9266] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.383526][ T9266] batman_adv: batadv0: Interface activated: gretap1 [ 92.818258][ T9323] input: syz1 as /devices/virtual/input/input13 [ 93.106052][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 93.110353][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 93.114794][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 93.118709][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 93.246797][ T54] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 93.406676][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 93.410800][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.415285][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.419507][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.423712][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.429373][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.433373][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.641897][ T54] usb 6-1: GET_CAPABILITIES returned 0 [ 93.644374][ T54] usbtmc 6-1:16.0: can't read capabilities [ 93.845048][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.856477][ T9331] team0: Device gtp0 is of different type [ 93.870828][ T9330] team0: Device gtp0 is of different type [ 93.989767][ T54] usb 6-1: USB disconnect, device number 6 [ 94.087995][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 94.105974][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 94.105988][ T40] audit: type=1400 audit(1758878796.492:627): avc: denied { append } for pid=9394 comm="syz.3.658" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 94.124050][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.658'. [ 94.129203][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.658'. [ 94.133449][ T9396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.658'. [ 94.156467][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 94.308897][ T34] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 94.312456][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.316713][ T40] audit: type=1400 audit(1758878796.702:628): avc: denied { getopt } for pid=9403 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.316751][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.331392][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.334343][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.338692][ T34] usb 7-1: Product: syz [ 94.340601][ T34] usb 7-1: Manufacturer: syz [ 94.342131][ T34] usb 7-1: SerialNumber: syz [ 94.344983][ T34] usb 7-1: config 0 descriptor?? [ 94.346843][ T40] audit: type=1400 audit(1758878796.732:629): avc: denied { write } for pid=9403 comm="syz.3.659" path="socket:[22185]" dev="sockfs" ino=22185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.355638][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 94.358518][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 94.364738][ T34] usb 7-1: selecting invalid altsetting 0 [ 94.474263][ T9422] netlink: 'syz.0.661': attribute type 21 has an invalid length. [ 94.480590][ T9422] netlink: 'syz.0.661': attribute type 6 has an invalid length. [ 94.532098][ T9427] netlink: 'syz.1.662': attribute type 64 has an invalid length. [ 94.534591][ T9427] netlink: 'syz.1.662': attribute type 4 has an invalid length. [ 94.536558][ T40] audit: type=1400 audit(1758878796.922:630): avc: denied { ioctl } for pid=9434 comm="syz.3.664" path="socket:[23106]" dev="sockfs" ino=23106 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.546061][ T40] audit: type=1326 audit(1758878796.932:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9434 comm="syz.3.664" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f449fd8eec9 code=0x0 [ 94.560238][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.563454][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.640582][ T40] audit: type=1804 audit(1758878797.032:632): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.667" name="/newroot/187/file0" dev="tmpfs" ino=1031 res=1 errno=0 [ 94.642481][ T9459] ufs: You didn't specify the type of your ufs filesystem [ 94.642481][ T9459] [ 94.642481][ T9459] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 94.642481][ T9459] [ 94.642481][ T9459] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 94.661092][ T9459] ufs: ufstype=old is supported read-only [ 94.663653][ T9459] ufs: ufs_fill_super(): bad magic number [ 94.676607][ T6335] usb 7-1: USB disconnect, device number 10 [ 94.906874][ T9480] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 95.236490][ T9505] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 95.247309][ T40] audit: type=1400 audit(1758878797.642:633): avc: denied { connect } for pid=9504 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.377577][ T9533] sch_fq: defrate 0 ignored. [ 95.603974][ T40] audit: type=1400 audit(1758878797.992:634): avc: denied { mount } for pid=9566 comm="syz.1.686" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 95.771803][ T40] audit: type=1400 audit(1758878798.162:635): avc: denied { bind } for pid=9628 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.777807][ T40] audit: type=1400 audit(1758878798.162:636): avc: denied { write } for pid=9628 comm="syz.1.694" path="socket:[23813]" dev="sockfs" ino=23813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.892570][ T9651] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 95.927299][ T9664] loop6: detected capacity change from 0 to 2640 [ 95.937502][ T5983] buffer_io_error: 27 callbacks suppressed [ 95.937512][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.942253][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.944963][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.950161][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.953036][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.028054][ T9688] 9pnet_fd: p9_fd_create_unix (9688): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.038865][ T9692] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 96.087546][ T9692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.113760][ T9729] bond3: (slave veth3): Enslaving as an active interface with a down link [ 96.205635][ T9821] fuse: Bad value for 'fd' [ 97.042429][ T9867] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 97.045329][ T9867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.049752][ T9867] vhci_hcd vhci_hcd.0: Device attached [ 97.286349][ T839] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 97.286415][ T1469] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 97.456296][ T1469] usb 7-1: Using ep0 maxpacket: 16 [ 97.463028][ T1469] usb 7-1: config 1 has no interfaces? [ 97.464830][ T1469] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 97.467960][ T1469] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.521739][ T9881] __nla_validate_parse: 19 callbacks suppressed [ 97.521752][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 97.527532][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 97.677927][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 97.681877][ T9870] usb 41-1: recv xbuf, 0 [ 97.685253][ T1469] usb 7-1: string descriptor 0 read error: -71 [ 97.688514][ T1263] vhci_hcd: stop threads [ 97.690845][ T1263] vhci_hcd: release socket [ 97.693809][ T1263] vhci_hcd: disconnect device [ 97.697300][ T1469] usb 7-1: USB disconnect, device number 11 [ 97.697425][ T9896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 97.700054][ T9895] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 97.746339][ T839] vhci_hcd: vhci_device speed not set [ 98.289199][ T9930] netlink: 'syz.2.729': attribute type 2 has an invalid length. [ 98.291799][ T9930] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 98.291998][ T9930] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 98.298164][ T9930] netlink: 'syz.2.729': attribute type 10 has an invalid length. [ 98.305451][ T9930] team0: Device hsr_slave_0 failed to register rx_handler [ 98.763523][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 98.904004][ T9972] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 98.917815][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.920881][ T9972] team0: Port device bond0 added [ 98.948896][ T9977] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 98.951329][ T9977] netlink: 236 bytes leftover after parsing attributes in process `syz.2.742'. [ 98.954575][ T9977] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 99.065602][T10000] fuse: Invalid rootmode [ 99.145236][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 99.209787][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 99.268252][T10025] netlink: 'syz.1.748': attribute type 10 has an invalid length. [ 99.271226][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.748'. [ 99.291140][T10016] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 99.306855][T10025] geneve0: entered promiscuous mode [ 99.308833][T10025] geneve0: entered allmulticast mode [ 99.310980][T10025] team0: Port device geneve0 added [ 99.381507][T10042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.758'. [ 99.386320][T10042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.758'. [ 99.425501][T10047] syzkaller0: entered allmulticast mode [ 99.459294][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 99.459305][ T40] audit: type=1400 audit(1758879057.846:651): avc: denied { bind } for pid=10057 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.566257][ T40] audit: type=1400 audit(1758879057.946:652): avc: denied { read } for pid=10071 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.607296][T10086] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 99.623373][T10086] veth0_vlan: left promiscuous mode [ 99.628278][T10086] veth0_vlan: entered promiscuous mode [ 99.632994][T10086] team0: Device veth0_vlan failed to register rx_handler [ 99.742239][T10094] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 100.389474][T10109] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 100.536435][ T40] audit: type=1326 audit(1758879058.916:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10117 comm="syz.2.775" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f217978eec9 code=0x0 [ 100.683104][ T40] audit: type=1400 audit(1758879059.066:654): avc: denied { setopt } for pid=10125 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.796094][ T40] audit: type=1400 audit(1758879059.176:655): avc: denied { map } for pid=10134 comm="syz.1.779" path="socket:[24212]" dev="sockfs" ino=24212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.805393][ T40] audit: type=1400 audit(1758879059.176:656): avc: denied { read } for pid=10134 comm="syz.1.779" path="socket:[24212]" dev="sockfs" ino=24212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.009813][ T40] audit: type=1400 audit(1758879059.396:657): avc: denied { read } for pid=10146 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.158873][T10229] xt_l2tp: v2 tid > 0xffff: 16462212 [ 101.743780][T10101] openvswitch: netlink: Missing valid actions attribute. [ 101.748165][T10101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.971828][ T40] audit: type=1400 audit(1758879060.356:658): avc: denied { read } for pid=10249 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.059221][T10267] netlink: 'syz.0.796': attribute type 15 has an invalid length. [ 102.167417][ T40] audit: type=1400 audit(1758879060.556:659): avc: denied { mount } for pid=10282 comm="syz.0.799" name="/" dev="9p" ino=72095565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.473402][T10326] bond3: entered promiscuous mode [ 102.475180][T10326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.480415][T10326] 9pnet_virtio: no channels available for device syz [ 102.484173][ T40] audit: type=1400 audit(1758879060.866:660): avc: denied { read } for pid=10348 comm="syz.2.805" name="bus" dev="9p" ino=72095763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.485743][T10326] netlink: 'syz.0.804': attribute type 8 has an invalid length. [ 102.495201][T10358] fuse: Bad value for 'fd' [ 102.796489][T10399] overlayfs: failed to resolve './file1/file0': -20 [ 102.849531][T10412] tmpfs: Bad