last executing test programs: 4.099871402s ago: executing program 3 (id=926): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x300}) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x7, 0x0, 0x100000000}) 4.030445522s ago: executing program 3 (id=927): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {}, {0x1, 0x1}}, [@filter_kind_options=@f_flower={{0x1b}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "fa119955c3cc8b3d6b5e6c4a326331a7"}]}}]}, 0x48}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x290, 0x168, 0x9, 0x290, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private0, [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x290, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x46, 0x0, 0x2, 0x2, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[0x0, 0x4d3]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x8}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00140063"], 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 4.030082426s ago: executing program 3 (id=928): r0 = msgget$private(0x0, 0x288) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r2, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) setgroups(0x41, 0xfffffffffffffffe) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010062f3003be865d900"], 0x8, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000001600)) msgrcv(r0, &(0x7f00000012c0)={0x0, ""/4101}, 0x100d, 0x1, 0x1800) 3.958425896s ago: executing program 3 (id=930): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303178010"], 0x328}}, 0x84) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044890}, 0x40008d1) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000240)='./file1\x00', 0x0) (async) unlinkat(r1, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffffffff8df13da0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e6", 0x2c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r2, 0x734cf000) 3.878875944s ago: executing program 3 (id=932): r0 = syz_io_uring_setup(0x71e2, &(0x7f0000000000)={0x0, 0x200, 0x10180, 0x5, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x91}) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x5f501}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) (async) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2000000, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) (async) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.757577077s ago: executing program 2 (id=935): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffe) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x4004}, {0xffffffffffffffff, 0x8000}, {r3, 0x1130}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4084}], 0x5, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f0000000640)={[0xfb]}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={0x0, 0x7}, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x11}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000f15687ae8e95550ed8cab5613d6354a1c5d1b7ab466bd298729f3e08698bcea382be93eb011fa7c8b82690d37be2ec677526963198c4e98383663c8c39aa5b309ac6151dca79e82072c3d837c1116e6328f0863a67a2f75aebecb9064060ce5e1704abd4", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='devpts\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x9}, 0x1) 3.640451309s ago: executing program 3 (id=936): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @aes256, 0x0, @desc3}) ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f0000000180)={0x26, 0x0, 0x185}) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x22) (async) r4 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) (async, rerun: 64) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x58565559, 0x3, 0xc, [{0x6, 0x4}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r6, 0x0, 0x0, 0xffff, 0x0, 0x80000, {0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x46af, 0xd448, 0x0, 0x0, 0x0, 0x4, 0x0, "427f7d05618764edc32adededde54e253372001f0000db00000000000000e800"}}) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000000)=@default) syz_open_dev$sndmidi(&(0x7f0000000240), 0x4, 0x200) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) (async, rerun: 64) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0xa]}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x3, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0x30314742}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x8) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet6_MCAST_LEAVE_GROUP(r10, 0x29, 0x2d, &(0x7f0000000040)={0x8, {{0xa, 0x4e21, 0xc39, @mcast1, 0x3}}}, 0x88) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) (async, rerun: 32) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 3.594603008s ago: executing program 32 (id=936): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @aes256, 0x0, @desc3}) ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f0000000180)={0x26, 0x0, 0x185}) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x22) (async) r4 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) (async, rerun: 64) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x58565559, 0x3, 0xc, [{0x6, 0x4}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r6, 0x0, 0x0, 0xffff, 0x0, 0x80000, {0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x46af, 0xd448, 0x0, 0x0, 0x0, 0x4, 0x0, "427f7d05618764edc32adededde54e253372001f0000db00000000000000e800"}}) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000000)=@default) syz_open_dev$sndmidi(&(0x7f0000000240), 0x4, 0x200) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) (async, rerun: 64) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0xa]}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x3, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0x30314742}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x8) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet6_MCAST_LEAVE_GROUP(r10, 0x29, 0x2d, &(0x7f0000000040)={0x8, {{0xa, 0x4e21, 0xc39, @mcast1, 0x3}}}, 0x88) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) (async, rerun: 32) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 3.548643412s ago: executing program 2 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210aef1a"], 0x2cc}}, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01ff01000000000000000100000100000000000001"], 0x20}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x26, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) renameat2(r1, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x17, 0x0, &(0x7f0000000040)) connect$qrtr(r1, &(0x7f00000000c0), 0xc) 3.499862818s ago: executing program 2 (id=940): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) sync() r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffffff9}]}, 0x34}}, 0x4000000) 2.930403044s ago: executing program 2 (id=945): socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffed2, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRES64=r3, @ANYRESHEX, @ANYRES64=r3, @ANYRES16=r3, @ANYBLOB="619eba8e99cbbe0dbdfd9034fe10636c68e3d7300400abd68851", @ANYRES64=r3, @ANYRESHEX], 0x454}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = io_uring_setup(0x7c84, &(0x7f0000000a40)={0x0, 0x9d81, 0x1000, 0xfffffffe, 0xcf, 0x0, r0}) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1200000081000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000e30622d76809f25308e6db574446cbfabb4bf7cd93bcacd7a2c3f9ae0959dc52253adaf36bc2335f0eb864df46c708fcf11798e745253dab4800f899a8596d1e9b437982aa45de41ccaa05409ec431c6c51c8767c9a4a44268dbde310690c21c4275c3388700e775dba7cdac03e6c26b9e2d5a5d471a4a9375c919977692ff79142f56742f134b1e1a66c9b93cf527b2891ef219b6fdaf0891f29df6cbf1896b02e41bc2e0ca8deeb0d12cf0104ec48f2150ffa9b50b697827db7b06b6fbfceae97c404b6b94735fe54a", @ANYRES8=r1, @ANYRESOCT=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f1124e827ba86df144c41e4cbc8fd1a5cc2058f1fbf2ec82a9a43af597da353389113bd074b2e187c8240eef8ce3fb4b3164ae46dc438a80b5807bcd5b5b52aaf4ad33e363e1ae273db861a5444791beb295c00a4b7fbf3bcb5a23a6b3f5489051826d20b968fbd9349495d2acb936c8a1500ec7b4a3f97140257ca6422bb866650555f3dea44ade84306acc7ccb634608dd7d575b65e4b7f37e1a9422fd014956271b28d13837fee2f281c710b3b0cb6b0000"], 0x48) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000000)=0x4, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r8, 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)=@delqdisc={0x34, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x8, 0x2}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x34}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x2000, &(0x7f0000004000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.058901635s ago: executing program 2 (id=947): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x1) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000040)='Bd\f', 0x3}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) 2.058284797s ago: executing program 0 (id=948): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1e2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') read(r2, &(0x7f0000001a00)=""/177, 0xb1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18070000000000eba98a510000000000851000000300000018000000000000000000000000000000950000000000000000000b864e994c28b24220a2d28575a99fbc802960ff7e1182ee0e5c43ab3a1afe3b246a877bd64d45916350df6658bac02327ef8835e804cb48332ab45bacc635d800000000000052f04e7f084a42b2abcbba4b8369367e667c5a26b08e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002080)={@map=r4, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_io_uring_setup(0x7ec8, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x57, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000377d34be64ce031500", @ANYRES8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930", @ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='source', &(0x7f00000001c0)="9875", 0x2) 1.080739752s ago: executing program 0 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r2, 0x2e1f0000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x18, 0x0) fanotify_mark(r4, 0x1, 0x23, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 1.00067517s ago: executing program 0 (id=953): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000600)={0xffd, "340b7832ceefd131b8e6498cad9987ffe93bbabdc60e501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000004c0)={{0x0, 0x1, 0x80000001, 0x1, 0x2}, 0x6, 0x7c12aeae, 'id0\x00', 'timer1\x00', 0x0, 0x8d, 0x7, 0x7, 0xa97}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000e4000000e4000000070000000300000004000084030000000800000001000000060000000400000002000000ffffffff020000000200000001feffff0000000003000000ff0100001000000007000006040000001000000005000000090000000500000003000000090000000d000000350400000900000008000000000000000800000000000000030000000a0000e82ac7ce010200000005000000050000004d2e00000a000000040000004b00000003000000030000040700000006000000020000000b00000005000000050000000700000010000000030000000700000000306161616100"/259], &(0x7f0000000280)=""/224, 0x103, 0xe0, 0x0, 0x7fff, 0x10000, @value}, 0x28) ioctl$SNDCTL_TMR_START(r2, 0x5402) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4090, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r3, 0x20, &(0x7f0000000040)={&(0x7f0000000e40)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/171, 0xab}}, 0x10) 997.53031ms ago: executing program 0 (id=954): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) write$snddsp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, 0x0, 0x0) r1 = io_uring_setup(0x46a8, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x8003c1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0) syncfs(r3) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) writev(r6, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) close_range(r1, r1, 0x0) 790.834394ms ago: executing program 0 (id=955): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000600)={0x0, "e79cd0f312c44f4423ca0b1d1c627685"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001600)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001a00)={0x0, 0x2, 0xff, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001e00)={0x0, 0x1, {0xf, @struct={0x9, 0x1}, r3, 0x0, 0x6, 0x5, 0x2, 0x7fffffff, 0x4, @struct={0x401, 0x7}, 0x7, 0x800, [0x0, 0xa01e, 0x3, 0x10001, 0x6, 0x6]}, {0xa00, @usage=0xff, r4, 0x7, 0x4, 0x5, 0x1, 0x800, 0x82, @struct={0x81, 0x46d1}, 0x1, 0x4, [0x81, 0x40, 0x7fff, 0x5, 0x7, 0x3]}, {0xc, @usage=0x181f, r5, 0x2, 0x674, 0x2, 0x0, 0x6, 0x0, @usage=0xe2d, 0xfff, 0x4, [0x6, 0x3, 0x89, 0x6, 0x4745, 0x2]}, {0x1, 0x5fa, 0x1}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x25, 0x0, 0x0}) r6 = dup3(r2, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xf}, {0x0, 0x6}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 540.599537ms ago: executing program 1 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x0, 0x0, &(0x7f00000000c0)=0xfe35) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000108000d00190800007cc9c5fa0e29e3c4e7c7045799abc36edc2dc1eaab69d7496fc1a1a2f4dfea3d422d90640d442ab03a96e8f5738eb6459a2d24b3ec64450da0ccd99251a3e6aabb7d998d019bd1181fc916a10e66320a8943815ea45cb72b8f66af339bc0bb6418835e2a8ce8b3"], 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x2a8, 0x390, 0x2a8, 0x1d8, 0x390, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@mh={{0x28}, {"4ef5"}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x10}, 0x203, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x0, 0x1, [0xc, 0xd9, 0x5, 0xd0, 0x7, 0x9, 0x4, 0xfff8, 0x4, 0x10, 0x9, 0x5a43, 0x5, 0x7, 0x0, 0x4], 0x10}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, 0x0, 0x1}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 540.010986ms ago: executing program 0 (id=957): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24008810}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$alg(0x26, 0x5, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000003c0)=""/223) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 340.653929ms ago: executing program 1 (id=958): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x35, 0x800, 0x4e, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netpci0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x21, 0x4, 0x4, 0x5, 0x40201, 0xffffffffffffffff, 0x3f4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c1b4695936080ad6a9dffffffff0000000000007a52a713b94df93a6ac1852c756245882ff9346ee3f7649c15ec083b01a8efc68e2b68c7eb0780819a85a457db4ff9c6c3503135348f281b2ec629da2f8009704c6c9f9257265f33bc0f314a029a4a999925f6f8bb4f90c81b3f70f6d526638438be665d25320cafced6a7aec926351c78182e3218fedfad0633e0bb7ae8cfb75e4b7152cca4fff8b825e95448677a15b295487239c2ffa95588937d3fb3f16df32643eb3c6d9cf6355e7fc86b3cefe57d6bfe5ff3eb038ac8f9769e6dabd2b533c4", @ANYRES8=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4060050) 335.43554ms ago: executing program 1 (id=959): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_loaded', 0x414101, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/87, 0x57}], 0x5, &(0x7f00000003c0)=""/222, 0xde}, 0x10140) 260.779008ms ago: executing program 1 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) exit(0x6bb) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x97}, {0x6, 0x11, 0xfc00}, {0x8, 0x15, 0x8001}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) close(r1) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x166) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (async, rerun: 64) mkdir(0x0, 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x3) (async, rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x4, 0x0, &(0x7f0000004800)) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x40, 0x0) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f6261746164760018000380100003800c000180050002000000000004000100"], 0x44}}, 0x804) (async) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000100)) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000001040)=@assoc_value, &(0x7f0000000080)=0x8) 260.124078ms ago: executing program 1 (id=961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x95, 0x0, 0x0, r1, 0x0}]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="66b845000f00d0f2a7c401792b6a50660f6a0666b8a7000f00d80f01d18fe978d75bd466ba2000ed67660f3880972ec700000f381ca900980000", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @mcast1, 