last executing test programs: 8.483872096s ago: executing program 0 (id=1927): r0 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x90, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.343281368s ago: executing program 0 (id=1933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000080)={0x93e}) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="875863cc35a109d319bc8d84b4d1d0c943a5d3a4979a42bb353441d28710307595eb5dc732fe954f62cb491ac2474389ed32c7c572406a298d3dc746514c75cd270455d7ad60345d0995ebe3421c396c5c4d2ce8deae7b96d28833511d40bde0103884f1080e05e4b87966c898c54cc2abcec066876e0f1d5ed4a442cb561e522c293f45781eacd59056", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0300", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 8.272901056s ago: executing program 0 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="f38d2c66d1439b441af01ffe05cc99c5e9db5ec5324f28fe475a04f01388bfe9d37acdf9eb8bf330805b2a235b6884f0cc87cc226150f57c18af57013e65bca937277fed86", 0x45}, {&(0x7f0000000100)="82df99fb9e9ba2796060c0ddac57c72da96b6ad41964c16f2cefed2834e8d0d533f0ce441ed99047ba8d9c13adead270448f883df269c62598b03115991a9c788e2533f1c71763cd2a6bb60f12548ff3c7f4c8ff6de2134774a968d5d144b495db9970f4957f49b3860bdd2f2720fbe0c44c05ebdb9d5e", 0x77}], 0x2}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0xf0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/211, 0xd3}], 0x1}, 0xfffffffd}], 0x1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="7eceb613cd868959cf7ccd88bb7078593d1b62cde1e976", 0x17}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x80, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6102, 0x20}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) 8.135652214s ago: executing program 0 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0\x00', 0x188) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)={0x1, 0x6, 0x98e, 0x1, 0x6, 0xfffffffb}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.275369938s ago: executing program 0 (id=1953): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0xbf, 0xc1, 0x5}, &(0x7f0000000100)=0x14) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xa, 0x4, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x20044000) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 64) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async, rerun: 32) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000340)={0xf0000, 0x0, [0xff, 0xffffffffffff8000, 0x3, 0x100000001, 0x5, 0x0, 0x5, 0xd680]}) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x8000, @rand_addr=0x94040000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000018056c92ecf2fa6a000000940400004410000096ec000000000000009256a4fd63ba90c6504aab0000000000000011000000000000000000011601586afc41412ee9d1968019b6919f0e111ae487f5f58b91252f155e1440d953ebcf742a13b0ecc6f9e52b0116c99c80b0b5d17204088a3cc8cd228ef7cf8f6b5d97981ab2228439dbf52de0aac5705a55c8ce12294055b212be9caa64347e77d1d2d12018d1609bd53c5e25a4b903e9569edf0856352cf73847f239391cb11c41046350649e07ef9ad4d7da5e66e02849ea1d0516e20bdf1b76f96118331cc8104228a556"], 0x98}, 0x0) (async) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) 6.822394918s ago: executing program 0 (id=1969): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009899586f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r2, 0xfc5, 0x70bd2a, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r0) recvmsg$inet_nvme(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@pppoe, 0x80, &(0x7f0000000880)=[{&(0x7f0000000080)=""/188, 0xbc}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f00000007c0)=""/135, 0x87}], 0x7, &(0x7f0000000900)=""/255, 0xff}, 0x2100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000240)="ef9071080a59418d13cb", 0xa}], 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110127bd7000fcdbdf25170000000e0001006e657464657673696d0000000f0003000200000008000b000900000006001600faff00000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 6.78160593s ago: executing program 32 (id=1969): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009899586f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r2, 0xfc5, 0x70bd2a, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r0) recvmsg$inet_nvme(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@pppoe, 0x80, &(0x7f0000000880)=[{&(0x7f0000000080)=""/188, 0xbc}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f00000007c0)=""/135, 0x87}], 0x7, &(0x7f0000000900)=""/255, 0xff}, 0x2100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000240)="ef9071080a59418d13cb", 0xa}], 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110127bd7000fcdbdf25170000000e0001006e657464657673696d0000000f0003000200000008000b000900000006001600faff00000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 2.739050019s ago: executing program 4 (id=2018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2.738734553s ago: executing program 4 (id=2019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c001680080002007f"], 0x30}}, 0x0) 2.674579561s ago: executing program 4 (id=2020): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 2.674321592s ago: executing program 4 (id=2021): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f00000003c0), &(0x7f0000000000)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) 2.597756578s ago: executing program 4 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "ba3343ae420000090000000042210f806375f50e000000faffffffffffffff00"}) unlink(&(0x7f0000000300)='.\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000180)) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000ec0)=0x4) 2.535769648s ago: executing program 3 (id=2025): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0xa8, 0x24, 0xf0b, 0x10000003, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xe16b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf73e, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x100}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7fffffff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x100}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0x8001}}]}}]}, 0xa8}}, 0x0) socket(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0xa8, 0x24, 0xf0b, 0x10000003, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xe16b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf73e, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x100}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7fffffff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x100}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0x8001}}]}}]}, 0xa8}}, 0x0) (async) 2.533928484s ago: executing program 4 (id=2026): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x8001100) io_setup(0x202, &(0x7f0000000200)) 2.47159609s ago: executing program 3 (id=2027): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x8000, 0x80000000, 'rr\x00'}, 0x2c) 2.471043604s ago: executing program 3 (id=2028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) 2.395871311s ago: executing program 3 (id=2030): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, r0, 0xdfbec000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x77}}, './file0\x00'}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0xa5629000) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000000c0)=0x6) (async) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000e, 0xbd736c7f1038e498, r1, 0x0) r3 = syz_io_uring_complete(r2) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) setxattr$incfs_id(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) pread64(r1, &(0x7f00000001c0)=""/218, 0xda, 0xb0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = getpgrp(0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000014c0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000015c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000016c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f00000017c0)=0xe8) (async) read$FUSE(r3, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000003840)='./file0\x00', 0x4000, 0x100, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000003a40)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc, &(0x7f0000001480)=[{&(0x7f0000000340)={0x1104, 0x13, 0x8, 0x70bd27, 0x25dfdbff, "", [@generic="5c2747a8a83ae8f4852dfa96bf801336a91fe21cdcd44bf8956bdbcb6f707817170166b1c8c197451ad7cd53e56f48bb4743677603802b671ea9bb9cbbf8359d7fd0d80931ba5ced4c721c6771f905361c651740732673818fc846c07a9a7ca48d74c99a5b551a0dc3eb8cfef4833828", @generic="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", @typed={0x4, 0x66}, @nested={0x80, 0x17, 0x0, 0x1, [@nested={0x4, 0xc6}, @generic="eaed9c21ffcd23107f56d8a41b1d2ca642da7952d45309438e5aea5dec4e3272f2eb72b426b85075020abfb52e6f475220da48ffd04625abb8c0ccb253c5303a04960afd66881e5eea9fa40f9f0da4efd9fa2d83acd631597df5cffd62f38485bf398a651dc03cd1d4a7194ec2f81c7cb46e3730537a9324"]}]}, 0x1104}], 0x1, &(0x7f0000003980)=[@rights={{0x28, 0x1, 0x1, [r4, r6, r1, r1, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r13}}}, @rights={{0x28, 0x1, 0x1, [r5, r1, r4, r4, r3, r4]}}], 0xb0, 0x24008000}, 0x800) r14 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003a80), 0x9f03214811a099be, 0x0) (async) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003b00), r3) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000003c00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x5c, r15, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003c80), r1) sendmsg$TIPC_NL_LINK_GET(r14, &(0x7f0000003e80)={&(0x7f0000003c40), 0xc, &(0x7f0000003e40)={&(0x7f0000003cc0)={0x174, r16, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b58e3c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ef7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b6e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x2004c801) syz_open_dev$hidraw(&(0x7f0000003ec0), 0x9, 0x40) (async) sendmsg$AUDIT_USER(r14, &(0x7f0000003fc0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x3c, 0x3ed, 0x200, 0x70bd2b, 0x25dfdbff, "6cbab182eb22901e7ed0be42e5fdae400f7aab00559f0a81a24ec057a49e1fcdeaf8b46056ce86b0674cce08", [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) (async) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004040), r14) sendmsg$IPVS_CMD_SET_SERVICE(r14, &(0x7f00000041c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004180)={&(0x7f0000004080)={0xe0, r17, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff282}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8885}, 0x4008040) (async) signalfd(r5, &(0x7f0000004200)={[0x1]}, 0x8) (async) write$FUSE_INIT(r1, &(0x7f0000004240)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0x10800000, 0x2, 0x379, 0x4, 0x2, 0x0, 0x0, 0x20, 0x6}}, 0x50) 2.332508081s ago: executing program 3 (id=2032): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x32314152, 0x3, 0x0, [{0x8, 0xf}, {0x9, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) truncate(&(0x7f0000000040)='./file0\x00', 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000004940)={0x2020}, 0x2020) write$sysctl(r2, &(0x7f0000000080)='1\x00', 0x2) 2.331460981s ago: executing program 3 (id=2034): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x2) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000400)=0x4) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086203, &(0x7f0000000080)=0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000580)={0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x6, 0x8, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, {[@rr={0x7, 0xb, 0xa1, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2]}, @rr={0x7, 0xf, 0x90, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000002550b949ee188cf00000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', r6, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002b9d137b42048b2a2000013000000000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)='W', 0x1}], 0x1}}], 0x1, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='efs\x00', 0x483, 0x0) 2.25509735s ago: executing program 1 (id=2037): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffffd) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7f, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x4}) capget(&(0x7f0000000180)={0x20071026, r6}, &(0x7f00000001c0)={0x40, 0x8, 0x7fffffff, 0x3, 0x10, 0x9}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000080)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)) 2.119115251s ago: executing program 1 (id=2038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000bdc000/0x1000)=nil, 0x1000, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x498144ee7b68e549, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.454941895s ago: executing program 1 (id=2039): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200050008000100"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xbb2, 0x3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='syzkaller0\x00', 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004801) 1.2633225s ago: executing program 2 (id=2042): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000130001000000000000000000736861332d323234"], 0xe0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="3103c00e0000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xc6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x200}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.17804801s ago: executing program 2 (id=2043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000005e40)={0x1f, @none}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 1.035362124s ago: executing program 1 (id=2044): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0xffffffff, {{0xa, 0x4e21, 0x6, @empty, 0xe}}, {{0xa, 0x4e22, 0x1, @remote, 0x7}}}, 0x108) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000440)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000001bc0)="7f002b41fe90f69fe4fa0f77071df3b0f0a38d4d3a6d9bf0abf73c58bb7bbb3e0d472958bb6dc2d361ffe1fa729b57d97d9ba605a900a4325a072c7ef074f7c642e45358fde65e4551", 0x0}, 0x50) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000080)=0x40) r7 = dup(r4) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000640)={0x0, 0x7, 0x8001, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a40)={r8, "2c3c4b9a8d40eedf8329575f003301a0"}) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000000)=0x10, 0x4) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b6008000", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1800000015000d000000000000000000027800c8", @ANYRES32=r9], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.035200047s ago: executing program 2 (id=2045): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xa) 1.034993579s ago: executing program 2 (id=2046): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) listen(r0, 0x10000a47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048000) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0xfffffffffffffe55, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000) readv(r0, &(0x7f0000000040), 0x0) sendto$inet(r0, &(0x7f00000004c0)="ab", 0x1, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 986.263139ms ago: executing program 2 (id=2047): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000008000000ffff0000c0000000326885991da6ff731dce74e256dc5dc42c1f4d8e2812c9779f488abf9f4bf0389c33aaeb7a01359ccbea5e2efd23a48c2c8daec84658", @ANYRES32=0x1, @ANYBLOB="9d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000000000000100"/28], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r1, 0x830a}], 0x1, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) listen(r0, 0x4) listen(r0, 0x2) (async) r3 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) fallocate(r3, 0x0, 0x0, 0x400001) (async) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x100000001}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f00000001c0)={0x5, 0x1}) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/7, 0x7}, 0x7}], 0x1, 0x1002b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000340)="76d69c7bc6bef0d32f1c1f0744e8ac2486236567ed4e7c51d742e1b3a8f636b4be484975b4b7cb062c3c76b078c846dd51059c7cc51b856c9535d57f6c44e488bcd834a9f22a444576120a7d8ee7e681403b5c755fcc20ce32108dbbc19aff3ca687f66db56816aea891ece2559b4534ebc547f4a23a389bbc8f8c13", 0x7c}, {&(0x7f00000003c0)="62b33dcdb306e1ed993f5e8f260d429bcce2752933c4c26d66493e6dcd4b29793e05be6c77b6f6e5f76e72559a0ef5a4d5ce28215854c12425ea593149edd5d7ab29f452dfad98745130e62ca4be94b8f884444a77edd1061206eede7ae3ea0959ba2ec825b85d315a901bc6fb512787534cc45e42dbb500ee4571982f515d83fda105cba3f455618b962b0f861868e753bcb512a4cd9d9459b34bb57a16a570b6455b06ac76cc1f753bcc327cf67e4b44d177222546b4a1a79713c564d5ce", 0xbf}, {&(0x7f0000000480)="f3d76cf64fe3f5555926c233a837f276c790457bab5374cc78a441eb13fea624e00c93abb213e0b28e6aec5ab4f2d6c7f9c4c435ad1eaad5225246fbc52b7d9f857cff309a145df24a7ad83b8a9bf7640d229ea697d49bd67e6a340210b6173758e185fc5b567097d98dfbb684c619de77fd58e01feddd1e865ef667a1c4c86a71d3e6eed9f9ccc73595540b915d622f28cc8ac2023a5cc9483848d4c8c4c73af697b3bbea86cf4af5b7e74b5e2203cc4dd117a06cd98bc50df7cec1cab619d7044efbaab33a080266e22c3967", 0xcd}, {&(0x7f0000000580)="c698ce51966d9f4c7863802a654bb54043b2ebe0a2be4b3cadaaf648588864d9a825b1e1b2d457925af727a01cb91f62d8e2e462e6d95144db075f7279a36abced32daa278a8ab22eab6b55c2a24aec9134257046c7f8390ec80e929983784ca8947f9e22803eb23944212e39169b11f106f787b00b34ae74cd3cb0e41a37c833c01", 0x82}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @private2, 0x3}, 0x1c) 130.126916ms ago: executing program 1 (id=2048): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0\x00', 0x188) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) tkill(0x0, 0x12) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x1, 0x6, 0x98e, 0x1, 0x6, 0xfffffffb}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 366.087µs ago: executing program 1 (id=2049): r0 = syz_clone(0x9823500, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101002, 0x0) sendfile(r1, r1, 0x0, 0x401) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x16132, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x55555ede6001) r2 = gettid() kcmp(r2, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 2 (id=2050): r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x9, 0x0, 0x4}]}, 0xfffffff6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0), &(0x7f0000000080)) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x9, 0x0, 0x4}]}, 0xfffffff6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): ange request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.683016][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 111.895110][ T7847] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 111.897274][ T7847] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.021920][ T7861] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 112.055959][ T5945] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 112.181690][ T7873] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 112.269316][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.678'. [ 112.301327][ T7884] program syz.1.