value for 'mpol' [ 103.751162][T10470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.787680][T10481] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 103.798104][T10481] [U] J"—e:ÀÆ" [ 103.926991][T10505] veth0: entered promiscuous mode [ 103.927530][T10506] __nla_validate_parse: 9 callbacks suppressed [ 103.927543][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 103.968356][T10506] veth0 (unregistering): left promiscuous mode [ 104.114409][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 104.133150][T10524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29103 sclass=netlink_route_socket pid=10524 comm=syz.1.832 [ 104.159345][T10527] Context (ID=0x4d4) not attached to queue pair (handle=0x4d5:0x0) [ 104.420461][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 104.423845][T10544] netlink: 3 bytes leftover after parsing attributes in process `syz.3.835'. [ 105.289074][T10582] kvm: emulating exchange as write [ 105.556292][ T6335] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.708051][ T6335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34271, setting to 1024 [ 105.711599][ T6335] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.715782][ T6335] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.718967][ T6335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.723403][ T6335] usb 7-1: config 0 descriptor?? [ 105.725491][T10582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.876918][T10602] netlink: zone id is out of range [ 105.878785][T10602] netlink: zone id is out of range [ 105.899298][T10602] netlink: set zone limit has 4 unknown bytes [ 106.023568][T10611] netlink: 'syz.1.843': attribute type 3 has an invalid length. [ 106.027206][T10611] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'. [ 106.150332][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 106.177992][T10631] netlink: 'syz.0.849': attribute type 62 has an invalid length. [ 106.206179][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 106.335477][T10582] ptrace attach of "/syz-executor exec"[5967] was attempted by "/syz-executor exec"[10582] [ 106.340865][ T6335] usbhid 7-1:0.0: can't add hid device: -71 [ 106.342892][ T6335] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 106.349595][ T6335] usb 7-1: USB disconnect, device number 12 [ 106.377436][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 106.377451][ T40] audit: type=1400 audit(1758879064.766:666): avc: denied { write } for pid=10660 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 106.403283][T10661] fuse: Unknown parameter 'obj_role' [ 106.458898][T10669] netlink: 108 bytes leftover after parsing attributes in process `syz.1.858'. [ 107.121561][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 107.125638][T10682] veth1_macvtap: left promiscuous mode [ 107.303984][T10694] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 107.307799][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 107.344638][T10700] binder: 10699:10700 ioctl c028660f 200000000000 returned -22 [ 107.348005][T10700] binder: 10699:10700 ioctl c0306201 200000000700 returned -11 [ 107.509351][T10715] netlink: 'syz.0.871': attribute type 64 has an invalid length. [ 107.512528][T10715] netlink: 'syz.0.871': attribute type 4 has an invalid length. [ 107.605654][ T40] audit: type=1400 audit(1758879065.986:667): avc: denied { shutdown } for pid=10738 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.621554][ T40] audit: type=1400 audit(1758879065.996:668): avc: denied { setopt } for pid=10738 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.755487][T10761] omfs: Invalid superblock (0) [ 107.802392][T10761] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 107.921756][T10783] binder: 10781:10783 ioctl c00c620f 200000000140 returned -22 [ 107.987635][T10791] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.994974][T10791] @0Ù: renamed from bond_slave_1 (while UP) [ 107.997884][T10790] overlayfs: statfs failed on './file0' [ 108.150769][T10802] lo: entered promiscuous mode [ 108.575931][ T40] audit: type=1400 audit(1758879066.956:669): avc: denied { nlmsg_read } for pid=10819 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 108.621977][ T40] audit: type=1400 audit(1758879067.006:670): avc: denied { getopt } for pid=10821 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.821103][T10832] program syz.2.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.827031][T10832] netlink: 'syz.2.901': attribute type 12 has an invalid length. [ 108.904975][T10836] /dev/sg0: Can't lookup blockdev [ 108.961007][T10841] __nla_validate_parse: 5 callbacks suppressed [ 108.961018][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 108.965705][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 108.969143][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 108.971821][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 109.101605][ T40] audit: type=1326 audit(1758879067.486:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.3.908" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f449fd8eec9 code=0x0 [ 109.516187][T10863] netlink: 'syz.0.910': attribute type 11 has an invalid length. [ 109.557790][ T40] audit: type=1400 audit(1758879067.946:672): avc: denied { setopt } for pid=10866 comm="syz.0.911" lport=52712 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 109.674996][ T40] audit: type=1400 audit(1758879068.056:673): avc: denied { ioctl } for pid=10870 comm="syz.0.913" path="socket:[27184]" dev="sockfs" ino=27184 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.887812][T10874] fuseblk: Bad value for 'rootmode' [ 109.888077][T10875] fuseblk: Bad value for 'rootmode' [ 109.915914][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.915'. [ 110.055397][T10886] fuse: Unknown parameter '' [ 110.076271][ T40] audit: type=1400 audit(1758879068.456:674): avc: denied { listen } for pid=10893 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.209550][T10900] netlink: zone id is out of range [ 110.211386][T10900] netlink: zone id is out of range [ 110.218033][T10900] netlink: set