last executing test programs: 34.501208236s ago: executing program 0 (id=1419): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x3, 0x0, 0x0, 0x3], [0xfa]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 34.50034326s ago: executing program 0 (id=1421): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000005680)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000f800000000000000000000000000000000003b8c1a5ce7db183a59521cf749cc63288c270c6fa2282808d637ce009d064630939a528fa8180ed7fd48d8a331b325e7cb5c7cfeed253a6d4f1548355246ec51b843998c7a466b72359c6e596301dc2aedcdc95a01676a9b6d7e843bb75efbc8e09fd87716669537b8168052e3b77942", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0xf0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000055c0)={0x6, &(0x7f0000005200)=[{}, {@none}, {@none}, {@fixed}, {}, {@fixed}]}) fstat(r0, &(0x7f0000005600)) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) (async) recvmmsg(r1, &(0x7f00000050c0)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000180)=""/96, 0x60}], 0x2}, 0x1}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/153, 0x99}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000001680)=""/235, 0xeb}, {&(0x7f0000001780)=""/110, 0x6e}], 0x7, &(0x7f0000001880)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1}, 0x2}, {{&(0x7f00000038c0)=@ax25={{0x3, @null}, [@netrom, @rose, @default, @bcast, @remote, @rose, @null, @default]}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f0000004940)=""/204, 0xcc}, {&(0x7f0000004a40)=""/252, 0xfc}, {&(0x7f0000004b40)=""/44, 0x2c}, {&(0x7f0000004b80)=""/121, 0x79}, {&(0x7f0000004c00)=""/89, 0x59}], 0x6, &(0x7f0000004d00)=""/222, 0xde}, 0xffffffff}, {{&(0x7f0000004e00)=@nfc_llcp, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004e80)=""/80, 0x50}, {&(0x7f0000003940)=""/21, 0x15}, {&(0x7f0000004f40)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/155, 0x9b}, 0x9}], 0x5, 0x40000060, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) socket$netlink(0x10, 0x3, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) 33.610440561s ago: executing program 0 (id=1439): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000180)='./bus\x00', 0x6000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 33.540544848s ago: executing program 0 (id=1440): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000000)={0x6d, 0x3, 0x20}, 0x20, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 33.538860617s ago: executing program 0 (id=1441): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x40000) 33.42889829s ago: executing program 0 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8b99}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x3}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1}, &(0x7f0000000080)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8b99}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x3}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) 18.456420562s ago: executing program 32 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8b99}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x3}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1}, &(0x7f0000000080)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8b99}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x3}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) 1.22942067s ago: executing program 3 (id=1907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4ca500, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x8, 0x0, 0xfffffffffffffffe, 0x9c, 0xfffdfffffffffffa, 0x0, 0x2, 0x0, 0x20106, 0x11, 0x3, 0x0, 0x1, 0x3ff, 0xf, 0x2, 0x4, 0x5999, 0xfffffffffffffffc, 0x400400, 0x6, 0x2bc, 0xffffffffffffffef}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x6, 0xa0082) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x4) 1.13067217s ago: executing program 2 (id=1908): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x6c, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000040)={'ip6_vti0\x00', @random="0103002000"}) fcntl$lock(r1, 0x7, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc9, 0x0, 0x0) 1.130329242s ago: executing program 3 (id=1909): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10fc}], 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x800, 0x0) 1.129910044s ago: executing program 2 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.074044158s ago: executing program 3 (id=1911): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c61796261636b20536e2f74"], 0xa8) close(r0) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) recvmmsg(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}}, 0xc080) 1.073420722s ago: executing program 2 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) socket(0x23, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.072321662s ago: executing program 3 (id=1914): r0 = semget$private(0x0, 0x4000000009, 0x228) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0x7, 0x1000}], 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff75, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x14, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18d3f63577cce248ca4aaa1614b84a72e9b00bff5a671509971932f9a84689ea26b789b1d02d9a4b032ee13b7a75d2a6f96fac979d3dc9888338c07b7385070aa4988f5ec6eff4133f870873f8032a80e76b6111e4d7117f696cc55607398ac96ea4930f3535"], &(0x7f0000000200)='GPL\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001042cbd70040000000000", @ANYRES32=r8, @ANYBLOB="c0010400000000001c00128009000100626f6e64000000000c0002800500010001000000"], 0x3c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) flistxattr(r1, &(0x7f0000000040)=""/37, 0x25) 1.066510858s ago: executing program 2 (id=1915): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}]}}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f0000000140)="6967ae42cbea486d00a74e3deec6fcb4391f745de504000000000000007190ba2b6d59c8958d6f1501000000c4677b000900ffffffffffffff200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 928.184085ms ago: executing program 2 (id=1919): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}], 0x1, 0xc0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r4}, 0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000900)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 850.3252ms ago: executing program 2 (id=1921): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x59, 0x0, 0x200, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) 749.42773ms ago: executing program 4 (id=1924): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x3631564e, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}}) (async, rerun: 32) r3 = syz_io_uring_setup(0x1e2f, &(0x7f0000000300)={0x0, 0x113a, 0x8000, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) (rerun: 32) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x62}) io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r7, &(0x7f0000000000)=""/42, 0x2a) (async, rerun: 64) getdents64(r7, &(0x7f0000000080)=""/147, 0x93) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffefc, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) (async, rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe25, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800b0001007461726765740000200002800a0001004155444954000000050003001d00000008000240000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@initdev, @multicast1, 0x0}, &(0x7f0000000180)=0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f00000003c0)={{0x0, @local, 0x5, 0x1, 'wlc\x00', 0x35, 0x7, 0xf}, {@rand_addr=0x64010102, 0x4e20, 0x10000, 0x5, 0x3, 0x4}}, 0x44) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="94000000", @ANYRES16=r10, @ANYBLOB="000429bd5300ffdbdf250b000000020076657468315f6d61637674617000000008fd0100", @ANYRES32=r11, @ANYBLOB="60000180080003000200000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020070696d726567300000000000000000001400020074756e6c300000000000000000000000140002006970766c616e31000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) (async, rerun: 64) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) (rerun: 64) 749.077731ms ago: executing program 4 (id=1925): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) (async) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000140)={@lba=0x6, 0x1, 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2f, 0xc6, 0x9, 0x2, 0x4, @local, @mcast1, 0x1, 0x8, 0x0, 0x100}}) bind$packet(r0, &(0x7f0000000480)={0x11, 0x19, r4, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010308000000fcdbdf251c0000000c0006a1dd6b4491c678000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x63, &(0x7f0000000040)=0x7ff, 0x4) (async) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') (async) r13 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6f0, 0x105040) write$qrtrtun(r13, &(0x7f0000000280)="f58c4bd9b48187fdf1c0600dfd646717ac93f2516c41846f26987175bfd8f604d35f135e0aca69e52283ba57ed24755281a9ec00a9345865bed801b02f707af5adb4dc38c994fba43a13d5531d32b63f2e37f801bed31bcd0525874da87e4a4939a30d9918f08a4ccb9514af3e7e347dd2ca4eac4110fef8684eafb752e0a6b94c24baba4e48352b4e949872bfdeb79ce759c664174be1ce3a367400b714f52c6772e22c7f8921f76d22ff1069c27858b0ed81dcf0", 0xb5) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x3, 0xffe, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 680.624135ms ago: executing program 4 (id=1926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0x9209, &(0x7f0000000100)=0x0) io_submit(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="0f20c035080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f7654a0fc71f660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab0000000050", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000000000000000000000080000000600000008000000e1000000ff07000003000000000000000000000000000000000000c0"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x408cd, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f00000020c0)=0x496, 0x4) openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x40030000000000, 0x0, 0x2000d041}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000000c0)={0x2, 0x2}) r8 = openat$cgroup_ro(r5, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1eab) socket(0x0, 0x80000, 0xfffffff8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) sendmmsg$inet6(r9, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000056000106000000000000000007", @ANYRESHEX=r6, @ANYBLOB="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"], 0x1c}], 0x1}, 0x0) 300.562987ms ago: executing program 4 (id=1927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x8}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 300.22669ms ago: executing program 4 (id=1928): r0 = socket(0xa, 0x3, 0xff) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xffff) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @mcast2, 0x4000002}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}, 0x1, 0x0, 0x0, 0x3dc06331d0ffc133}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback={0x60}, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x251, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x60, 0xf, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x1, 0x77}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) (rerun: 64) 236.430966ms ago: executing program 4 (id=1929): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_connect(0x6, 0x2d, &(0x7f00000021c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x8, 0x800000000002, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff7feffffffff9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, r3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r3}) fsetxattr$trusted_overlay_opaque(r4, 0x0, &(0x7f0000000300), 0x2, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002800000000002c9078ac1414", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x10002, 0x7, 0x8080000, 0x1000, &(0x7f000000b000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) r9 = getpid() kcmp(r9, r9, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getpgid(r9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 235.56829ms ago: executing program 1 (id=1930): recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12100, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @private2, 0xa5}, 0x1c) (async) r0 = userfaultfd(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) r3 = add_key$user(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)="c2e580c47ab1f62543f7f1636dc6a6", 0xf, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x42) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r3}, &(0x7f0000000480)=""/84, 0x54, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040)=0xdffffffb, 0x4) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200c2, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r8, 0x3) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') setns(r9, 0x4000000) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) (async) r10 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) ioctl$KVM_RUN(r11, 0xae80, 0x0) 160.667612ms ago: executing program 1 (id=1931): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x4, 0x100, 0x2, 0x697, 0x7fff}, &(0x7f00000000c0)=0x14) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000002140)={0x2, 0x5, 0x4, 0xb, 0x6, 0x3, 0x6}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000002180)={@desc={0x1, 0x0, @desc2}}) r4 = fspick(r0, &(0x7f00000021c0)='./file0\x00', 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000002200)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002240)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000002280)={r3, 0x0, 0x2}) read$usbmon(r0, &(0x7f00000022c0)=""/227, 0xe3) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f00000023c0), &(0x7f0000002400)=0x4) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000002440)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002480)={0x2, 0xc, 0x8, 0x8, 0x25, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_lifetime={0x4, 0x4, 0xe4f5, 0x7fffffffffffffff, 0x7ff, 0x6}, @sadb_x_sec_ctx={0x1d, 0x18, 0x7e, 0x4d, 0xd9, "65ab598e2f77163bfab1638e1c3f3dea55f826321af049711e7515f4476b7b5c1a84100fa05f10388cfada88f43457a5b5eb0a267c57997fd29363bfd8e26f43e7f8cf8e84f63a26b40f79acefd782e95d8252ec5e02f3a2614ec637aafe7da547a2589259527505da7c8a1429aaac6a411a937f917e00cd41480d45b4b90247c1ad3513ee4716c4e43188250e5f7a10642072a57a491eafda260967a256350d1ad3d71516e02fd1b0da15b00615f488fdd1e7696475501a5da7dd3b15748a5d4f5619be54fce63d0b97f0a2584be6922e7c7e0dc852d52295"}]}, 0x128}}, 0x2) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000026c0)={0xfffffffc, 0x20000, 0xffffffff, 0x7, 0x80, 0xc5bf, 0x40, 0x8, 0x2, 0x834, 0x4, 0x1, &(0x7f0000002640)=[0x7, 0x1], 0x2, &(0x7f0000002680)}) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000002740)={r0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x40, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1744}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x1) r8 = dup3(r5, r4, 0x0) setxattr(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=@random={'security.', 'TIPCv2\x00'}, &(0x7f0000002940)='TIPCv2\x00', 0x7, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x20, r9, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000002ac0)=0x1) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000002b00)={0x3, @default, r2}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002b40)='./binderfs2/binder0\x00', 0x0, 0x0) r11 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x7fff) r12 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x946) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000004000)={0x124, 0x0, &(0x7f0000003e00)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002b80)={@fda={0x66646185, 0x4, 0x2, 0x36}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x19}}, &(0x7f0000002c00)={0x0, 0x20, 0x38}}}, @increfs_done, @dead_binder_done, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003c40)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000002c40)=""/4096, 0x1000, 0x1, 0x1f}, @fda={0x66646185, 0x5, 0x1, 0x36}}, &(0x7f0000003cc0)={0x0, 0x18, 0x40}}, 0x400}, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r11}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003d40)={@ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/15, 0xf, 0x0, 0x34}, @fda={0x66646185, 0x8, 0x2, 0x27}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000003dc0)={0x0, 0x28, 0x48}}, 0x40}, @register_looper, @free_buffer={0x40086303, r12}], 0xb8, 0x0, &(0x7f0000003f40)="dac56f3e7f323051d00447771a6a4a4a77211044134f19094c523345c19e03b531a07ba26132790fe03a4253db2d0344992097120d405297f4e0de0b416f1fe51b5477dd6afb3bbce65b5dae7b14826fa492660ecf253cf198c015147420b55036ea3dbee5314d63f5bf67a32c396ddf3a798f10b0790bd74bbf003beb4cc907947b82963c38a4c79d46b0bab1371975998cb22b41c657825658779a45f4ddf89c5a94f6ed54e65e19b815c2d89ef843a30aa36e51a6dd41"}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000004140)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x3c, r9, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x48, 