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.308495][ T5945] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 112.313278][ T7884] vivid-003: disconnect [ 112.348109][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'. [ 112.361800][ T7883] vivid-003: reconnect [ 112.577377][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 112.600953][ T834] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.771204][ T834] usb 5-1: Using ep0 maxpacket: 16 [ 112.773870][ T834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.778781][ T834] usb 5-1: config 1 interface 0 has no altsetting 0 [ 112.783007][ T834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.785479][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.787587][ T834] usb 5-1: Product: syz [ 112.788627][ T834] usb 5-1: Manufacturer: syz [ 112.789998][ T834] usb 5-1: SerialNumber: syz [ 112.858521][ T5945] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 112.942911][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 112.942923][ T40] audit: type=1400 audit(1742600676.509:602): avc: denied { bind } for pid=7947 comm="syz.1.705" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.949688][ T40] audit: type=1400 audit(1742600676.509:603): avc: denied { node_bind } for pid=7947 comm="syz.1.705" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.960897][ T7942] futex_wake_op: syz.3.702 tries to shift op by -1; fix this program [ 113.002828][ T40] audit: type=1400 audit(1742600676.569:604): avc: denied { create } for pid=7890 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.012697][ T40] audit: type=1400 audit(1742600676.569:605): avc: denied { bind } for pid=7890 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.057221][ T40] audit: type=1400 audit(1742600676.619:606): avc: denied { connect } for pid=7955 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.066685][ T40] audit: type=1400 audit(1742600676.619:607): avc: denied { ioctl } for pid=7955 comm="syz.1.707" path="socket:[16258]" dev="sockfs" ino=16258 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.076432][ T40] audit: type=1400 audit(1742600676.639:608): avc: denied { connect } for pid=7955 comm="syz.1.707" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.110764][ T7962] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 113.115430][ T40] audit: type=1400 audit(1742600676.679:609): avc: denied { read } for pid=7964 comm="syz.1.710" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.124081][ T40] audit: type=1400 audit(1742600676.679:610): avc: denied { open } for pid=7964 comm="syz.1.710" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.172677][ T7973] xt_l2tp: v2 doesn't support IP mode [ 113.183441][ T40] audit: type=1400 audit(1742600676.749:611): avc: denied { ioctl } for pid=7890 comm="syz.0.683" path="socket:[18840]" dev="sockfs" ino=18840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.198221][ T5945] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 113.312960][ T834] usb 5-1: USB disconnect, device number 8 [ 113.421014][ T5945] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 113.511949][ T7997] i2c i2c-1: Invalid block write size 34 [ 114.081655][ T8020] netlink: 'syz.1.727': attribute type 9 has an invalid length. [ 114.140901][ T8022] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 114.242915][ T5945] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 114.307231][ T8047] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 114.307231][ T8047] program syz.1.737 not setting count and/or reply_len properly [ 114.319590][ T8047] mmap: syz.1.737 (8047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.415709][ T8052] netlink: 18 bytes leftover after parsing attributes in process `syz.3.738'. [ 114.515194][ T5945] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 114.740803][ T8098] bond0: Error: Cannot enslave bond to itself. [ 114.851531][ T8111] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 114.900906][ T8111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.910419][ T8111] bond1: (slave ip6erspan0): making interface the new active one [ 114.914904][ T8111] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 115.121433][ T8142] netlink: 696 bytes leftover after parsing attributes in process `syz.2.768'. [ 115.186587][ T8150] mmap: syz.1.772 (8150): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 115.419825][ T8161] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.775'. [ 115.423480][ T8161] netlink: zone id is out of range [ 115.425538][ T8161] netlink: zone id is out of range [ 115.427082][ T8161] netlink: zone id is out of range [ 115.428622][ T8161] netlink: zone id is out of range [ 115.430050][ T8161] netlink: zone id is out of range [ 115.431551][ T8161] netlink: zone id is out of range [ 115.433007][ T8161] netlink: zone id is out of range [ 115.434539][ T8161] netlink: zone id is out of range [ 115.435984][ T8161] netlink: zone id is out of range [ 115.545991][ T8170] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8170 comm=syz.0.779 [ 115.549989][ T8170] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8170 comm=syz.0.779 [ 116.069817][ T8176] fuse: Unknown parameter '0x00000000000000000x0000000000000007' [ 116.437997][ T8222] wireguard0: entered promiscuous mode [ 116.440310][ T8222] wireguard0: entered allmulticast mode [ 116.463834][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 116.466983][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 116.631644][ T8234] netlink: 504 bytes leftover after parsing attributes in process `syz.1.798'. [ 116.940806][ T5945] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 117.025146][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 117.132606][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 117.136514][ T8278] netlink: 'syz.1.816': attribute type 10 has an invalid length. [ 117.146827][ T8280] net_ratelimit: 4 callbacks suppressed [ 117.146838][ T8280] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.153523][ T8278] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.187288][ T5945] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 117.441842][ T5945] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 117.446117][ T5945] Bluetooth: hci2: Injecting HCI hardware error event [ 117.448997][ T5945] Bluetooth: hci2: hardware error 0x00 [ 117.453725][ T6293] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.599320][ T8289] xt_hashlimit: size too large, truncated to 1048576 [ 117.600600][ T6293] usb 5-1: Using ep0 maxpacket: 8 [ 117.605685][ T6293] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.608482][ T6293] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.611298][ T6293] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.614428][ T6293] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.618035][ T6293] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.620815][ T6293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.625515][ T6293] usbtmc 5-1:16.0: bulk endpoints not found [ 117.864574][ T8302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.825'. [ 118.007063][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 118.007074][ T40] audit: type=1400 audit(1742600681.569:695): avc: denied { read } for pid=8310 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.014578][ T40] audit: type=1400 audit(1742600681.569:696): avc: denied { write } for pid=8310 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.023220][ T40] audit: type=1400 audit(1742600681.569:697): avc: denied { accept } for pid=8310 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.030427][ T40] audit: type=1400 audit(1742600681.569:698): avc: denied { ioctl } for pid=8310 comm="syz.1.828" path="socket:[19993]" dev="sockfs" ino=19993 ioctlcmd=0x2103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.061222][ T40] audit: type=1400 audit(1742600681.629:699): avc: denied { create } for pid=8307 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 118.064191][ T8314] netlink: 'syz.1.829': attribute type 10 has an invalid length. [ 118.071367][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.075976][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.081890][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.083956][ T8314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.086437][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.088647][ T8314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.092633][ T8314] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 118.127818][ T40] audit: type=1400 audit(1742600681.689:700): avc: denied { watch } for pid=8316 comm="syz.1.830" path="/223" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.135381][ T40] audit: type=1400 audit(1742600681.689:701): avc: denied { watch_sb } for pid=8316 comm="syz.1.830" path="/223" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.265118][ T40] audit: type=1400 audit(1742600681.829:702): avc: denied { mount } for pid=8323 comm="syz.1.833" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.265523][ T8324] tmpfs: Unknown parameter '!;é»vÙ+-LY~Á(únr_inodes' [ 118.270935][ T40] audit: type=1400 audit(1742600681.829:703): avc: denied { remount } for pid=8323 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.299259][ T40] audit: type=1400 audit(1742600681.859:704): avc: denied { create } for pid=8323 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.335767][ T5955] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 118.452109][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 118.458278][ T8339] ip6tnl1: entered promiscuous mode [ 118.460301][ T8339] ip6tnl1: entered allmulticast mode [ 118.611879][ T5955] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 118.716974][ T5955] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 118.723749][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.726515][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.728984][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.731573][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.733762][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.736901][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.739162][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.742143][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.744323][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.746435][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.748603][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.751008][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.753391][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.755541][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.757698][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.759833][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.762419][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.764581][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.766874][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.769017][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.771550][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.773704][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.775812][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.777978][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.780088][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.782735][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.784894][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.787003][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.789653][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.792558][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.795471][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.798304][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.800377][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.802803][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.804965][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.807119][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.809244][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.811604][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.813835][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.815935][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.818077][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.820177][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.822808][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.825311][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.827626][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.829667][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.831982][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.834001][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.835947][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.838328][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.841668][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.844182][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.846166][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.848206][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.850255][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.852823][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.854954][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.857099][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.859209][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.861764][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.863864][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.865843][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.867859][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.869896][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.872354][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.874476][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.876579][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.878781][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.881479][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.883616][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.885717][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.888051][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.891485][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.894276][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.897047][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.899316][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.902165][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.904241][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.906319][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.908443][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.910416][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.912905][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.914905][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.916911][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.919097][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.921476][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.923615][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.925833][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.927994][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.930126][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.932616][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.934762][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.936974][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.939102][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.941488][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.943599][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.945709][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.947940][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.950070][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.952502][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.954627][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.955490][ T5955] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 118.956755][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.961351][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.963420][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.965456][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.967583][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.969630][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.971703][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.973730][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.975746][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.977838][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.979869][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.981971][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.984055][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.986077][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.988184][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.990214][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.992316][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.994800][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 118.997610][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.000144][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.000290][ T8422] ip6tnl2: entered promiscuous mode [ 119.002980][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003003][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003021][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003037][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003055][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003073][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003089][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003109][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003132][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003150][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.003168][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.007236][ T8422] ip6tnl2: entered allmulticast mode [ 119.007857][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.039740][ T8424] netlink: 'syz.3.872': attribute type 6 has an invalid length. [ 119.039767][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.045055][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.047684][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.050148][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.052751][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.055280][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.058127][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.061135][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.064068][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.066882][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.069729][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.072602][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.075348][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.078039][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.080927][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.083793][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.086582][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.089369][ T6060] hid-generic 0009:0005:0002.0009: unknown main item tag 0x0 [ 119.096439][ T6060] hid-generic 0009:0005:0002.0009: hidraw1: HID v1.06 Device [syz1] on syz1 [ 119.167116][ T8439] netlink: 'syz.2.874': attribute type 4 has an invalid length. [ 119.169990][ T8439] netlink: 'syz.2.874': attribute type 11 has an invalid length. [ 119.193060][ T8437] tmpfs: Bad value for 'huge' [ 119.240268][ T5955] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 119.291363][ T8461] xt_ecn: cannot match TCP bits for non-tcp packets [ 119.348807][ T8471] @: renamed from vlan0 (while UP) [ 119.357505][ T8471] batadv_slave_1: entered promiscuous mode [ 119.359544][ T8471] batadv_slave_1: left promiscuous mode [ 119.449543][ T5955] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 119.481413][ T8486] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8486 comm=syz.3.893 [ 119.514918][ T8493] tipc: Started in network mode [ 119.516336][ T8493] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 119.518840][ T8493] tipc: Enabling of bearer rejected, failed to enable media [ 119.520606][ T5945] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 119.555972][ T8498] __nla_validate_parse: 4 callbacks suppressed [ 119.555984][ T8498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.894'. [ 119.709655][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 120.231998][ T6060] usb 5-1: USB disconnect, device number 9 [ 120.283827][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 120.308327][ T5945] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 121.180342][ T8603] overlayfs: unescaped trailing colons in lowerdir mount option. [ 121.226379][ T8612] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.937'. [ 121.270655][ T834] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 121.326979][ T8623] overlayfs: failed to clone upperpath [ 121.332613][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 121.334938][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.943'. [ 121.404952][ T8640] overlayfs: failed to clone lowerpath [ 121.407621][ T8640] overlayfs: failed to clone lowerpath [ 121.408418][ T8638] overlayfs: failed to clone lowerpath [ 121.411278][ T8640] overlayfs: failed to clone lowerpath [ 121.420604][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 121.423135][ T834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.425733][ T834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.428424][ T834] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.432192][ T834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.435664][ T834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.438416][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.445150][ T8645] netlink: 'syz.3.949': attribute type 11 has an invalid length. [ 121.445226][ T834] usbtmc 5-1:16.0: bulk endpoints not found [ 121.551632][ T8647] overlayfs: overlapping lowerdir path [ 121.553641][ T8655] overlayfs: overlapping lowerdir path [ 121.663091][ T8665] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 121.740962][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 121.924474][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 121.934685][ T8687] bond1: entered promiscuous mode [ 121.936310][ T8687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.938447][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 122.093474][ T8705] could not allocate digest TFM handle xcbc-aes-ce [ 122.115481][ T8721] overlayfs: failed to clone upperpath [ 122.164163][ T8726] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.205705][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.208962][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.213502][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.255515][ T8733] infiniband syz2: set active [ 122.257969][ T6293] vxcan1 speed is unknown, defaulting to 1000 [ 122.260308][ T8733] infiniband syz2: added vxcan1 [ 122.274186][ T8734] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 122.289064][ T8733] RDS/IB: syz2: added [ 122.291080][ T8733] smc: adding ib device syz2 with port count 1 [ 122.293419][ T8733] smc: ib device syz2 port 1 has pnetid [ 122.297395][ T6060] vxcan1 speed is unknown, defaulting to 1000 [ 122.303295][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.348464][ T8742] netlink: 260 bytes leftover after parsing attributes in process `syz.3.981'. [ 122.357157][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.427571][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.447145][ T8756] No such timeout policy "syz0" [ 122.487013][ T8733] vxcan1 speed is unknown, defaulting to 1000 [ 122.503741][ T8760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.051890][ T8766] netlink: 72 bytes leftover after parsing attributes in process `syz.2.990'. [ 123.150987][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 123.150997][ T40] audit: type=1400 audit(1742600686.719:779): avc: denied { write } for pid=8772 comm="syz.2.993" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 123.158825][ T5945] Bluetooth: hci3: Malformed LE Event: 0x0d [ 123.211831][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 123.331627][ T8777] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.393304][ T40] audit: type=1400 audit(1742600686.959:780): avc: denied { write } for pid=8781 comm="syz.2.996" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.433823][ T8763] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 123.448348][ T40] audit: type=1400 audit(1742600687.009:781): avc: denied { read } for pid=8785 comm="syz.2.997" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.458490][ T40] audit: type=1400 audit(1742600687.009:782): avc: denied { open } for pid=8785 comm="syz.2.997" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.458528][ T40] audit: type=1400 audit(1742600687.019:783): avc: denied { ioctl } for pid=8785 comm="syz.2.997" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.503947][ T8788] Cannot find del_set index 85 as target [ 123.544584][ T40] audit: type=1400 audit(1742600687.109:784): avc: denied { nlmsg_read } for pid=8792 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 123.557139][ T40] audit: type=1400 audit(1742600687.119:785): avc: denied { append } for pid=8793 comm="syz.1.999" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.572321][ T40] audit: type=1400 audit(1742600687.139:786): avc: denied { read } for pid=8793 comm="syz.1.999" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 123.578496][ T40] audit: type=1400 audit(1742600687.139:787): avc: denied { open } for pid=8793 comm="syz.1.999" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 123.618908][ T8799] random: crng reseeded on system resumption [ 123.620590][ T40] audit: type=1400 audit(1742600687.179:788): avc: denied { write } for pid=8798 comm="syz.1.1002" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.049758][ T6129] usb 5-1: USB disconnect, device number 10 [ 124.100357][ T8806] tipc: Enabling of bearer rejected, failed to enable media [ 124.198583][ T8812] SELinux: truncated policydb string identifier [ 124.200292][ T8812] SELinux: failed to load policy [ 124.202403][ T8812] netlink: 'syz.0.1006': attribute type 21 has an invalid length. [ 124.204563][ T8812] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1006'. [ 124.365362][ T8815] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 124.462412][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 124.552909][ T8831] vivid-000: disconnect [ 124.611034][ T8834] batadv_slave_1: entered promiscuous mode [ 124.614572][ T8834] devpts: called with bogus options [ 124.617964][ T8833] batadv_slave_1: left promiscuous mode [ 124.700563][ T833] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.870522][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 124.873194][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.875953][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.878457][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 124.881713][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 124.884947][ T833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.888518][ T833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.891279][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.895837][ T833] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 124.921204][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 124.924306][ T8842] netlink: 'syz.1.1018': attribute type 25 has an invalid length. [ 124.932448][ T8842] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.935033][ T8842] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.937444][ T8842] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.940798][ T8842] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.319531][ T8828] vivid-000: reconnect [ 125.355079][ T8844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1019'. [ 125.399808][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 125.403528][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 125.510926][ T5945] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 125.547172][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 125.736187][ T8859] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 125.851776][ T8859] /dev/sr0: Can't open blockdev [ 125.932438][ T8862] /dev/sr0: Can't open blockdev [ 125.986557][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 126.089170][ T8866] vxcan1 speed is unknown, defaulting to 1000 [ 126.253976][ T8872] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 126.423224][ T8882] tipc: Started in network mode [ 126.424845][ T8882] tipc: Node identity , cluster identity 4711 [ 126.426521][ T8882] tipc: Failed to obtain node identity [ 126.428024][ T8882] tipc: Enabling of bearer rejected, failed to enable media [ 126.488169][ T8902] tmpfs: Bad value for 'mpol' [ 126.499426][ T8902] netlink: 'syz.1.1038': attribute type 10 has an invalid length. [ 126.524286][ T8904] vlan0: entered allmulticast mode [ 126.525735][ T8904] macsec0: entered allmulticast mode [ 126.527291][ T8904] veth1_macvtap: entered allmulticast mode [ 126.529527][ T8904] bridge0: port 3(vlan0) entered blocking state [ 126.532396][ T8904] bridge0: port 3(vlan0) entered disabled state [ 126.534618][ T8904] vlan0: entered promiscuous mode [ 126.536087][ T8904] macsec0: entered promiscuous mode [ 126.537882][ T8904] bridge0: port 3(vlan0) entered blocking state [ 126.539811][ T8904] bridge0: port 3(vlan0) entered forwarding state [ 126.569690][ T8911] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 126.611680][ T8918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.740997][ T8932] vxcan1 speed is unknown, defaulting to 1000 [ 126.784413][ T8933] nbd: must specify at least one socket [ 126.841070][ T8939] netlink: 'syz.3.1051': attribute type 3 has an invalid length. [ 126.938997][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 126.939917][ T8948] Cannot find del_set index 128 as target [ 127.053355][ T8956] dccp_invalid_packet: P.Data Offset(59) too large [ 127.423601][ T8986] netlink: 'syz.3.1068': attribute type 10 has an invalid length. [ 127.425936][ T8986] macvlan0: entered allmulticast mode [ 127.427872][ T8986] veth1_vlan: entered allmulticast mode [ 127.430569][ T8986] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 127.470273][ T834] usb 5-1: USB disconnect, device number 11 [ 127.510610][ T8992] vxcan1 speed is unknown, defaulting to 1000 [ 128.229836][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 128.229852][ T40] audit: type=1400 audit(1742600691.789:813): avc: denied { append } for pid=9022 comm="syz.1.1081" path="/284/bus/cpuset.effective_cpus" dev="9p" ino=36831504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.249361][ T40] audit: type=1400 audit(1742600691.809:814): avc: denied { write } for pid=9022 comm="syz.1.1081" name="cpuset.effective_cpus" dev="9p" ino=36831504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.694865][ T9066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9066 comm=syz.3.1094 [ 128.702810][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 128.754782][ T40] audit: type=1400 audit(1742600692.319:815): avc: denied { map } for pid=9065 comm="syz.3.1094" path="socket:[22403]" dev="sockfs" ino=22403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 128.764778][ T40] audit: type=1326 audit(1742600692.329:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.3.1094" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x0 [ 128.807595][ T9078] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 128.847216][ T9082] overlayfs: failed to clone upperpath [ 128.911354][ T1118] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 128.914926][ T1118] sr 2:0:0:0: [sr0] tag#31 Sense Key : Illegal Request [current] [ 128.917697][ T1118] sr 2:0:0:0: [sr0] tag#31 Add. Sense: Invalid command operation code [ 128.920365][ T1118] sr 2:0:0:0: [sr0] tag#31 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 128.923367][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 128.926362][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 129.029203][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 129.168236][ T9105] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 129.172015][ T9105] cramfs: wrong magic [ 129.175651][ T40] audit: type=1400 audit(1742600692.739:817): avc: denied { read } for pid=9104 comm="syz.1.1103" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.229155][ T40] audit: type=1400 audit(1742600692.789:818): avc: denied { rename } for pid=9104 comm="syz.1.1103" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.677230][ T40] audit: type=1400 audit(1742600693.239:819): avc: denied { getattr } for pid=9121 comm="syz.2.1107" laddr=ff01::1 lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 129.727649][ T40] audit: type=1326 audit(1742600693.289:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9128 comm="syz.0.1108" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbecd58d169 code=0x0 [ 130.004962][ T9105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.008338][ T9105] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.018573][ T9105] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.022413][ T9105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.024223][ T9105] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.028977][ T9105] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.032511][ T9105] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.032585][ T9144] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1113'. [ 130.149747][ T9158] bridge0: port 3(syz_tun) entered blocking state [ 130.151915][ T9158] bridge0: port 3(syz_tun) entered disabled state [ 130.154197][ T9158] syz_tun: entered allmulticast mode [ 130.157254][ T9158] syz_tun: entered promiscuous mode [ 130.158959][ T9158] bridge0: port 3(syz_tun) entered blocking state [ 130.161364][ T9158] bridge0: port 3(syz_tun) entered forwarding state [ 130.171549][ T40] audit: type=1400 audit(1742600693.739:821): avc: denied { create } for pid=9159 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.197784][ T40] audit: type=1400 audit(1742600693.759:822): avc: denied { ioctl } for pid=9162 comm="syz.1.1120" path="socket:[23093]" dev="sockfs" ino=23093 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.619412][ T5945] Bluetooth: hci1: unexpected event 0x3d length: 17 > 14 [ 130.880648][ T834] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 131.031769][ T834] usb 5-1: config 0 interface 0 altsetting 116 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.034982][ T834] usb 5-1: config 0 interface 0 altsetting 116 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 131.037977][ T834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.040718][ T834] usb 5-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 131.043398][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.046553][ T834] usb 5-1: config 0 descriptor?? [ 131.048844][ T9184] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.281250][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.511103][ T9236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45779 sclass=netlink_route_socket pid=9236 comm=syz.1.1144 [ 131.582571][ T834] usb 5-1: string descriptor 0 read error: -71 [ 131.586334][ T834] usbhid 5-1:0.0: can't add hid device: -71 [ 131.588051][ T834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.595338][ T834] usb 5-1: USB disconnect, device number 12 [ 131.612030][ T9234] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1145'. [ 131.617683][ T9234] tipc: Enabled bearer , priority 10 [ 131.619989][ T9242] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1145'. [ 131.621040][ T9246] ipt_ECN: cannot use operation on non-tcp rule [ 131.622951][ T9242] tipc: Enabling of bearer rejected, already enabled [ 131.633302][ T9234] tipc: Resetting bearer [ 131.652801][ T9234] tipc: Disabling bearer [ 131.805158][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 131.883513][ T9264] netlink: 'syz.3.1156': attribute type 11 has an invalid length. [ 131.886106][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1156'. [ 132.080672][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 132.085788][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1157'. [ 132.124653][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 132.261350][ T9274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1158'. [ 132.434328][ T9291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.443259][ T9293] IPVS: Unknown mcast interface: nr0 [ 132.523335][ T5945] Bluetooth: hci1: unexpected event 0x3d length: 17 > 14 [ 132.542540][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1175'. [ 132.554737][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 132.628601][ T9322] netlink: 'syz.1.1180': attribute type 21 has an invalid length. [ 132.653309][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655651][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.674436][ T5945] Bluetooth: hci3: unexpected event 0x3d length: 17 > 14 [ 132.706461][ T9341] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.722641][ T9340] netlink: 'syz.2.1189': attribute type 29 has an invalid length. [ 132.729688][ T9340] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 132.769161][ T9355] fuse: Unknown parameter '' [ 132.808570][ T9365] netlink: 'syz.3.1196': attribute type 13 has an invalid length. [ 132.812103][ T9367] netlink: 'syz.3.1196': attribute type 13 has an invalid length. [ 132.880021][ T9374] netlink: 'syz.3.1199': attribute type 12 has an invalid length. [ 133.244493][ T9400] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 133.248514][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 133.248526][ T40] audit: type=1400 audit(1742600696.809:835): avc: denied { create } for pid=9407 comm="syz.2.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.259587][ T40] audit: type=1400 audit(1742600696.819:836): avc: denied { bind } for pid=9407 comm="syz.2.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.371628][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.651467][ T9426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9426 comm=syz.2.1216 [ 133.657756][ T40] audit: type=1400 audit(1742600697.219:837): avc: denied { getopt } for pid=9425 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.869845][ T9437] openvswitch: netlink: EtherType 0 is less than min 600 [ 133.872402][ T9437] netlink: 'syz.0.1220': attribute type 32 has an invalid length. [ 133.874724][ T9437] (unnamed net_device) (uninitialized): option coupled_control: invalid value (16) [ 133.977015][ T40] audit: type=1400 audit(1742600697.539:838): avc: denied { mounton } for pid=9438 comm="syz.0.1221" path="/257/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 134.005204][ T9447] xt_l2tp: wrong L2TP version: 0 [ 134.122470][ T9459] macsec0: left allmulticast mode [ 134.123955][ T9459] veth1_macvtap: left allmulticast mode [ 134.125954][ T9459] macsec0: left promiscuous mode [ 134.139401][ T9459] bridge0: port 3(vlan0) entered disabled state [ 134.160599][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 134.432002][ T9476] 9pnet_fd: Insufficient options for proto=fd [ 134.434206][ T9477] syz2: rxe_newlink: already configured on vxcan1 [ 134.526220][ T9481] 0ªX¹¦D: left allmulticast mode [ 134.541216][ T9481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.551290][ T9482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.568911][ T40] audit: type=1400 audit(1742600698.129:839): avc: denied { accept } for pid=9483 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.576417][ T40] audit: type=1400 audit(1742600698.139:840): avc: denied { ioctl } for pid=9483 comm="syz.2.1235" path="socket:[24837]" dev="sockfs" ino=24837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.772557][ T40] audit: type=1400 audit(1742600698.339:841): avc: denied { mount } for pid=9495 comm="syz.1.1243" name="/" dev="hugetlbfs" ino=23970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 134.774847][ T9496] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 134.870583][ T5940] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 134.892394][ T9496] netlink: 'syz.1.1243': attribute type 7 has an invalid length. [ 134.895218][ T9496] netlink: 'syz.1.1243': attribute type 8 has an invalid length. [ 135.032527][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.036530][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.039530][ T5940] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 135.042767][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.046820][ T5940] usb 7-1: config 0 descriptor?? [ 135.266198][ T40] audit: type=1400 audit(1742600698.829:842): avc: denied { read } for pid=9521 comm="syz.3.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.322872][ T40] audit: type=1400 audit(1742600698.889:843): avc: denied { module_load } for pid=9525 comm="syz.3.1253" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 135.352941][ T9530] __nla_validate_parse: 12 callbacks suppressed [ 135.352998][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 135.441566][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.580646][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.659757][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.665293][ T9490] bond0: (slave rose0): Enslaving as an active interface with an up link [ 135.699924][ T5940] usbhid 7-1:0.0: can't add hid device: -71 [ 135.703340][ T5940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 135.707579][ T5940] usb 7-1: USB disconnect, device number 5 [ 135.730577][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 135.734002][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.737800][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.743027][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.746434][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.749457][ T10] usb 5-1: Product: syz [ 135.751173][ T10] usb 5-1: Manufacturer: syz [ 135.753043][ T10] usb 5-1: SerialNumber: syz [ 136.317459][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 136.695260][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 136.716661][ T9551] [U]  [ 136.875684][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1261'. [ 136.935005][ T40] audit: type=1400 audit(1742600700.499:844): avc: denied { map } for pid=9556 comm="syz.2.1262" path="/293/file0/pids.current" dev="9p" ino=36831580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.262899][ T9570] vlan3: entered allmulticast mode [ 137.264689][ T9570] bond0: entered allmulticast mode [ 137.266142][ T9570] bond_slave_0: entered allmulticast mode [ 137.267836][ T9570] bond_slave_1: entered allmulticast mode [ 137.269514][ T9570] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 137.274263][ T9570] bond0: left allmulticast mode [ 137.277296][ T9570] bond_slave_0: left allmulticast mode [ 137.281676][ T9570] bond_slave_1: left allmulticast mode [ 137.285280][ T9570] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 137.316486][ T9559] 9pnet_virtio: no channels available for device syz [ 137.318721][ T9559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9559 comm=syz.2.1262 [ 137.403468][ T9576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.446055][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1270'. [ 137.449565][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 137.456845][ T9578] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 137.890843][ T9616] bond3: entered promiscuous mode [ 137.892346][ T9616] bond3: entered allmulticast mode [ 137.894251][ T9616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.935147][ T9620] xt_socket: unknown flags 0x50 [ 137.981029][ T9616] bond3 (unregistering): Released all slaves [ 138.131313][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'. [ 138.133958][ T9639] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 138.215066][ T9656] validate_nla: 1 callbacks suppressed [ 138.215081][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.221669][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.226220][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.229388][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.233470][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.236209][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.238750][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.241370][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.244188][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.246621][ T9656] netlink: 'syz.3.1293': attribute type 29 has an invalid length. [ 138.269432][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 138.272436][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1294'. [ 138.320784][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 138.391738][ T10] usb 5-1: 0:2 : does not exist [ 138.399337][ T10] usb 5-1: USB disconnect, device number 13 [ 138.406859][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 138.406874][ T40] audit: type=1400 audit(1742600701.969:850): avc: denied { execheap } for pid=9671 comm="syz.1.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 138.426736][ T9672] overlayfs: missing 'lowerdir' [ 138.468312][ T40] audit: type=1400 audit(1742600702.029:851): avc: denied { write } for pid=9674 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.478135][ T9664] 9pnet_fd: Insufficient options for proto=fd [ 138.483740][ T40] audit: type=1400 audit(1742600702.049:852): avc: denied { setopt } for pid=9674 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.571968][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.109884][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 139.113130][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 139.128009][ T40] audit: type=1400 audit(1742600702.689:853): avc: denied { write } for pid=9695 comm="syz.0.1304" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.318910][ T40] audit: type=1400 audit(1742600702.879:854): avc: denied { mount } for pid=9717 comm="syz.0.1313" name="/" dev="configfs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 139.365482][ T40] audit: type=1400 audit(1742600702.889:855): avc: denied { search } for pid=9717 comm="syz.0.1313" name="/" dev="configfs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.371874][ T40] audit: type=1400 audit(1742600702.889:856): avc: denied { read } for pid=9717 comm="syz.0.1313" name="/" dev="configfs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.378061][ T40] audit: type=1400 audit(1742600702.889:857): avc: denied { open } for pid=9717 comm="syz.0.1313" path="/" dev="configfs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.535389][ T9726] overlayfs: failed to clone upperpath [ 139.571747][ T40] audit: type=1400 audit(1742600703.139:858): avc: denied { connect } for pid=9723 comm="syz.3.