0x7}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 100.240239ms ago: executing program 1 (id=962): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0xc800) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3, 0xff}}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 0s ago: executing program 2 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8000, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r5, r0, &(0x7f00000001c0)=0x8, 0x4) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r8, 0x4068aea3, &(0x7f0000000280)={0x74, 0x0, 0x9ccbf0c98906d6bd}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0xd8df, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00'}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): 621883][ T40] audit: type=1400 audit(1749185774.665:64): avc: denied { execute } for pid=5921 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.630957][ T40] audit: type=1400 audit(1749185774.665:65): avc: denied { execute_no_trans } for pid=5921 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.416654][ T40] audit: type=1400 audit(1749185776.465:66): avc: denied { mounton } for pid=5921 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.419208][ T5921] cgroup: Unknown subsys name 'net' [ 46.626889][ T5921] cgroup: Unknown subsys name 'cpuset' [ 46.633087][ T5921] cgroup: Unknown subsys name 'rlimit' [ 46.838836][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.476059][ T5921] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.584598][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 50.584608][ T40] audit: type=1400 audit(1749185780.635:80): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.801570][ T40] audit: type=1400 audit(1749185780.845:81): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.808941][ T40] audit: type=1400 audit(1749185780.845:82): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.818808][ T40] audit: type=1400 audit(1749185780.845:83): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.829014][ T40] audit: type=1400 audit(1749185780.855:84): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="socket:[5743]" dev="sockfs" ino=5743 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.842859][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.845870][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.848976][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.852055][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.855329][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.855369][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.860684][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.861487][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.863517][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.866976][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.868280][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.871474][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.872436][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.874506][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.874538][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.875704][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.876168][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.877029][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.877605][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.879036][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.880214][ T40] audit: type=1400 audit(1749185780.925:85): avc: denied { read } for pid=5939 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.880640][ T40] audit: type=1400 audit(1749185780.925:86): avc: denied { open } for pid=5939 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.913130][ T40] audit: type=1400 audit(1749185780.935:87): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.094987][ T40] audit: type=1400 audit(1749185781.145:88): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.148603][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 51.155754][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 51.231487][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 51.310077][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 51.387957][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.390775][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.395007][ T5945] bridge_slave_0: entered allmulticast mode [ 51.398776][ T5945] bridge_slave_0: entered promiscuous mode [ 51.407356][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.410299][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.415977][ T5945] bridge_slave_1: entered allmulticast mode [ 51.419837][ T5945] bridge_slave_1: entered promiscuous mode [ 51.488500][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.490837][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.493285][ T5952] bridge_slave_0: entered allmulticast mode [ 51.495917][ T5952] bridge_slave_0: entered promiscuous mode [ 51.523920][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.526634][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.529317][ T5939] bridge_slave_0: entered allmulticast mode [ 51.532937][ T5939] bridge_slave_0: entered promiscuous mode [ 51.556500][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.558785][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.561108][ T5952] bridge_slave_1: entered allmulticast mode [ 51.563848][ T5952] bridge_slave_1: entered promiscuous mode [ 51.584920][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.587913][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.590938][ T5939] bridge_slave_1: entered allmulticast mode [ 51.596225][ T5939] bridge_slave_1: entered promiscuous mode [ 51.620675][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.687380][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.696415][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.701592][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.719465][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.721742][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.724443][ T5938] bridge_slave_0: entered allmulticast mode [ 51.727361][ T5938] bridge_slave_0: entered promiscuous mode [ 51.760718][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.767131][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.770368][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.774893][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.777404][ T5938] bridge_slave_1: entered allmulticast mode [ 51.781289][ T5938] bridge_slave_1: entered promiscuous mode [ 51.787024][ T5945] team0: Port device team_slave_0 added [ 51.848613][ T5945] team0: Port device team_slave_1 added [ 51.852264][ T5952] team0: Port device team_slave_0 added [ 51.855808][ T5952] team0: Port device team_slave_1 added [ 51.917464][ T5939] team0: Port device team_slave_0 added [ 51.921052][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.926067][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.957090][ T5939] team0: Port device team_slave_1 added [ 51.972367][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.974692][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.983740][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.988052][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.990198][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.997953][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.039365][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.042286][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.051366][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.056721][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.059511][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.069823][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.094828][ T5938] team0: Port device team_slave_0 added [ 52.103501][ T5938] team0: Port device team_slave_1 added [ 52.111512][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.114743][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.124218][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.129163][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.131376][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.139332][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.213025][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.215253][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.225449][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.229729][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.231782][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.240006][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.327502][ T5945] hsr_slave_0: entered promiscuous mode [ 52.330735][ T5945] hsr_slave_1: entered promiscuous mode [ 52.341179][ T5952] hsr_slave_0: entered promiscuous mode [ 52.345358][ T5952] hsr_slave_1: entered promiscuous mode [ 52.348206][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.350862][ T5952] Cannot create hsr debugfs directory [ 52.401242][ T5938] hsr_slave_0: entered promiscuous mode [ 52.403565][ T5938] hsr_slave_1: entered promiscuous mode [ 52.405603][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.407978][ T5938] Cannot create hsr debugfs directory [ 52.427323][ T5939] hsr_slave_0: entered promiscuous mode [ 52.429524][ T5939] hsr_slave_1: entered promiscuous mode [ 52.431615][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.435337][ T5939] Cannot create hsr debugfs directory [ 52.854114][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.862812][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.869518][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.882567][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.912249][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.912924][ T5953] Bluetooth: hci2: command tx timeout [ 52.916627][ T63] Bluetooth: hci0: command tx timeout [ 52.916921][ T5949] Bluetooth: hci3: command tx timeout [ 52.916972][ T5953] Bluetooth: hci1: command tx timeout [ 52.920270][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.927693][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.942200][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.976301][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.983928][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.002140][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.006430][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.033137][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.037522][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.044214][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.048529][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.078919][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.116155][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.138449][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.140919][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.145727][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.168067][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.170968][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.190682][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.199100][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.220550][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.223631][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.229161][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.232142][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.239609][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.249391][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.266749][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.273706][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.275979][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.287778][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.290047][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.297258][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.299614][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.323828][ T40] audit: type=1400 audit(1749185783.375:89): avc: denied { sys_module } for pid=5945 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.337343][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.339687][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.427099][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.470270][ T5945] veth0_vlan: entered promiscuous mode [ 53.478205][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.487280][ T5945] veth1_vlan: entered promiscuous mode [ 53.493587][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.540233][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.542974][ T5945] veth0_macvtap: entered promiscuous mode [ 53.553227][ T5938] veth0_vlan: entered promiscuous mode [ 53.561666][ T5945] veth1_macvtap: entered promiscuous mode [ 53.568234][ T5938] veth1_vlan: entered promiscuous mode [ 53.575499][ T5952] veth0_vlan: entered promiscuous mode [ 53.589430][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.597302][ T5952] veth1_vlan: entered promiscuous mode [ 53.606122][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.624046][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.627170][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.630420][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.633911][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.651214][ T5939] veth0_vlan: entered promiscuous mode [ 53.659619][ T5938] veth0_macvtap: entered promiscuous mode [ 53.666600][ T5938] veth1_macvtap: entered promiscuous mode [ 53.673440][ T5939] veth1_vlan: entered promiscuous mode [ 53.696094][ T5952] veth0_macvtap: entered promiscuous mode [ 53.704348][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.713955][ T5952] veth1_macvtap: entered promiscuous mode [ 53.735645][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.740776][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.745693][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.756918][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.760510][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.765656][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.768991][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.791106][ T5939] veth0_macvtap: entered promiscuous mode [ 53.799639][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.806155][ T5939] veth1_macvtap: entered promiscuous mode [ 53.809425][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.811817][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.821299][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.834966][ T5952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.837649][ T5952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.840342][ T5952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.843435][ T5952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.859411][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.869158][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.873674][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.876168][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.889648][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.910493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.915548][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.918775][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.921525][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.925483][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.928213][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.957109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.961201][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.993736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.996980][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.016973][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.019426][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.045278][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.047736][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.094632][ T6032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25738 sclass=netlink_route_socket pid=6032 comm=syz.0.1 [ 54.099827][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.243468][ T6040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.364719][ T6044] program syz.1.