zone limit has 4 unknown bytes [ 110.474767][ T40] audit: type=1400 audit(1758879068.856:675): avc: denied { listen } for pid=10903 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.965780][T10935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.928'. [ 110.969626][T10935] netlink: 'syz.3.928': attribute type 7 has an invalid length. [ 110.972846][T10935] netlink: 'syz.3.928': attribute type 8 has an invalid length. [ 110.976067][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 110.985657][T10935] erspan0: entered promiscuous mode [ 110.989337][T10935] batadv_slave_1: entered promiscuous mode [ 110.992798][T10935] erspan0: left promiscuous mode [ 110.995725][T10935] batadv_slave_1: left promiscuous mode [ 111.062031][T10942] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 111.063223][T10951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.930'. [ 111.064708][T10942] overlayfs: missing 'lowerdir' [ 111.071364][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'. [ 111.072255][T10942] nilfs2: Unknown parameter 'discardslave_1' [ 111.150100][T10963] batadv_slave_0: entered promiscuous mode [ 111.153373][T10963] batadv_slave_0: left promiscuous mode [ 111.331499][T10985] vxcan3: entered allmulticast mode [ 111.362894][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 111.570057][T11027] overlayfs: failed to clone lowerpath [ 111.627512][ T40] audit: type=1400 audit(1758879070.016:676): avc: denied { getopt } for pid=11032 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.716544][ T1469] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 111.735547][T11051] overlayfs: failed to clone lowerpath [ 111.738611][T11051] xt_l2tp: missing protocol rule (udp|l2tpip) [ 111.742626][T11052] overlayfs: failed to clone lowerpath [ 111.782964][T11043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.886380][ T1469] usb 7-1: Using ep0 maxpacket: 16 [ 111.890025][ T1469] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 111.892796][ T1469] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.896181][ T1469] usb 7-1: config 0 has no interface number 0 [ 111.898241][ T1469] usb 7-1: too many endpoints for config 0 interface 205 altsetting 8: 194, using maximum allowed: 30 [ 111.901880][ T1469] usb 7-1: config 0 interface 205 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 111.906092][ T1469] usb 7-1: config 0 interface 205 has no altsetting 0 [ 111.908682][ T1469] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 111.911552][ T1469] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.915881][ T1469] usb 7-1: config 0 descriptor?? [ 111.978105][T11097] fuse: Unknown parameter '000000000000000000000050x0000000000000005' [ 112.121889][ T1469] usb 7-1: string descriptor 0 read error: -71 [ 112.126022][ T1469] usb 7-1: USB disconnect, device number 13 [ 112.660370][ T40] audit: type=1400 audit(1758879071.046:677): avc: denied { setopt } for pid=11122 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.786991][T11123] hsr_slave_1 (unregistering): left promiscuous mode [ 113.088007][ T40] audit: type=1400 audit(1758879071.476:678): avc: denied { accept } for pid=11144 comm="syz.2.967" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.088574][T11154] syz_tun: left allmulticast mode [ 113.357561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.427788][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 113.477415][ T40] audit: type=1804 audit(1758879071.866:679): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.975" name="/newroot/195/file1" dev="fuse" ino=1 res=1 errno=0 [ 113.481129][T11232] fuse: Bad value for 'fd' [ 113.519329][T11239] random: crng reseeded on system resumption [ 113.526928][ T40] audit: type=1400 audit(1758879071.906:680): avc: denied { setcheckreqprot } for pid=11238 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 113.531367][T11240] geneve3: entered promiscuous mode [ 113.536706][T11240] geneve3: entered allmulticast mode [ 113.576809][ T54] usb 6-1: device descriptor read/64, error -71 [ 113.837954][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 113.881232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.884033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.887899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.894060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.966047][T11287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11287 comm=syz.2.984 [ 113.970216][T11287] __nla_validate_parse: 7 callbacks suppressed [ 113.970225][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 113.976434][ T54] usb 6-1: device descriptor read/64, error -71 [ 113.976468][T11287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.984'. [ 114.090716][T11291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.986'. [ 114.094467][T11291] netlink: 'syz.0.986': attribute type 7 has an invalid length. [ 114.096568][ T54] usb usb6-port1: attempt power cycle [ 114.098224][T11291] netlink: 'syz.0.986': attribute type 8 has an invalid length. [ 114.102957][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 114.111444][T11291] bridge0: entered promiscuous mode [ 114.113712][T11291] batadv_slave_1: entered promiscuous mode [ 114.116969][T11291] bridge0: left promiscuous mode [ 114.119793][T11291] batadv_slave_1: left promiscuous mode [ 114.371807][ T40] audit: type=1400 audit(1758879072.756:681): avc: denied { read } for pid=11308 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.375183][T11309] netlink: 108 bytes leftover after parsing attributes in process `syz.0.989'. [ 114.411973][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 114.416716][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 114.446377][ T54] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 114.458069][T11315] netlink: 'syz.0.991': attribute type 2 has an invalid length. [ 114.461296][T11315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.991'. [ 114.466755][ T54] usb 6-1: device descriptor read/8, error -71 [ 114.504875][ T40] audit: type=1400 audit(1758879072.886:682): avc: denied { setopt } for pid=11316 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.685833][T11326] overlayfs: failed to clone upperpath [ 114.716704][ T54] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.737189][ T54] usb 6-1: device descriptor read/8, error -71 [ 114.785936][T11335] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.788140][T11336] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.790919][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.998'. [ 114.857212][ T54] usb usb6-port1: unable to enumerate USB device [ 114.884144][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 114.957300][ T40] audit: type=1400 audit(1758879073.346:683): avc: denied { ioctl } for pid=11345 comm="syz.0.1001" path="socket:[27559]" dev="sockfs" ino=27559 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.986793][ T40] audit: type=1400 audit(1758879073.376:684): avc: denied { getopt } for pid=11347 comm="syz.2.