0x1}, {0x1b}, {0x30, 0x1}, {0x16, 0x1}, {0x6}, {0x6, 0x1}, {0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8044) 159.918336ms ago: executing program 1 (id=1932): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="b66f4e0194e0aab8787598ff35f24cd6e6f3517922c42490c2edc1ece6fdfbcf7bb44d81e7731b2b264b317e4570dadea86773b6728c160b44ffbf92d40e07237cd3b73451b220aa69f3f54a2afdd7dd54b1178439634577402ab8cbe8ae08950300daec068bf8bd5615592b0900000034c15af230238e1d54f4c863300af2b75127fa78e0a441c31face04e8bc5000000000000000723003ed0805fe4e09442b05e693a3237f09284dfd0ff75bb52b0151f5c9706d4a4fea64b178fef366c148ba4", 0xc2}, {&(0x7f0000000200)="34ce1e208e96a923f8bed1e1dcff75445d7d97260ba6ea60d92553f37357bbbccce1344888be135a55f500ff38956694b17e27159b6ac1bd9793c7b4231124ed3b1d8e94a36960d12eeed8d26711ad70ecf260f83e02c06cd0cccbc280bc2db2c90bf754af820c1d68cc44edd34dc0dacb65e2b7e5e79b8c1d1eaadb17f484544cab92b89ebee9dbe0d580502d0501a6545fcf6f5329bd0d0e7c35cc54faa4a3a2ad6231cd8e070a2388736176ce42633cd52dca357c91", 0xb7}], 0x2, 0x0, 0x0, 0x4000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 70.267567ms ago: executing program 1 (id=1933): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r2 = getegid() write$FUSE_ATTR(r0, &(0x7f0000002140)={0x78, 0x0, r1, {0x9, 0x9, 0x0, {0x2, 0x5, 0x6, 0x101, 0xc, 0x4, 0x7, 0xd473, 0x9, 0xa000, 0xc01, 0xee00, r2, 0x7fffffff, 0x2}}}, 0x78) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) 67.895113ms ago: executing program 3 (id=1934): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x12, 0x80c00) sendto$x25(r0, &(0x7f0000000280)="74db373bc0f138a7fb133f89ce82ec3e8ce3e6b564d69e122dbd4a45ffc6556044b6339a7132714b03441f925b76f91216bdd2e8ed0d769c90a1811222c0c19adcb1906137226977880fc1a12baca096f2db419a35058c36ad75484b4cd439df662440017514a5fde6957253370c53954afbf5e7347fc1e8efa4315a64458554", 0x80, 0x4080, &(0x7f0000000300), 0x12) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xfffffffd}}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x4040014) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000004c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000500)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000540)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000580)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x22c040, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000600)={'pimreg0\x00'}) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x80000, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000006c0)) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000700)="4022e46717aaafa34891ac3234d04eeb9d9f1233bc0111bfd4faa9aee227384979c49b537428049f4b45ae4e924a74b3c3119ed93d6bac04467281b304872b62ade4863152e431cecc22dcd4cc94840aeb553ae8", 0x54}, {&(0x7f0000000780)="78cfbdaed7712453307cb13eefbc40cf796673b97cae989cb12aab7249db62879af0ed8798fd354acb6ad3a5122b1b7a16a69d4ace8cfc98fcc301ae991808039a45776dc9ad3f1a904b9d52b4e79970c48d725a5949fad967089b3bec34a57f6a454cdaf4b3a66f55377481", 0x6c}], 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r4, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) fsopen(&(0x7f0000000a00)='xfs\x00', 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a80)={'lo\x00', &(0x7f0000000a40)=@ethtool_test={0x1a, 0x1, 0x2, 0x2, [0x40, 0x1]}}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000ac0)) 67.634774ms ago: executing program 1 (id=1935): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x84d03, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) fcntl$lock(r1, 0x7, &(0x7f0000000040)) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) 594.083µs ago: executing program 1 (id=1936): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0xfffffffffffffe7e, 0x24000000, &(0x7f0000000500)={0xa, 0x4e21, 0x40000800, @mcast1, 0x2}, 0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7ff, 0x2, 0xd, 0xe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r6 = epoll_create1(0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b180), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000b1c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000b1c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f000000b280)={0x0, 0x0, &(0x7f000000b240)={&(0x7f000000b200)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000004) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x90000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @pic={0x9, 0xcb, 0xb2, 0x3, 0x3, 0x5, 0x80, 0x8, 0x1, 0x2, 0x2, 0x81, 0x67, 0x8, 0x9}}) ppoll(&(0x7f00000000c0)=[{r6, 0x198}, {r1, 0x6000}, {r2, 0x44}, {r1, 0x194}, {r2, 0x4144}], 0x5, &(0x7f0000000100), &(0x7f0000000300)={[0x7fffffff]}, 0x8) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0x81}, @empty, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0x81}, @empty, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_TMR_TIMEBASE(r10, 0xc0045401, &(0x7f0000000400)=0x350) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES8=r0, @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, 0x0) kernel console output (not intermixed with test programs): _r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.471718][ T40] audit: type=1400 audit(1758312886.564:33389): avc: denied { ioctl } for pid=9126 comm="syz.3.860" path="socket:[23266]" dev="sockfs" ino=23266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.510622][ T9136] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 124.514800][ T9136] veth0_macvtap: left promiscuous mode [ 124.601372][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 124.605107][ T9138] bridge_slave_1: left allmulticast mode [ 124.607740][ T9138] bridge_slave_1: left promiscuous mode [ 124.610363][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.616822][ T9138] bridge_slave_0: left allmulticast mode [ 124.619354][ T9138] bridge_slave_0: left promiscuous mode [ 124.621858][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.647375][ T9145] kAFS: No cell specified [ 124.785432][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 124.855727][ T9152] overlayfs: invalid origin (0000) [ 125.025060][ T59] usb 6-1: USB disconnect, device number 5 [ 125.174078][ T9172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9172 comm=syz.0.876 [ 125.270746][ T9186] vxcan1: entered allmulticast mode [ 125.270972][ T9186] vxcan1: left allmulticast mode [ 125.419138][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 125.420745][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 125.422757][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 125.462455][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 125.538763][ T9196] infiniband syz2: set down [ 125.538865][ T9196] infiniband syz2: added vxcan1 [ 125.538973][ T60] vxcan1 speed is unknown, defaulting to 1000 [ 125.597678][ T9196] RDS/IB: syz2: added [ 125.597912][ T9196] smc: adding ib device syz2 with port count 1 [ 125.597971][ T9196] smc: ib device syz2 port 1 has pnetid [ 125.601522][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 125.608332][ T1348] vxcan1 speed is unknown, defaulting to 1000 [ 125.738709][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 125.843208][ T9230] openvswitch: netlink: IP tunnel dst address not specified [ 125.888198][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 125.897706][ T9237] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 126.041533][ T9196] vxcan1 speed is unknown, defaulting to 1000 [ 132.680241][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.683053][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.125329][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 140.125370][ T40] audit: type=1400 audit(1758312902.244:33497): avc: denied { read write } for pid=9260 comm="syz.0.900" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.148577][ T40] audit: type=1400 audit(1758312902.244:33498): avc: denied { open } for pid=9260 comm="syz.0.900" path="/dev/sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.157755][ T9265] bond0: Caught tx_queue_len zero misconfig [ 140.164454][ T40] audit: type=1400 audit(1758312902.264:33499): avc: denied { sys_module } for pid=9259 comm="syz.3.903" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 140.174621][ T40] audit: type=1400 audit(1758312902.264:33500): avc: denied { module_request } for pid=9259 comm="syz.3.903" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 140.184248][ T40] audit: type=1400 audit(1758312902.274:33501): avc: denied { ioctl } for pid=9260 comm="syz.0.900" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x227a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.193145][ T40] audit: type=1400 audit(1758312902.274:33502): avc: denied { read write } for pid=9260 comm="syz.0.900" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 140.201094][ T40] audit: type=1400 audit(1758312902.274:33503): avc: denied { open } for pid=9260 comm="syz.0.900" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 140.209238][ T40] audit: type=1400 audit(1758312902.274:33504): avc: denied { ioctl } for pid=9260 comm="syz.0.900" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 140.217504][ T40] audit: type=1400 audit(1758312902.274:33505): avc: denied { ioctl } for pid=9269 comm="syz.1.904" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 140.225178][ T40] audit: type=1400 audit(1758312902.274:33506): avc: denied { write } for pid=9269 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.263915][ T9278] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 140.501000][ T9299] overlayfs: failed to clone upperpath [ 140.640199][ T9306] __nla_validate_parse: 2 callbacks suppressed [ 140.640210][ T9306] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.914'. [ 140.648676][ T9306] netlink: 'syz.2.914': attribute type 21 has an invalid length. [ 140.651806][ T9306] netlink: 'syz.2.914': attribute type 6 has an invalid length. [ 140.654198][ T9306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.914'. [ 140.670579][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 141.263400][ T9351] overlayfs: unescaped trailing colons in lowerdir mount option. [ 141.491673][ T9396] netlink: 348 bytes leftover after parsing attributes in process `syz.3.931'. [ 141.568478][ T9400] vxcan1 speed is unknown, defaulting to 1000 [ 141.610676][ T9408] overlayfs: failed to clone upperpath [ 141.633866][ T9411] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 141.687980][ T9411] vxcan1 speed is unknown, defaulting to 1000 [ 141.847833][ T9411] netlink: 'syz.0.936': attribute type 13 has an invalid length. [ 141.850323][ T9411] netlink: 'syz.0.936': attribute type 17 has an invalid length. [ 141.859796][ T9411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 141.943128][ T9426] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 141.947781][ T9426] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 141.953154][ T9428] netlink: 236 bytes leftover after parsing attributes in process `syz.1.940'. [ 141.974140][ T9426] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.012209][ T9432] batadv_slave_1: entered promiscuous mode [ 142.025077][ T9434] batadv_slave_1: left promiscuous mode [ 142.044241][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'. [ 142.089638][ T5980] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 142.452475][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 142.462796][ T9473] tipc: Enabled bearer , priority 0 [ 142.531006][ T9472] tipc: Resetting bearer [ 142.715114][ T9492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=9492 comm=syz.3.957 [ 142.773234][ T9495] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 142.778020][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.957'. [ 142.954265][ T9499] binder: 9497:9499 ioctl 330f b12 returned -22 [ 143.485436][ T9472] tipc: Disabling bearer [ 143.562325][ T9499] syz.1.959 (9499) used greatest stack depth: 19768 bytes left [ 143.591565][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 143.651295][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 143.658419][ T5980] Bluetooth: hci1: unexpected event 0x0f length: 5 > 4 [ 143.658445][ T5980] Bluetooth: hci1: unexpected event for opcode 0xf520 [ 143.699540][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.968'. [ 143.760456][ T9531] bond3: entered promiscuous mode [ 143.764866][ T9531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.769560][ T9531] bond0: (slave bond3): Enslaving as an active interface with an up link [ 144.032607][ T9550] binder: BINDER_SET_CONTEXT_MGR already set [ 144.034702][ T9550] binder: 9548:9550 ioctl 4018620d 200000000100 returned -16 [ 144.038158][ T9549] vivid-000: ================= START STATUS ================= [ 144.041516][ T9549] vivid-000: Test Pattern: 100% Blue [ 144.043832][ T9549] vivid-000: Fill Percentage of Frame: 100 [ 144.046986][ T9549] vivid-000: Horizontal Movement: No Movement [ 144.049161][ T9549] vivid-000: Vertical Movement: No Movement [ 144.052588][ T9549] vivid-000: OSD Text Mode: All [ 144.054361][ T9549] vivid-000: Show Border: false [ 144.056291][ T9549] vivid-000: Show Square: true [ 144.058281][ T9549] vivid-000: Sensor Flipped Horizontally: false [ 144.060434][ T9549] vivid-000: Sensor Flipped Vertically: false [ 144.062470][ T9549] vivid-000: Insert SAV Code in Image: false [ 144.064503][ T9549] vivid-000: Insert EAV Code in Image: false [ 144.067649][ T9549] vivid-000: Insert Video Guard Band: false [ 144.069698][ T9549] vivid-000: Reduced Framerate: false [ 144.071518][ T9549] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 144.074116][ T9549] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 144.077090][ T9549] vivid-000: Enable Capture Cropping: true [ 144.078967][ T9549] vivid-000: Enable Capture Composing: true [ 144.080840][ T9549] vivid-000: Enable Capture Scaler: false [ 144.082656][ T9549] vivid-000: Timestamp Source: End of Frame [ 144.084526][ T9549] vivid-000: Colorspace: sRGB [ 144.086224][ T9549] vivid-000: Transfer Function: Default [ 144.088064][ T9549] vivid-000: Y'CbCr Encoding: Default [ 144.089916][ T9549] vivid-000: HSV Encoding: Hue 0-179 [ 144.091587][ T9549] vivid-000: Quantization: Default [ 144.093200][ T9549] vivid-000: Apply Alpha To Red Only: false [ 144.095067][ T9549] vivid-000: Standard Aspect Ratio: 4x3 [ 144.097271][ T9549] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 144.099695][ T9549] vivid-000: DV Timings: 640x480p59 inactive [ 144.101638][ T9549] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 144.104171][ T9549] vivid-000: Maximum EDID Blocks: 2 [ 144.105974][ T9549] vivid-000: Limited RGB Range (16-235): false [ 144.107911][ T9549] vivid-000: Rx RGB Quantization Range: Automatic [ 144.109923][ T9549] vivid-000: Power Present: 0x00000001 [ 144.111637][ T9549] tpg source WxH: 320x240 (Y'CbCr) [ 144.113254][ T9549] tpg field: 1 [ 144.114354][ T9549] tpg crop: (0,0)/320x240 [ 144.115728][ T9549] tpg compose: (0,0)/320x240 [ 144.118467][ T9549] tpg colorspace: 1 [ 144.119733][ T9549] tpg transfer function: 6/2 [ 144.121231][ T9549] tpg Y'CbCr encoding: 0/1 [ 144.122703][ T9549] tpg quantization: 0/2 [ 144.124098][ T9549] tpg RGB range: 0/2 [ 144.125434][ T9549] vivid-000: ================== END STATUS ================== [ 144.268896][ T9568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=9568 comm=syz.1.978 [ 144.522503][ T9570] : entered promiscuous mode [ 144.527765][ T9570] : left promiscuous mode [ 145.083440][ T9573] vxcan1 speed is unknown, defaulting to 1000 [ 145.153381][ T9580] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 145.174052][ T9580] bond4: (slave geneve2): making interface the new active one [ 145.178008][ T40] kauditd_printk_skb: 285 callbacks suppressed [ 145.178022][ T40] audit: type=1400 audit(2000000004.849:33792): avc: denied { write } for pid=9576 comm="syz.2.982" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.186347][ T9580] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 145.190509][ T40] audit: type=1400 audit(2000000004.859:33793): avc: denied { read write } for pid=9576 comm="syz.2.982" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.191227][ T8782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.199675][ T40] audit: type=1400 audit(2000000004.859:33794): avc: denied { open } for pid=9576 comm="syz.2.982" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.204852][ T9580] bond4: entered promiscuous mode [ 145.210610][ T40] audit: type=1400 audit(2000000004.869:33795): avc: denied { create } for pid=9583 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.212495][ T9580] geneve2: entered promiscuous mode [ 145.218712][ T40] audit: type=1400 audit(2000000004.869:33796): avc: denied { ioctl } for pid=9583 comm="syz.3.984" path="socket:[26971]" dev="sockfs" ino=26971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.220983][ T9580] bond4: entered allmulticast mode [ 145.231044][ T9580] geneve2: entered allmulticast mode [ 145.234050][ T9580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.237596][ T8782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.241003][ T40] audit: type=1400 audit(2000000004.909:33797): avc: denied { sys_module } for pid=9583 comm="syz.3.984" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 145.263322][ T8795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.263932][ T40] audit: type=1400 audit(2000000004.929:33798): avc: denied { read } for pid=5681 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 145.274924][ T8795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.283597][ T40] audit: type=1400 audit(2000000004.939:33799): avc: denied { create } for pid=9589 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.296649][ T40] audit: type=1400 audit(2000000004.969:33800): avc: denied { setopt } for pid=9589 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.319757][ T40] audit: type=1400 audit(2000000004.969:33801): avc: denied { search } for pid=5681 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.353743][ T5980] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 145.386998][ T9614] Context (ID=0x4d4) not attached to queue pair (handle=0x4d5:0x0) [ 145.398068][ T9590] Falling back ldisc for ttyS3. [ 145.434030][ T9626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55678 sclass=netlink_route_socket pid=9626 comm=syz.3.992 [ 145.478610][ T9635] openvswitch: netlink: IP tunnel dst address not specified [ 145.490578][ T9638] SELinux: unknown common r [ 145.492489][ T9638] SELinux: failed to load policy [ 146.403527][ T9709] input: syz0 as /devices/virtual/input/input14 [ 147.038904][ T9748] /dev/nullb0: Can't lookup blockdev [ 147.068892][ T9755] __nla_validate_parse: 3 callbacks suppressed [ 147.068904][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 147.071736][ T9757] netlink: 'syz.3.1026': attribute type 5 has an invalid length. [ 147.073675][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 147.073694][ T9755] netlink: 'syz.2.1025': attribute type 6 has an invalid length. [ 147.141422][ T9765] bond0: (slave rose0): Enslaving as an active interface with an up link [ 147.157799][ T9766] bond0: (slave rose0): Releasing backup interface [ 147.359498][ T9797] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.135105][ T9805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9805 comm=syz.3.1041 [ 148.140391][ T9805] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1041'. [ 148.195110][ T9807] overlayfs: failed to clone upperpath [ 148.546169][ T9812] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 148.552006][ T9812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9812 comm=syz.1.1044 [ 148.710336][ T9854] vxcan1 speed is unknown, defaulting to 1000 [ 148.765208][ T9856] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1051'. [ 148.769247][ T9856] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1051'. [ 148.818352][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 148.820906][ T9858] binder: 9857:9858 ioctl 4018620d 2000000000c0 returned -16 [ 148.824127][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 148.827074][ T9858] binder: 9857:9858 ioctl 4018620d 2000000000c0 returned -16 [ 148.978755][ T9869] overlayfs: workdir and upperdir must be separate subtrees [ 149.075935][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 149.079511][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 149.083359][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 149.087362][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 149.096628][ T9877] o2cb: This node has not been configured. [ 149.099101][ T9877] o2cb: Cluster check failed. Fix errors before retrying. [ 149.102270][ T9877] (syz.2.1057,9877,0):user_dlm_register:674 ERROR: status = -22 [ 149.105479][ T9877] (syz.2.1057,9877,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 149.110935][ T9877] o2cb: This node has not been configured. [ 149.113481][ T9877] o2cb: Cluster check failed. Fix errors before retrying. [ 149.116434][ T9877] (syz.2.1057,9877,0):user_dlm_register:674 ERROR: status = -22 [ 149.119542][ T9877] (syz.2.1057,9877,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 149.134319][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 149.169217][ T9879] vxcan1 speed is unknown, defaulting to 1000 [ 149.186001][ T6218] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.337753][ T6218] usb 6-1: Using ep0 maxpacket: 32 [ 149.342351][ T6218] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 149.342575][ T9880] netlink: 'syz.0.1058': attribute type 13 has an invalid length. [ 149.346075][ T6218] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 149.349523][ T9880] netlink: 'syz.0.1058': attribute type 17 has an invalid length. [ 149.354699][ T6218] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.360497][ T6218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.363304][ T6218] usb 6-1: Product: syz [ 149.364926][ T6218] usb 6-1: Manufacturer: ࡡ [ 149.366911][ T6218] usb 6-1: SerialNumber: syz [ 149.412486][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.415703][ T9880] batman_adv: batadv0: Interface activated: dummy0 [ 149.418475][ T9880] batadv0: mtu less than device minimum [ 149.421502][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.425466][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.429987][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.433671][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.437789][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.442166][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.446801][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 149.654290][ T9902] tmpfs: Bad value for 'huge' [ 149.712760][ T9912] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 149.806013][ T9912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.821910][ T9912] bond5: entered promiscuous mode [ 149.876555][ T9923] netlink: 'syz.0.1072': attribute type 30 has an invalid length. [ 150.124400][ T9936] syz_tun: entered allmulticast mode [ 150.132319][ T9935] syz_tun: left allmulticast mode [ 150.187753][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 150.187765][ T40] audit: type=1400 audit(2000000009.859:34180): avc: denied { ioctl } for pid=9933 comm="syz.0.1074" path="/258/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.210827][ T40] audit: type=1400 audit(2000000009.879:34181): avc: denied { module_request } for pid=9942 comm="syz.2.1077" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 150.232237][ T40] audit: type=1400 audit(2000000009.899:34182): avc: denied { sys_module } for pid=9942 comm="syz.2.1077" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 150.253207][ T40] audit: type=1400 audit(2000000009.919:34183): avc: denied { create } for pid=9942 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.303300][ T40] audit: type=1400 audit(2000000009.969:34184): avc: denied { bind } for pid=9942 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.423519][ T40] audit: type=1400 audit(2000000010.089:34185): avc: denied { create } for pid=10038 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.430260][ T40] audit: type=1400 audit(2000000010.089:34186): avc: denied { write } for pid=10038 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.467917][ T40] audit: type=1400 audit(2000000010.139:34187): avc: denied { create } for pid=10051 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.468148][T10054] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 150.474736][ T40] audit: type=1400 audit(2000000010.139:34188): avc: denied { setopt } for pid=10051 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.508090][ T40] audit: type=1400 audit(2000000010.179:34189): avc: denied { map_create } for pid=10073 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.744983][T10264] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 151.749392][T10264] Error validating options; rc = [-22] [ 151.933210][ T6218] cdc_ncm 6-1:1.0: bind() failure [ 151.958734][ T6218] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 151.960972][ T6218] cdc_ncm 6-1:1.1: bind() failure [ 151.986881][ T6218] usb 6-1: USB disconnect, device number 6 [ 152.267624][T10299] zonefs (nbd2) ERROR: Not a zoned block device [ 152.328383][T10307] __nla_validate_parse: 2 callbacks suppressed [ 152.328396][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 152.478748][T10316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10316 comm=syz.3.1097 [ 152.509071][T10316] syz.3.1097 (10316) used greatest stack depth: 19576 bytes left [ 152.924569][T10355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1109'. [ 152.976015][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1109'. [ 153.275837][T10363] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 153.356451][T10372] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1111'. [ 153.381679][T10368] "syz.2.1112" (10368) uses obsolete ecb(arc4) skcipher [ 153.390774][T10367] "syz.2.1112" (10367) uses obsolete ecb(arc4) skcipher [ 153.636635][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 153.786218][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 153.789938][ T60] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 153.792560][ T60] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 153.797757][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 153.801384][ T60] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.805037][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.809489][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.813918][ T60] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 153.818765][ T60] usb 7-1: config 168 interface 0 has no altsetting 0 [ 153.822154][ T60] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 153.824626][ T60] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 153.831030][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 153.835195][ T60] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.838735][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.842077][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.846349][ T60] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 153.850985][ T60] usb 7-1: config 168 interface 0 has no altsetting 0 [ 153.854109][ T60] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 153.858221][ T60] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 153.862070][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 153.865753][ T60] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.870027][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.874090][ T60] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.878000][ T60] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 153.882300][ T60] usb 7-1: config 168 interface 0 has no altsetting 0 [ 153.887043][ T60] usb 7-1: string descriptor 0 read error: -22 [ 153.891248][ T60] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.894327][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.908887][ T60] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.047080][T10393] Attempt to restore checkpoint with obsolete wellknown handles [ 154.064936][T10393] vxcan1 speed is unknown, defaulting to 1000 [ 154.110997][ T6218] usb 7-1: USB disconnect, device number 15 [ 154.113182][T10397] trusted_key: encrypted_key: insufficient parameters specified [ 154.119197][T10397] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 154.312998][T10367] IPVS: length: 184 != 24 [ 154.616193][T10413] trusted_key: encrypted_key: master key parameter '' is invalid [ 154.740603][T10427] loop4: detected capacity change from 0 to 2560 [ 154.744280][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.747388][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.749859][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.752328][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.755080][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.758225][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.760754][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.763276][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.765810][T10427] ldm_validate_partition_table(): Disk read failed. [ 154.768181][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.770891][T10427] Buffer I/O error on dev loop4, logical block 0, async page read [ 154.773443][T10427] Dev loop4: unable to read RDB block 0 [ 154.775369][T10427] loop4: unable to read partition table [ 154.777387][T10427] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 154.831774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.270174][ T40] kauditd_printk_skb: 222 callbacks suppressed [ 155.270190][ T40] audit: type=1400 audit(2000000014.939:34412): avc: denied { create } for pid=10434 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.276576][T10435] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 155.282278][ T40] audit: type=1400 audit(2000000014.939:34413): avc: denied { write } for pid=10434 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.292369][ T40] audit: type=1400 audit(2000000014.939:34414): avc: denied { read } for pid=10434 comm="syz.2.1129" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.302380][ T40] audit: type=1400 audit(2000000014.939:34415): avc: denied { open } for pid=10434 comm="syz.2.1129" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.304271][T10435] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 155.316267][ T40] audit: type=1400 audit(2000000014.939:34416): avc: denied { create } for pid=10434 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.481157][ T40] audit: type=1400 audit(2000000015.149:34417): avc: denied { read write } for pid=10437 comm="syz.0.1130" name="swradio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.491151][ T40] audit: type=1400 audit(2000000015.149:34418): avc: denied { open } for pid=10437 comm="syz.0.1130" path="/dev/swradio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.502227][ T40] audit: type=1400 audit(2000000015.149:34419): avc: denied { ioctl } for pid=10437 comm="syz.0.1130" path="/dev/swradio0" dev="devtmpfs" ino=979 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.512500][ T40] audit: type=1400 audit(2000000015.149:34420): avc: denied { map } for pid=10437 comm="syz.0.1130" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 155.523223][ T40] audit: type=1400 audit(2000000015.149:34421): avc: denied { allowed } for pid=10437 comm="syz.0.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.543369][T10435] fuse: Bad value for 'user_id' [ 155.545376][T10435] fuse: Bad value for 'user_id' [ 155.570996][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 155.575080][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 155.699034][T10459] vxcan1 speed is unknown, defaulting to 1000 [ 155.797627][T10471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 155.800457][T10471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1138'. [ 155.899264][T10480] netlink: 'syz.3.1140': attribute type 10 has an invalid length. [ 155.903747][T10480] team0: Device ipvlan1 failed to register rx_handler [ 156.017134][T10493] netlink: 'syz.3.1143': attribute type 30 has an invalid length. [ 156.149639][T10505] loop2: detected capacity change from 0 to 7 [ 156.154728][ T9910] Dev loop2: unable to read RDB block 7 [ 156.159209][ T9910] loop2: AHDI p1 p2 p3 [ 156.160542][ T9910] loop2: partition table partially beyond EOD, truncated [ 156.163425][ T9910] loop2: p1 start 1601398130 is beyond EOD, truncated [ 156.166627][ T9910] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.176643][T10505] Dev loop2: unable to read RDB block 7 [ 156.179262][T10505] loop2: AHDI p1 p2 p3 [ 156.181224][T10505] loop2: partition table partially beyond EOD, truncated [ 156.184746][T10505] loop2: p1 start 1601398130 is beyond EOD, truncated [ 156.190917][T10505] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.232114][T10514] tipc: Cannot configure node identity twice [ 156.328228][T10525] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 156.373710][T10527] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.1153' resets device [ 156.382523][T10527] usb usb7: usbfs: process 10527 (syz.2.1153) did not claim interface 0 before use [ 156.490930][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 156.493682][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 156.497030][T10545] netlink: 'syz.1.1158': attribute type 19 has an invalid length. [ 156.750966][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 156.751032][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 156.754265][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 156.758463][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 156.761747][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 156.790371][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 157.077163][T10605] fuse: Bad value for 'group_id' [ 157.082949][T10605] fuse: Bad value for 'group_id' [ 157.090130][T10605] nfs4: Unknown parameter 'fd' [ 157.429445][T10628] __nla_validate_parse: 1 callbacks suppressed [ 157.429464][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.435818][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.526019][ T60] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 157.576047][T10635] /dev/nullb0: Can't open blockdev [ 157.644967][T10637] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1187'. [ 157.667823][ T60] usb 7-1: device descriptor read/64, error -71 [ 157.719374][T10637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.723243][T10637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.727473][T10637] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 157.730958][T10637] bond0 (unregistering): (slave bond3): Releasing backup interface [ 157.735438][T10637] bond0 (unregistering): Released all slaves [ 157.744741][T10641] netlink: 'syz.1.1188': attribute type 12 has an invalid length. [ 157.777777][T10643] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1189'. [ 157.835142][T10650] overlay: qY3aK is not a directory [ 157.854639][T10655] netlink: 'syz.1.1192': attribute type 4 has an invalid length. [ 157.869643][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.1.1192 [ 157.906434][ T60] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 157.963397][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 157.967883][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 158.049032][ T60] usb 7-1: device descriptor read/64, error -71 [ 158.156265][ T60] usb usb7-port1: attempt power cycle [ 158.194734][T10680] 8021q: VLANs not supported on gre0 [ 158.221025][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1200'. [ 158.233682][T10685] No control pipe specified [ 158.317443][T10697] netlink: 'syz.1.1205': attribute type 7 has an invalid length. [ 158.320561][T10697] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 158.379942][T10704] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 158.472217][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 158.506098][ T60] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 158.515785][T10724] vxcan1 speed is unknown, defaulting to 1000 [ 158.538237][ T60] usb 7-1: device descriptor read/8, error -71 [ 158.667726][T10728] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 158.672509][T10728] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1215'. [ 158.718466][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 158.795947][ T60] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 158.818934][ T60] usb 7-1: device descriptor read/8, error -71 [ 158.895594][T10752] netlink: 'syz.3.1223': attribute type 7 has an invalid length. [ 158.898896][T10752] netlink: 'syz.3.1223': attribute type 8 has an invalid length. [ 158.927841][ T60] usb usb7-port1: unable to enumerate USB device [ 158.975157][T10756] No control pipe specified [ 159.073267][T10760] netlink: 'syz.1.1225': attribute type 12 has an invalid length. [ 159.149353][T10770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10770 comm=syz.3.1228 [ 159.314072][T10778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.330306][T10778] bond5: (slave erspan1): making interface the new active one [ 159.336893][T10778] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 159.384922][T10781] tmpfs: Invalid uid '0x00000000ffffffff' [ 160.129526][T10813] Bluetooth: hci4: Frame reassembly failed (-84) [ 160.132227][ T9837] Bluetooth: hci4: Frame reassembly failed (-84) [ 160.134775][ T9837] Bluetooth: hci4: Frame reassembly failed (-84) [ 160.358234][ T40] kauditd_printk_skb: 406 callbacks suppressed [ 160.358251][ T40] audit: type=1400 audit(2000000020.029:34828): avc: denied { listen } for pid=10816 comm="syz.2.1241" lport=54204 faddr=::ffff:172.30.0.3 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.359517][T10818] tipc: Enabling not permitted [ 160.371186][T10818] tipc: Enabling of bearer rejected, failed to enable media [ 160.591057][ T40] audit: type=1400 audit(2000000020.259:34829): avc: denied { create } for pid=10819 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.591373][T10820] "syz.3.1242" (10820) uses obsolete ecb(arc4) skcipher [ 160.597310][ T40] audit: type=1400 audit(2000000020.259:34830): avc: denied { bind } for pid=10819 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.609025][T10820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20820 sclass=netlink_route_socket pid=10820 comm=syz.3.1242 [ 160.646440][T10822] ipvlan2: entered promiscuous mode [ 160.648553][T10822] bridge0: port 3(ipvlan2) entered blocking state [ 160.650679][T10822] bridge0: port 3(ipvlan2) entered disabled state [ 160.652775][T10822] ipvlan2: entered allmulticast mode [ 160.654476][T10822] bridge0: entered allmulticast mode [ 160.657742][T10822] ipvlan2: left allmulticast mode [ 160.659322][T10822] bridge0: left allmulticast mode [ 160.787746][ T40] audit: type=1400 audit(2000000020.459:34831): avc: denied { ioctl } for pid=10823 comm="syz.3.1244" path="socket:[30432]" dev="sockfs" ino=30432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.823498][ T40] audit: type=1400 audit(2000000020.489:34832): avc: denied { create } for pid=10825 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.832230][ T40] audit: type=1400 audit(2000000020.489:34833): avc: denied { write } for pid=10825 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.902342][ T40] audit: type=1400 audit(2000000020.569:34834): avc: denied { read write } for pid=5971 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.916278][ T40] audit: type=1400 audit(2000000020.569:34835): avc: denied { open } for pid=5971 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.927241][ T40] audit: type=1400 audit(2000000020.569:34836): avc: denied { ioctl } for pid=5971 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.938072][ T40] audit: type=1400 audit(2000000020.569:34837): avc: denied { create } for pid=10832 comm="syz.3.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.995398][T10844] validate_nla: 1 callbacks suppressed [ 160.995410][T10844] netlink: 'syz.3.1252': attribute type 6 has an invalid length. [ 161.002838][T10844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10844 comm=syz.3.1252 [ 161.092460][T10853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10853 comm=syz.3.1255 [ 161.299004][T10863] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 161.304470][T10863] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 161.310657][T10867] netlink: 'syz.0.1258': attribute type 12 has an invalid length. [ 161.450281][T10871] vxcan1 speed is unknown, defaulting to 1000 [ 161.844643][T10893] overlay: ./file0 is not a directory [ 162.195991][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 162.196198][ T5980] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 162.279035][T10931] fuse: Bad value for 'user_id' [ 162.280634][T10931] fuse: Bad value for 'user_id' [ 162.282576][T10931] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 162.285828][T10931] veth0_macvtap: left promiscuous mode [ 162.323575][T10931] kvm: Disabled LAPIC found during irq injection [ 162.475475][T10941] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 162.668824][T10950] __nla_validate_parse: 16 callbacks suppressed [ 162.668835][T10950] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1279'. [ 162.681163][T10949] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.175956][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 163.326622][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 163.330750][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.334845][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.339235][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.343844][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.350017][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.353916][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.562928][ T60] usb 6-1: GET_CAPABILITIES returned 0 [ 163.564744][ T60] usbtmc 6-1:16.0: can't read capabilities [ 163.683690][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 163.688479][T10978] netlink: 'syz.3.1293': attribute type 333 has an invalid length. [ 163.773781][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.778175][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.781110][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.783930][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.786734][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.791490][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.794592][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.797843][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.800908][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.803697][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.806497][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.809870][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.814132][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.818304][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.822071][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 163.830269][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 163.834612][ T60] usb 6-1: USB disconnect, device number 7 [ 163.862362][T10999] veth0: entered promiscuous mode [ 163.871479][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 163.975636][T10999] veth0 (unregistering): left promiscuous mode [ 164.134701][T11019] trusted_key: syz.0.1306 sent an empty control message without MSG_MORE. [ 164.190603][T11028] sock: sock_timestamping_bind_phc: sock not bind to device [ 164.213294][T11030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=11030 comm=syz.0.1310 [ 164.386178][T11048] SELinux: Context system_u:object_r:user_cron_spool_t:s0 is not valid (left unmapped). [ 164.467832][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 164.719452][T11069] autofs: Unknown parameter '[dOT>Zڴj/Nx`nbT\ 8h0p)Ь)# MJp"H<ԷY\UnWBS7."'A35'7_ލ-p' [ 164.757912][T11069] No buffer was provided with the request [ 164.837867][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 164.957769][T11082] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 164.959744][T11082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.963045][T11082] vhci_hcd vhci_hcd.0: Device attached [ 165.196382][ T6014] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 165.198601][T11108] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 165.200227][T11107] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.210064][T11108] bond8: entered promiscuous mode [ 165.211839][T11108] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.222954][T11111] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.225314][T11111] bond8: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 165.232237][T11111] bond8: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 165.237917][T11111] bond8: (slave ip6gre3): making interface the new active one [ 165.240255][T11111] ip6gre3: entered promiscuous mode [ 165.242888][T11111] bond8: (slave ip6gre3): Enslaving as an active interface with an up link [ 165.304531][ T5980] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 165.323505][T11128] input: syz1 as /devices/virtual/input/input15 [ 165.378022][ T40] kauditd_printk_skb: 280 callbacks suppressed [ 165.378034][ T40] audit: type=1400 audit(2000000025.049:35118): avc: denied { create } for pid=11135 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.387771][ T40] audit: type=1400 audit(2000000025.049:35119): avc: denied { write } for pid=11135 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.394207][ T40] audit: type=1400 audit(2000000025.049:35120): avc: denied { allowed } for pid=11135 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.401273][ T40] audit: type=1400 audit(2000000025.059:35121): avc: denied { map } for pid=11135 comm="syz.3.1339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.409474][ T40] audit: type=1400 audit(2000000025.059:35122): avc: denied { read write } for pid=11135 comm="syz.3.1339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.419163][T11136] Invalid ELF header type: 3 != 1 [ 165.420919][T11136] Invalid ELF header type: 3 != 1 [ 165.422589][T11136] Invalid ELF header type: 3 != 1 [ 165.424639][T11136] Invalid ELF header type: 3 != 1 [ 165.426923][ T40] audit: type=1400 audit(2000000025.089:35123): avc: denied { mounton } for pid=11135 comm="syz.3.1339" path="/451/file0" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.435365][ T40] audit: type=1400 audit(2000000025.089:35124): avc: denied { module_load } for pid=11135 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 165.445605][ T40] audit: type=1400 audit(2000000025.109:35125): avc: denied { read } for pid=11140 comm="syz.2.1340" name="cec2" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.454323][ T40] audit: type=1400 audit(2000000025.109:35126): avc: denied { open } for pid=11140 comm="syz.2.1340" path="/dev/cec2" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.463037][ T40] audit: type=1400 audit(2000000025.119:35127): avc: denied { create } for pid=11140 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.487575][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 165.490859][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 165.493632][T11150] netlink: 'syz.1.1343': attribute type 18 has an invalid length. [ 165.496995][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 165.499779][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 165.502854][T11150] netlink: 'syz.1.1343': attribute type 18 has an invalid length. [ 165.559422][T11160] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1346'. [ 165.613534][T11173] qnx4: no qnx4 filesystem (no root dir). [ 165.734584][T11083] vhci_hcd: connection reset by peer [ 165.740149][ T9837] vhci_hcd: stop threads [ 165.742220][ T9837] vhci_hcd: release socket [ 165.746209][ T9837] vhci_hcd: disconnect device [ 165.775125][T11187] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.780136][T11187] overlayfs: overlapping lowerdir path [ 165.873534][T11205] bond4: entered promiscuous mode [ 165.875347][T11205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.929524][T11211] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 166.081481][T11214] net_ratelimit: 13 callbacks suppressed [ 166.081493][T11214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.267986][T11227] comedi comedi1: fl512: a I/O base address must be specified [ 166.508933][T11252] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 166.544087][T11255] Invalid source name [ 166.545334][T11255] UBIFS error (pid: 11255): cannot open "/dev/sg0", error -22 [ 166.557814][T11257] tmpfs: Bad value for 'mpol' [ 166.663308][T11267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30059 sclass=netlink_route_socket pid=11267 comm=syz.2.1377 [ 166.723204][T11274] sctp: [Deprecated]: syz.2.1380 (pid 11274) Use of int in maxseg socket option. [ 166.723204][T11274] Use struct sctp_assoc_value instead [ 166.892617][T11297] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 167.266137][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.290932][ T5980] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 167.291029][T11333] netlink: 'syz.0.1392': attribute type 4 has an invalid length. [ 167.295680][T11334] netlink: 'syz.0.1392': attribute type 4 has an invalid length. [ 167.377318][T11340] qrtr: Invalid version 0 [ 167.380987][T11341] qrtr: Invalid version 0 [ 167.425969][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 167.433721][ T53] usb 6-1: device descriptor read/all, error -61 [ 167.438215][T11348] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 167.459691][T11348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.495714][T11348] veth3: entered promiscuous mode [ 167.500445][T11348] bond0: (slave veth3): Enslaving as an active interface with a down link [ 167.576072][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 167.589652][T11353] tmpfs: Bad value for 'mpol' [ 167.708486][T11366] __nla_validate_parse: 13 callbacks suppressed [ 167.708498][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 167.715990][ T53] usb 6-1: device descriptor read/64, error -71 [ 167.807163][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 167.827657][ T53] usb usb6-port1: attempt power cycle [ 167.841907][T11380] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 167.857177][T11378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.861223][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 167.919128][T11382] netlink: 'syz.2.1406': attribute type 3 has an invalid length. [ 167.921652][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1406'. [ 167.924844][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 167.979417][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1408'. [ 168.084708][T11393] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 168.100999][T11393] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.105514][T11393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11393 comm=syz.0.1411 [ 168.117849][T11393] bond6: (slave geneve3): making interface the new active one [ 