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.819443][ T9732] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 139.824532][ T40] audit: type=1400 audit(1742600703.389:859): avc: denied { connect } for pid=9730 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.878693][ T9736] tmpfs: Bad value for 'mpol' [ 139.878692][ T9735] mac80211_hwsim hwsim7 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 139.894492][ T9735] lo: entered promiscuous mode [ 139.896814][ T9734] lo: left promiscuous mode [ 140.510554][ T834] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 140.612380][ T9772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=9772 comm=syz.3.1328 [ 140.660623][ T834] usb 7-1: Using ep0 maxpacket: 16 [ 140.664784][ T834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.667760][ T834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.672758][ T834] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.675248][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.677462][ T834] usb 7-1: Product: syz [ 140.678779][ T834] usb 7-1: Manufacturer: syz [ 140.680408][ T834] usb 7-1: SerialNumber: syz [ 140.816641][ T9786] bridge0: entered promiscuous mode [ 141.858199][ T9806] __nla_validate_parse: 5 callbacks suppressed [ 141.858209][ T9806] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1338'. [ 141.863651][ T9806] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1338'. [ 141.866482][ T9806] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1338'. [ 141.955432][ T9819] veth1_to_batadv: entered promiscuous mode [ 141.960643][ T9819] macsec2: entered promiscuous mode [ 142.035187][ T9826] overlayfs: failed to clone upperpath [ 142.071638][ T9829] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2052 sclass=netlink_xfrm_socket pid=9829 comm=syz.3.1346 [ 142.076352][ T9829] openvswitch: netlink: IPv6 tunnel dst address is zero [ 142.240795][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 142.514954][ T9837] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 142.595675][ T9843] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.672501][ T58] IPVS: starting estimator thread 0... [ 142.761316][ T9848] IPVS: using max 35 ests per chain, 84000 per kthread [ 142.936692][ T9861] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 143.167065][ T9886] batadv1: entered promiscuous mode [ 143.168580][ T9886] batadv1: entered allmulticast mode [ 143.216343][ T9888] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1365'. [ 143.218911][ T9888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'. [ 143.310473][ T834] usb 7-1: 0:2 : does not exist [ 143.318325][ T834] usb 7-1: USB disconnect, device number 6 [ 143.416752][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 143.416763][ T40] audit: type=1400 audit(1742600706.979:870): avc: denied { bind } for pid=9897 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.425245][ T40] audit: type=1400 audit(1742600706.979:871): avc: denied { name_bind } for pid=9897 comm="syz.1.1370" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 143.431016][ T40] audit: type=1400 audit(1742600706.979:872): avc: denied { node_bind } for pid=9897 comm="syz.1.1370" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 143.502887][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.511626][ T9912] tipc: Can't bind to reserved service type 2 [ 143.573487][ T9920] validate_nla: 22 callbacks suppressed [ 143.573498][ T9920] netlink: 'syz.1.1376': attribute type 32 has an invalid length. [ 143.600572][ T12] wlan0: Trigger new scan to find an IBSS to join [ 143.701051][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.090711][ T58] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.240597][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 144.243349][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.246148][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.248858][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.251540][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.254971][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.257437][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.320693][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 144.405531][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1380'. [ 144.407995][ T9937] gretap0: entered promiscuous mode [ 144.464605][ T58] usb 5-1: usb_control_msg returned -32 [ 144.466158][ T58] usbtmc 5-1:16.0: can't read capabilities [ 144.804447][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 144.850679][ T833] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 144.876246][ T9986] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 145.012292][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1395'. [ 145.030538][ T833] usb 7-1: Using ep0 maxpacket: 16 [ 145.033202][ T833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.035893][ T833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.039914][ T833] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.043449][ T833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.044204][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2840 sclass=netlink_route_socket pid=9992 comm=syz.3.1396 [ 145.045592][ T833] usb 7-1: Product: syz [ 145.051024][ T833] usb 7-1: Manufacturer: syz [ 145.052279][ T833] usb 7-1: SerialNumber: syz [ 145.113810][T10002] netlink: 560 bytes leftover after parsing attributes in process `syz.3.1398'. [ 145.149795][ T40] audit: type=1400 audit(1742600708.709:873): avc: denied { write } for pid=10003 comm="syz.3.1399" lport=42140 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.157650][ T40] audit: type=1400 audit(1742600708.709:874): avc: denied { ioctl } for pid=10003 comm="syz.3.1399" path="socket:[25359]" dev="sockfs" ino=25359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.136257][T10017] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 146.416298][T10038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1408'. [ 146.572314][T10056] vlan3: entered allmulticast mode [ 146.574465][T10056] bond0: entered allmulticast mode [ 146.576532][T10056] bond_slave_0: entered allmulticast mode [ 146.578905][T10056] bond_slave_1: entered allmulticast mode [ 146.582627][T10056] bond0: left allmulticast mode [ 146.584122][T10056] bond_slave_0: left allmulticast mode [ 146.585658][T10056] bond_slave_1: left allmulticast mode [ 146.721541][ T1170] wlan0: Trigger new scan to find an IBSS to join [ 146.762483][T10064] ./bus: Can't lookup blockdev [ 146.762492][ T40] audit: type=1400 audit(1742600710.329:875): avc: denied { mounton } for pid=10063 comm="syz.3.1418" path="/418/bus" dev="tmpfs" ino=2222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 146.852748][ T5983] usb 5-1: USB disconnect, device number 14 [ 146.890426][T10067] TCP: out of memory -- consider tuning tcp_mem [ 147.003088][ T40] audit: type=1400 audit(1742600710.569:876): avc: denied { bind } for pid=10070 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.008315][ T40] audit: type=1400 audit(1742600710.569:877): avc: denied { listen } for pid=10070 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.014061][ T40] audit: type=1400 audit(1742600710.569:878): avc: denied { accept } for pid=10070 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.112244][ T40] audit: type=1400 audit(1742600710.669:879): avc: denied { relabelfrom } for pid=10070 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.545733][T10078] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28187 sclass=netlink_xfrm_socket pid=10078 comm=syz.1.1423 [ 147.549789][T10078] __nla_validate_parse: 1 callbacks suppressed [ 147.549798][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 147.640608][ T833] usb 7-1: 0:2 : does not exist [ 147.654792][ T833] usb 7-1: USB disconnect, device number 7 [ 147.657073][ T212] wlan0: Creating new IBSS network, BSSID 1a:aa:bb:49:79:cf [ 147.864708][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.868422][T10091] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 147.899204][T10093] can: request_module (can-proto-5) failed. [ 147.906514][T10093] sctp: [Deprecated]: syz.0.1428 (pid 10093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.906514][T10093] Use struct sctp_sack_info instead [ 147.921532][T10097] tmpfs: Invalid uid '0x00000000ffffffff' [ 147.998475][T10104] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 148.060365][T10108] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.132926][T10116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.195880][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 148.254862][T10127] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 148.280524][T10127] CIFS mount error: No usable UNC path provided in device string! [ 148.280524][T10127] [ 148.283322][T10127] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.334481][T10134] CIFS mount error: No usable UNC path provided in device string! [ 148.334481][T10134] [ 148.337758][T10134] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.515179][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 148.515189][ T40] audit: type=1400 audit(1742600712.079:889): avc: denied { create } for pid=10150 comm="syz.1.1447" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.548046][ T40] audit: type=1400 audit(1742600712.109:890): avc: denied { connect } for pid=10155 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.626745][T10161] overlayfs: conflicting options: userxattr,metacopy=on [ 148.930634][ T58] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 148.995418][ T40] audit: type=1400 audit(1742600712.559:891): avc: denied { listen } for pid=10190 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.081986][T10198] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 149.083215][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.086695][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 149.089215][ T58] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 149.091802][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.095000][ T58] usb 5-1: config 0 descriptor?? [ 149.097853][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 149.099978][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 149.105092][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.107673][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 149.109686][ T58] usb 5-1: media controller created [ 149.111911][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.119897][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 149.122172][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.125082][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input18 [ 149.129397][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 149.129572][ T40] audit: type=1400 audit(1742600712.689:892): avc: denied { read } for pid=5341 comm="acpid" name="event4" dev="devtmpfs" ino=2947 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.131283][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 149.140726][ T40] audit: type=1400 audit(1742600712.689:893): avc: denied { open } for pid=5341 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2947 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.147041][ T40] audit: type=1400 audit(1742600712.689:894): avc: denied { ioctl } for pid=5341 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2947 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.293149][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 149.295248][ T58] dvb-usb: error while querying for an remote control event. [ 149.433491][ T833] usb 5-1: USB disconnect, device number 15 [ 149.448127][ T833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 149.651524][ T40] audit: type=1400 audit(1742600713.219:895): avc: denied { write } for pid=10208 comm="syz.1.1466" path="socket:[27011]" dev="sockfs" ino=27011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.685872][ T40] audit: type=1400 audit(1742600713.249:896): avc: denied { accept } for pid=10208 comm="syz.1.1466" lport=41071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.727376][ T40] audit: type=1400 audit(1742600713.289:897): avc: denied { listen } for pid=10212 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.980816][ T40] audit: type=1400 audit(1742600713.549:898): avc: denied { mounton } for pid=10244 comm="syz.3.1475" path="/428/file0" dev="tmpfs" ino=2278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.981001][T10247] Invalid source name [ 149.991497][T10247] UBIFS error (pid: 10247): cannot open "./file0", error -22 [ 150.063678][T10253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1474'. [ 150.140678][ T834] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 150.290535][ T834] usb 7-1: Using ep0 maxpacket: 32 [ 150.293406][ T834] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 150.295668][ T834] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 150.298991][ T834] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 150.302518][ T834] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 150.306302][ T834] usb 7-1: config 0 interface 0 has no altsetting 0 [ 150.309802][ T834] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 150.312807][ T834] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 150.316579][ T834] usb 7-1: Product: syz [ 150.318103][ T834] usb 7-1: Manufacturer: syz [ 150.319792][ T834] usb 7-1: SerialNumber: syz [ 150.322711][ T834] usb 7-1: config 0 descriptor?? [ 150.325591][ T834] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 150.330789][ T834] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 150.529648][ T833] usb 7-1: USB disconnect, device number 8 [ 150.532581][ T833] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 151.018341][T10287] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 151.110281][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1490'. [ 151.117176][T10294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1490'. [ 151.215342][T10301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.228434][T10308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1494'. [ 151.289730][T10321] /dev/nullb0: Can't lookup blockdev [ 151.291868][T10322] /dev/nullb0: Can't lookup blockdev [ 151.433747][T10332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10332 comm=syz.3.1504 [ 151.470191][T10332] bad cache= option: none [ 151.470191][T10332] [ 151.472245][T10332] CIFS: VFS: bad cache= option: none [ 151.509691][T10347] xt_l2tp: unknown flags: 17 [ 151.512184][ T5945] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 151.514871][T10347] netlink: 'syz.3.1506': attribute type 15 has an invalid length. [ 151.517080][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 151.868214][T10381] vxcan1 speed is unknown, defaulting to 1000 [ 151.901260][T10391] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 152.340647][ T834] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 152.351820][T10414] overlayfs: failed to clone upperpath [ 152.490672][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 152.493246][ T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.495891][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.498573][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.503537][ T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.507049][ T834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.509549][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.574841][T10431] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.1534'. [ 152.577463][T10431] netlink: zone id is out of range [ 152.578931][T10431] netlink: zone id is out of range [ 152.580393][T10431] netlink: zone id is out of range [ 152.582467][T10431] netlink: zone id is out of range [ 152.585321][T10431] netlink: zone id is out of range [ 152.719783][ T834] usb 7-1: usb_control_msg returned -32 [ 152.724719][ T834] usbtmc 7-1:16.0: can't read capabilities [ 152.732657][T10447] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1542'. [ 152.735199][T10447] openvswitch: netlink: EtherType 0 is less than min 600 [ 152.994215][T10458] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1545'. [ 152.996828][T10458] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1545'. [ 152.999686][T10459] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1545'. [ 153.002474][T10458] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1545'. [ 153.002601][T10458] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1545'. [ 153.006354][T10459] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1545'. [ 153.008057][T10458] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1545'. [ 153.010596][T10459] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1545'. [ 153.141867][T10469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.144485][T10469] IPv6: NLM_F_CREATE should be set when creating new route [ 153.146693][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.149167][T10469] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 153.486210][T10499] raw_sendmsg: syz.1.1559 forgot to set AF_INET. Fix it! [ 153.509869][T10500] overlayfs: failed to clone upperpath [ 153.573783][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 153.573799][ T40] audit: type=1400 audit(1742600717.139:917): avc: denied { bind } for pid=10502 comm="syz.3.