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 115.226840][T11369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11369 comm=syz.0.1007 [ 115.310453][T11373] overlay: ./file0 is not a directory [ 115.697856][T11399] overlayfs: cannot append lower layer [ 115.875255][T11413] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 115.880602][T11413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.885361][ T40] audit: type=1400 audit(1758879074.266:685): avc: denied { accept } for pid=11412 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.110257][T11431] overlayfs: conflicting lowerdir path [ 116.360326][T11460] netlink: zone id is out of range [ 116.362639][T11460] netlink: zone id is out of range [ 116.365395][T11460] netlink: del zone limit has 4 unknown bytes [ 116.371637][T11463] 9pnet_fd: Insufficient options for proto=fd [ 116.734011][T11491] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 116.737062][T11491] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 116.986030][T11527] pimreg: entered allmulticast mode [ 117.090490][T11540] random: crng reseeded on system resumption [ 117.235923][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 117.235933][ T40] audit: type=1400 audit(1758879075.616:690): avc: denied { append } for pid=11542 comm="syz.1.1046" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 117.238326][T11544] input: syz0 as /devices/virtual/input/input16 [ 117.443552][T11567] Unsupported ieee802154 address type: 0 [ 117.495757][ T40] audit: type=1400 audit(1758879075.876:691): avc: denied { setopt } for pid=11569 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.502333][ T40] audit: type=1400 audit(1758879075.886:692): avc: denied { setopt } for pid=11569 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.594427][T11584] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 117.793661][T11588] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 118.145661][T11624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11624 comm=syz.2.1062 [ 118.190424][T11627] nfs: Bad value for 'source' [ 118.470739][T11673] 9pnet_fd: Insufficient options for proto=fd [ 118.696381][T11695] sctp: [Deprecated]: syz.2.1084 (pid 11695) Use of int in maxseg socket option. [ 118.696381][T11695] Use struct sctp_assoc_value instead [ 118.753131][ T40] audit: type=1400 audit(1758879077.136:693): avc: denied { add_name } for pid=11700 comm="syz.2.1086" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.759853][ T40] audit: type=1400 audit(1758879077.136:694): avc: denied { create } for pid=11700 comm="syz.2.1086" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 118.767750][ T40] audit: type=1400 audit(1758879077.136:695): avc: denied { read open } for pid=11700 comm="syz.2.1086" path="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.791850][T11705] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 118.939014][T11724] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 118.960561][T11724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.992859][T11725] veth5: entered promiscuous mode [ 119.000561][T11725] bond4: (slave veth5): Enslaving as an active interface with a down link [ 119.252198][T11831] overlayfs: failed to clone upperpath [ 119.535809][T11849] __nla_validate_parse: 7 callbacks suppressed [ 119.535820][T11849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'. [ 119.542284][T11849] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.615074][T11855] netlink: 'syz.0.1108': attribute type 10 has an invalid length. [ 119.618358][T11855] team0: Cannot enslave team device to itself [ 119.650385][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1109'. [ 119.803110][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1113'. [ 119.838705][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 119.980443][T11888] pimreg: entered allmulticast mode [ 120.004745][ T40] audit: type=1326 audit(1758879078.386:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 120.011839][ T40] audit: type=1326 audit(1758879078.386:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 120.020220][ T40] audit: type=1326 audit(1758879078.386:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 120.029387][ T40] audit: type=1326 audit(1758879078.386:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 120.102802][T11914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.106057][T11914] IPv6: NLM_F_CREATE should be set when creating new route [ 120.109056][T11914] IPv6: NLM_F_CREATE should be set when creating new route [ 120.112051][T11914] IPv6: NLM_F_CREATE should be set when creating new route [ 120.116671][T11915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.639053][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 120.643006][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1134'. [ 120.685629][T11953] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 120.938326][T11981] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 120.947005][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1143'. [ 120.949791][T11986] netem: invalid attributes len -22 [ 120.951380][T11986] netem: change failed [ 120.970667][T11990] rdma_op ffff88802f2179f0 conn xmit_rdma 0000000000000000 [ 120.977024][T11990] could not open pipe file descriptor [ 120.985150][T11991] rdma_op ffff888102efd1f0 conn xmit_rdma 0000000000000000 [ 120.996708][T11996] program syz.3.