168.120908][T11393] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 168.123617][T11393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11393 comm=syz.0.1411 [ 168.123723][ T46] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.130287][ T46] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.140407][ T46] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.143137][ T46] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.175917][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 168.203229][ T53] usb 6-1: device descriptor read/8, error -71 [ 168.205096][T11403] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1413'. [ 168.220112][T11242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1368'. [ 168.242389][T11408] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 168.395411][T11409] delete_channel: no stack [ 168.466201][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 168.491023][ T53] usb 6-1: device descriptor read/8, error -71 [ 168.518196][T11422] vlan2: entered promiscuous mode [ 168.519893][T11422] vlan2: entered allmulticast mode [ 168.521528][T11422] hsr_slave_1: entered allmulticast mode [ 168.581262][T11433] netlink: 'syz.3.1423': attribute type 11 has an invalid length. [ 168.606077][ T53] usb usb6-port1: unable to enumerate USB device [ 169.065379][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 169.167368][T11480] vxcan1 speed is unknown, defaulting to 1000 [ 169.209600][T11481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1436'. [ 169.300514][T11484] fuse: Bad value for 'fd' [ 169.302701][T11484] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 169.377947][T11488] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 169.391559][T11488] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.413248][T11488] bond7: (slave veth5): Enslaving as an active interface with a down link [ 170.112768][T11508] hfs: unable to load iocharset "io#harset" [ 170.333026][T11533] ceph: No source [ 170.356002][ T6014] vhci_hcd: vhci_device speed not set [ 170.411029][ T40] kauditd_printk_skb: 414 callbacks suppressed [ 170.411041][ T40] audit: type=1400 audit(2000000030.079:35542): avc: denied { setopt } for pid=11541 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.419795][ T40] audit: type=1400 audit(2000000030.079:35543): avc: denied { setopt } for pid=11541 comm="syz.1.1456" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.426761][ T40] audit: type=1400 audit(2000000030.079:35544): avc: denied { write } for pid=11541 comm="syz.1.1456" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.461047][ T40] audit: type=1400 audit(2000000030.129:35545): avc: denied { sys_module } for pid=11543 comm="syz.1.1457" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 170.468244][ T40] audit: type=1400 audit(2000000030.129:35546): avc: denied { module_request } for pid=11543 comm="syz.1.1457" kmod="vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 170.485239][ T40] audit: type=1400 audit(2000000030.149:35547): avc: denied { read write } for pid=11543 comm="syz.1.1457" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 170.492882][ T40] audit: type=1400 audit(2000000030.149:35548): avc: denied { open } for pid=11543 comm="syz.1.1457" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 170.500526][ T40] audit: type=1400 audit(2000000030.149:35549): avc: denied { mounton } for pid=11543 comm="syz.1.1457" path="/318/file0" dev="tmpfs" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.508072][ T40] audit: type=1400 audit(2000000030.149:35550): avc: denied { mount } for pid=11543 comm="syz.1.1457" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 170.914882][ T40] audit: type=1400 audit(2000000030.579:35551): avc: denied { execute } for pid=11548 comm="syz.3.1458" name="file2" dev="tmpfs" ino=2605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.010769][T11564] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 171.477106][T11591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.479831][T11591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.154029][T11614] macsec1: entered promiscuous mode [ 172.155725][T11614] bridge0: entered promiscuous mode [ 172.188924][T11620] cgroup: none used incorrectly [ 172.361556][T11654] vxcan1 speed is unknown, defaulting to 1000 [ 172.559812][T11665] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 172.562159][T11665] overlayfs: failed to set xattr on upper [ 172.564469][T11665] overlayfs: ...falling back to redirect_dir=nofollow. [ 172.566736][T11665] overlayfs: ...falling back to index=off. [ 172.568566][T11665] overlayfs: ...falling back to uuid=null. [ 172.777208][T11672] overlayfs: failed to clone upperpath [ 172.900007][T11683] Device name not specified. [ 172.900007][T11683] [ 172.990294][T11694] __nla_validate_parse: 4 callbacks suppressed [ 172.990304][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1504'. [ 172.995035][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 173.139587][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 173.440172][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 173.444015][T11732] netlink: 'syz.2.1517': attribute type 39 has an invalid length. [ 173.509009][T11734] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 173.511252][T11734] overlayfs: failed to set xattr on upper [ 173.513100][T11734] overlayfs: ...falling back to redirect_dir=nofollow. [ 173.515367][T11734] overlayfs: ...falling back to metacopy=off. [ 173.517661][T11734] overlayfs: ...falling back to index=off. [ 173.519582][T11734] overlayfs: ...falling back to uuid=null. [ 173.527796][T11734] netlink: 'syz.3.1518': attribute type 3 has an invalid length. [ 173.527802][T11735] netlink: 'syz.3.1518': attribute type 3 has an invalid length. [ 173.530267][T11734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1518'. [ 173.535662][T11735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1518'. [ 173.608791][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 173.693074][T11751] syz.3.1522(11751): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 173.724933][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1523'. [ 173.746135][T11756] macvlan2: entered promiscuous mode [ 173.748149][T11756] macvlan2: entered allmulticast mode [ 173.750504][T11756] bond9: entered promiscuous mode [ 173.752464][T11756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.757178][T11756] bond9: left promiscuous mode [ 174.170207][T11774] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1528'. [ 175.716133][ T5980] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.717156][T11736] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 175.819690][ T40] kauditd_printk_skb: 187 callbacks suppressed [ 175.819705][ T40] audit: type=1400 audit(2000000035.489:35739): avc: denied { create } for pid=11784 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.852706][ T40] audit: type=1400 audit(2000000035.519:35740): avc: denied { create } for pid=11789 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.861839][ T40] audit: type=1400 audit(2000000035.519:35741): avc: denied { create } for pid=11789 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.871836][ T40] audit: type=1400 audit(2000000035.519:35742): avc: denied { write } for pid=11789 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.879812][ T40] audit: type=1400 audit(2000000035.519:35743): avc: denied { execute } for pid=11789 comm="syz.3.1532" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 175.942475][ T40] audit: type=1400 audit(2000000035.609:35744): avc: denied { bind } for pid=11794 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.975038][T11797] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.1535'. [ 175.980638][ T40] audit: type=1400 audit(2000000035.649:35745): avc: denied { create } for pid=11796 comm="syz.3.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.018625][ T40] audit: type=1400 audit(2000000035.689:35746): avc: denied { mount } for pid=11798 comm="syz.3.1536" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.042271][ T40] audit: type=1400 audit(2000000035.709:35747): avc: denied { setopt } for pid=11800 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.046086][T11801] overlay: ./file0 is not a directory [ 176.048472][ T40] audit: type=1400 audit(2000000035.709:35748): avc: denied { setopt } for pid=11800 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.437052][T11736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.439089][T11736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.644219][T11815] netlink: 'syz.2.1543': attribute type 39 has an invalid length. [ 176.842783][T11825] overlay: ./file0 is not a directory [ 176.971008][T11836] input: syz1 as /devices/virtual/input/input16 [ 177.006374][T11840] overlayfs: failed to clone upperpath [ 177.043121][T11840] Invalid ELF header magic: != ELF [ 177.163785][T11845] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 177.259119][T11853] /dev/sr0: Can't open blockdev [ 177.312715][T11863] overlay: ./file0 is not a directory [ 177.360746][T11866] misc userio: Invalid payload size [ 177.586702][T11885] netlink: 'syz.2.1565': attribute type 1 has an invalid length. [ 177.596882][T11885] overlayfs: conflicting options: userxattr,metacopy=on [ 177.795972][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.985548][T11899] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 178.004334][T11899] 8021q: adding VLAN 0 to HW filter on device bond10 [ 178.359538][T11925] __nla_validate_parse: 3 callbacks suppressed [ 178.359559][T11925] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1576'. [ 178.371215][T11925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.506202][T11938] kvm: pic: non byte read [ 178.526047][ T5980] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.602793][ T5980] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 178.604948][ T5980] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 178.699876][T11960] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 178.817469][T11963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.820568][T11963] block device autoloading is deprecated and will be removed. [ 178.841250][ T5379] udevd[5379]: worker [10094] terminated by signal 33 (Unknown signal 33) [ 178.844004][ T5379] udevd[5379]: worker [10094] failed while handling '/devices/virtual/block/md2' [ 178.866327][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 178.951565][T11984] /dev/nullb0: Can't lookup blockdev [ 179.009014][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 179.026574][T11994] team0 (unregistering): Port device team_slave_0 removed [ 179.034478][T11994] team0 (unregistering): Port device team_slave_1 removed [ 179.172053][T12000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1597'. [ 179.175828][ T5980] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 179.181581][ T5980] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 179.248803][T12004] overlay: Unknown parameter 'dont_hash' [ 179.288334][T12006] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1600'. [ 179.293878][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 179.391562][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 179.425406][T12014] fuse: Bad value for 'group_id' [ 179.427972][T12014] fuse: Bad value for 'group_id' [ 179.455746][T12016] fuse: Unknown parameter 'pcr' [ 179.498040][T12023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 179.570311][T12032] 9pnet_fd: p9_fd_create_tcp (12032): problem connecting socket to 127.0.0.1 [ 179.699751][T12036] 8021q: adding VLAN 0 to HW filter on device bond11 [ 179.704698][T12036] netlink: 'syz.3.1611': attribute type 12 has an invalid length. [ 179.708155][T12036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=12036 comm=syz.3.1611 [ 179.764735][T12041] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.767621][T12041] overlayfs: failed to set xattr on upper [ 179.769438][T12041] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.772473][T12041] overlayfs: ...falling back to index=off. [ 179.774730][T12041] overlayfs: ...falling back to uuid=null. [ 179.826887][T12046] overlayfs: failed to clone upperpath [ 180.189289][T12072] netlink: 'syz.2.1623': attribute type 13 has an invalid length. [ 180.318918][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'. [ 180.322886][T12085] netlink: 'syz.2.1627': attribute type 22 has an invalid length. [ 180.325479][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 180.334282][ T8796] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.334392][T12085] netlink: 'syz.2.1627': attribute type 22 has an invalid length. [ 180.337793][ T8796] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.343326][ T8796] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.346697][ T8796] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.502995][T12089] 9pnet_fd: Insufficient options for proto=fd [ 181.139545][ T40] kauditd_printk_skb: 310 callbacks suppressed [ 181.139555][ T40] audit: type=1400 audit(2000000040.809:36059): avc: denied { create } for pid=12100 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.148032][ T40] audit: type=1400 audit(2000000040.809:36060): avc: denied { map } for pid=12100 comm="syz.3.1631" path="socket:[36835]" dev="sockfs" ino=36835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.155276][ T40] audit: type=1400 audit(2000000040.809:36061): avc: denied { read } for pid=12100 comm="syz.3.1631" path="socket:[36835]" dev="sockfs" ino=36835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.163059][ T40] audit: type=1400 audit(2000000040.809:36062): avc: denied { ioctl } for pid=12100 comm="syz.3.1631" path="socket:[36835]" dev="sockfs" ino=36835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.174610][ T40] audit: type=1400 audit(2000000040.809:36063): avc: denied { setopt } for pid=12100 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.195333][ T40] audit: type=1400 audit(2000000040.859:36064): avc: denied { write } for pid=12100 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.318789][ T40] audit: type=1400 audit(2000000040.989:36065): avc: denied { map_create } for pid=12106 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.325690][ T40] audit: type=1400 audit(2000000040.989:36066): avc: denied { map_read map_write } for pid=12106 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.335053][ T40] audit: type=1400 audit(2000000040.999:36067): avc: denied { create } for pid=12111 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.343673][ T40] audit: type=1400 audit(2000000040.999:36068): avc: denied { write } for pid=12111 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.458449][T12125] /dev/sg0: Can't lookup blockdev [ 181.509370][T12127] overlayfs: failed to resolve './file1': -2 [ 181.547385][T12135] netlink: 'syz.2.1642': attribute type 4 has an invalid length. [ 181.595317][T12135] netlink: 'syz.2.1642': attribute type 4 has an invalid length. [ 182.198972][T12167] /dev/nullb0: Can't open blockdev [ 182.256081][T12169] evm: overlay not supported [ 182.480259][T12194] fuse: Bad value for 'group_id' [ 182.480917][T12195] fuse: Bad value for 'group_id' [ 182.481882][T12194] fuse: Bad value for 'group_id' [ 182.483483][T12195] fuse: Bad value for 'group_id' [ 182.629771][T12204] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.691210][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.694299][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.702077][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.705715][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.714355][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.734718][ T8796] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.744582][T12210] IPVS: Unknown mcast interface: ipvlan0 [ 182.760776][T12207] vxcan1 speed is unknown, defaulting to 1000 [ 182.812057][ T8796] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.861342][ T8796] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.920385][ T8796] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.930107][T12207] chnl_net:caif_netlink_parms(): no params data found [ 183.000996][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.003476][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.006119][T12207] bridge_slave_0: entered allmulticast mode [ 183.009216][T12207] bridge_slave_0: entered promiscuous mode [ 183.016065][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.019800][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.022777][T12207] bridge_slave_1: entered allmulticast mode [ 183.027169][T12207] bridge_slave_1: entered promiscuous mode [ 183.084477][T12207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.091374][T12207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.157727][T12207] team0: Port device team_slave_0 added [ 183.169600][T12207] team0: Port device team_slave_1 added [ 183.220170][ T8796] bridge_slave_1: left allmulticast mode [ 183.223804][ T8796] bridge_slave_1: left promiscuous mode [ 