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.835318][T10535] lo: entered promiscuous mode [ 153.862613][T10537] overlayfs: failed to clone upperpath [ 154.070635][ T40] audit: type=1400 audit(1742600717.629:918): avc: denied { listen } for pid=10559 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.209269][T10577] overlayfs: failed to clone upperpath [ 154.216945][T10579] overlayfs: conflicting options: userxattr,verity=on [ 154.262484][T10582] netlink: 'syz.3.1583': attribute type 21 has an invalid length. [ 154.265341][T10582] xt_l2tp: v2 doesn't support IP mode [ 154.272129][T10584] xt_cluster: node mask cannot exceed total number of nodes [ 154.313412][ T40] audit: type=1400 audit(1742600717.879:919): avc: denied { connect } for pid=10589 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.433919][ T40] audit: type=1400 audit(1742600717.999:920): avc: denied { getattr } for pid=10604 comm="syz.0.1592" name="/" dev="9p" ino=36831300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.434724][T10605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.445175][T10605] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 154.454870][ T40] audit: type=1400 audit(1742600718.019:921): avc: denied { write } for pid=10604 comm="syz.0.1592" name="file0" dev="overlay" ino=9223372036891607125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.463234][ T40] audit: type=1400 audit(1742600718.019:922): avc: denied { open } for pid=10604 comm="syz.0.1592" path="/304/bus/file0" dev="overlay" ino=9223372036891607125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.480167][ T40] audit: type=1400 audit(1742600718.039:923): avc: denied { setattr } for pid=10604 comm="syz.0.1592" name="#1595" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.488589][ T40] audit: type=1400 audit(1742600718.039:924): avc: denied { read } for pid=10604 comm="syz.0.1592" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.495906][ T40] audit: type=1400 audit(1742600718.039:925): avc: denied { link } for pid=10604 comm="syz.0.1592" name="#1595" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.667822][T10618] unsupported nlmsg_type 40 [ 154.707603][ T40] audit: type=1400 audit(1742600718.269:926): avc: denied { unlink } for pid=5943 comm="syz-executor" name="file0" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.759257][T10623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.952246][T10630] block nbd0: shutting down sockets [ 155.040661][T10651] overlayfs: failed to clone upperpath [ 155.097026][T10660] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20000 [ 155.112046][ T5940] usb 7-1: USB disconnect, device number 9 [ 155.174782][T10668] netlink: 'syz.1.1612': attribute type 15 has an invalid length. [ 155.273777][T10697] overlayfs: failed to clone upperpath [ 155.291873][T10701] syz.0.1623: vmalloc error: size 3572858880, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.301588][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.0.1623 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 155.301617][T10701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.301629][T10701] Call Trace: [ 155.301635][T10701] [ 155.301642][T10701] dump_stack_lvl+0x16c/0x1f0 [ 155.301689][T10701] warn_alloc+0x24d/0x3a0 [ 155.301710][T10701] ? __pfx_warn_alloc+0x10/0x10 [ 155.301731][T10701] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.301760][T10701] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 155.301783][T10701] ? kasan_save_stack+0x42/0x60 [ 155.301798][T10701] ? kasan_save_stack+0x33/0x60 [ 155.301813][T10701] ? kasan_save_track+0x14/0x30 [ 155.301827][T10701] ? __kasan_kmalloc+0xaa/0xb0 [ 155.301841][T10701] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 155.301863][T10701] ? vb2_core_create_bufs+0x55d/0xab0 [ 155.301884][T10701] ? vb2_create_bufs+0x566/0x780 [ 155.301903][T10701] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 155.301930][T10701] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 155.301966][T10701] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 155.301996][T10701] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.302030][T10701] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 155.302056][T10701] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 155.302079][T10701] vmalloc_user_noprof+0x6b/0x90 [ 155.302105][T10701] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 155.302129][T10701] vb2_vmalloc_alloc+0x11e/0x3d0 [ 155.302157][T10701] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 155.302179][T10701] __vb2_queue_alloc+0x896/0x1230 [ 155.302217][T10701] vb2_core_create_bufs+0x55d/0xab0 [ 155.302246][T10701] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 155.302271][T10701] ? lock_acquire.part.0+0x11b/0x380 [ 155.302306][T10701] vb2_create_bufs+0x566/0x780 [ 155.302331][T10701] ? __pfx_vb2_create_bufs+0x10/0x10 [ 155.302353][T10701] ? v4l_sanitize_colorspace+0x211/0x400 [ 155.302381][T10701] vb2_ioctl_create_bufs+0x244/0x3e0 [ 155.302405][T10701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.302435][T10701] vidioc_create_bufs+0x7d/0xf0 [ 155.302458][T10701] v4l_create_bufs+0x156/0x270 [ 155.302487][T10701] __video_do_ioctl+0xaf0/0xf00 [ 155.302510][T10701] ? __pfx___video_do_ioctl+0x10/0x10 [ 155.302527][T10701] ? __might_fault+0xe3/0x190 [ 155.302557][T10701] video_usercopy+0x4d2/0x1620 [ 155.302579][T10701] ? __pfx___video_do_ioctl+0x10/0x10 [ 155.302599][T10701] ? __pfx_video_usercopy+0x10/0x10 [ 155.302637][T10701] v4l2_ioctl+0x1ba/0x250 [ 155.302654][T10701] ? __pfx_v4l2_ioctl+0x10/0x10 [ 155.302673][T10701] __x64_sys_ioctl+0x190/0x200 [ 155.302700][T10701] do_syscall_64+0xcd/0x250 [ 155.302732][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.302757][T10701] RIP: 0033:0x7fbecd58d169 [ 155.302774][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.302792][T10701] RSP: 002b:00007fbece403038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.302810][T10701] RAX: ffffffffffffffda RBX: 00007fbecd7a5fa0 RCX: 00007fbecd58d169 [ 155.302822][T10701] RDX: 0000200000000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 155.302833][T10701] RBP: 00007fbecd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.302842][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.302852][T10701] R13: 0000000000000000 R14: 00007fbecd7a5fa0 R15: 00007fff4ee32338 [ 155.302875][T10701] [ 155.302882][T10701] Mem-Info: [ 155.339331][T10710] program syz.0.1623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.340948][T10701] active_anon:5953 inactive_anon:10452 isolated_anon:0 [ 155.340948][T10701] active_file:970 inactive_file:43101 isolated_file:0 [ 155.340948][T10701] unevictable:12016 dirty:57 writeback:0 [ 155.340948][T10701] slab_reclaimable:12102 slab_unreclaimable:72321 [ 155.340948][T10701] mapped:24340 shmem:13734 pagetables:1052 [ 155.340948][T10701] sec_pagetables:300 bounce:0 [ 155.340948][T10701] kernel_misc_reclaimable:0 [ 155.340948][T10701] free:443316 free_pcp:16947 free_cma:0 [ 155.343041][T10710] ata1.00: invalid transfer count 0 [ 155.345295][T10701] Node 0 active_anon:23724kB inactive_anon:41808kB active_file:3824kB inactive_file:172320kB unevictable:44528kB isolated(anon):0kB isolated(file):0kB mapped:97304kB dirty:224kB writeback:0kB shmem:51396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:4188kB sec_pagetables:1200kB all_unreclaimable? no [ 155.345344][T10701] Node 1 active_anon:88kB inactive_anon:0kB active_file:56kB inactive_file:84kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:20kB sec_pagetables:0kB all_unreclaimable? no [ 155.472289][T10701] Node 0 DMA free:14860kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:12kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:72kB free_cma:0kB [ 155.479647][T10701] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 155.481389][T10701] Node 0 DMA32 free:228576kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:23848kB inactive_anon:41808kB active_file:3824kB inactive_file:172320kB unevictable:44516kB writepending:224kB present:2080628kB managed:1270124kB mlocked:0kB bounce:0kB free_pcp:9296kB local_pcp:576kB free_cma:0kB [ 155.489861][T10701] lowmem_reserve[]: 0 0 0 0 0 [ 155.491658][T10701] Node 1 Normal free:1528748kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:88kB inactive_anon:0kB active_file:56kB inactive_file:84kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:57948kB local_pcp:15312kB free_cma:0kB [ 155.502336][T10701] lowmem_reserve[]: 0 0 0 0 0 [ 155.504095][T10701] Node 0 DMA: 9*4kB (UM) 15*8kB (UM) 15*16kB (UM) 18*32kB (UM) 15*64kB (UM) 13*128kB (UM) 10*256kB (UM) 7*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 0*4096kB = 14860kB [ 155.509894][T10701] Node 0 DMA32: 508*4kB (UE) 1015*8kB (UME) 525*16kB (UM) 1029*32kB (UME) 837*64kB (UM) 178*128kB (UME) 75*256kB (UM) 36*512kB (UME) 29*1024kB (UM) 10*2048kB (UM) 3*4096kB (U) = 227928kB [ 155.516337][T10701] Node 1 Normal: 87*4kB (UM) 54*8kB (UME) 64*16kB (UM) 147*32kB (UME) 69*64kB (UME) 30*128kB (UME) 13*256kB (UME) 13*512kB (UME) 11*1024kB (UME) 11*2048kB (UM) 359*4096kB (UM) = 1529004kB [ 155.523034][T10701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.526395][T10701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.529670][T10701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.533104][T10701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.536378][T10701] 67034 total pagecache pages [ 155.538039][T10701] 5 pages in swap cache [ 155.539546][T10701] Free swap = 124292kB [ 155.541241][T10701] Total swap = 124996kB [ 155.542755][T10701] 1048443 pages RAM [ 155.544151][T10701] 0 pages HighMem/MovableOnly [ 155.545859][T10701] 281591 pages reserved [ 155.547412][T10701] 0 pages cma reserved [ 155.591744][T10722] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 155.591980][T10723] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 155.709407][T10740] overlayfs: failed to clone upperpath [ 155.793242][T10747] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 155.808322][ T9975] Bluetooth: hci4: Frame reassembly failed (-84) [ 156.002267][T10761] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 156.008061][T10761] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 156.019137][T10768] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10768 comm=syz.2.1647 [ 156.100607][T10771] overlayfs: failed to clone upperpath [ 156.127371][T10774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46671 sclass=netlink_route_socket pid=10774 comm=syz.3.1649 [ 156.508055][T10786] ptrace attach of "/syz-executor exec"[5950] was attempted by ""[10786] [ 156.784140][T10802] overlayfs: failed to clone upperpath [ 156.848657][T10812] xt_TCPMSS: Only works on TCP SYN packets [ 156.876666][T10816] tmpfs: Bad value for 'mpol' [ 156.912002][T10818] nft_compat: unsupported protocol 1 [ 157.049844][T10826] netlink: 'syz.2.1667': attribute type 4 has an invalid length. [ 157.214922][T10833] overlayfs: failed to clone upperpath [ 157.505338][T10851] overlayfs: failed to clone upperpath [ 157.850611][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 157.850927][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.962300][T10874] overlayfs: failed to clone upperpath [ 158.024707][T10879] __nla_validate_parse: 72 callbacks suppressed [ 158.024725][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 158.077330][T10886] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1685'. [ 158.161325][T10897] vxcan1 speed is unknown, defaulting to 1000 [ 158.252259][ T6107] usb 6-1: ezusb_ihex_firmware_download - request "keyspan/usa28xa.fw" failed [ 158.255142][T10909] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.255219][ T6107] usb 6-1: failed to load firmware "keyspan/usa28xa.fw" [ 158.259264][T10909] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 158.261979][ T6107] keyspan 6-1:0.45: probe with driver keyspan failed with error -2 [ 158.267653][T10897] "syz.2.1689" (10897) uses obsolete ecb(arc4) skcipher [ 158.267723][ T6107] usb 6-1: USB disconnect, device number 10 [ 158.398790][T10930] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1700'. [ 158.487328][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 158.490042][T10916] veth1_vlan: left allmulticast mode [ 158.492359][T10916] macvlan0: left allmulticast mode [ 158.494894][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1695'. [ 158.598754][T10937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10937 comm=syz.0.1702 [ 158.913621][T10949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.029998][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 159.145415][T10961] overlayfs: failed to clone upperpath [ 159.295195][T10967] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1712'. [ 159.376331][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1715'. [ 159.379919][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 159.384820][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.433247][ T5945] Bluetooth: hci3: unexpected event for opcode 0x040d [ 159.454029][T10977] bridge_slave_1 (unregistering): left allmulticast mode [ 159.456072][T10977] bridge_slave_1 (unregistering): left promiscuous mode [ 159.458423][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 159.458435][ T40] audit: type=1400 audit(1742600723.019:935): avc: denied { accept } for pid=10985 comm="syz.0.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.459329][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.579624][T10991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10991 comm=syz.0.1722 [ 159.594440][ T40] audit: type=1400 audit(1742600723.159:936): avc: denied { accept } for pid=10990 comm="syz.0.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.638627][T10997] overlayfs: failed to clone upperpath [ 159.693170][T11003] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1726'. [ 159.728534][T11007] xt_limit: Overflow, try lower: 1207959552/384 [ 159.802179][T11010] sctp: [Deprecated]: syz.2.1727 (pid 11010) Use of int in maxseg socket option. [ 159.802179][T11010] Use struct sctp_assoc_value instead [ 159.933409][T11012] veth1_macvtap: left promiscuous mode [ 160.054458][T11017] openvswitch: netlink: Invalid VLAN frame [ 160.088811][T11020] netlink: 'syz.1.1731': attribute type 21 has an invalid length. [ 160.242057][T11027] overlayfs: failed to clone upperpath [ 160.537949][ T40] audit: type=1400 audit(1742600724.099:937): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 160.985105][ T40] audit: type=1400 audit(1742600724.549:938): avc: denied { listen } for pid=11090 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 161.153721][T11101] xt_hashlimit: size too large, truncated to 1048576 [ 161.505255][T11123] bond2: entered promiscuous mode [ 161.507263][T11123] bond2: entered allmulticast mode [ 161.514600][T11123] batadv2: entered promiscuous mode [ 161.516092][T11123] batadv2: entered allmulticast mode [ 161.558912][T11131] netlink: 'syz.2.1768': attribute type 21 has an invalid length. [ 161.566844][T11133] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 161.685162][T11142] overlayfs: missing 'lowerdir' [ 161.722418][ T40] audit: type=1400 audit(1742600725.289:939): avc: denied { create } for pid=11143 comm="syz.3.1774" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.746762][ T40] audit: type=1400 audit(1742600725.309:940): avc: denied { unlink } for pid=6171 comm="syz-executor" name="file0" dev="tmpfs" ino=2809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.797660][T11151] overlayfs: failed to clone lowerpath [ 161.799601][ T40] audit: type=1400 audit(1742600725.359:941): avc: denied { mount } for pid=11150 comm="syz.3.1775" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 161.962340][T11165] 9pnet_fd: Insufficient options for proto=fd [ 162.020619][T11163] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 162.024239][T11163] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.205245][T11191] tipc: Cannot configure node identity twice [ 162.242190][T11194] openvswitch: netlink: IP tunnel dst address not specified [ 162.317591][T11178] netlink: 'syz.0.1786': attribute type 3 has an invalid length. [ 162.322740][T11178] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 162.325940][T11178] nbd: couldn't find device at index 63 [ 162.508858][T11211] netlink: 'syz.2.1797': attribute type 4 has an invalid length. [ 162.515187][T11211] tipc: Enabling not permitted [ 162.516850][T11211] tipc: Enabling of bearer rejected, failed to enable media [ 162.614850][T11226] wg2: entered promiscuous mode [ 162.662153][T11230] tmpfs: Bad value for 'mpol' [ 162.664737][T11230] tmpfs: Bad value for 'mpol' [ 162.881108][T11249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.993599][T11254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=11254 comm=syz.2.1810 [ 163.345777][ T40] audit: type=1400 audit(1742600726.909:942): avc: denied { read } for pid=11263 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.443018][T11270] syz.1.1815 (11270) used greatest stack depth: 18928 bytes left [ 163.485244][T11274] __nla_validate_parse: 14 callbacks suppressed [ 163.485257][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1817'. [ 163.492841][T11274] syz_tun: left promiscuous mode [ 163.494854][T11274] bridge0: port 3(syz_tun) entered disabled state [ 163.503011][T11274] bond0: (slave bridge0): Releasing backup interface [ 163.506416][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.509122][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.517905][T11274] bridge_slave_0: left allmulticast mode [ 163.520115][T11274] bridge_slave_0: left promiscuous mode [ 163.523326][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.526660][T11274] bridge_slave_1: left allmulticast mode [ 163.528332][T11274] bridge_slave_1: left promiscuous mode [ 163.529971][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.533663][T11274] bond0: (slave bond_slave_0): Releasing backup interface [ 163.537350][T11274] bond0: (slave bond_slave_1): Releasing backup interface [ 163.555911][T11274] team0: Port device team_slave_0 removed [ 163.566423][T11274] team0: Port device team_slave_1 removed [ 163.568426][T11274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.571021][T11274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.575101][T11274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.577897][T11274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.587308][T11274] bond0: (slave wlan1): Releasing backup interface [ 163.606133][ T5940] vxcan1 speed is unknown, defaulting to 1000 [ 163.884438][ T40] audit: type=1326 audit(1742600727.449:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.3.1824" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x0 [ 163.893572][ T40] audit: type=1400 audit(1742600727.459:944): avc: denied { ioctl } for pid=11299 comm="syz.0.1825" path="socket:[29314]" dev="sockfs" ino=29314 ioctlcmd=0x8b05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.901023][T11300] xt_hashlimit: invalid rate [ 163.931318][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 164.013457][T11319] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 164.036848][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 164.085345][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.126854][T11338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.131094][T11338] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 164.162552][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 165.023085][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'. [ 165.205762][T11382] overlayfs: failed to clone upperpath [ 165.537744][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1856'. [ 165.541162][T11398] netem: invalid attributes len -9 [ 165.543083][T11398] netem: change failed [ 165.649520][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1858'. [ 165.652843][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1858'. [ 166.022589][T11415] overlayfs: failed to clone upperpath [ 166.184711][T11425] SELinux: Context system_u:object_r:devicekit_var_lib_t:s0 is not valid (left unmapped). [ 166.184755][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 166.184767][ T40] audit: type=1400 audit(1742600729.749:949): avc: denied { relabelfrom } for pid=11423 comm="syz.1.1864" name="NETLINK" dev="sockfs" ino=31754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 166.198759][ T40] audit: type=1400 audit(1742600729.749:950): avc: denied { relabelto } for pid=11423 comm="syz.1.1864" name="NETLINK" dev="sockfs" ino=31754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:devicekit_var_lib_t:s0" [ 166.258434][T11433] netlink: 'syz.0.1867': attribute type 16 has an invalid length. [ 166.264534][T11433] netlink: 'syz.0.1867': attribute type 3 has an invalid length. [ 166.271267][T11433] netlink: 63042 bytes leftover after parsing attributes in process `syz.0.1867'. [ 166.326177][ T40] audit: type=1400 audit(1742600729.889:951): avc: denied { write } for pid=11439 comm="syz.0.1870" name="file0" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.983563][T11459] overlayfs: failed to clone upperpath [ 167.147356][T11476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11476 comm=syz.2.1881 [ 167.249908][T11490] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 167.541172][T11507] overlayfs: failed to clone upperpath [ 167.911605][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 168.047094][T11538] veth0_vlan: invalid flags given to default FDB implementation [ 168.147263][ T40] audit: type=1400 audit(1742600731.709:952): avc: denied { mount } for pid=11555 comm="syz.1.1911" name="/" dev="autofs" ino=31874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 168.155286][T11558] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 168.421197][T11586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11586 comm=syz.1.1922 [ 168.566562][T11606] overlayfs: failed to clone upperpath [ 168.574602][T11608] xt_hashlimit: size too large, truncated to 1048576 [ 168.744887][ T40] audit: type=1400 audit(1742600732.309:953): avc: denied { map } for pid=11625 comm="syz.1.1934" path="socket:[32785]" dev="sockfs" ino=32785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 168.888943][T11640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.894818][T11640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 168.923545][ T40] audit: type=1400 audit(1742600732.489:954): avc: denied { write } for pid=11635 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 168.970032][ T40] audit: type=1800 audit(1742600732.529:955): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1939" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 169.089392][T11660] __nla_validate_parse: 3 callbacks suppressed [ 169.089405][T11660] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1943'. [ 169.274764][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 169.277990][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1944'. [ 169.281301][T11662] netlink: 'syz.2.1944': attribute type 12 has an invalid length. [ 169.651627][T11680] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1950'. [ 169.737059][ T40] audit: type=1400 audit(1742600733.299:956): avc: denied { unlink } for pid=5943 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=9223372036891607391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 169.750843][ T40] audit: type=1400 audit(1742600733.299:957): avc: denied { link } for pid=5943 comm="syz-executor" name="#f" dev="tmpfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.758136][ T40] audit: type=1400 audit(1742600733.299:958): avc: denied { rename } for pid=5943 comm="syz-executor" name="#10" dev="tmpfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.844660][T11699] overlayfs: failed to clone upperpath [ 169.849505][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 169.853371][T11695] xt_hashlimit: size too large, truncated to 1048576 [ 169.874634][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.934851][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 170.165658][ T9975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.259622][T11732] vxcan1 speed is unknown, defaulting to 1000 [ 170.281550][ T9975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.307285][T11731] vxcan1 speed is unknown, defaulting to 1000 [ 170.343041][ T9975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.410615][ T9975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.431206][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.435454][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.439854][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.446068][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.449284][ T5955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.452204][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.490885][T11737] vxcan1 speed is unknown, defaulting to 1000 [ 170.546468][ T9975] gretap0: left allmulticast mode [ 170.547940][ T9975] gretap0: left promiscuous mode [ 170.549392][ T9975] bridge0: port 3(gretap0) entered disabled state [ 170.552061][ T9975] bridge_slave_1: left allmulticast mode [ 170.553671][ T9975] bridge_slave_1: left promiscuous mode [ 170.555435][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.560947][ T9975] bridge_slave_0: left allmulticast mode [ 170.562595][ T9975] bridge_slave_0: left promiscuous mode [ 170.564382][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.029476][ T9975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.038164][ T9975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.043613][ T9975] bond0 (unregistering): Released all slaves [ 171.136150][ T9975] bond1 (unregistering): Released all slaves [ 171.140405][ T9975] bond2 (unregistering): Released all slaves [ 171.166711][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 171.171774][T11757] vxcan1: tx address claim with different name [ 171.285122][T11737] chnl_net:caif_netlink_parms(): no params data found [ 171.327619][T11767] overlayfs: failed to clone upperpath [ 171.422965][T11737] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.426732][T11737] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.429397][T11737] bridge_slave_0: entered allmulticast mode [ 171.431679][T11737] bridge_slave_0: entered promiscuous mode [ 171.436851][T11737] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.438935][T11737] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.441905][T11737] bridge_slave_1: entered allmulticast mode [ 171.445533][T11737] bridge_slave_1: entered promiscuous mode [ 171.492260][T11737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.497054][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 171.497065][ T40] audit: type=1400 audit(1742600734.956:973): avc: denied { listen } for pid=11783 comm="syz.3.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.501019][T11737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.514151][ T40] audit: type=1400 audit(1742600734.965:974): avc: denied { shutdown } for pid=11783 comm="syz.3.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.556952][T11737] team0: Port device team_slave_0 added [ 171.568948][ T9975] hsr_slave_0: left promiscuous mode [ 171.573587][ T9975] hsr_slave_1: left promiscuous mode [ 171.575439][ T9975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.577587][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.580489][ T9975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.582729][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.605389][ T9975] veth1_macvtap: left promiscuous mode [ 171.607408][ T9975] veth0_macvtap: left promiscuous mode [ 171.697868][ T40] audit: type=1400 audit(1742600735.133:975): avc: denied { create } for pid=11798 comm="syz.2.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 172.386288][ T9975] team0 (unregistering): Port device team_slave_1 removed [ 172.496308][ T9975] team0 (unregistering): Port device team_slave_0 removed [ 172.517848][ T40] audit: type=1326 audit(1742600735.910:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.542420][ T40] audit: type=1326 audit(1742600735.910:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.551575][ T40] audit: type=1326 audit(1742600735.910:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.560135][ T40] audit: type=1326 audit(1742600735.910:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.568993][ T40] audit: type=1326 audit(1742600735.910:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.577027][ T40] audit: type=1326 audit(1742600735.910:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.584124][ T40] audit: type=1326 audit(1742600735.910:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.3.1987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444258d169 code=0x7fc00000 [ 172.605918][T11812] overlayfs: failed to clone upperpath [ 172.664016][ T5945] Bluetooth: hci1: command tx timeout [ 173.176364][T11737] team0: Port device team_slave_1 added [ 173.230671][T11737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.232744][T11737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.240051][T11737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.245669][T11737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.247689][T11737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.256919][T11737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.282176][T11737] hsr_slave_0: entered promiscuous mode [ 173.284098][T11737] hsr_slave_1: entered promiscuous mode [ 173.285850][T11737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.287931][T11737] Cannot create hsr debugfs directory [ 173.399092][T11737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.402452][T11737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.414086][T11737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.425148][T11737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.463173][T11855] team0: Device veth0_vlan failed to register rx_handler [ 173.510815][T11737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.512857][T11868] IPVS: Unknown mcast interface: vcan0 [ 173.535147][T11737] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.544400][T11873] overlayfs: failed to clone upperpath [ 173.546695][T11870] 9pnet: Unknown protocol version 9p20\++} [ 173.550127][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.552713][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.558797][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 173.559707][ T212] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.563959][ T212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.647869][T11882] netlink: zone id is out of range [ 173.649352][T11882] netlink: zone id is out of range [ 173.650787][T11882] netlink: zone id is out of range [ 173.652224][T11882] netlink: zone id is out of range [ 173.653764][T11882] netlink: zone id is out of range [ 173.655261][T11882] netlink: zone id is out of range [ 173.657741][T11882] netlink: zone id is out of range [ 173.659189][T11882] netlink: zone id is out of range [ 173.660946][T11882] netlink: zone id is out of range [ 173.662502][T11882] netlink: zone id is out of range [ 173.682020][T11737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.797923][T11737] veth0_vlan: entered promiscuous mode [ 173.803109][T11737] veth1_vlan: entered promiscuous mode [ 173.818612][T11737] veth0_macvtap: entered promiscuous mode [ 173.821637][T11737] veth1_macvtap: entered promiscuous mode [ 173.829186][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.832093][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.834803][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.838438][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.841705][T11737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.844869][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.847882][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.850738][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.853628][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.857716][T11737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.863407][T11737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.865912][T11737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.870708][T11737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.873892][T11737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.912227][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.918209][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.927921][ T9970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.930255][ T9970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.047489][T11915] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 174.055897][T11915] team0: Device hsr_slave_0 failed to register rx_handler [ 174.239496][T11922] tc_dump_action: action bad kind [ 174.478548][T11937] netlink: 'syz.4.2024': attribute type 1 has an invalid length. [ 174.481085][T11937] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 174.502791][T11939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 174.516318][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 174.555160][ T5940] IPVS: starting estimator thread 0... [ 174.602780][T11947] : entered promiscuous mode [ 174.637453][T11949] overlayfs: failed to clone upperpath [ 174.648649][T11945] IPVS: using max 19 ests per chain, 45600 per kthread [ 174.742928][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 174.759658][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 174.851010][T11972] xt_NFQUEUE: number of total queues is 0 [ 174.883708][ T5945] Bluetooth: hci1: command tx timeout [ 174.932523][T11974] vxcan1 speed is unknown, defaulting to 1000 [ 174.952416][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.955598][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.969347][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.975110][ T5955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.979144][ T5955] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.982221][ T5955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.007779][T11975] vxcan1 speed is unknown, defaulting to 1000 [ 175.062449][ T9970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.134026][ T9970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.145319][T11975] chnl_net:caif_netlink_parms(): no params data found [ 175.200744][ T9970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.229362][T11975] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.232062][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.234719][T11975] bridge_slave_0: entered allmulticast mode [ 175.240144][T11975] bridge_slave_0: entered promiscuous mode [ 175.244873][T11975] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.247620][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.250246][T11975] bridge_slave_1: entered allmulticast mode [ 175.252928][T11975] bridge_slave_1: entered promiscuous mode [ 175.286494][ T9970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.293485][T11975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.297360][T11975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.321353][T11975] team0: Port device team_slave_0 added [ 175.325850][T11975] team0: Port device team_slave_1 added [ 