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.115105][T12012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12012 comm=syz.2.1151 [ 121.195554][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 121.199214][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 121.203705][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 121.968245][T12055] dlm: non-version read from control device 0 [ 122.100020][T12067] netlink: 'syz.3.1162': attribute type 21 has an invalid length. [ 122.236294][ T40] kauditd_printk_skb: 22637 callbacks suppressed [ 122.236310][ T40] audit: type=1326 audit(1758879080.616:23337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.246005][ T40] audit: type=1326 audit(1758879080.626:23338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.253800][ T40] audit: type=1326 audit(1758879080.636:23339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.268792][ T40] audit: type=1326 audit(1758879080.646:23340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.275918][ T40] audit: type=1326 audit(1758879080.646:23341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.284078][ T40] audit: type=1326 audit(1758879080.646:23342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.291532][ T40] audit: type=1326 audit(1758879080.646:23343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.299291][ T40] audit: type=1326 audit(1758879080.646:23344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.306679][ T40] audit: type=1326 audit(1758879080.646:23345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.313591][ T40] audit: type=1326 audit(1758879080.646:23346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412d58eec9 code=0x50000 [ 122.623640][T12102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.679639][T12102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.789465][T12138] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 122.792218][T12138] bond0: (slave wlan1): Opening slave failed [ 122.794736][T12137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.989377][T12151] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 123.350200][T12171] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 123.671982][T12181] netlink: 'syz.2.1184': attribute type 8 has an invalid length. [ 124.015813][T12213] syz.3.1191 (12213) used obsolete PPPIOCDETACH ioctl [ 124.173009][T12234] IPVS: set_ctl: invalid protocol: 28124 10.1.1.1:20003 [ 124.176303][T12234] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20002 [ 124.231283][T12243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.274830][T12245] team0: left allmulticast mode [ 124.277241][T12245] team_slave_0: left allmulticast mode [ 124.279446][T12245] team_slave_1: left allmulticast mode [ 124.281191][T12245] geneve0: left allmulticast mode [ 124.282969][T12245] bridge0: port 3(team0) entered disabled state [ 124.289701][T12245] bridge_slave_0: left allmulticast mode [ 124.291474][T12245] bridge_slave_0: left promiscuous mode [ 124.293673][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.300797][T12245] bridge_slave_1: left allmulticast mode [ 124.302563][T12245] bridge_slave_1: left promiscuous mode [ 124.304375][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.312821][T12245] bond0: (slave bond_slave_0): Releasing backup interface [ 124.319072][T12245] bond0: (slave c@0Ù): Releasing backup interface [ 124.323208][T12245] team_slave_0: left promiscuous mode [ 124.329082][T12253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.329566][T12245] team0: Port device team_slave_0 removed [ 124.335369][T12245] team_slave_1: left promiscuous mode [ 124.341882][T12245] team0: Port device team_slave_1 removed [ 124.344148][T12245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.346746][T12245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.349927][T12245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.352612][T12245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.358242][T12245] geneve0: left promiscuous mode [ 124.363747][T12245] team0: Port device geneve0 removed [ 124.372549][T12257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6756 sclass=netlink_route_socket pid=12257 comm=syz.3.1201 [ 124.382796][T12254] 8021q: VLANs not supported on ip_vti0 [ 124.384715][ T24] syz0: Port: 1 Link DOWN [ 124.398841][T12245] team0: Mode changed to "activebackup" [ 124.443348][T12267] syzkaller1: entered promiscuous mode [ 124.445219][T12267] syzkaller1: entered allmulticast mode [ 124.533015][T12282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.574003][T12290] ipvlan3: entered promiscuous mode [ 124.575961][T12290] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 124.578940][T12290] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.633022][T12303] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 124.722080][T12314] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 124.866311][ T54] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 124.887451][T12323] bond0: entered promiscuous mode [ 124.889256][T12323] bond_slave_0: entered promiscuous mode [ 124.891110][T12323] bond_slave_1: entered promiscuous mode [ 124.893693][T12323] batadv0: entered promiscuous mode [ 124.895634][T12323] debugfs: 'hsr1' already exists in 'hsr' [ 124.897598][T12323] Cannot create hsr debugfs directory [ 124.899542][T12323] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 124.990327][T12330] ------------[ cut here ]------------ [ 124.992009][T12330] WARNING: CPU: 2 PID: 12330 at arch/x86/kvm/x86.c:11563 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.995105][T12330] Modules linked in: [ 124.996956][T12330] CPU: 2 UID: 0 PID: 12330 Comm: syz.3.1222 Not tainted syzkaller #0 PREEMPT(full) [ 125.001309][T12330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.004603][T12330] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 125.007001][T12330] Code: 