183.230252][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.237817][ T8796] bridge_slave_0: left allmulticast mode [ 183.240205][ T8796] bridge_slave_0: left promiscuous mode [ 183.242226][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.248895][T12231] input: syz1 as /devices/virtual/input/input17 [ 183.378139][ T8796] bond8 (unregistering): (slave ip6gre3): Releasing backup interface [ 183.380759][ T8796] ip6gre3 (unregistering): left promiscuous mode [ 183.445216][ T8796] bond5 (unregistering): (slave erspan1): Releasing active interface [ 183.870784][ T8796] bond1 (unregistering): Released all slaves [ 183.880081][ T8796] bond2 (unregistering): Released all slaves [ 183.886723][ T8796] bond0 (unregistering): Released all slaves [ 183.893912][ T8796] bond3 (unregistering): Released all slaves [ 183.901030][ T8796] bond4 (unregistering): Released all slaves [ 183.973805][ T8796] bond5 (unregistering): Released all slaves [ 183.980008][ T8796] bond6 (unregistering): Released all slaves [ 183.986165][ T8796] bond7 (unregistering): Released all slaves [ 184.050632][ T8796] bond8 (unregistering): Released all slaves [ 184.057533][ T8796] bond9 (unregistering): Released all slaves [ 184.127140][ T8796] bond10 (unregistering): Released all slaves [ 184.190721][ T8796] bond11 (unregistering): Released all slaves [ 184.197458][T12207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.199750][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.207783][T12207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.215672][T12207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.218254][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.226344][T12207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.314535][T12207] hsr_slave_0: entered promiscuous mode [ 184.317116][T12207] hsr_slave_1: entered promiscuous mode [ 184.319238][T12207] debugfs: 'hsr0' already exists in 'hsr' [ 184.319751][ T8796] IPVS: stopping backup sync thread 8936 ... [ 184.321189][T12207] Cannot create hsr debugfs directory [ 184.470027][T12262] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.718561][T12276] __nla_validate_parse: 5 callbacks suppressed [ 184.718572][T12276] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1679'. [ 184.752538][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.756966][ T5977] Bluetooth: hci1: command tx timeout [ 184.758739][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.767475][ T5980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.770466][ T5980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.773191][ T5980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.838786][T12278] vxcan1 speed is unknown, defaulting to 1000 [ 184.908096][ T8796] hsr_slave_0: left promiscuous mode [ 184.915830][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.918881][ T8796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.924163][ T8796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.929564][ T8796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.965017][ T8796] veth1_macvtap: left promiscuous mode [ 184.967793][ T8796] veth1_vlan: left promiscuous mode [ 186.155327][ T40] kauditd_printk_skb: 329 callbacks suppressed [ 186.155338][ T40] audit: type=1400 audit(2000000045.829:36398): avc: denied { create } for pid=12207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.165699][ T40] audit: type=1400 audit(2000000045.829:36399): avc: denied { write } for pid=12207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.170225][T12207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.173962][ T40] audit: type=1400 audit(2000000045.829:36400): avc: denied { read } for pid=12207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.183890][T12207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.193052][T12207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.206587][T12207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.239392][T12278] chnl_net:caif_netlink_parms(): no params data found [ 186.240446][ T40] audit: type=1400 audit(2000000045.909:36401): avc: denied { write } for pid=12320 comm="syz.2.1687" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.253141][ T40] audit: type=1400 audit(2000000045.919:36402): avc: denied { create } for pid=12320 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.260597][ T40] audit: type=1400 audit(2000000045.919:36403): avc: denied { bind } for pid=12320 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.268168][ T40] audit: type=1400 audit(2000000045.919:36404): avc: denied { setopt } for pid=12320 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.274481][ T40] audit: type=1400 audit(2000000045.919:36405): avc: denied { accept } for pid=12320 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.281943][ T40] audit: type=1400 audit(2000000045.919:36406): avc: denied { write } for pid=12320 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.288532][ T40] audit: type=1400 audit(2000000045.919:36407): avc: denied { read write } for pid=12320 comm="syz.2.1687" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 186.290082][T12330] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 186.299436][T12330] SELinux: failed to load policy [ 186.338658][T12335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.365009][ T8796] IPVS: stop unused estimator thread 0... [ 186.370808][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.373071][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.375454][T12278] bridge_slave_0: entered allmulticast mode [ 186.379105][T12278] bridge_slave_0: entered promiscuous mode [ 186.384421][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.386944][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.389274][T12278] bridge_slave_1: entered allmulticast mode [ 186.391938][T12278] bridge_slave_1: entered promiscuous mode [ 186.453669][T12207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.467210][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.481029][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.485029][T12207] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.523482][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.525909][ T9850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.533350][T12278] team0: Port device team_slave_0 added [ 186.540586][T12278] team0: Port device team_slave_1 added [ 186.546519][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.548786][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.588050][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.590306][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.601112][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.610137][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.613206][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.624292][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.674099][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 186.737039][T12278] hsr_slave_0: entered promiscuous mode [ 186.739868][T12278] hsr_slave_1: entered promiscuous mode [ 186.742553][T12278] debugfs: 'hsr0' already exists in 'hsr' [ 186.744947][T12278] Cannot create hsr debugfs directory [ 186.819793][T12375] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 186.824424][T12375] SELinux: failed to load policy [ 186.831879][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 186.835692][T12373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1702'. [ 186.836176][ T5980] Bluetooth: hci1: command tx timeout [ 186.848292][ T5980] Bluetooth: hci2: command tx timeout [ 186.949736][ T9850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.953062][ T9850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.985140][T12278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.995027][T12278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.004165][T12207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.007075][T12278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.020729][T12278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.069698][ T9850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.074154][ T9850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.119822][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.123568][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.125106][T12207] veth0_vlan: entered promiscuous mode [ 187.128297][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.132232][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.135064][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.140946][T12207] veth1_vlan: entered promiscuous mode [ 187.161045][ T9850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.164462][ T9850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.192796][T12207] veth0_macvtap: entered promiscuous mode [ 187.198992][T12207] veth1_macvtap: entered promiscuous mode [ 187.199565][T12392] vxcan1 speed is unknown, defaulting to 1000 [ 187.219864][T12278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.250354][ T9850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.254367][ T9850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.266085][T12207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.271377][T12278] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.276798][T12207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.286771][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.289051][ T9838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.292134][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.294383][ T9838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.314115][ T8796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.317907][ T8796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.332113][ T8796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.335771][ T8796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.443469][ T8796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.446609][ T8796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.574004][ T9850] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 187.734170][ T9850] bridge0 (unregistering): left promiscuous mode [ 187.847964][ T9850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.852305][ T9850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.856381][ T9850] bond0 (unregistering): Released all slaves [ 187.862571][ T9850] bond1 (unregistering): Released all slaves [ 187.871092][ T9850] bond2 (unregistering): Released all slaves [ 187.877918][ T9850] bond3 (unregistering): Released all slaves [ 187.944586][ T9850] bond4 (unregistering): Released all slaves [ 187.971169][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.974477][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.990470][T12392] chnl_net:caif_netlink_parms(): no params data found [ 188.120539][ T9850] tipc: Left network mode [ 188.159077][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.192191][T12427] netlink: 'syz.3.1709': attribute type 11 has an invalid length. [ 188.225772][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.231706][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.234032][T12392] bridge_slave_0: entered allmulticast mode [ 188.236747][T12392] bridge_slave_0: entered promiscuous mode [ 188.240473][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.242759][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.244997][T12392] bridge_slave_1: entered allmulticast mode [ 188.247836][T12392] bridge_slave_1: entered promiscuous mode [ 188.272807][ T5980] Bluetooth: hci1: ACL packet for unknown connection handle 1036 [ 188.302910][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.309887][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.326153][ T6218] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 188.361950][T12444] dlm: Unknown command passed to DLM device : 255 [ 188.361950][T12444] [ 188.385740][T12392] team0: Port device team_slave_0 added [ 188.405182][T12446] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 188.408918][T12444] IPVS: stopping backup sync thread 12446 ... [ 188.419309][T12392] team0: Port device team_slave_1 added [ 188.464376][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.467340][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.478541][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.484931][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.487383][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.495299][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.497449][ T6218] usb 6-1: Using ep0 maxpacket: 8 [ 188.502955][ T6218] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.510200][ T6218] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.514151][ T6218] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.517898][ T6218] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.523406][ T6218] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.527538][ T6218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.664928][T12392] hsr_slave_0: entered promiscuous mode [ 188.669480][T12392] hsr_slave_1: entered promiscuous mode [ 188.671904][T12392] debugfs: 'hsr0' already exists in 'hsr' [ 188.673827][T12392] Cannot create hsr debugfs directory [ 188.675752][T12278] veth0_vlan: entered promiscuous mode [ 188.684249][T12459] overlayfs: failed to resolve 'rootcontext=root': -2 [ 188.696626][T12459] Bluetooth: MGMT ver 1.23 [ 188.698185][T12459] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 188.704687][T12459] overlayfs: conflicting lowerdir path [ 188.740291][ T9850] batadv_slave_0: left promiscuous mode [ 188.743097][ T9850] batadv_slave_1: left promiscuous mode [ 188.747299][ T6218] usb 6-1: GET_CAPABILITIES returned 0 [ 188.749349][ T6218] usbtmc 6-1:16.0: can't read capabilities [ 188.761334][ T9850] hsr_slave_0: left promiscuous mode [ 188.763983][ T9850] hsr_slave_1: left promiscuous mode [ 188.766346][ T9850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.768708][ T9850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.771533][ T9850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.774093][ T9850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.789255][ T9850] veth1_macvtap: left promiscuous mode [ 188.791051][ T9850] veth0_macvtap: left promiscuous mode [ 188.793363][ T9850] veth1_vlan: left promiscuous mode [ 188.795166][ T9850] veth0_vlan: left promiscuous mode [ 188.926047][ T63] Bluetooth: hci1: command tx timeout [ 188.926176][ T5980] Bluetooth: hci2: command tx timeout [ 189.167784][ T5980] Bluetooth: hci0: command tx timeout [ 189.496183][ T9850] team0 (unregistering): Port device team_slave_1 removed [ 189.987156][T12471] sch_fq: defrate 0 ignored. [ 190.065225][T12278] veth1_vlan: entered promiscuous mode [ 190.114904][T12482] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 190.328572][T12278] veth0_macvtap: entered promiscuous mode [ 190.334106][T12278] veth1_macvtap: entered promiscuous mode [ 190.347897][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.356968][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.370043][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.374905][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.383487][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.387647][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.471922][ T9850] IPVS: stop unused estimator thread 0... [ 190.477344][ T8797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.480644][ T8797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.506718][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.511486][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.632443][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1721'. [ 190.715823][T12516] autofs4:pid:12516:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 190.721174][T12502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.725667][T12501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.781958][T12392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.801284][T12392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.813339][T12392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.820952][T12392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.907753][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.924688][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.929825][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.932119][ T9835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.938232][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.940535][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.995982][ T5980] Bluetooth: hci2: command tx timeout [ 191.007198][ T5980] Bluetooth: hci1: command tx timeout [ 191.045993][ T6007] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 191.060560][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.085537][T12392] veth0_vlan: entered promiscuous mode [ 191.089054][ T59] usb 6-1: USB disconnect, device number 12 [ 191.092833][T12392] veth1_vlan: entered promiscuous mode [ 191.110452][T12392] veth0_macvtap: entered promiscuous mode [ 