175.345954][T11975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.353975][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.361001][T11975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.376842][T11975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.378867][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.387182][T11975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.414785][T11975] hsr_slave_0: entered promiscuous mode [ 175.416786][T11975] hsr_slave_1: entered promiscuous mode [ 175.418750][T11975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.421561][T11975] Cannot create hsr debugfs directory [ 175.484144][ T9970] vlan0: left allmulticast mode [ 175.485677][ T9970] bridge0: port 3(vlan0) entered disabled state [ 175.488450][ T9970] bridge_slave_0: left allmulticast mode [ 175.490025][ T9970] bridge_slave_0: left promiscuous mode [ 175.493196][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.873918][ T9970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.877840][ T9970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.882536][ T9970] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 175.885485][ T9970] bond0 (unregistering): Released all slaves [ 175.889935][ T9970] bond1 (unregistering): Released all slaves [ 175.987381][ T9970] : left promiscuous mode [ 176.042822][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 176.497749][T11975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.501637][T11975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.505133][T11975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.508760][T11975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.556983][T11975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.568898][T11975] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.576669][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.579168][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.588609][ T9970] hsr_slave_0: left promiscuous mode [ 176.591190][ T9970] hsr_slave_1: left promiscuous mode [ 176.593738][ T9970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.599942][ T9970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.603731][ T9970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.606692][ T9970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.642070][ T9970] veth1_to_batadv: left promiscuous mode [ 176.644429][ T9970] veth1_macvtap: left promiscuous mode [ 176.646570][ T9970] veth0_macvtap: left promiscuous mode [ 176.649260][ T9970] veth1_vlan: left promiscuous mode [ 176.651346][ T9970] veth0_vlan: left promiscuous mode [ 176.965003][T12018] overlayfs: failed to clone upperpath [ 177.097147][T12022] syz.1.2049 (12022): attempted to duplicate a private mapping with mremap. This is not supported. [ 177.107407][ T5945] Bluetooth: hci1: command tx timeout [ 177.147303][T12021] ------------[ cut here ]------------ [ 177.153655][T12021] refcount_t: underflow; use-after-free. [ 177.156308][T12021] WARNING: CPU: 0 PID: 12021 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 177.158939][T12021] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.160310][T12021] CPU: 0 UID: 0 PID: 12021 Comm: syz.2.2050 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 177.166010][T12021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.170117][T12021] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 177.171420][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 177.171436][ T40] audit: type=1400 audit(1742600740.250:998): avc: denied { write } for pid=5924 comm="syz-executor" path="pipe:[3969]" dev="pipefs" ino=3969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 177.172761][T12021] Code: ff 89 de e8 e8 1b f5 fc 84 db 0f 85 66 ff ff ff e8 3b 21 f5 fc c6 05 77 2b 86 0b 01 90 48 c7 c7 20 17 d3 8b e8 87 51 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 18 21 f5 fc 0f b6 1d 52 2b 86 0b 31 [ 177.190863][T12021] RSP: 0018:ffffc9000dd4f9c8 EFLAGS: 00010286 [ 177.196328][T12021] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 177.199345][T12021] RDX: ffff88802a20a440 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 177.202615][T12021] RBP: ffff888012d03e10 R08: 0000000000000001 R09: 0000000000000000 [ 177.205703][T12021] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 177.208665][T12021] R13: 0000000000000000 R14: ffff888012d03e10 R15: ffff88805ca0e000 [ 177.211645][T12021] FS: 00007f8126b066c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 177.215151][T12021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.217682][T12021] CR2: 000055558db88808 CR3: 000000006424c000 CR4: 0000000000352ef0 [ 177.220737][T12021] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.223833][T12021] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.225137][ T5945] Bluetooth: hci4: command tx timeout [ 177.227054][T12021] Call Trace: [ 177.227066][T12021] [ 177.227074][T12021] ? __warn+0xea/0x3c0 [ 177.227099][T12021] ? preempt_schedule_notrace+0x62/0xe0 [ 177.227133][T12021] ? refcount_warn_saturate+0x14a/0x210 [ 177.227154][T12021] ? report_bug+0x3c0/0x580 [ 177.227180][T12021] ? handle_bug+0x54/0xa0 [ 177.227204][T12021] ? exc_invalid_op+0x17/0x50 [ 177.227229][T12021] ? asm_exc_invalid_op+0x1a/0x20 [ 177.227259][T12021] ? __warn_printk+0x199/0x350 [ 177.227278][T12021] ? __warn_printk+0x1a6/0x350 [ 177.227298][T12021] ? refcount_warn_saturate+0x14a/0x210 [ 177.227318][T12021] ? refcount_warn_saturate+0x149/0x210 [ 177.227336][T12021] io_tx_ubuf_complete+0x236/0x280 [ 177.227358][T12021] ? __io_submit_flush_completions+0xb85/0x1df0 [ 177.227388][T12021] io_send_zc_cleanup+0x8a/0x1c0 [ 177.227406][T12021] ? __pfx_io_send_zc_cleanup+0x10/0x10 [ 177.227423][T12021] __io_submit_flush_completions+0xcb3/0x1df0 [ 177.227458][T12021] ctx_flush_and_put.constprop.0+0x9a/0x410 [ 177.227486][T12021] io_handle_tw_list+0x3df/0x540 [ 177.271586][T12021] ? __pfx_io_handle_tw_list+0x10/0x10 [ 177.273692][T12021] ? lock_acquire.part.0+0x11b/0x380 [ 177.275822][T12021] ? find_held_lock+0x2d/0x110 [ 177.277822][T12021] tctx_task_work_run+0xac/0x390 [ 177.280054][T12021] tctx_task_work+0x7b/0xd0 [ 177.281837][T12021] ? __pfx_tctx_task_work+0x10/0x10 [ 177.283802][T12021] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.285646][T12021] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.287555][T12021] task_work_run+0x14e/0x250 [ 177.289469][T12021] ? __pfx_task_work_run+0x10/0x10 [ 177.291469][T12021] get_signal+0x1d3/0x26c0 [ 177.293318][T12021] ? __pfx_get_signal+0x10/0x10 [ 177.295244][T12021] ? fput+0x67/0x440 [ 177.296934][T12021] ? __do_sys_io_uring_enter+0x60f/0x1670 [ 177.299366][T12021] arch_do_signal_or_restart+0x90/0x7e0 [ 177.301770][T12021] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.304231][T12021] ? rcu_is_watching+0x12/0xc0 [ 177.306088][T12021] syscall_exit_to_user_mode+0x150/0x2a0 [ 177.308250][T12021] do_syscall_64+0xda/0x250 [ 177.310070][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.312650][T12021] RIP: 0033:0x7f8125d8d169 [ 177.314618][T12021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.323467][T12021] RSP: 002b:00007f8126b06038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 177.326655][T12021] RAX: 0000000000002000 RBX: 00007f8125fa5fa0 RCX: 00007f8125d8d169 [ 177.329658][T12021] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 177.332897][T12021] RBP: 00007f8125e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.335974][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.338984][T12021] R13: 0000000000000000 R14: 00007f8125fa5fa0 R15: 00007ffe24876e88 [ 177.343972][T12021] [ 177.345492][T12021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.348287][T12021] CPU: 0 UID: 0 PID: 12021 Comm: syz.2.2050 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 177.352320][T12021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.356360][T12021] Call Trace: [ 177.357669][T12021] [ 177.358820][T12021] dump_stack_lvl+0x3d/0x1f0 [ 177.360643][T12021] panic+0x71d/0x800 [ 177.362241][T12021] ? __pfx_panic+0x10/0x10 [ 177.364439][T12021] ? show_trace_log_lvl+0x29d/0x3d0 [ 177.367134][T12021] ? check_panic_on_warn+0x1f/0xb0 [ 177.369947][T12021] ? refcount_warn_saturate+0x14a/0x210 [ 177.372163][T12021] check_panic_on_warn+0xab/0xb0 [ 177.373577][T12021] __warn+0xf6/0x3c0 [ 177.374752][T12021] ? preempt_schedule_notrace+0x62/0xe0 [ 177.376313][T12021] ? refcount_warn_saturate+0x14a/0x210 [ 177.377877][T12021] report_bug+0x3c0/0x580 [ 177.379098][T12021] handle_bug+0x54/0xa0 [ 177.380302][T12021] exc_invalid_op+0x17/0x50 [ 177.381588][T12021] asm_exc_invalid_op+0x1a/0x20 [ 177.382989][T12021] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 177.384748][T12021] Code: ff 89 de e8 e8 1b f5 fc 84 db 0f 85 66 ff ff ff e8 3b 21 f5 fc c6 05 77 2b 86 0b 01 90 48 c7 c7 20 17 d3 8b e8 87 51 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 18 21 f5 fc 0f b6 1d 52 2b 86 0b 31 [ 177.390045][T12021] RSP: 0018:ffffc9000dd4f9c8 EFLAGS: 00010286 [ 177.391741][T12021] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a2269 [ 177.393952][T12021] RDX: ffff88802a20a440 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 177.396186][T12021] RBP: ffff888012d03e10 R08: 0000000000000001 R09: 0000000000000000 [ 177.398355][T12021] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 177.400550][T12021] R13: 0000000000000000 R14: ffff888012d03e10 R15: ffff88805ca0e000 [ 177.402756][T12021] ? __warn_printk+0x199/0x350 [ 177.404107][T12021] ? __warn_printk+0x1a6/0x350 [ 177.405446][T12021] ? refcount_warn_saturate+0x149/0x210 [ 177.407106][T12021] io_tx_ubuf_complete+0x236/0x280 [ 177.408593][T12021] ? __io_submit_flush_completions+0xb85/0x1df0 [ 177.410317][T12021] io_send_zc_cleanup+0x8a/0x1c0 [ 177.411685][T12021] ? __pfx_io_send_zc_cleanup+0x10/0x10 [ 177.413231][T12021] __io_submit_flush_completions+0xcb3/0x1df0 [ 177.414922][T12021] ctx_flush_and_put.constprop.0+0x9a/0x410 [ 177.416566][T12021] io_handle_tw_list+0x3df/0x540 [ 177.418001][T12021] ? __pfx_io_handle_tw_list+0x10/0x10 [ 177.419516][T12021] ? lock_acquire.part.0+0x11b/0x380 [ 177.420992][T12021] ? find_held_lock+0x2d/0x110 [ 177.422333][T12021] tctx_task_work_run+0xac/0x390 [ 177.423818][T12021] tctx_task_work+0x7b/0xd0 [ 177.425118][T12021] ? __pfx_tctx_task_work+0x10/0x10 [ 177.426601][T12021] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.428159][T12021] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.429622][T12021] task_work_run+0x14e/0x250 [ 177.430921][T12021] ? __pfx_task_work_run+0x10/0x10 [ 177.432388][T12021] get_signal+0x1d3/0x26c0 [ 177.433651][T12021] ? __pfx_get_signal+0x10/0x10 [ 177.435010][T12021] ? fput+0x67/0x440 [ 177.436120][T12021] ? __do_sys_io_uring_enter+0x60f/0x1670 [ 177.437691][T12021] arch_do_signal_or_restart+0x90/0x7e0 [ 177.439269][T12021] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.440993][T12021] ? rcu_is_watching+0x12/0xc0 [ 177.442359][T12021] syscall_exit_to_user_mode+0x150/0x2a0 [ 177.443918][T12021] do_syscall_64+0xda/0x250 [ 177.445188][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.446810][T12021] RIP: 0033:0x7f8125d8d169 [ 177.448056][T12021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.453294][T12021] RSP: 002b:00007f8126b06038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 177.455556][T12021] RAX: 0000000000002000 RBX: 00007f8125fa5fa0 RCX: 00007f8125d8d169 [ 177.457705][T12021] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 177.459890][T12021] RBP: 00007f8125e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.462149][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.464218][T12021] R13: 0000000000000000 R14: 00007f8125fa5fa0 R15: 00007ffe24876e88 [ 177.466380][T12021] [ 177.467841][T12021] Kernel Offset: disabled [ 177.469112][T12021] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:45:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c375 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc9000dd4f348 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c39f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8126b066c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558db88808 CR3=000000006424c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000c0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe62286810 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa23700f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa23700f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa23700f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa23700f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa23700f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa23700f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006920000 RBX=ffff888027338000 RCX=ffffffff819aee97 RDX=1ffff11004e6724d RSI=ffffffff868755ff RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006c0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=0000000000000000 R13=dffffc0000000000 R14=ffff888027339268 R15=0000000000000000 RIP=ffffffff86875627 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b75b853908 CR3=0000000024fb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=e66bc582f87033c2 de20f78c9e811645 e66bc582f87033c2 de20f78c9e811645 e66bc582f87033c2 de20f78c9e811645 e66bc582f87033c2 de20f78c9e811645 ZMM18=2bba393cf05244e5 05fbf4ed2b2a2b8f 2bba393cf05244e5 05fbf4ed2b2a2b8f 2bba393cf05244e5 05fbf4ed2b2a2b8f 2bba393cf05244e5 05fbf4ed2b2a2b8f ZMM19=360c000000000000 0000000000000005 360c000000000000 0000000000000004 360c000000000000 0000000000000003 360c000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=34433a0634433a06 34433a0634433a06 34433a0634433a06 34433a0634433a06 34433a0634433a06 34433a0634433a06 34433a0634433a06 34433a0634433a06 ZMM22=7be2dee67be2dee6 7be2dee67be2dee6 7be2dee67be2dee6 7be2dee67be2dee6 7be2dee67be2dee6 7be2dee67be2dee6 7be2dee67be2dee6 7be2dee67be2dee6 ZMM23=01629c4d01629c4d 01629c4d01629c4d 01629c4d01629c4d 01629c4d01629c4d 01629c4d01629c4d 01629c4d01629c4d 01629c4d01629c4d 01629c4d01629c4d ZMM24=d63413e7d63413e7 d63413e7d63413e7 d63413e7d63413e7 d63413e7d63413e7 d63413e7d63413e7 d63413e7d63413e7 d63413e7d63413e7 d63413e7d63413e7 ZMM25=b48dc17fb48dc17f b48dc17fb48dc17f b48dc17fb48dc17f b48dc17fb48dc17f b48dc17fb48dc17f b48dc17fb48dc17f b48dc17fb48dc17f b48dc17fb48dc17f ZMM26=6e87ae6b6e87ae6b 6e87ae6b6e87ae6b 6e87ae6b6e87ae6b 6e87ae6b6e87ae6b 6e87ae6b6e87ae6b 6e87ae6b6e87ae6b 6e87ae6b6e87ae6b 6e87ae6b6e87ae6b ZMM27=54a8e0c454a8e0c4 54a8e0c454a8e0c4 54a8e0c454a8e0c4 54a8e0c454a8e0c4 54a8e0c454a8e0c4 54a8e0c454a8e0c4 54a8e0c454a8e0c4 54a8e0c454a8e0c4 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=bf090000bf090000 bf090000bf090000 bf090000bf090000 bf090000bf090000 bf090000bf090000 bf090000bf090000 bf090000bf090000 bf090000bf090000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000012 RCX=000000000000000f RDX=0000000000000002 RSI=0000000000000012 RDI=ffff88803ffef000 RBP=ffff88807ffd7540 RSP=ffffc90003ecf770 R8 =0000000000000000 R9 =fffffbfff2dd8d98 R10=ffffffff96ec6cc7 R11=0000000000000003 R12=ffff88803ffef048 R13=0000000000000012 R14=ffff88804f0be000 R15=000000000000000f RIP=ffffffff8224d405 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1807ad7d60 CR3=000000003094e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1806f7c6a3 00007f1806f7c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffaa6bc8c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555768c9f11 00005555768c9de0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557685fb87 000055557685fa50 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100003d0030010 0003c00302100003 b0030183b8100006 90030120ad801720 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120100003800401 0000020806060164 ea00080003e00300 100003d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c00302100003b0 030183b810000690 030120ad801720b4 800220b800000a80 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600068001000c 0000000400007c01 0000000000000000 0107003d000020dc ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e08628003628004 06800306800403a0 030008000390030f ffffffffffff0403 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffea000186c610 RCX=0000000000000001 RDX=1ffffd4000281283 RSI=ffffffff8b6cff80 RDI=ffffea000186c618 RBP=ffffea0001409418 RSP=ffffc900041b79b0 R8 =0000000000000001 R9 =ffff88801b040a08 R10=0000000000000003 R11=0000000000000001 R12=ffffea0001409410 R13=0000000000000c40 R14=ffff88801b0409c0 R15=ffffea0001409400 RIP=ffffffff84c9f614 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558bb96500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27e67e CR3=000000005a2e4000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697463656666 652e746573757063 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab4240f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab4240f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab4240f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab4240f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab4240f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab4240f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000