0a 00 00 00 00 00 00 e8 0f 6a be 1e 31 ff 89 c5 89 c6 e8 d4 f6 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 82 fb 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 74 fb 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 125.012727][T12330] RSP: 0018:ffffc9000ea07c30 EFLAGS: 00010293 [ 125.014567][T12330] RAX: 0000000000000000 RBX: ffff8880267d8000 RCX: ffffffff814192bf [ 125.017118][T12330] RDX: ffff888058c44880 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 125.019634][T12330] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 125.022025][T12330] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880341fd000 [ 125.024472][T12330] R13: ffff8880267d80d8 R14: 0000000000000000 R15: ffff8880267d8334 [ 125.026346][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 125.027042][T12330] FS: 00007f44a0b5b6c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 125.030027][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.031331][T12330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.031342][T12330] CR2: 00007f44a0b59568 CR3: 000000005ba9e000 CR4: 0000000000352ef0 [ 125.031350][T12330] Call Trace: [ 125.031355][T12330] [ 125.031364][T12330] kvm_vcpu_ioctl+0x5eb/0x1690 [ 125.035486][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.037478][T12330] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 125.040817][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.041851][T12330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.043120][ T54] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 125.044639][T12330] ? do_vfs_ioctl+0x128/0x14f0 [ 125.047683][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.048979][ T54] usb 6-1: config 0 descriptor?? [ 125.049596][T12330] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.061390][ T54] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 125.061773][T12330] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 125.067086][ T5363] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 125.068076][T12330] ? hook_file_ioctl_common+0x145/0x410 [ 125.079229][T12330] ? selinux_file_ioctl+0x180/0x270 [ 125.081247][T12330] ? selinux_file_ioctl+0xb4/0x270 [ 125.083227][T12330] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 125.085254][T12330] __x64_sys_ioctl+0x18b/0x210 [ 125.087216][T12330] do_syscall_64+0xcd/0x4e0 [ 125.088834][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.090615][T12330] RIP: 0033:0x7f449fd8eec9 [ 125.091948][T12330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.098186][T12330] RSP: 002b:00007f44a0b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.100907][T12330] RAX: ffffffffffffffda RBX: 00007f449ffe6090 RCX: 00007f449fd8eec9 [ 125.103380][T12330] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 125.105879][T12330] RBP: 00007f449fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.108477][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.111049][T12330] R13: 00007f449ffe6128 R14: 00007f449ffe6090 R15: 00007ffd8feacd38 [ 125.113542][T12330] [ 125.114493][T12330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.116920][T12330] CPU: 2 UID: 0 PID: 12330 Comm: syz.3.1222 Not tainted syzkaller #0 PREEMPT(full) [ 125.119793][T12330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.123156][T12330] Call Trace: [ 125.124247][T12330] [ 125.125219][T12330] dump_stack_lvl+0x3d/0x1f0 [ 125.126721][T12330] vpanic+0x6e8/0x7a0 [ 125.128017][T12330] ? __pfx_vpanic+0x10/0x10 [ 125.129537][T12330] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 125.131371][T12330] panic+0xca/0xd0 [ 125.132619][T12330] ? __pfx_panic+0x10/0x10 [ 125.134107][T12330] ? check_panic_on_warn+0x1f/0xb0 [ 125.135761][T12330] check_panic_on_warn+0xab/0xb0 [ 125.137408][T12330] __warn+0xf6/0x3c0 [ 125.138681][T12330] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 125.140577][T12330] report_bug+0x3c3/0x580 [ 125.141924][T12330] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 125.143867][T12330] handle_bug+0x184/0x210 [ 125.145290][T12330] exc_invalid_op+0x17/0x50 [ 125.146827][T12330] asm_exc_invalid_op+0x1a/0x20 [ 125.148486][T12330] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 125.150578][T12330] Code: 0a 00 00 00 00 00 00 e8 0f 6a be 1e 31 ff 89 c5 89 c6 e8 d4 f6 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 82 fb 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 74 fb 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 125.156829][T12330] RSP: 0018:ffffc9000ea07c30 EFLAGS: 00010293 [ 125.159323][T12330] RAX: 0000000000000000 RBX: ffff8880267d8000 RCX: ffffffff814192bf [ 125.161846][T12330] RDX: ffff888058c44880 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 125.164321][T12330] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 125.166887][T12330] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880341fd000 [ 125.169647][T12330] R13: ffff8880267d80d8 R14: 0000000000000000 R15: ffff8880267d8334 [ 125.172435][T12330] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 125.174477][T12330] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 125.176629][T12330] kvm_vcpu_ioctl+0x5eb/0x1690 [ 125.178353][T12330] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 125.180210][T12330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.182360][T12330] ? do_vfs_ioctl+0x128/0x14f0 [ 125.184123][T12330] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.185893][T12330] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 125.188331][T12330] ? hook_file_ioctl_common+0x145/0x410 [ 125.190352][T12330] ? selinux_file_ioctl+0x180/0x270 [ 125.192227][T12330] ? selinux_file_ioctl+0xb4/0x270 [ 125.194114][T12330] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 125.195991][T12330] __x64_sys_ioctl+0x18b/0x210 [ 125.197758][T12330] do_syscall_64+0xcd/0x4e0 [ 125.199393][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.201542][T12330] RIP: 0033:0x7f449fd8eec9 [ 125.202970][T12330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.209899][T12330] RSP: 002b:00007f44a0b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.212890][T12330] RAX: ffffffffffffffda RBX: 00007f449ffe6090 RCX: 00007f449fd8eec9 [ 125.215536][T12330] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 125.218363][T12330] RBP: 00007f449fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.220929][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.223352][T12330] R13: 00007f449ffe6128 R14: 00007f449ffe6090 R15: 00007ffd8feacd38 [ 125.225789][T12330] [ 125.227382][T12330] Kernel Offset: disabled [ 125.228726][T12330] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:22:51 Registers: info registers vcpu 0 CPU#0 RAX=000000000013a903 RBX=0000000000000000 RCX=ffffffff8b94fb49 RDX=0000000000000000 RSI=ffffffff8de52e89 RDI=ffffffff8c163400 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7790 R15=0000000000000000 RIP=ffffffff8b94e68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d66b2000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000005ba9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8fead246 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8fead246 00007ffd8fead24c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449fe12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449fe12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449fe12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449fe12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449fe1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449fe1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449ffb74a8 00007f449ffb74a0 00007f449ffb7498 00007f449ffb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44a0b1d100 00007f449ffb7460 00007f449ffb7478 00007f449ffb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f449ffb74b8 00007f449ffb74b0 00007f449ffb74a8 00007f449ffb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000f42cb RBX=0000000000000001 RCX=ffffffff8b94fb49 RDX=0000000000000000 RSI=ffffffff8de52e89 RDI=ffffffff8c163400 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab7790 R15=0000000000000000 RIP=ffffffff8b94e68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555576dbe808 CR3=0000000033df2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557bd128a 0000555557bd1070 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557bc284a 0000555557bc25f0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff f308068003003065 6c69662f2e01ffff ffffffffffffef08 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02000761746f7571 70726701ffffffff ffffffffef080780 03007366706d7401 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffef0803800307 8004001000068004 0380040fffffffff ffff040a0142a400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706d7401ffffffff fffffffff3080680 030030656c69662f 2e01ffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0107b880080007b8 8008000280040601 3fe80030656c6966 2f2e01ffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffef08028003 0780040010000680 040380040fffffff ffffff040a0142a4 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61746f7571707267 01ffffffffffffff ffef080780030073 66706d7401ffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff30806 80030030656c6966 2f2e01ffffffffff ffffffef08038003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c555 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc9000ea075a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b1180e0 R15=ffffffff8564c4f0 RIP=ffffffff8564c57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f44a0b5b6c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f44a0b59568 CR3=000000005ba9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4fb292cd901f8f5 520ccd6bacd95d16 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e0a0230a36e9a162 74e4317c66c5b5c2 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03600e4cdac443c9 b754708bd7a034c4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1ca32c890addb7c e8c67797906c25c2 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004dc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c83b07d200c39d43 000000000000004c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000b3adecaf813e6 cc3cf64ccc39ea30 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9974cec0000004c 000000000000004c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c0000004c cb5039740000004c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 895370eec983bd7d 139d2e7c630d1d9d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d6f4593004b6934 8f52331a925986f9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ec2af RBX=0000000000000003 RCX=ffffffff8b94fb49 RDX=0000000000000000 RSI=ffffffff8de52e89 RDI=ffffffff8c163400 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab7790 R15=0000000000000000 RIP=ffffffff8b94e68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d69b2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000003393f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fffffffd Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca0660b2b 00007ffca0660b2b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca0661030 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca0661030 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6420736667756265 6420727368206574 6165726320746f6e 6e6143205d333200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6420736667756265 6420727362206574 6165726320746564 6461432057333200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69617420746f4e20 323232312e332e7a 7973203a6d6d6f43 203033333231203a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e646e6f6220666f 2074726170207369 2074692073612067 6e6f6c2073612064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656b636f6c622065 62206c6c69772073 4e414c5620676e69 646441202e657661 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c73206465676e65 6c6c616863204e41 4c5620646576616c 736e65203a29336e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c767069206576 616c7328203a3064 6e6f62205d303932 3231545b5d303439 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e302e7a797322 3d6d6d6f63203539 3831313d64697020 745f6d6461737973 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000