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.373474][ T6044] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 54.447822][ T6048] process 'syz.1.9' launched './file1' with NULL argv: empty string added [ 54.538783][ T6048] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.719767][ T6063] team0: entered allmulticast mode [ 54.721464][ T6063] team_slave_0: entered allmulticast mode [ 54.724618][ T6063] team_slave_1: entered allmulticast mode [ 54.730388][ T6063] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 54.863176][ T6072] unknown channel width for channel at 909000KHz? [ 54.865910][ T6072] unknown channel width for channel at 909000KHz? [ 54.868103][ T6072] unknown channel width for channel at 909000KHz? [ 54.870351][ T6073] unknown channel width for channel at 909000KHz? [ 54.875106][ T6073] unknown channel width for channel at 909000KHz? [ 54.877806][ T6073] unknown channel width for channel at 909000KHz? [ 54.992942][ T5949] Bluetooth: hci3: command tx timeout [ 54.993568][ T63] Bluetooth: hci1: command tx timeout [ 54.995068][ T5949] Bluetooth: hci2: command tx timeout [ 54.996843][ T63] Bluetooth: hci0: command tx timeout [ 55.246441][ T6096] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6179 sclass=netlink_xfrm_socket pid=6096 comm=syz.1.24 [ 55.367489][ T6107] tipc: Trying to set illegal importance in message [ 55.377409][ T6107] kvm: user requested TSC rate below hardware speed [ 55.384862][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 55.528360][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 55.531737][ T6114] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 55.535667][ T6114] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 55.539102][ T6114] Zero length message leads to an empty skb [ 55.601403][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 55.601413][ T40] audit: type=1400 audit(1749185785.645:189): avc: denied { bind } for pid=6116 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.609854][ T40] audit: type=1400 audit(1749185785.645:190): avc: denied { listen } for pid=6116 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.700743][ T40] audit: type=1400 audit(1749185785.745:191): avc: denied { read write } for pid=6123 comm="syz.2.33" name="uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.712926][ T40] audit: type=1400 audit(1749185785.745:192): avc: denied { open } for pid=6123 comm="syz.2.33" path="/dev/uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.735180][ T40] audit: type=1400 audit(1749185785.785:193): avc: denied { create } for pid=6130 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.745037][ T40] audit: type=1400 audit(1749185785.785:194): avc: denied { name_bind } for pid=6130 comm="syz.3.35" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.753893][ T40] audit: type=1400 audit(1749185785.785:195): avc: denied { node_bind } for pid=6130 comm="syz.3.35" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.763903][ T40] audit: type=1400 audit(1749185785.815:196): avc: denied { create } for pid=6130 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.770602][ T40] audit: type=1400 audit(1749185785.815:197): avc: denied { write } for pid=6130 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.777834][ T40] audit: type=1400 audit(1749185785.815:198): avc: denied { setopt } for pid=6130 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.922079][ T6141] netlink: 'syz.2.38': attribute type 3 has an invalid length. [ 56.294003][ T60] cfg80211: failed to load regulatory.db [ 56.326653][ T6167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.331268][ T6173] ======================================================= [ 56.331268][ T6173] WARNING: The mand mount option has been deprecated and [ 56.331268][ T6173] and is ignored by this kernel. Remove the mand [ 56.331268][ T6173] option from the mount to silence this warning. [ 56.331268][ T6173] ======================================================= [ 56.421120][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 56.494705][ T6187] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 56.656887][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.860564][ T6213] kvm: emulating exchange as write [ 57.072611][ T63] Bluetooth: hci2: command tx timeout [ 57.072717][ T5953] Bluetooth: hci1: command tx timeout [ 57.072743][ T5949] Bluetooth: hci3: command tx timeout [ 57.082479][ T5953] Bluetooth: hci0: command tx timeout [ 57.086315][ T6230] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 57.152926][ T1024] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 57.292594][ T1024] usb 5-1: device descriptor read/64, error -71 [ 57.409316][ T6244] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 57.409316][ T6244] The task syz.1.67 (6244) triggered the difference, watch for misbehavior. [ 57.542507][ T1024] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 57.672475][ T1024] usb 5-1: device descriptor read/64, error -71 [ 57.782715][ T1024] usb usb5-port1: attempt power cycle [ 58.075842][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 58.122504][ T1024] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 58.143460][ T1024] usb 5-1: device descriptor read/8, error -71 [ 58.180610][ T6255] syz_tun: entered allmulticast mode [ 58.200550][ T6254] syz_tun: left allmulticast mode [ 58.305865][ T6259] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.72' sets config #1 [ 58.347241][ T6268] netlink: 'syz.1.75': attribute type 39 has an invalid length. [ 58.382869][ T1024] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 58.403385][ T1024] usb 5-1: device descriptor read/8, error -71 [ 58.513929][ T1024] usb usb5-port1: unable to enumerate USB device [ 58.595016][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.599338][ T6274] nfs: Unknown parameter 'tmpfs' [ 58.713310][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.864686][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.867859][ T54] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.871439][ T54] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.877844][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 58.880653][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.883211][ T54] usb 8-1: Product: syz [ 58.884575][ T54] usb 8-1: Manufacturer: syz [ 58.886048][ T54] usb 8-1: SerialNumber: syz [ 58.892457][ T54] hub 8-1:1.0: bad descriptor, ignoring hub [ 58.894436][ T54] hub 8-1:1.0: probe with driver hub failed with error -5 [ 58.950267][ T6285] mmap: syz.1.81 (6285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.095965][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.100376][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.104330][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.107382][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.116934][ T54] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 59.153999][ T54] usb 8-1: USB disconnect, device number 2 [ 59.154021][ T5953] Bluetooth: hci3: command tx timeout [ 59.159518][ T54] usblp0: removed [ 59.162551][ T5953] Bluetooth: hci0: command tx timeout [ 59.164172][ T5949] Bluetooth: hci1: command tx timeout [ 59.165603][ T63] Bluetooth: hci2: command tx timeout [ 59.549313][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'. [ 59.574558][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 59.757509][ T6305] random: crng reseeded on system resumption [ 59.857401][ T6312] Restarting kernel threads ... [ 59.859316][ T6312] Done restarting kernel threads. [ 59.930366][ T6329] netlink: 57 bytes leftover after parsing attributes in process `syz.2.94'. [ 59.976899][ T6334] SET target dimension over the limit! [ 60.064298][ T6347] tipc: Enabling of bearer rejected, failed to enable media [ 60.195801][ T6369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.483776][ T6376] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 60.577387][ T6379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.109'. [ 60.619804][ T6384] netlink: 27 bytes leftover after parsing attributes in process `syz.3.111'. [ 60.622249][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 60.622259][ T40] audit: type=1400 audit(1749185790.665:274): avc: denied { getopt } for pid=6382 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.657180][ T40] audit: type=1400 audit(1749185790.705:275): avc: denied { write } for pid=6388 comm="syz.0.113" path="socket:[10484]" dev="sockfs" ino=10484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.657191][ T6389] Bluetooth: MGMT ver 1.23 [ 60.706177][ T40] audit: type=1400 audit(1749185790.755:276): avc: denied { write } for pid=6397 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.843325][ T6406] bridge0: entered allmulticast mode [ 60.850216][ T6406] pim6reg: entered allmulticast mode [ 60.853480][ T40] audit: type=1400 audit(1749185790.905:277): avc: denied { connect } for pid=6405 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.861548][ T40] audit: type=1400 audit(1749185790.905:278): avc: denied { shutdown } for pid=6405 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.867775][ T40] audit: type=1400 audit(1749185790.905:279): avc: denied { write } for pid=6405 comm="syz.3.118" path="socket:[13447]" dev="sockfs" ino=13447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.912532][ T40] audit: type=1400 audit(1749185790.965:280): avc: denied { execute } for pid=6411 comm="syz.2.120" name="file1" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.914590][ T6412] afs: Unknown parameter '' [ 60.919594][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 235 [ 60.920480][ T40] audit: type=1400 audit(1749185790.965:281): avc: denied { execute_no_trans } for pid=6411 comm="syz.2.120" path="/16/file1" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.932680][ T6006] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.972925][ T40] audit: type=1400 audit(1749185791.015:282): avc: denied { connect } for pid=6418 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.980594][ T40] audit: type=1400 audit(1749185791.025:283): avc: denied { mounton } for pid=6415 comm="syz.2.122" path="/17/file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.988495][ T6416] syz.2.122: attempt to access beyond end of device [ 60.988495][ T6416] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 60.994210][ T6416] XFS (loop2): SB validate failed with error -5. [ 61.060302][ T6433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.066392][ T6433] capability: warning: `syz.2.127' uses 32-bit capabilities (legacy support in use) [ 61.075112][ T6433] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 61.077249][ T6433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.080396][ T6433] vhci_hcd vhci_hcd.0: Device attached [ 61.082957][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 61.085642][ T6436] vhci_hcd: connection closed [ 61.088235][ T13] vhci_hcd: stop threads [ 61.092591][ T13] vhci_hcd: release socket [ 61.093809][ T6006] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 61.094020][ T13] vhci_hcd: disconnect device [ 61.097401][ T6006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.102965][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.106781][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.110272][ T6006] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.114479][ T6006] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.117425][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.121730][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 61.150048][ T6442] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 61.170209][ T6442] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.175314][ T6442] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.178594][ T6442] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.181288][ T6442] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.185743][ T6442] bond1: (slave geneve2): making interface the new active one [ 61.188883][ T6442] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 61.265008][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 61.337007][ T6006] usb 5-1: usb_control_msg returned -32 [ 61.339415][ T6006] usbtmc 5-1:16.0: can't read capabilities [ 61.339464][ T6457] xt_hashlimit: size too large, truncated to 1048576 [ 61.435190][ T6463] input: syz0 as /devices/virtual/input/input5 [ 61.690085][ T6475] usbtmc 5-1:16.0: control status returned 9 [ 61.749768][ T6485] netlink: 'syz.2.141': attribute type 11 has an invalid length. [ 61.813457][ T6492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.143'. [ 61.821067][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.847502][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.894661][ T72] usb 5-1: USB disconnect, device number 6 [ 62.149498][ T6512] No source specified [ 62.292149][ T6526] overlayfs: failed to clone upperpath [ 62.360645][ T6528] tmpfs: Bad value for 'mode' [ 62.393802][ T6537] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 62.396924][ T6537] overlayfs: missing 'lowerdir' [ 62.424963][ T63] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 62.435982][ T6540] netlink: 'syz.1.160': attribute type 11 has an invalid length. [ 62.523493][ T6541] Falling back ldisc for ttyS3. [ 62.528357][ T6544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.161'. [ 62.544206][ T6540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'. [ 62.598818][ T63] Bluetooth: Unexpected continuation frame (len 137) [ 62.602238][ T6550] raw_sendmsg: syz.0.162 forgot to set AF_INET. Fix it! [ 62.621919][ T6558] 9pnet_fd: Insufficient options for proto=fd [ 62.744933][ T6586] @: renamed from vlan0 (while UP) [ 62.801930][ T6595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.814884][ T6597] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 62.824019][ T6597] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 62.826639][ T6597] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 62.860586][ T6609] capability: warning: `syz.1.182' uses deprecated v2 capabilities in a way that may be insecure [ 62.886264][ T6614] 9pnet_virtio: no channels available for device syz [ 62.897212][ T6614] overlayfs: failed to clone upperpath [ 62.901017][ T6615] overlayfs: failed to clone upperpath [ 62.954295][ T6619] loop6: detected capacity change from 0 to 7 [ 62.959504][ T6619] Dev loop6: unable to read RDB block 7 [ 62.962001][ T6619] loop6: AHDI p3 p4 [ 62.964046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 62.968940][ T6619] loop6: partition table partially beyond EOD, truncated [ 62.982160][ T6619] loop6: p3 start 1886353253 is beyond EOD, truncated [ 62.989766][ T6623] overlayfs: failed to resolve './file0': -2 [ 63.032740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.033904][ T6623] input: syz0 as /devices/virtual/input/input6 [ 63.083436][ T6633] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 63.091211][ T6631] overlayfs: statfs failed on './file0' [ 63.096349][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.100346][ T6633] bond0: (slave team0): Enslaving as an active interface with an up link [ 63.107187][ T6633] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 63.112264][ T6636] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 63.304654][ T6647] SELinux: ebitmap start bit (2281701531) is not a multiple of the map unit size (64) [ 63.310280][ T6647] SELinux: failed to load policy [ 63.430919][ T6650] netlink: 'syz.3.193': attribute type 10 has an invalid length. [ 63.437707][ T6650] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 63.440633][ T6650] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 63.445673][ T6650] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 63.457281][ T6654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6654 