191.114274][T12392] veth1_macvtap: entered promiscuous mode [ 191.125745][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.133422][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.142407][ T8797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.145181][ T8797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.149865][ T8797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.152628][ T8797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.156015][ T140] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 191.174895][ T40] kauditd_printk_skb: 377 callbacks suppressed [ 191.174907][ T40] audit: type=1400 audit(2000000050.839:36785): avc: denied { create } for pid=12392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.184383][ T40] audit: type=1400 audit(2000000050.839:36786): avc: denied { write } for pid=12392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.192430][ T40] audit: type=1400 audit(2000000050.839:36787): avc: denied { read } for pid=12392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.201100][ T6007] usb 9-1: unable to get BOS descriptor or descriptor too short [ 191.204397][ T6007] usb 9-1: not running at top speed; connect to a high speed hub [ 191.208119][ T6007] usb 9-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.208250][ T9835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.212176][ T6007] usb 9-1: config 1 interface 0 has no altsetting 0 [ 191.215022][ T9835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.219344][ T6007] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.222698][ T6007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.225411][ T6007] usb 9-1: Product: syz [ 191.227041][ T6007] usb 9-1: Manufacturer: syz [ 191.228504][ T6007] usb 9-1: SerialNumber: syz [ 191.233917][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.236564][ T5980] Bluetooth: hci0: command tx timeout [ 191.238821][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.244717][ T40] audit: type=1400 audit(2000000050.909:36788): avc: denied { mounton } for pid=12392 comm="syz-executor" path="/syzkaller.LMf7OX/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 191.252345][ T40] audit: type=1400 audit(2000000050.909:36789): avc: denied { mount } for pid=12392 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.260145][ T40] audit: type=1400 audit(2000000050.909:36790): avc: denied { mounton } for pid=12392 comm="syz-executor" path="/syzkaller.LMf7OX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 191.268342][ T40] audit: type=1400 audit(2000000050.909:36791): avc: denied { mount } for pid=12392 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.275618][ T40] audit: type=1400 audit(2000000050.909:36792): avc: denied { mounton } for pid=12392 comm="syz-executor" path="/syzkaller.LMf7OX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 191.284302][ T40] audit: type=1400 audit(2000000050.909:36793): avc: denied { mounton } for pid=12392 comm="syz-executor" path="/syzkaller.LMf7OX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 191.293418][ T40] audit: type=1400 audit(2000000050.929:36794): avc: denied { unmount } for pid=12392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.317801][ T140] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.321190][ T140] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.324206][ T140] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.329007][ T140] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.332479][ T140] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.336436][ T140] usb 8-1: config 0 descriptor?? [ 191.435315][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 191.438626][T12523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.446081][ T59] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 191.489214][T12523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.489379][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.496114][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.595992][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 191.598902][ T59] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.602389][ T59] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.605532][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 191.607949][ T59] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 191.610917][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.616400][ T59] usb 6-1: config 0 descriptor?? [ 191.628812][ T6007] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 191.639054][ T6007] usb 9-1: USB disconnect, device number 2 [ 191.698718][T12583] tmpfs: Bad value for 'mpol' [ 191.730074][T12587] SELinux: policydb string SS^ does not match my string SE Linux [ 191.733936][T12587] SELinux: failed to load policy [ 191.757952][ T140] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 191.893070][T12605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12605 comm=syz.2.1737 [ 192.023591][ T59] hid_parser_main: 139 callbacks suppressed [ 192.023605][ T59] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 192.028824][ T59] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 192.031409][ T59] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 192.034696][ T59] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 192.038972][ T59] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 192.041706][ T59] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 192.225345][ T34] usb 6-1: USB disconnect, device number 13 [ 192.602440][T12629] netlink: 'syz.4.1742': attribute type 7 has an invalid length. [ 193.016318][T12670] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 193.019270][T12670] nbd: couldn't find device at index 5439555 [ 193.086001][ T5980] Bluetooth: hci2: command tx timeout [ 193.326109][ T5980] Bluetooth: hci0: command tx timeout [ 193.419284][T12686] block nbd1: shutting down sockets [ 193.541257][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 193.791202][ T6717] usb 8-1: USB disconnect, device number 6 [ 193.994718][T12725] NILFS (loop2): device size too small [ 194.120654][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.137849][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'. [ 194.145248][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.148385][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.150590][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 194.272364][T12761] netlink: 'syz.2.1781': attribute type 3 has an invalid length. [ 194.275605][T12761] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 194.286825][T12761] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1781'. [ 194.290338][T12761] NCSI netlink: No device for ifindex 33022 [ 194.298707][T12761] FAT-fs (sr0): bogus number of reserved sectors [ 194.301507][T12761] FAT-fs (sr0): Can't find a valid FAT filesystem [ 194.358251][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 194.405506][T12787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=12787 comm=syz.1.1788 [ 194.427790][T12787] tmpfs: Bad value for 'mpol' [ 194.470886][T12801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12801 comm=syz.1.1791 [ 194.474978][T12801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12801 comm=syz.1.1791 [ 194.486673][T12801] xfrm1: entered allmulticast mode [ 194.671534][T12807] sp0: Synchronizing with TNC [ 194.672030][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1802'. [ 194.677976][T12829] could not open pipe file descriptor [ 194.681238][T12829] gfs2: gfs2 mount does not exist [ 194.819558][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 194.832715][T12836] netlink: 'syz.2.1801': attribute type 5 has an invalid length. [ 195.406371][ T5980] Bluetooth: hci0: command tx timeout [ 195.485093][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'. [ 195.489574][T12842] netlink: 'syz.1.1805': attribute type 30 has an invalid length. [ 195.554736][T12850] kernel read not supported for file /policy (pid: 12850 comm: syz.2.1808) [ 195.577459][T12853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.623106][T12861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12861 comm=syz.2.1811 [ 195.628512][T12861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12861 comm=syz.2.1811 [ 195.641339][T12861] xfrm1: entered allmulticast mode [ 196.215949][ T140] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 196.375938][ T140] usb 9-1: Using ep0 maxpacket: 16 [ 196.381791][ T40] kauditd_printk_skb: 421 callbacks suppressed [ 196.381803][ T40] audit: type=1400 audit(2000000056.049:37216): avc: denied { create } for pid=12869 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.387040][ T140] usb 9-1: unable to get BOS descriptor or descriptor too short [ 196.393168][ T40] audit: type=1400 audit(2000000056.049:37217): avc: denied { write } for pid=12869 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.395514][ T140] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 196.402749][ T40] audit: type=1400 audit(2000000056.049:37218): avc: denied { nlmsg_write } for pid=12869 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.404948][ T140] usb 9-1: can't read configurations, error -71 [ 196.413098][ T40] audit: type=1400 audit(2000000056.049:37219): avc: denied { allowed } for pid=12869 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 196.532478][ T40] audit: type=1400 audit(2000000056.199:37220): avc: denied { unmount } for pid=12392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 196.584918][ T40] audit: type=1400 audit(2000000056.249:37221): avc: denied { create } for pid=12871 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 196.591060][ T40] audit: type=1400 audit(2000000056.249:37222): avc: denied { map_create } for pid=12871 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.597615][ T40] audit: type=1400 audit(2000000056.249:37223): avc: denied { perfmon } for pid=12871 comm="syz.1.1816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.604282][ T40] audit: type=1400 audit(2000000056.259:37224): avc: denied { map_read map_write } for pid=12871 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.610605][ T40] audit: type=1400 audit(2000000056.259:37225): avc: denied { bpf } for pid=12871 comm="syz.1.1816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.644932][T12872] md: md2 stopped. [ 196.702790][T12877] tipc: Enabling of bearer rejected, already enabled [ 196.718157][T12872] md2: using deprecated bitmap file support [ 196.720068][T12872] md2: error: bitmap file must be a regular file [ 196.720892][T12880] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 196.856357][ T1332] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 196.860678][ T1332] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 196.940909][T12897] overlayfs: maximum fs stacking depth exceeded [ 196.959066][T12900] 9pnet_virtio: no channels available for device syz [ 197.022361][T12912] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.115443][T12926] __nla_validate_parse: 1 callbacks suppressed [ 197.115455][T12926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1831'. [ 197.126832][T12926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=12926 comm=syz.2.1831 [ 197.172424][T12935] loop0: Can't mount, would change RO state [ 197.221021][T12945] netlink: 147572 bytes leftover after parsing attributes in process `syz.2.1836'. [ 197.256787][T12947] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.268961][T12947] kvm: pic: non byte read [ 197.269099][T12956] IPv6: Can't replace route, no match found [ 197.271548][T12947] kvm: pic: level sensitive irq not supported [ 197.273785][T12947] kvm: pic: non byte read [ 197.280105][T12947] kvm: pic: level sensitive irq not supported [ 197.280428][T12947] kvm: pic: non byte read [ 197.284991][T12947] kvm: pic: level sensitive irq not supported [ 197.285398][T12947] kvm: pic: non byte read [ 197.290775][T12947] kvm: pic: non byte read [ 197.293451][T12947] kvm: pic: non byte read [ 197.296513][T12947] kvm: pic: non byte read [ 197.357659][T12959] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 197.795955][ T63] Bluetooth: hci0: command 0x0405 tx timeout [ 198.162279][T12972] netlink: 'syz.4.1842': attribute type 17 has an invalid length. [ 198.166014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.175491][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12975 comm=syz.3.1844 [ 198.249068][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.251594][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.355509][T12972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.437390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.440335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.443132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.476212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.524404][T12561] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.527863][T12561] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.530817][T12561] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.533709][T12561] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.581193][T12983] tmpfs: Bad value for 'mpol' [ 198.596985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 198.597286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 198.708671][ T839] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 198.855925][ T839] usb 6-1: Using ep0 maxpacket: 8 [ 198.860918][ T839] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 198.863558][ T839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.867709][ T839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.870910][ T839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.873997][ T839] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.878244][ T839] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.881199][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.091913][ T839] usb 6-1: usb_control_msg returned -32 [ 199.093868][ T839] usbtmc 6-1:16.0: can't read capabilities [ 199.446060][T13003] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 199.487905][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 199.491668][T13005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1851'. [ 199.647105][ T59] usb 6-1: USB disconnect, device number 14 [ 199.651278][T13015] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 199.820870][T13028] netlink: 'syz.4.1856': attribute type 10 has an invalid length. [ 199.826125][T13028] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.986971][ T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 200.080878][T13042] netlink: 'syz.4.1860': attribute type 3 has an invalid length. [ 200.083415][T13042] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1860'. [ 200.123219][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1861'. [ 200.139744][ T53] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.144495][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.148175][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.151344][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.155712][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.160646][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.165505][ T53] usb 8-1: config 0 descriptor?? [ 200.344452][T13066] tipc: Enabled bearer , priority 10 [ 200.351770][T13007] ceph: No mds server is up or the cluster is laggy [ 200.379540][ T53] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 200.392101][ T53] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 200.401279][ T53] usb 8-1: USB disconnect, device number 7 [ 200.434112][T13072] fido_id[13072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 200.462594][T13080] netlink: 'syz.3.1870': attribute type 6 has an invalid length. [ 200.472829][T13080] netlink: 'syz.3.1870': attribute type 6 has an invalid length. [ 200.503234][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1869'. [ 200.623339][T13095] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.626374][T13095] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 200.630018][T13095] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 201.004885][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1877'. [ 201.009400][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1877'. [ 201.030713][T13101] cdrom: dropping to single frame dma [ 201.096729][T13111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 201.174982][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 201.348552][T13143] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 201.385675][T13151] netlink: 'syz.3.1893': attribute type 4 has an invalid length. [ 201.397656][T13151] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.409750][ T40] kauditd_printk_skb: 325 callbacks suppressed [ 201.409765][ T40] audit: type=1400 audit(2000000061.079:37551): avc: denied { ioctl } for pid=13150 comm="syz.3.1893" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 201.433254][ T40] audit: type=1400 audit(2000000061.099:37552): avc: denied { read } for pid=13155 