comm=syz.1.194 [ 63.486852][ T6656] xt_socket: unknown flags 0x8 [ 63.924297][ T6665] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 64.001593][ T6671] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 64.008678][ T6671] bond0: (slave team0): Releasing backup interface [ 64.018362][ T6671] batman_adv: batadv0: Adding interface: team0 [ 64.020962][ T6671] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 64.042717][ T6671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25893 sclass=netlink_route_socket pid=6671 comm=syz.1.200 [ 64.114379][ T6677] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 64.126648][ T6677] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.130791][ T6677] fuse: Invalid rootmode [ 64.221576][ T6687] batadv_slave_1: mtu less than device minimum [ 64.224976][ T6689] sctp: [Deprecated]: syz.3.208 (pid 6689) Use of int in maxseg socket option. [ 64.224976][ T6689] Use struct sctp_assoc_value instead [ 64.225281][ T6687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6687 comm=syz.0.207 [ 64.232058][ T6690] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 64.287209][ T6671] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 64.289671][ T6671] team0: entered promiscuous mode [ 64.291276][ T6671] team_slave_0: entered promiscuous mode [ 64.293339][ T6671] team_slave_1: entered promiscuous mode [ 64.296527][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.298681][ T6671] batman_adv: batadv0: Interface activated: team0 [ 64.300636][ T6671] batman_adv: batadv0: Interface deactivated: team0 [ 64.302841][ T6671] batman_adv: batadv0: Removing interface: team0 [ 64.306229][ T6671] bridge0: port 3(team0) entered blocking state [ 64.308248][ T6671] bridge0: port 3(team0) entered disabled state [ 64.311528][ T6671] bridge0: port 3(team0) entered blocking state [ 64.313617][ T6671] bridge0: port 3(team0) entered forwarding state [ 64.468511][ T6697] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 64.480207][ T6697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.489970][ T6697] bond2: (slave geneve3): making interface the new active one [ 64.493067][ T6697] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 64.511718][ T6697] veth5: entered promiscuous mode [ 64.516057][ T6697] bond2: (slave veth5): Enslaving as an active interface with a down link [ 64.524257][ T6697] vlan2: entered allmulticast mode [ 64.525943][ T6697] bond2: entered allmulticast mode [ 64.527566][ T6697] geneve3: entered allmulticast mode [ 64.529959][ T6697] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 64.695002][ T6700] program syz.0.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.721711][ T6704] __nla_validate_parse: 12 callbacks suppressed [ 64.721721][ T6704] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.212'. [ 65.106962][ T6717] No such timeout policy "syz1" [ 65.138346][ T6722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.168088][ T6720] program syz.3.218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.171006][ T6720] ata1.00: non-matching transfer count (32/0) [ 65.546098][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 65.606834][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 65.609756][ T6771] openvswitch: netlink: Flow actions attr not present in new flow. [ 65.629567][ T6771] 9pnet: Could not find request transport: virt« [ 65.654583][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 65.654593][ T40] audit: type=1400 audit(1749185795.705:373): avc: denied { create } for pid=6773 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.664228][ T40] audit: type=1400 audit(1749185795.705:374): avc: denied { getopt } for pid=6773 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.706604][ T60] IPVS: starting estimator thread 0... [ 65.706859][ T40] audit: type=1400 audit(1749185795.755:375): avc: denied { read write } for pid=6783 comm="syz.2.237" name="rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.716396][ T40] audit: type=1400 audit(1749185795.755:376): avc: denied { open } for pid=6783 comm="syz.2.237" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.724058][ T40] audit: type=1400 audit(1749185795.755:377): avc: denied { execute } for pid=6783 comm="syz.2.237" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.797001][ T40] audit: type=1400 audit(1749185795.845:378): avc: denied { read append } for pid=6788 comm="syz.2.239" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.804436][ T6785] IPVS: using max 45 ests per chain, 108000 per kthread [ 65.806662][ T40] audit: type=1400 audit(1749185795.845:379): avc: denied { open } for pid=6788 comm="syz.2.239" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.861004][ T40] audit: type=1400 audit(1749185795.905:380): avc: denied { append } for pid=6793 comm="syz.2.240" name="nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.902476][ T838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.955535][ T6799] mkiss: ax0: crc mode is auto. [ 65.967619][ T40] audit: type=1400 audit(1749185796.015:381): avc: denied { search } for pid=5654 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.974171][ T40] audit: type=1400 audit(1749185796.015:382): avc: denied { search } for pid=5654 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.083882][ T838] usb 8-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.087860][ T838] usb 8-1: config 1 interface 0 has no altsetting 0 [ 66.091521][ T838] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.095187][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.098153][ T838] usb 8-1: Product: syz [ 66.099838][ T838] usb 8-1: Manufacturer: syz [ 66.101346][ T838] usb 8-1: SerialNumber: syz [ 66.190712][ T6822] overlayfs: failed to clone upperpath [ 66.248768][ T6831] netlink: 72 bytes leftover after parsing attributes in process `syz.1.253'. [ 66.253149][ T6831] trusted_key: encrypted_key: master key parameter is missing [ 66.278473][ T6834] binder: 6832:6834 ioctl c0306201 200000000080 returned -14 [ 66.310837][ T838] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 66.320087][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.255'. [ 66.343095][ T6843] trusted_key: syz.0.250 sent an empty control message without MSG_MORE. [ 66.444505][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 66.447627][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 66.482849][ T6856] xt_hashlimit: size too large, truncated to 1048576 [ 66.511815][ T838] usb 8-1: USB disconnect, device number 3 [ 66.714527][ T6867] "syz.1.263" (6867) uses obsolete ecb(arc4) skcipher [ 66.716865][ T6781] usblp0: removed [ 66.717564][ T63] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 67.246277][ T6898] syz.3.271 uses obsolete (PF_INET,SOCK_PACKET) [ 67.304719][ T6907] sp0: Synchronizing with TNC [ 67.309075][ T6907] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 67.311971][ T6907] netlink: 'syz.2.273': attribute type 2 has an invalid length. [ 67.314908][ T6907] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 67.400339][ T63] Bluetooth: hci1: unexpected event 0x0b length: 4 < 11 [ 67.439310][ T6917] trusted_key: encrypted_key: keylen parameter is missing [ 67.466133][ T6919] program syz.2.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.869460][ T6932] netlink: 'syz.3.279': attribute type 30 has an invalid length. [ 67.872042][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 67.878466][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.967763][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.282'. [ 67.971310][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.282'. [ 68.676787][ T6948] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 68.724102][ T6955] unsupported nlmsg_type 40 [ 68.862817][ T6968] xt_TCPMSS: Only works on TCP SYN packets [ 68.920826][ T6975] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 69.046251][ T6987] syz_tun: entered allmulticast mode [ 69.049820][ T6986] syz_tun: left allmulticast mode [ 69.571040][ T7029] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 69.584659][ T7031] --map-set only usable from mangle table [ 69.671255][ T7038] fuse: Unknown parameter 'grod' [ 69.792476][ T3322] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.822693][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.972565][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 69.975605][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.978676][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.981693][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.983953][ T3322] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 69.985066][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.987189][ T3322] usb 7-1: can't read configurations, error -22 [ 69.993264][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.996146][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.112788][ T3322] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.202317][ T60] usb 5-1: GET_CAPABILITIES returned 0 [ 70.204170][ T60] usbtmc 5-1:16.0: can't read capabilities [ 70.274743][ T3322] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 70.277354][ T3322] usb 7-1: can't read configurations, error -22 [ 70.280590][ T3322] usb usb7-port1: attempt power cycle [ 70.403297][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.495724][ T7059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 70.642457][ T3322] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.674950][ T3322] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 70.677514][ T3322] usb 7-1: can't read configurations, error -22 [ 70.822952][ T3322] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 70.833511][ T7075] __nla_validate_parse: 3 callbacks suppressed [ 70.833521][ T7075] netlink: 64 bytes leftover after parsing attributes in process `syz.1.324'. [ 70.845369][ T3322] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 70.848295][ T3322] usb 7-1: can't read configurations, error -22 [ 70.851413][ T3322] usb usb7-port1: unable to enumerate USB device [ 70.864777][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.325'. [ 70.894846][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 70.894856][ T40] audit: type=1400 audit(1749185800.945:446): avc: denied { map } for pid=7078 comm="syz.1.326" path="socket:[14728]" dev="sockfs" ino=14728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 70.963141][ T40] audit: type=1326 audit(1749185801.015:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.1.328" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5595b8e929 code=0x0 [ 71.002526][ T838] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.076397][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.078599][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.162631][ T838] usb 8-1: Using ep0 maxpacket: 16 [ 71.166864][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.174210][ T838] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 71.178186][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.181612][ T838] usb 8-1: Product: syz [ 71.183544][ T838] usb 8-1: Manufacturer: syz [ 71.185527][ T838] usb 8-1: SerialNumber: syz [ 71.190548][ T838] usb 8-1: config 0 descriptor?? [ 71.195902][ T838] hub 8-1:0.0: bad descriptor, ignoring hub [ 71.198451][ T838] hub 8-1:0.0: probe with driver hub failed with error -5 [ 71.205193][ T838] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 71.928135][ T40] audit: type=1400 audit(1749185801.975:448): avc: denied { mount } for pid=7085 comm="syz.3.329" name="/" dev="rpc_pipefs" ino=17286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 71.933765][ T7086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.969913][ T7088] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 72.024523][ T40] audit: type=1400 audit(1749185802.075:449): avc: denied { read } for pid=7090 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.197314][ T3322] usb 8-1: USB disconnect, device number 4 [ 72.593628][ T34] usb 5-1: USB disconnect, device number 7 [ 72.838021][ T7110] only policy match revision 0 supported [ 72.838034][ T7110] unable to load match [ 72.935257][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.340'. [ 73.049731][ T7122] netlink: 'syz.0.342': attribute type 16 has an invalid length. [ 73.052172][ T7122] netlink: 'syz.0.342': attribute type 17 has an invalid length. [ 73.096149][ T54] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 73.104612][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 73.107506][ T7124] bridge_slave_1: left promiscuous mode [ 73.109529][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.113298][ T7124] bridge_slave_0: left allmulticast mode [ 73.115029][ T7124] bridge_slave_0: left promiscuous mode [ 73.116787][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.160833][ T40] audit: type=1400 audit(1749185803.205:450): avc: denied { mount } for pid=7123 comm="syz.0.343" name="/" dev="ramfs" ino=14770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.161662][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 73.273755][ T54] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.276449][ T54] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.278960][ T40] audit: type=1400 audit(1749185803.325:451): avc: denied { mounton } for pid=7126 comm="syz.0.344" path="/60/file1/bus" dev="ramfs" ino=14780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 73.279638][ T54] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.280716][ T7127] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.280742][ T7127] overlayfs: failed to set xattr on upper [ 73.280746][ T7127] overlayfs: ...falling back to redirect_dir=nofollow. [ 73.280751][ T7127] overlayfs: ...falling back to index=off. [ 73.280754][ T7127] overlayfs: ...falling back to uuid=null. [ 73.294374][ T40] audit: type=1400 audit(1749185803.345:452): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.295959][ T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.317957][ T54] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.321661][ T54] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.324916][ T54] usb 7-1: Product: syz [ 73.326627][ T54] usb 7-1: Manufacturer: syz [ 73.335880][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 73.337647][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 73.341002][ T54] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 73.343000][ T54] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.523639][ T40] audit: type=1400 audit(1749185803.575:453): avc: denied { ioctl } for pid=7138 comm="syz.3.348" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.540732][ T40] audit: type=1400 audit(1749185803.585:454): avc: denied { read write } for pid=7109 comm="syz.2.337" name="cdc-wdm0" dev="devtmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 73.541657][ T54] usb 7-1: USB disconnect, device number 6 [ 73.548727][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 73.552904][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 73.555002][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 73.558220][ T40] audit: type=1400 audit(1749185803.585:455): avc: denied { open } for pid=7109 comm="syz.2.337" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 73.736673][ T7151] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 4, id = 0 [ 74.043828][ T7155] delete_channel: no stack [ 74.304860][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 74.326317][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'. [ 74.329065][ T7168] bond3: entered promiscuous mode [ 74.331488][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'. [ 74.431680][ T7185] tipc: Started in network mode [ 74.434556][ T7185] tipc: Node identity 460f5f5023fe, cluster identity 4711 [ 74.437570][ T7185] tipc: Enabled bearer , priority 0 [ 74.441252][ T7186] syzkaller0: entered promiscuous mode [ 74.448222][ T7186] syzkaller0: entered allmulticast mode [ 74.459761][ T7186] tipc: Resetting bearer [ 74.467386][ T7184] tipc: Resetting bearer [ 74.477959][ T7184] tipc: Disabling bearer [ 74.518412][ T7197] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 74.529374][ T7197] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.532244][ T7197] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.535118][ T7197] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.538134][ T7197] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.618621][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 75.472140][ T7267] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 75.477380][ T7267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.482236][ T7267] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 75.526142][ T7269] tracefs: Unknown parameter 'ui' [ 75.589020][ T7273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.387'. [ 75.670756][ T7277] sp0: Synchronizing with TNC [ 76.421536][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 76.421546][ T40] audit: type=1400 audit(1749185806.465:467): avc: denied { bind } for pid=7297 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.429915][ T40] audit: type=1400 audit(1749185806.475:468): avc: denied { listen } for pid=7297 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.475817][ T7305] autofs: Bad value for 'fd' [ 76.483622][ T40] audit: type=1400 audit(1749185806.535:469): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.506076][ T7307] __nla_validate_parse: 1 callbacks suppressed [ 76.506086][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'. [ 76.511039][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 76.515032][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'. [ 76.517904][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'. [ 76.539414][ T7307] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 76.625420][ T40] audit: type=1400 audit(1749185806.675:470): avc: denied { accept } for pid=7314 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 76.727444][ T40] audit: type=1400 audit(1749185806.775:471): avc: denied { map } for pid=7328 comm="syz.3.407" path="/proc/sys/net/ipv4/vs/sync_qlen_max" dev="proc" ino=19744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 76.826155][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 76.954632][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 77.002721][ T40] audit: type=1400 audit(1749185807.055:472): avc: denied { create } for pid=7342 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.009183][ T7343] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 77.025044][ T40] audit: type=1400 audit(1749185807.075:473): avc: denied { write } for pid=7342 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.230213][ T40] audit: type=1400 audit(1749185807.275:474): avc: denied { bind } for pid=7362 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.237712][ T40] audit: type=1400 audit(1749185807.275:475): avc: denied { name_bind } for pid=7362 comm="syz.1.419" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 77.244138][ T40] audit: type=1400 audit(1749185807.275:476): avc: denied { node_bind } for pid=7362 comm="syz.1.419" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 77.296044][ T7374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7374 comm=syz.0.421 [ 77.434584][ T7385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.425'. [ 78.096578][ T7401] IPv4: Oversized IP packet from 172.20.20.24 [ 78.099055][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 78.101069][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 78.258215][ T7412] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 78.261927][ T7410] tmpfs: Unknown parameter 'usrquota_inode_h¾?+×(Ëardlimit' [ 78.268741][ T7412] bond4: entered promiscuous mode [ 78.270406][ T7412] bond4: entered allmulticast mode [ 78.284583][ T7412] bond4: (slave ip6gretap1): making interface the new active one [ 78.286997][ T7412] ip6gretap1: entered promiscuous mode [ 78.288754][ T7412] ip6gretap1: entered allmulticast mode [ 78.291142][ T7412] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 78.295716][ T7412] netlink: 56 bytes leftover after parsing attributes in process `syz.1.434'. [ 78.309806][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 78.425981][ T7428] ref_ctr increment failed for inode: 0x361 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880364960c0 [ 78.431260][ T7426] uprobe: syz.1.440:7426 failed to unregister, leaking uprobe [ 78.510279][ T7438] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 78.560680][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 78.566173][ T7438] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 78.575382][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 78.622234][ T7445] ip6gre1: entered promiscuous mode [ 78.702484][ T6223] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.872467][ T6223] usb 5-1: Using ep0 maxpacket: 16 [ 78.875351][ T6223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.876886][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.878711][ T6223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.902419][ T6223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.907481][ T6223] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.910386][ T6223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.925683][ T6223] usb 5-1: config 0 descriptor?? [ 79.133600][ T6223] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 79.135938][ T6223] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 79.138174][ T6223] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 79.140310][ T6223] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 79.142542][ T6223] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 79.147476][ T6223] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 79.164727][ T6223] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 79.167419][ T6223] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 79.333484][ T7434] random: crng reseeded on system resumption [ 79.342589][ T1024] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 79.346371][ T1024] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 79.350712][ T6223] usb 5-1: USB disconnect, device number 8 [ 79.355440][ T1024] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 79.358831][ T1024] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 79.493257][ T7480] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.495510][ T7480] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.514698][ T7486] SELinux: Context Ü is not valid (left unmapped). [ 79.519383][ T7486] netlink: 'syz.3.459': attribute type 2 has an invalid length. [ 79.526555][ T7484] delete_channel: no stack [ 79.621126][ T7498] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 79.625849][ T7498] overlayfs: missing 'lowerdir' [ 79.784522][ T7508] overlayfs: failed to clone upperpath [ 80.770269][ T63] Bluetooth: hci3: hardware error 0x0e [ 80.944135][ T7517] block nbd2: shutting down sockets [ 81.036338][ T7541] Cannot find del_set index 4 as target [ 81.038558][ T7545] Cannot find del_set index 4 as target [ 81.197753][ T7553] bridge0: port 3(team0) entered disabled state [ 81.259892][ T7553] team0 (unregistering): left allmulticast mode [ 81.261904][ T7553] team_slave_0: left allmulticast mode [ 81.263866][ T7553] team_slave_1: left allmulticast mode [ 81.265568][ T7553] bridge0: port 3(team0) entered disabled state [ 81.269792][ T7553] team_slave_0: left promiscuous mode [ 81.280633][ T7553] team0 (unregistering): Port device team_slave_0 removed [ 81.283880][ T7553] team_slave_1: left promiscuous mode [ 81.289625][ T7553] team0 (unregistering): Port device team_slave_1 removed [ 81.435731][ T7565] overlayfs: failed to clone upperpath [ 81.590500][ T7584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.593411][ T7584] overlayfs: failed to set xattr on upper [ 81.595249][ T7584] overlayfs: ...falling back to redirect_dir=nofollow. [ 81.597561][ T7584] overlayfs: ...falling back to index=off. [ 81.599345][ T7584] overlayfs: ...falling back to uuid=null. [ 81.690756][ T7589] kvm: pic: non byte write [ 81.705772][ T7594] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 81.847950][ T5949] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 81.934509][ T7610] xt_hashlimit: size too large, truncated to 1048576 [ 81.982871][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 81.982882][ T40] audit: type=1400 audit(1749185812.035:497): avc: denied { mounton } for pid=7607 comm="syz.0.502" path="/100/bus" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 81.984135][ T7612] JFS: discard option not supported on device [ 81.994757][ T7612] syz.0.502: attempt to access beyond end of device [ 81.994757][ T7612] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 81.998707][ T7612] syz.0.502: attempt to access beyond end of device [ 81.998707][ T7612] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 82.002923][ T7612] Mount JFS Failure: -5 [ 82.280528][ T7619] __nla_validate_parse: 6 callbacks suppressed [ 82.280540][ T7619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 82.340825][ T7627] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 82.423207][ T7637] netlink: 'syz.1.505': attribute type 21 has an invalid length. [ 82.431903][ T7637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'. [ 82.435965][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 82.443209][ T7639] xt_hashlimit: size too large, truncated to 1048576 [ 82.474517][ T40] audit: type=1400 audit(1749185812.525:498): avc: denied { mount } for pid=7633 comm="syz.2.511" name="/" dev="configfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.481862][ T40] audit: type=1400 audit(1749185812.525:499): avc: denied { search } for pid=7633 comm="syz.2.511" name="/" dev="configfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.535456][ T7646] netlink: 'syz.3.513': attribute type 8 has an invalid length. [ 82.581035][ T40] audit: type=1400 audit(1749185812.625:500): avc: denied { setattr } for pid=7651 comm="syz.2.514" name="NETLINK" dev="sockfs" ino=20579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.604029][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.515'. [ 82.606804][ T7658] netlink: 'syz.3.515': attribute type 7 has an invalid length. [ 82.609375][ T7658] netlink: 'syz.3.515': attribute type 8 has an invalid length. [ 82.611840][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 82.623053][ T7658] ip6gretap0: entered promiscuous mode [ 82.625645][ T7658] syz_tun: entered promiscuous mode [ 82.627535][ T7658] erspan0: entered promiscuous mode [ 82.629254][ T7664] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 82.635024][ T40] audit: type=1400 audit(1749185812.685:501): avc: denied { relabelto } for pid=7663 comm="syz.1.518" name="187" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 82.650635][ T40] audit: type=1400 audit(1749185812.685:502): avc: denied { associate } for pid=7663 comm="syz.1.518" name="187" dev="tmpfs" ino=1030 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 82.669885][ T40] audit: type=1400 audit(1749185812.705:503): avc: denied { remove_name } for pid=5938 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 82.680462][ T40] audit: type=1400 audit(1749185812.705:504): avc: denied { rmdir } for pid=5938 comm="syz-executor" name="187" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 82.691155][ T7666] netlink: 'syz.3.520': attribute type 29 has an invalid length. [ 82.691635][ T40] audit: type=1400 audit(1749185812.715:505): avc: denied { create } for pid=7665 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.693868][ T7666] netlink: 'syz.3.520': attribute type 13 has an invalid length. [ 82.699566][ T40] audit: type=1400 audit(1749185812.735:506): avc: denied { mounton } for pid=7667 comm="syz.2.519" path="/proc/267/task" dev="proc" ino=21567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.763369][ T7685] overlayfs: failed to clone upperpath [ 82.836524][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 82.897810][ T7707] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.984363][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.536'. [ 82.987267][ T7725] netlink: 'syz.2.536': attribute type 7 has an invalid length. [ 82.989678][ T7725] netlink: 'syz.2.536': attribute type 8 has an invalid length. [ 82.992064][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 83.000843][ T7725] erspan0: entered promiscuous mode [ 83.003537][ T7725] erspan0: left promiscuous mode [ 83.010048][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.538'. [ 83.069448][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.531'. [ 83.072332][ T7713] netlink: 92 bytes leftover after parsing attributes in process `syz.3.531'. [ 83.288788][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.291211][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.294837][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.297552][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.775095][ T7764] netlink: zone id is out of range [ 83.776694][ T7764] netlink: zone id is out of range [ 83.778295][ T7764] netlink: zone id is out of range [ 83.779953][ T7764] netlink: zone id is out of range [ 83.781614][ T7764] netlink: zone id is out of range [ 83.783371][ T7764] netlink: zone id is out of range [ 83.784944][ T7764] netlink: zone id is out of range [ 83.786548][ T7764] netlink: zone id is out of range [ 83.788142][ T7764] netlink: zone id is out of range [ 83.789732][ T7764] netlink: zone id is out of range [ 84.001618][ T7774] XFS (nbd0): no-recovery mounts must be read-only. [ 84.338755][ T7809] netlink: 'syz.3.563': attribute type 21 has an invalid length. [ 84.341345][ T7809] netlink: 'syz.3.563': attribute type 6 has an invalid length. [ 84.406800][ T7816] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 84.448641][ T7821] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 84.537230][ T7831] tipc: Started in network mode [ 84.538967][ T7831] tipc: Node identity fadd1f15e517, cluster identity 4711 [ 84.541355][ T7831] tipc: Enabled bearer , priority 0 [ 84.552224][ T7835] overlayfs: workdir and upperdir must reside under the same mount [ 84.592526][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.607007][ T7830] tipc: Resetting bearer [ 84.742455][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 84.749892][ T60] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 84.755532][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.761479][ T60] usb 5-1: config 0 descriptor?? [ 84.769274][ T60] as10x_usb: device has been detected [ 84.775714][ T60] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 84.824515][ T60] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 84.918626][ T60] as10x_usb: error during firmware upload part1 [ 84.920786][ T60] Registered device nBox DVB-T Dongle [ 84.983372][ T34] usb 5-1: USB disconnect, device number 9 [ 85.016061][ T34] Unregistered device nBox DVB-T Dongle [ 85.019746][ T34] as10x_usb: device has been disconnected [ 85.485668][ T7830] tipc: Disabling bearer [ 85.595593][ T7847] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 85.609444][ T7847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.639180][ T7847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.641496][ T7847] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 85.646044][ T7847] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 85.671726][ T7870] bond2: (slave dummy0): making interface the new active one [ 85.674475][ T7870] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 85.689255][ T7872] SELinux: failed to load policy [ 85.691327][ T7872] SELinux: failed to load policy [ 85.693181][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.696301][ T7872] SELinux: failed to load policy [ 85.699444][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.699473][ T7872] SELinux: failed to load policy [ 85.699644][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.699663][ T7872] SELinux: failed to load policy [ 85.699802][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.699822][ T7872] SELinux: failed to load policy [ 85.699959][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.699977][ T7872] SELinux: failed to load policy [ 85.700099][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.700118][ T7872] SELinux: failed to load policy [ 85.700256][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.700278][ T7872] SELinux: failed to load policy [ 85.700418][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.700439][ T7872] SELinux: failed to load policy [ 85.700578][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.700817][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.700989][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.701145][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.701337][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.701487][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.701649][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.701790][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.701949][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.702090][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.702252][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.702607][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.702927][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703070][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703215][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703351][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703509][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703642][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703798][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.703937][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.704089][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.704222][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.704366][ T7872] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 85.748228][ T7879] tmpfs: Unknown parameter 'usrqota_block_' [ 85.912909][ T7886] IPVS: Scheduler module ip_vs_sip not found [ 85.917418][ T7886] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 85.945785][ T7889] xt_cgroup: invalid path, errno=-2 [ 85.955366][ T7891] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 86.022324][ T54] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 86.026400][ T54] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 86.028759][ T54] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 86.031152][ T54] hid-generic 0000:0000:20000000.0003: item fetching failed at offset 11/43 [ 86.034767][ T54] hid-generic 0000:0000:20000000.0003: probe with driver hid-generic failed with error -22 [ 86.062137][ T7906] team0: No ports can be present during mode change [ 86.065658][ T7906] tipc: Started in network mode [ 86.067202][ T7906] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 86.069720][ T7906] tipc: Enabled bearer , priority 0 [ 86.120722][ T7911] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 86.124060][ T7911] lo: entered promiscuous mode [ 86.127506][ T7911] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.342538][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.411800][ T7924] vlan2: entered promiscuous mode [ 86.414030][ T7924] bridge0: entered promiscuous mode [ 86.415763][ T7924] vlan2: entered allmulticast mode [ 86.492541][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 86.500136][ T60] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 86.503199][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.506023][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.509666][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.514230][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.519555][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.524859][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.585737][ T7937] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 86.600375][ T7937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.612291][ T7937] ip6erspan0: entered promiscuous mode [ 86.616167][ T7937] bond3: (slave ip6erspan0): making interface the new active one [ 86.619422][ T7937] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 86.750051][ T60] usb 5-1: usb_control_msg returned -32 [ 86.752123][ T60] usbtmc 5-1:16.0: can't read capabilities [ 86.815231][ T7951] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.825704][ T7951] CIFS mount error: No usable UNC path provided in device string! [ 86.825704][ T7951] [ 86.830002][ T7951] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.915684][ T7977] NILFS (nullb0): couldn't find nilfs on the device [ 87.100070][ T7985] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 87.104989][ T54] usb 5-1: USB disconnect, device number 10 [ 87.183783][ T60] tipc: Node number set to 11578026 [ 87.353587][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 87.353598][ T40] audit: type=1400 audit(1749185817.405:539): avc: denied { write } for pid=7986 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.361992][ T7987] __nla_validate_parse: 10 callbacks suppressed [ 87.362001][ T7987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.614'. [ 87.362514][ T40] audit: type=1400 audit(1749185817.405:540): avc: denied { nlmsg_write } for pid=7986 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.677692][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 87.706132][ T8018] fuse: Unknown parameter 'allther' [ 87.726887][ T8004] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 87.744161][ T8004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 87.755983][ T8004] bond4: (slave gretap1): making interface the new active one [ 87.760247][ T8004] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 87.789921][ T8022] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 87.997252][ T40] audit: type=1400 audit(1749185818.045:541): avc: denied { execute } for pid=8036 comm="syz.1.627" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.174576][ T40] audit: type=1400 audit(1749185818.225:542): avc: denied { setopt } for pid=8048 comm="syz.0.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.627198][ T40] audit: type=1326 audit(1749185818.675:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.3.635" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b58e929 code=0x7ff80000 [ 88.759261][ T8071] fuse: Invalid rootmode [ 88.766289][ T8071] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.826932][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.643'. [ 88.913192][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 88.914124][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.444894][ T8096] cgroup: fork rejected by pids controller in /syz3 [ 89.483030][ T8144] syzkaller1: entered promiscuous mode [ 89.485184][ T8144] syzkaller1: entered allmulticast mode [ 89.601330][ T8177] delete_channel: no stack [ 89.691914][ T40] audit: type=1400 audit(1749185819.735:544): avc: denied { ioctl } for pid=8180 comm="syz.2.651" path="socket:[22164]" dev="sockfs" ino=22164 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.706515][ T40] audit: type=1400 audit(1749185819.745:545): avc: denied { listen } for pid=8194 comm="syz.1.655" path=2F3233312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.717767][ T40] audit: type=1400 audit(1749185819.745:546): avc: denied { accept } for pid=8194 comm="syz.1.655" path=2F3233312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.725174][ T40] audit: type=1400 audit(1749185819.755:547): avc: denied { write } for pid=8189 comm="syz.3.653" name="usbmon1" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.778924][ T40] audit: type=1326 audit(1749185819.825:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.2.660" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f677cf8e929 code=0x0 [ 89.837092][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 89.843791][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 89.896818][ T8228] nftables ruleset with unbound set [ 89.901815][ T8228] net_ratelimit: 46 callbacks suppressed [ 89.901825][ T8228] openvswitch: netlink: Tunnel attr 1 has unexpected len 5 expected 4 [ 89.942041][ T8217] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 89.972185][ T8232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 89.974815][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.979176][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 89.981909][ T8233] vhci_hcd: cannot find the pending unlink 3 [ 89.984465][ T8233] vhci_hcd: connection closed [ 89.986687][ T7954] vhci_hcd: stop threads [ 89.989537][ T7954] vhci_hcd: release socket [ 89.991597][ T7954] vhci_hcd: disconnect device [ 90.416473][ T8236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.668'. [ 90.992544][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.122489][ T60] usb 5-1: device descriptor read/64, error -71 [ 91.362553][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 91.492582][ T60] usb 5-1: device descriptor read/64, error -71 [ 91.602870][ T60] usb usb5-port1: attempt power cycle [ 91.675281][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 91.678024][ T8284] netlink: 2 bytes leftover after parsing attributes in process `syz.1.685'. [ 91.942485][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 91.963753][ T60] usb 5-1: device descriptor read/8, error -71 [ 92.011708][ T8302] netlink: 'syz.3.691': attribute type 11 has an invalid length. [ 92.015130][ T8302] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.691'. [ 92.060809][ T8305] program syz.3.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.202612][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 92.222855][ T60] usb 5-1: device descriptor read/8, error -71 [ 92.342707][ T60] usb usb5-port1: unable to enumerate USB device [ 92.355407][ T8316] netlink: 52 bytes leftover after parsing attributes in process `syz.1.696'. [ 92.384419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.440529][ T8325] sctp: [Deprecated]: syz.3.699 (pid 8325) Use of int in maxseg socket option. [ 92.440529][ T8325] Use struct sctp_assoc_value instead [ 92.487057][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 92.665958][ T8341] netlink: 'syz.1.705': attribute type 2 has an invalid length. [ 92.668348][ T8341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.705'. [ 92.706951][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 92.706961][ T40] audit: type=1400 audit(1749185822.755:558): avc: denied { mount } for pid=8342 comm="syz.3.706" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.715856][ T40] audit: type=1400 audit(1749185822.755:559): avc: denied { mounton } for pid=8342 comm="syz.3.706" path="/185/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 92.722605][ T40] audit: type=1400 audit(1749185822.755:560): avc: denied { remount } for pid=8342 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.821977][ T40] audit: type=1400 audit(1749185822.865:561): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 93.073037][ T40] audit: type=1400 audit(1749185823.125:562): avc: denied { setopt } for pid=8357 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.115886][ T8360] xt_socket: unknown flags 0x50 [ 93.136508][ T40] audit: type=1400 audit(1749185823.185:563): avc: denied { write } for pid=8359 comm="syz.2.712" name="file0" dev="9p" ino=35913844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.145857][ T40] audit: type=1400 audit(1749185823.185:564): avc: denied { open } for pid=8359 comm="syz.2.712" path="/138/file0/file0" dev="9p" ino=35913844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.147030][ T8361] xt_socket: unknown flags 0x50 [ 93.155132][ T838] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 93.276284][ T40] audit: type=1400 audit(1749185823.325:565): avc: denied { create } for pid=8367 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.282953][ T40] audit: type=1400 audit(1749185823.335:566): avc: denied { ioctl } for pid=8367 comm="syz.2.714" path="socket:[22334]" dev="sockfs" ino=22334 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.304291][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.307896][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 93.311352][ T838] usb 8-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 93.314449][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.318312][ T838] usb 8-1: config 0 descriptor?? [ 93.320394][ T8352] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.458232][ T8377] xt_hashlimit: invalid interval [ 93.527667][ T838] usbhid 8-1:0.0: can't add hid device: -71 [ 93.529682][ T838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.533849][ T838] usb 8-1: USB disconnect, device number 5 [ 93.608145][ T63] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 93.657126][ T40] audit: type=1400 audit(1749185823.705:567): avc: denied { append } for pid=8388 comm="syz.2.721" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.901856][ T8405] netlink: 'syz.0.728': attribute type 3 has an invalid length. [ 93.940280][ T8411] tipc: Enabling not permitted [ 93.942893][ T8411] tipc: Enabling of bearer rejected, failed to enable media [ 94.761944][ T8471] netlink: 'syz.1.746': attribute type 3 has an invalid length. [ 94.812241][ T8476] geneve1: entered allmulticast mode [ 95.140267][ T8493] 9p: Unknown access argument 18446744073709551615: -34 [ 95.332089][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 95.339625][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 95.344512][ T8502] dummy0: entered promiscuous mode [ 95.484285][ T8506] Bluetooth: MGMT ver 1.23 [ 95.487291][ T8506] Bluetooth: hci0: unsupported parameter 2327 [ 95.489874][ T8506] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 95.646057][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 95.678781][ T8508] 8021q: adding VLAN 0 to HW filter on device bond5 [ 95.761470][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 96.005944][ T8530] program syz.3.766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.237658][ T8542] tmpfs: Cannot change global quota limit on remount [ 96.472460][ T838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 96.602655][ T838] usb 5-1: device descriptor read/64, error -71 [ 96.862784][ T838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 96.891325][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 96.895811][ T8561] bridge_slave_1: left allmulticast mode [ 96.898049][ T8561] bridge_slave_1: left promiscuous mode [ 96.900383][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.907153][ T8561] bridge_slave_0: left allmulticast mode [ 96.909501][ T8561] bridge_slave_0: left promiscuous mode [ 96.911981][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.992671][ T838] usb 5-1: device descriptor read/64, error -71 [ 97.107590][ T838] usb usb5-port1: attempt power cycle [ 97.184626][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 97.187911][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 97.208232][ T8573] netlink: 'syz.3.780': attribute type 32 has an invalid length. [ 97.239267][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 97.242061][ T8575] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 97.372892][ T1024] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 97.442744][ T838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 97.462960][ T838] usb 5-1: device descriptor read/8, error -71 [ 97.702554][ T838] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 97.725133][ T838] usb 5-1: device descriptor read/8, error -71 [ 97.833543][ T838] usb usb5-port1: unable to enumerate USB device [ 98.432302][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 98.432313][ T40] audit: type=1400 audit(1749185828.475:585): avc: denied { block_suspend } for pid=8599 comm="syz.1.790" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.445246][ T8611] overlay: ./file0 is not a directory [ 98.671410][ T8627] netlink: 'syz.1.798': attribute type 2 has an invalid length. [ 98.706240][ T8629] input: syz0 as /devices/virtual/input/input13 [ 98.722874][ T1024] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 98.884262][ T1024] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.887261][ T1024] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.891298][ T1024] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.894131][ T1024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.100326][ T1024] usb 7-1: usb_control_msg returned -32 [ 99.102246][ T1024] usbtmc 7-1:16.0: can't read capabilities [ 99.296584][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 99.353569][ T8659] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 99.456873][ T40] audit: type=1400 audit(1749185829.505:586): avc: denied { connect } for pid=8612 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.541459][ T8685] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 99.545046][ T8685] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 99.721512][ T40] audit: type=1400 audit(1749185829.765:587): avc: denied { getopt } for pid=8695 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.816745][ T8721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.822'. [ 100.059707][ T8748] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 100.232010][ T8757] input: syz1 as /devices/virtual/input/input14 [ 100.512797][ T5949] Bluetooth: hci2: command 0x0406 tx timeout [ 100.562218][ T8777] openvswitch: netlink: Flow actions attr not present in new flow. [ 100.579166][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 100.582575][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 100.754606][ T40] audit: type=1400 audit(1749185830.805:588): avc: denied { mounton } for pid=8784 comm="syz.3.843" path="/227/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.754619][ T8788] cifs: Unknown parameter '¾7%koÃœ6õÕã¿' [ 100.788057][ T8790] sit0: entered promiscuous mode [ 100.797393][ T8790] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 100.799862][ T8790] netlink: 1 bytes leftover after parsing attributes in process `syz.1.844'. [ 100.829585][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 100.861482][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 100.896498][ T40] audit: type=1400 audit(1749185830.945:589): avc: denied { bind } for pid=8795 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.385950][ T8739] netlink: 76 bytes leftover after parsing attributes in process `syz.0.826'. [ 101.467380][ T40] audit: type=1400 audit(1749185831.515:590): avc: denied { name_bind 0x1000000 } for pid=8799 comm="syz.1.848" path="socket:[24529]" dev="sockfs" ino=24529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.469237][ T8799] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 101.501950][ T5993] usb 7-1: USB disconnect, device number 7 [ 101.523431][ T8802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8802 comm=syz.3.849 [ 101.539455][ T60] Process accounting resumed [ 101.546407][ T60] Process accounting resumed [ 101.575483][ T40] audit: type=1400 audit(1749185831.625:591): avc: denied { read open } for pid=8816 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.586164][ T40] audit: type=1400 audit(1749185831.625:592): avc: denied { getattr } for pid=8816 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.596592][ T40] audit: type=1400 audit(1749185831.625:593): avc: denied { add_name } for pid=8813 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.607315][ T40] audit: type=1400 audit(1749185831.625:594): avc: denied { create } for pid=8813 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.660807][ T8832] cgroup: none used incorrectly [ 101.664762][ T8833] cgroup: none used incorrectly [ 101.669769][ T8835] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 101.674759][ T8835] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 101.727805][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 101.766502][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 101.767293][ T8858] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 101.772771][ T8857] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 101.783967][ T8857] bond6: entered promiscuous mode [ 101.785932][ T8857] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.803603][ T8858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 101.816694][ T8857] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.818959][ T8857] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 101.822155][ T8857] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 101.828739][ T8857] bond6: (slave ip6gre1): making interface the new active one [ 101.831992][ T8857] ip6gre1: entered promiscuous mode [ 101.834552][ T8857] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 101.837290][ T8863] batadv_slave_0: entered promiscuous mode [ 101.860725][ T8842] bond5: (slave veth7): Enslaving as an active interface with a down link [ 101.862295][ T8858] overlayfs: failed to clone upperpath [ 101.866493][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.895457][ T63] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 101.919311][ T8863] batadv_slave_0 (unregistering): left promiscuous mode [ 101.922343][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.691618][ T8886] syz.2.870: attempt to access beyond end of device [ 102.691618][ T8886] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 102.698481][ T8886] XFS (loop2): SB validate failed with error -5. [ 102.740359][ T8893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8893 comm=syz.0.871 [ 102.845457][ T8902] netfs: Couldn't get user pages (rc=-14) [ 103.655636][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 103.655647][ T40] audit: type=1400 audit(1749185833.705:610): avc: denied { getopt } for pid=8983 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.672465][ T40] audit: type=1400 audit(1749185833.705:611): avc: denied { lock } for pid=8983 comm="syz.1.901" path="socket:[26990]" dev="sockfs" ino=26990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 103.856873][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.991936][ T8941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.994980][ T8941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.006516][ T8941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.010162][ T8941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.013302][ T8941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.240390][ T9036] bridge2: entered allmulticast mode [ 104.254045][ T1024] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 104.332572][ T54] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 104.402898][ T1024] usb 5-1: Using ep0 maxpacket: 8 [ 104.405769][ T1024] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.408875][ T1024] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.411675][ T1024] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 104.415536][ T1024] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 104.419079][ T1024] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.421930][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.429711][ T1024] hub 5-1:1.0: bad descriptor, ignoring hub [ 104.431941][ T1024] hub 5-1:1.0: probe with driver hub failed with error -5 [ 104.438806][ T1024] cdc_wdm 5-1:1.0: skipping garbage [ 104.440591][ T1024] cdc_wdm 5-1:1.0: skipping garbage [ 104.443627][ T1024] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.445480][ T1024] cdc_wdm 5-1:1.0: Unknown control protocol [ 104.496083][ T54] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 104.498668][ T54] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 104.501220][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 104.504285][ T54] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 104.508248][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 104.511870][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 104.515483][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 104.522012][ T54] usb 7-1: string descriptor 0 read error: -22 [ 104.524234][ T54] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 104.527030][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.530675][ T54] usb 7-1: config 0 descriptor?? [ 104.532857][ T9029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 104.536764][ T54] hub 7-1:0.0: bad descriptor, ignoring hub [ 104.538677][ T54] hub 7-1:0.0: probe with driver hub failed with error -5 [ 104.542271][ T54] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input15 [ 104.629359][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.632049][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.637243][ T8956] __nla_validate_parse: 10 callbacks suppressed [ 104.637256][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.890'. [ 104.738300][ T40] audit: type=1400 audit(1749185834.785:612): avc: denied { append } for pid=9028 comm="syz.2.913" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 104.779808][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 104.787692][ T9050] overlayfs: failed to resolve './file1': -2 [ 104.808027][ T838] usb 7-1: USB disconnect, device number 8 [ 105.232644][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.267292][ T9068] xt_hashlimit: invalid rate [ 105.269086][ T9068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.927'. [ 105.312702][ T3322] usb 5-1: USB disconnect, device number 19 [ 105.343294][ T9076] netlink: 'syz.3.930': attribute type 23 has an invalid length. [ 105.384380][ T9076] binder: binder_mmap: 9073 200000ffd000-200001000000 bad vm_flags failed -1 [ 105.446870][ T9081] syz_tun (unregistering): left promiscuous mode [ 105.640116][ T40] audit: type=1400 audit(1749185835.685:613): avc: denied { getopt } for pid=9093 comm="syz.2.935" lport=54982 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.640229][ T9095] sctp: [Deprecated]: syz.2.935 (pid 9095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.640229][ T9095] Use struct sctp_sack_info instead [ 105.660685][ T40] audit: type=1400 audit(1749185835.705:614): avc: denied { mount } for pid=9093 comm="syz.2.935" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.729478][ T40] audit: type=1400 audit(1749185835.775:615): avc: denied { execute } for pid=9096 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.738096][ T40] audit: type=1400 audit(1749185835.775:616): avc: denied { execute_no_trans } for pid=9096 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.754542][ T9098] netlink: 696 bytes leftover after parsing attributes in process `syz.2.939'. [ 105.799307][ T7972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.904544][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.907616][ T9113] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.942'. [ 105.908350][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.912603][ T7972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.913667][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.920265][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.923057][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.978965][ T7972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.047465][ T5949] Bluetooth: hci2: command 0x0406 tx timeout [ 106.068132][ T7972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.078702][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 106.178276][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.180867][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.184329][ T9110] bridge_slave_0: entered allmulticast mode [ 106.187309][ T9110] bridge_slave_0: entered promiscuous mode [ 106.201200][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.204564][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.206976][ T9110] bridge_slave_1: entered allmulticast mode [ 106.209694][ T9110] bridge_slave_1: entered promiscuous mode [ 106.277074][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.293597][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.296662][ T7972] bridge_slave_1: left allmulticast mode [ 106.298676][ T7972] bridge_slave_1: left promiscuous mode [ 106.305092][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.310026][ T7972] bridge_slave_0: left allmulticast mode [ 106.311950][ T7972] bridge_slave_0: left promiscuous mode [ 106.314093][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.399219][ T7972] ip6gretap0 (unregistering): left promiscuous mode [ 106.414687][ T7972] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 106.429851][ T7972] bond6 (unregistering): (slave ip6gre1): Releasing backup interface [ 106.434289][ T7972] ip6gre1 (unregistering): left promiscuous mode [ 106.494378][ T7972] erspan0 (unregistering): left promiscuous mode [ 106.520326][ T7972] bond4 (unregistering): (slave gretap1): Releasing active interface [ 106.865215][ T7972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.869424][ T7972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.873540][ T7972] bond0 (unregistering): Released all slaves [ 106.879742][ T7972] bond1 (unregistering): Released all slaves [ 106.887234][ T7972] bond2 (unregistering): Released all slaves [ 106.945565][ T7972] bond3 (unregistering): Released all slaves [ 107.002878][ T7972] bond4 (unregistering): Released all slaves [ 107.061543][ T7972] bond5 (unregistering): Released all slaves [ 107.119372][ T7972] bond6 (unregistering): Released all slaves [ 107.148363][ T9132] netlink: 160 bytes leftover after parsing attributes in process `syz.1.946'. [ 107.177656][ T9110] team0: Port device team_slave_0 added [ 107.185528][ T9110] team0: Port device team_slave_1 added [ 107.221709][ T7972] tipc: Left network mode [ 107.244780][ T7972] IPVS: stopping master sync thread 6690 ... [ 107.251154][ T7972] IPVS: stopping backup sync thread 7151 ... [ 107.256084][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.258558][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.266608][ T54] libceph: connect (1)[c::]:6789 error -101 [ 107.269690][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.271622][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 107.285178][ T54] libceph: connect (1)[c::]:6789 error -101 [ 107.287139][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 107.310416][ T40] audit: type=1400 audit(1749185837.355:617): avc: denied { map } for pid=9135 comm="syz.0.948" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 107.312884][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.319413][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.327584][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.365870][ T9110] hsr_slave_0: entered promiscuous mode [ 107.368101][ T9110] hsr_slave_1: entered promiscuous mode [ 107.370372][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.372833][ T9110] Cannot create hsr debugfs directory [ 107.490754][ T7972] hsr_slave_0: left promiscuous mode [ 107.494380][ T7972] hsr_slave_1: left promiscuous mode [ 107.496713][ T7972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.499116][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.501910][ T7972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.504777][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.522611][ T3322] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.532552][ T7972] veth1_macvtap: left promiscuous mode [ 107.534634][ T7972] veth0_macvtap: left promiscuous mode [ 107.536467][ T7972] veth1_vlan: left promiscuous mode [ 107.538197][ T7972] veth0_vlan: left promiscuous mode [ 107.554262][ T54] libceph: connect (1)[c::]:6789 error -101 [ 107.556883][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 107.600214][ T7972] pim6reg (unregistering): left allmulticast mode [ 107.693140][ T3322] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 107.702547][ T3322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 107.705070][ T3322] usb 7-1: Product: syz [ 107.706391][ T3322] usb 7-1: Manufacturer: syz [ 107.708485][ T3322] usb 7-1: SerialNumber: syz [ 107.711149][ T3322] usb 7-1: config 0 descriptor?? [ 107.714911][ T3322] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 107.717488][ T3322] dvb-usb: bulk message failed: -22 (2/0) [ 107.727613][ T3322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.731366][ T3322] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 107.734096][ T3322] usb 7-1: media controller created [ 107.737580][ T40] audit: type=1400 audit(1749185837.795:618): avc: denied { read } for pid=9149 comm="syz.1.