comm="syz.1.1896" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.443716][ T40] audit: type=1400 audit(2000000061.099:37553): avc: denied { open } for pid=13155 comm="syz.1.1896" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.455321][ T40] audit: type=1400 audit(2000000061.099:37554): avc: denied { ioctl } for pid=13155 comm="syz.1.1896" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.468125][ T40] audit: type=1400 audit(2000000061.139:37555): avc: denied { read append } for pid=13150 comm="syz.3.1893" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.479171][ T40] audit: type=1400 audit(2000000061.139:37556): avc: denied { open } for pid=13150 comm="syz.3.1893" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.489634][ T40] audit: type=1400 audit(2000000061.149:37557): avc: denied { ioctl } for pid=13150 comm="syz.3.1893" path="/dev/comedi3" dev="devtmpfs" ino=1305 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.500924][ T40] audit: type=1400 audit(2000000061.159:37558): avc: denied { write } for pid=13165 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.508287][ T40] audit: type=1400 audit(2000000061.159:37559): avc: denied { map_create } for pid=13165 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.517457][ T40] audit: type=1400 audit(2000000061.159:37560): avc: denied { map_read map_write } for pid=13165 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.660116][T13180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=13180 comm=syz.3.1903 [ 201.679206][T13180] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 201.721188][T13182] program syz.1.1904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.730461][T13182] @0: renamed from syz_tun (while UP) [ 201.920258][T13202] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 201.930153][T13202] geneve2: entered allmulticast mode [ 201.933351][T13204] netlink: 'syz.2.1912': attribute type 4 has an invalid length. [ 202.078963][T13220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13220 comm=syz.4.1918 [ 202.083937][T13220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13220 comm=syz.4.1918 [ 202.088249][T13220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=13220 comm=syz.4.1918 [ 202.092506][T13220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13220 comm=syz.4.1918 [ 202.097658][T13220] netlink: 'syz.4.1918': attribute type 27 has an invalid length. [ 202.100361][T13220] netlink: 'syz.4.1918': attribute type 4 has an invalid length. [ 202.142997][T13217] vivid-000: ================= START STATUS ================= [ 202.146949][T13217] vivid-000: Test Pattern: 100% Blue [ 202.148646][T13217] vivid-000: Fill Percentage of Frame: 100 [ 202.150507][T13217] vivid-000: Horizontal Movement: Move Right Fast [ 202.152540][T13217] vivid-000: Vertical Movement: No Movement [ 202.155044][T13217] vivid-000: OSD Text Mode: All [ 202.158532][T13217] vivid-000: Show Border: false [ 202.160165][T13217] vivid-000: Show Square: true [ 202.161742][T13217] vivid-000: Sensor Flipped Horizontally: false [ 202.163889][T13217] vivid-000: Sensor Flipped Vertically: false [ 202.165808][T13217] vivid-000: Insert SAV Code in Image: false [ 202.168782][T13217] vivid-000: Insert EAV Code in Image: false [ 202.170725][T13217] vivid-000: Insert Video Guard Band: false [ 202.172779][T13217] vivid-000: Reduced Framerate: false [ 202.175215][T13217] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 202.179542][T13217] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 202.182051][T13217] vivid-000: Enable Capture Cropping: true [ 202.184083][T13217] vivid-000: Enable Capture Composing: true [ 202.186094][T13217] vivid-000: Enable Capture Scaler: false [ 202.187895][T13217] vivid-000: Timestamp Source: End of Frame [ 202.189751][T13217] vivid-000: Colorspace: sRGB [ 202.191203][T13217] vivid-000: Transfer Function: Default [ 202.193077][T13217] vivid-000: Y'CbCr Encoding: Default [ 202.195477][T13217] vivid-000: HSV Encoding: Hue 0-179 [ 202.199099][T13217] vivid-000: Quantization: Default [ 202.200871][T13217] vivid-000: Apply Alpha To Red Only: false [ 202.202731][T13217] vivid-000: Standard Aspect Ratio: 4x3 [ 202.204816][T13217] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 202.207995][T13217] vivid-000: DV Timings: 640x480p59 inactive [ 202.209911][T13217] vivid-000: DV Timings Aspect Ratio: 4x3 [ 202.211847][T13217] vivid-000: Maximum EDID Blocks: 2 [ 202.213947][T13217] vivid-000: Limited RGB Range (16-235): false [ 202.216512][T13217] vivid-000: Rx RGB Quantization Range: Automatic [ 202.218535][T13217] vivid-000: Power Present: 0x00000001 [ 202.220248][T13217] tpg source WxH: 320x240 (R'G'B) [ 202.222045][T13217] tpg field: 1 [ 202.223193][T13217] tpg crop: (0,0)/320x240 [ 202.224536][T13217] tpg compose: (0,0)/320x240 [ 202.226357][T13217] tpg colorspace: 1 [ 202.227612][T13217] tpg transfer function: 6/2 [ 202.229156][T13217] tpg quantization: 0/2 [ 202.230540][T13217] tpg RGB range: 0/2 [ 202.231814][T13217] vivid-000: ================== END STATUS ================== [ 202.249883][T13237] tls_set_device_offload: netdev not found [ 203.077627][T13279] ------------[ cut here ]------------ [ 203.080157][T13279] WARNING: CPU: 0 PID: 13279 at arch/x86/kvm/x86.c:11563 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 203.085247][T13279] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 203.088678][T13279] CPU: 0 UID: 0 PID: 13279 Comm: syz.1.1936 Not tainted syzkaller #0 PREEMPT(full) [ 203.093638][T13279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.098801][T13279] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 203.102152][T13279] Code: 0a 00 00 00 00 00 00 e8 02 6a be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 203.111424][T13279] RSP: 0018:ffffc90004187c30 EFLAGS: 00010293 [ 203.114229][T13279] RAX: 0000000000000000 RBX: ffff88805575d280 RCX: ffffffff814192bf [ 203.118200][T13279] RDX: ffff8880545a4880 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 203.122564][T13279] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 203.126373][T13279] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888035647000 [ 203.129763][T13279] R13: ffff88805575d358 R14: 0000000000000000 R15: ffff88805575d5b4 [ 203.133570][T13279] FS: 00007f69625f96c0(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 203.137895][T13279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.141374][T13279] CR2: 000000005200000c CR3: 00000000482be000 CR4: 0000000000352ef0 [ 203.145397][T13279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000089af [ 203.149065][T13279] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 203.152772][T13279] Call Trace: [ 203.154434][T13279] [ 203.156063][T13279] kvm_vcpu_ioctl+0x5eb/0x1690 [ 203.158437][T13279] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.160777][T13279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.163006][T13279] ? do_vfs_ioctl+0x128/0x14f0 [ 203.165558][T13279] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.168267][T13279] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.171666][T13279] ? hook_file_ioctl_common+0x145/0x410 [ 203.174459][T13279] ? selinux_file_ioctl+0x180/0x270 [ 203.177326][T13279] ? selinux_file_ioctl+0xb4/0x270 [ 203.179703][T13279] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.182139][T13279] __x64_sys_ioctl+0x18e/0x210 [ 203.184372][T13279] do_syscall_64+0xcd/0x4e0 [ 203.186611][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.189329][T13279] RIP: 0033:0x7f696178ec29 [ 203.191305][T13279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.200253][T13279] RSP: 002b:00007f69625f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.204079][T13279] RAX: ffffffffffffffda RBX: 00007f69619d5fa0 RCX: 00007f696178ec29 [ 203.207978][T13279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 203.211577][T13279] RBP: 00007f6961811e41 R08: 0000000000000000 R09: 0000000000000000 [ 203.215118][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.218791][T13279] R13: 00007f69619d6038 R14: 00007f69619d5fa0 R15: 00007ffdf565ca88 [ 203.222503][T13279] [ 203.223958][T13279] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.227316][T13279] CPU: 0 UID: 0 PID: 13279 Comm: syz.1.1936 Not tainted syzkaller #0 PREEMPT(full) [ 203.231633][T13279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.236706][T13279] Call Trace: [ 203.237875][T13279] [ 203.238836][T13279] dump_stack_lvl+0x3d/0x1f0 [ 203.240444][T13279] vpanic+0x6e8/0x7a0 [ 203.241788][T13279] ? __pfx_vpanic+0x10/0x10 [ 203.243370][T13279] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 203.245392][T13279] panic+0xca/0xd0 [ 203.246798][T13279] ? __pfx_panic+0x10/0x10 [ 203.248350][T13279] ? check_panic_on_warn+0x1f/0xb0 [ 203.250189][T13279] check_panic_on_warn+0xab/0xb0 [ 203.252079][T13279] __warn+0xf6/0x3c0 [ 203.253554][T13279] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 203.255557][T13279] report_bug+0x3c3/0x580 [ 203.257090][T13279] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 203.259138][T13279] handle_bug+0x184/0x210 [ 203.260656][T13279] exc_invalid_op+0x17/0x50 [ 203.262257][T13279] asm_exc_invalid_op+0x1a/0x20 [ 203.263986][T13279] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 203.266290][T13279] Code: 0a 00 00 00 00 00 00 e8 02 6a be 1e 31 ff 89 c5 89 c6 e8 94 f5 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 42 fa 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 34 fa 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 203.273018][T13279] RSP: 0018:ffffc90004187c30 EFLAGS: 00010293 [ 203.275099][T13279] RAX: 0000000000000000 RBX: ffff88805575d280 RCX: ffffffff814192bf [ 203.278024][T13279] RDX: ffff8880545a4880 RSI: ffffffff8141a33e RDI: 0000000000000007 [ 203.281042][T13279] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 203.283825][T13279] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888035647000 [ 203.286580][T13279] R13: ffff88805575d358 R14: 0000000000000000 R15: ffff88805575d5b4 [ 203.289369][T13279] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 203.291484][T13279] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 203.294265][T13279] kvm_vcpu_ioctl+0x5eb/0x1690 [ 203.296164][T13279] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.298077][T13279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.300165][T13279] ? do_vfs_ioctl+0x128/0x14f0 [ 203.301844][T13279] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.303691][T13279] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.306094][T13279] ? hook_file_ioctl_common+0x145/0x410 [ 203.308164][T13279] ? selinux_file_ioctl+0x180/0x270 [ 203.310285][T13279] ? selinux_file_ioctl+0xb4/0x270 [ 203.312256][T13279] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.314134][T13279] __x64_sys_ioctl+0x18e/0x210 [ 203.315812][T13279] do_syscall_64+0xcd/0x4e0 [ 203.317474][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.319656][T13279] RIP: 0033:0x7f696178ec29 [ 203.321374][T13279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.328206][T13279] RSP: 002b:00007f69625f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.331085][T13279] RAX: ffffffffffffffda RBX: 00007f69619d5fa0 RCX: 00007f696178ec29 [ 203.334085][T13279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 203.337963][T13279] RBP: 00007f6961811e41 R08: 0000000000000000 R09: 0000000000000000 [ 203.341815][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.345252][T13279] R13: 00007f69619d6038 R14: 00007f69619d5fa0 R15: 00007ffdf565ca88 [ 203.348721][T13279] [ 203.350717][T13279] Kernel Offset: disabled [ 203.352594][T13279] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:16:04 Registers: info registers vcpu 0 CPU#0 RAX=0000007c2966baea RBX=ffff88806a423a00 RCX=00000000000006e0 RDX=000000000000007c RSI=ffff88806a423a00 RDI=000000000027ed6d RBP=000000000027ed6d RSP=ffffc90000007ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a427c80 RIP=ffffffff81684db5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f69625f96c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d66b2000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=00000000482be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000089af DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc39e190 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc39e316 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc39e316 00007fffbc39e31c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f397e012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f397e012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f397e012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f397e012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f397e012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f397e012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90003768001 RBX=ffffc90003767830 RCX=ffffc90003768001 RDX=ffffc90003767838 RSI=ffffc90003767800 RDI=ffffc90003767100 RBP=0000000000000001 RSP=ffffc90003767078 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000010b9a R12=ffffc90003767140 R13=ffffc900037670f0 R14=ffffc90003767830 R15=ffffc90003767124 RIP=ffffffff8b94c060 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faf26307d60 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf257a76c3 00007faf257a76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf88c3e20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584953d68 0000555584953a30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584968eb3 000055558495ffb0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004060140be0010 0005ba8008000100 0004080606011f8e 2010000880042210 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0404a7de08000100 000a0806060123bc 0208000410004610 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060a71a801cc10 0006808086100000 04060140be001000 05ba800800010000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04080606011f8e20 1000088004221000 060102aa00100008 a003000800089803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000808060890 03007265746e655f 73797301ffffffff ffffffffeb080c80 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff849da20c RDX=ffff88802d3c0000 RSI=0000000000000009 RDI=0000000000000004 RBP=0000000000000009 RSP=ffffc90003fa7a78 R8 =0000000000000004 R9 =0000000000000009 R10=0000000000000007 R11=0000000000000000 R12=0000000000000007 R13=ffff888033d45b70 R14=0000000000000000 R15=0000000000000040 RIP=ffffffff81bb9742 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f720b2cfc80 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff3ad95df98 CR3=000000002aa09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000060600000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd942f4a5b 00007ffd942f4a5b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd942f4f60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd942f4f60 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020535554415453 20444e4520203d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020535554415453 2044444520203737 3737373737373737 3737373737373700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 615f6d766b203336 3531313a632e3638 782f6d766b2f3638 782f686372612074 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383139312e342e7a 79733d6d6d6f6320 30323233313d6469 702074656b636f73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6574756f725f6b 6e696c74656e3d73 73616c637320303d 657079745f67736d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6e20303d6c6f63 6f746f7270203a65 67617373656d206b 6e696c74656e2064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a696e676f6365 726e75203a78756e 694c4553205d3032 323331545b5d3630 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203030343678303d 646d636c74636f69 20353033313d6f6e 6920227366706d74 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000015707f RBX=0000000000000003 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d31 RDI=ffffffff8c163380 RBP=ffffed1003c55000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a8000 R14=ffffffff90ab7490 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d69b2000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000180 CR3=00000000482be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf565cf96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf565cf96 00007ffdf565cf9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6961812e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6961812e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6961812e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6961812e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6961812f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6961812fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00001035f8210fd0 230f000000000000 1000b848ef660041 ba66cf1278298f6d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006c8e5a0ff3 642eec0042ba6624 1c010f0000000006 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2444c7ef66000cb8 660cfcba66ef8014 f08eb80cf8ba66f8 230f0800001035f8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000