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.755305][ T3322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.919762][ T9139] dvb-usb: bulk message failed: -22 (6/0) [ 107.962524][ T5949] Bluetooth: hci1: command tx timeout [ 108.063262][ T54] libceph: connect (1)[c::]:6789 error -101 [ 108.065269][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 108.097208][ T9136] ceph: No mds server is up or the cluster is laggy [ 108.114597][ T5949] Bluetooth: hci2: command 0x0406 tx timeout [ 108.205291][ T7972] team0 (unregistering): Port device team_slave_1 removed [ 108.272791][ T7972] team0 (unregistering): Port device team_slave_0 removed [ 108.306031][ T9160] gfs2: not a GFS2 filesystem [ 108.487006][ T9165] binder: 9164:9165 ioctl d000941e 200000000600 returned -22 [ 108.490044][ T9165] binder: 9164:9165 ioctl c4009420 200000001e00 returned -22 [ 108.492914][ T9165] binder: 9164:9165 ioctl c0306201 200000000080 returned -14 [ 108.744675][ T3322] cxusb: set interface failed [ 108.746616][ T3322] dvb-usb: bulk message failed: -22 (1/0) [ 108.754541][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.955'. [ 108.762966][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 108.766786][ T3322] DVB: Unable to find symbol mt352_attach() [ 108.768876][ T3322] dvb-usb: bulk message failed: -22 (5/0) [ 108.770849][ T3322] zl10353_read_register: readreg error (reg=127, ret==-121) [ 108.775016][ T3322] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 108.776463][ T9170] vti0: entered promiscuous mode [ 108.782354][ T9170] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 108.785652][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 108.794885][ T9170] SET target dimension over the limit! [ 108.798551][ T9170] vxcan0: tx address claim with different name [ 108.832948][ T3322] rc_core: IR keymap rc-dvico-mce not found [ 108.834920][ T3322] Registered IR keymap rc-empty [ 108.837483][ T3322] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 108.841218][ T3322] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input16 [ 108.844126][ T9110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.845465][ T3322] dvb-usb: schedule remote query interval to 100 msecs. [ 108.848601][ T3322] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 108.852140][ T3322] usb 7-1: USB disconnect, device number 9 [ 108.853569][ T9110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.859185][ T9110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.864967][ T9110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.870109][ T3322] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 108.916583][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.928118][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.934446][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.937714][ T7953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.952340][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.954626][ T7953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.004107][ T9186] xt_ipcomp: unknown flags 12 [ 109.066593][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.192538][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 109.250074][ T9110] veth0_vlan: entered promiscuous mode [ 109.257717][ T9110] veth1_vlan: entered promiscuous mode [ 109.277546][ T9110] veth0_macvtap: entered promiscuous mode [ 109.281862][ T9110] veth1_macvtap: entered promiscuous mode [ 109.291314][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.298990][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.303942][ T9110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.306634][ T9110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.309299][ T9110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.312021][ T9110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.349463][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.353034][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.369135][ T7972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.371918][ T7972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.379860][ T40] audit: type=1400 audit(1749185839.425:619): avc: denied { mounton } for pid=9110 comm="syz-executor" path="/syzkaller.Y1lXTK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 109.389221][ T9110] ================================================================== [ 109.391739][ T9110] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 [ 109.393218][ T40] audit: type=1400 audit(1749185839.445:620): avc: denied { sendto } for pid=7954 comm="kworker/u32:13" daddr=ff02::1:ff00:1b netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 109.394193][ T9110] Write of size 8 at addr ffff888053bed808 by task syz-executor/9110 [ 109.394204][ T9110] [ 109.394210][ T9110] CPU: 3 UID: 0 PID: 9110 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 109.394223][ T9110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.394230][ T9110] Call Trace: [ 109.394234][ T9110] [ 109.394238][ T9110] dump_stack_lvl+0x116/0x1f0 [ 109.394253][ T9110] print_report+0xcd/0x680 [ 109.394268][ T9110] ? __virt_addr_valid+0x81/0x610 [ 109.394279][ T9110] ? __phys_addr+0xe8/0x180 [ 109.394290][ T9110] ? binder_add_device+0xa4/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.394298][ T9110] kasan_report+0xe0/0x110 [ 109.394312][ T9110] ? binder_add_device+0xa4/0xb0 [ 109.394322][ T9110] binder_add_device+0xa4/0xb0 [ 109.394331][ T9110] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 109.394346][ T9110] binderfs_fill_super+0x8d4/0x1360 [ 109.394358][ T9110] ? __pfx_binderfs_fill_super+0x10/0x10 [ 109.394374][ T9110] ? shrinker_register+0x1a8/0x260 [ 109.394388][ T9110] ? sget_fc+0x808/0xc20 [ 109.394401][ T9110] ? __pfx_set_anon_super_fc+0x10/0x10 [ 109.394413][ T9110] ? __pfx_binderfs_fill_super+0x10/0x10 [ 109.394424][ T9110] get_tree_nodev+0xdd/0x190 [ 109.394437][ T9110] vfs_get_tree+0x8e/0x340 [ 109.394448][ T9110] path_mount+0x14d4/0x1f70 [ 109.394458][ T9110] ? kmem_cache_free+0x2d1/0x4d0 [ 109.394470][ T9110] ? __pfx_path_mount+0x10/0x10 [ 109.394480][ T9110] ? putname+0x154/0x1a0 [ 109.394489][ T9110] __x64_sys_mount+0x28d/0x310 [ 109.394498][ T9110] ? __pfx___x64_sys_mount+0x10/0x10 [ 109.394509][ T9110] do_syscall_64+0xcd/0x4c0 [ 109.394523][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.394533][ T9110] RIP: 0033:0x7fb0b07900ca [ 109.394542][ T9110] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.394551][ T9110] RSP: 002b:00007ffc969aa008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.394562][ T9110] RAX: ffffffffffffffda RBX: 00007fb0b0810efc RCX: 00007fb0b07900ca [ 109.394568][ T9110] RDX: 00007fb0b0820935 RSI: 00007fb0b0810efc RDI: 00007fb0b0820935 [ 109.394574][ T9110] RBP: 00007fb0b0811145 R08: 0000000000000000 R09: 00007fb0b09b6738 [ 109.394580][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0b07ec1a8 [ 109.394592][ T9110] R13: 00007fb0b07ec180 R14: 0000000000000009 R15: 0000000000000000 [ 109.394602][ T9110] [ 109.394605][ T9110] [ 109.483680][ T9110] Allocated by task 5939: [ 109.485511][ T9110] kasan_save_stack+0x33/0x60 [ 109.487523][ T9110] kasan_save_track+0x14/0x30 [ 109.489545][ T9110] __kasan_kmalloc+0xaa/0xb0 [ 109.491526][ T9110] binderfs_binder_device_create.isra.0+0x189/0xc30 [ 109.494288][ T9110] binderfs_fill_super+0x8d4/0x1360 [ 109.496483][ T9110] get_tree_nodev+0xdd/0x190 [ 109.498405][ T9110] vfs_get_tree+0x8e/0x340 [ 109.499818][ T9110] path_mount+0x14d4/0x1f70 [ 109.501262][ T9110] __x64_sys_mount+0x28d/0x310 [ 109.502802][ T9110] do_syscall_64+0xcd/0x4c0 [ 109.504240][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.506149][ T9110] [ 109.507063][ T9110] Freed by task 72: [ 109.508585][ T9110] kasan_save_stack+0x33/0x60 [ 109.510204][ T9110] kasan_save_track+0x14/0x30 [ 109.512099][ T9110] kasan_save_free_info+0x3b/0x60 [ 109.514198][ T9110] __kasan_slab_free+0x51/0x70 [ 109.516201][ T9110] kfree+0x2b4/0x4d0 [ 109.517870][ T9110] binder_proc_dec_tmpref+0x4c3/0x590 [ 109.519691][ T9110] binder_deferred_func+0xe87/0x12c0 [ 109.521907][ T9110] process_one_work+0x9cf/0x1b70 [ 109.523983][ T9110] worker_thread+0x6c8/0xf10 [ 109.525988][ T9110] kthread+0x3c5/0x780 [ 109.527694][ T9110] ret_from_fork+0x5d4/0x6f0 [ 109.529627][ T9110] ret_from_fork_asm+0x1a/0x30 [ 109.531622][ T9110] [ 109.532664][ T9110] The buggy address belongs to the object at ffff888053bed800 [ 109.532664][ T9110] which belongs to the cache kmalloc-512 of size 512 [ 109.538226][ T9110] The buggy address is located 8 bytes inside of [ 109.538226][ T9110] freed 512-byte region [ffff888053bed800, ffff888053beda00) [ 109.543765][ T9110] [ 109.544793][ T9110] The buggy address belongs to the physical page: [ 109.547048][ T9110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53bec [ 109.549845][ T9110] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.552506][ T9110] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 109.554856][ T9110] page_type: f5(slab) [ 109.556140][ T9110] raw: 00fff00000000040 ffff88801b842c80 ffffea0000c7a600 dead000000000002 [ 109.558830][ T9110] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 109.561565][ T9110] head: 00fff00000000040 ffff88801b842c80 ffffea0000c7a600 dead000000000002 [ 109.564262][ T9110] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 109.567086][ T9110] head: 00fff00000000002 ffffea00014efb01 00000000ffffffff 00000000ffffffff [ 109.569907][ T9110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 109.572634][ T9110] page dumped because: kasan: bad access detected [ 109.574648][ T9110] page_owner tracks the page as allocated [ 109.576436][ T9110] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5352, tgid 5352 (udevd), ts 54061954687, free_ts 54060290938 [ 109.582758][ T9110] post_alloc_hook+0x1c0/0x230 [ 109.584266][ T9110] get_page_from_freelist+0x1321/0x3890 [ 109.586026][ T9110] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 109.587871][ T9110] alloc_pages_mpol+0x1fb/0x550 [ 109.589432][ T9110] new_slab+0x23b/0x330 [ 109.590767][ T9110] ___slab_alloc+0xd9c/0x1940 [ 109.592258][ T9110] __slab_alloc.constprop.0+0x56/0xb0 [ 109.593956][ T9110] __kmalloc_cache_noprof+0xfb/0x3e0 [ 109.595611][ T9110] kernfs_fop_open+0x244/0xda0 [ 109.597152][ T9110] do_dentry_open+0x741/0x1c10 [ 109.598669][ T9110] vfs_open+0x82/0x3f0 [ 109.600005][ T9110] path_openat+0x1de4/0x2cb0 [ 109.601491][ T9110] do_filp_open+0x20b/0x470 [ 109.602953][ T9110] do_sys_openat2+0x11b/0x1d0 [ 109.604434][ T9110] __x64_sys_openat+0x174/0x210 [ 109.606026][ T9110] do_syscall_64+0xcd/0x4c0 [ 109.607461][ T9110] page last free pid 6029 tgid 6028 stack trace: [ 109.609458][ T9110] __free_frozen_pages+0x7fe/0x1180 [ 109.611103][ T9110] stack_depot_save_flags+0x354/0xa40 [ 109.612793][ T9110] kasan_save_stack+0x42/0x60 [ 109.614293][ T9110] kasan_save_track+0x14/0x30 [ 109.615744][ T9110] __kasan_slab_alloc+0x89/0x90 [ 109.617273][ T9110] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 109.618977][ T9110] alloc_empty_file+0x55/0x1e0 [ 109.620489][ T9110] alloc_file_pseudo+0x13a/0x230 [ 109.622088][ T9110] __anon_inode_getfile+0xf7/0x3a0 [ 109.623698][ T9110] kvm_dev_ioctl+0x717/0x1ad0 [ 109.625202][ T9110] __x64_sys_ioctl+0x18b/0x210 [ 109.626724][ T9110] do_syscall_64+0xcd/0x4c0 [ 109.628160][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.630039][ T9110] [ 109.630826][ T9110] Memory state around the buggy address: [ 109.632613][ T9110] ffff888053bed700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.635105][ T9110] ffff888053bed780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.637625][ T9110] >ffff888053bed800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.640120][ T9110] ^ [ 109.641500][ T9110] ffff888053bed880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.644019][ T9110] ffff888053bed900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.646529][ T9110] ================================================================== [ 109.656749][ T9110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.659212][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 109.663004][ T9110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.666325][ T9110] Call Trace: [ 109.667583][ T9110] [ 109.668922][ T9110] dump_stack_lvl+0x3d/0x1f0 [ 109.670567][ T9110] panic+0x71c/0x800 [ 109.671817][ T9110] ? __pfx_panic+0x10/0x10 [ 109.673378][ T9110] ? irqentry_exit+0x3b/0x90 [ 109.674874][ T9110] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.676508][ T9110] ? preempt_schedule_thunk+0x16/0x30 [ 109.678112][ T9110] ? binder_add_device+0xa4/0xb0 [ 109.679643][ T9110] ? preempt_schedule_common+0x44/0xc0 [ 109.681379][ T9110] ? check_panic_on_warn+0x1f/0xb0 [ 109.683010][ T9110] ? binder_add_device+0xa4/0xb0 [ 109.684573][ T9110] check_panic_on_warn+0xab/0xb0 [ 109.686087][ T9110] end_report+0x107/0x170 [ 109.687494][ T9110] kasan_report+0xee/0x110 [ 109.688968][ T9110] ? binder_add_device+0xa4/0xb0 [ 109.690655][ T9110] binder_add_device+0xa4/0xb0 [ 109.692175][ T9110] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 109.694220][ T9110] binderfs_fill_super+0x8d4/0x1360 [ 109.695823][ T9110] ? __pfx_binderfs_fill_super+0x10/0x10 [ 109.697605][ T9110] ? shrinker_register+0x1a8/0x260 [ 109.699210][ T9110] ? sget_fc+0x808/0xc20 [ 109.700516][ T9110] ? __pfx_set_anon_super_fc+0x10/0x10 [ 109.702243][ T9110] ? __pfx_binderfs_fill_super+0x10/0x10 [ 109.703995][ T9110] get_tree_nodev+0xdd/0x190 [ 109.705473][ T9110] vfs_get_tree+0x8e/0x340 [ 109.706925][ T9110] path_mount+0x14d4/0x1f70 [ 109.708390][ T9110] ? kmem_cache_free+0x2d1/0x4d0 [ 109.710036][ T9110] ? __pfx_path_mount+0x10/0x10 [ 109.711698][ T9110] ? putname+0x154/0x1a0 [ 109.713163][ T9110] __x64_sys_mount+0x28d/0x310 [ 109.714670][ T9110] ? __pfx___x64_sys_mount+0x10/0x10 [ 109.716307][ T9110] do_syscall_64+0xcd/0x4c0 [ 109.717751][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.719587][ T9110] RIP: 0033:0x7fb0b07900ca [ 109.720993][ T9110] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.727001][ T9110] RSP: 002b:00007ffc969aa008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.729627][ T9110] RAX: ffffffffffffffda RBX: 00007fb0b0810efc RCX: 00007fb0b07900ca [ 109.732226][ T9110] RDX: 00007fb0b0820935 RSI: 00007fb0b0810efc RDI: 00007fb0b0820935 [ 109.734716][ T9110] RBP: 00007fb0b0811145 R08: 0000000000000000 R09: 00007fb0b09b6738 [ 109.737180][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0b07ec1a8 [ 109.739635][ T9110] R13: 00007fb0b07ec180 R14: 0000000000000009 R15: 0000000000000000 [ 109.742177][ T9110] [ 109.743826][ T9110] Kernel Offset: disabled [ 109.745201][ T9110] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:57:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81b00f57 RDX=ffff88802b690000 RSI=ffffffff81b00f42 RDI=0000000000000005 RBP=ffffc90005a77c90 RSP=ffffc90005a77b40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000b4ef70 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81b00f44 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 000055556e463500 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d675a000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000339ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88534c00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a743a40 RCX=ffffffff81affabd RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000357f4e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4e8749 R15=ffff88806a53cf40 RIP=ffffffff81bc0fd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d685a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f33912e7d60 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33907846a3 00007f33907846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd18b10ee0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aace2dc 000055555aace0d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aac34a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aad87a1 000055555aad7490 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02a0030008000298 0300080002900302 0400028c03220400 0288034808000280 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102b01000088004 0100000408060601 67bc108080080008 e00300100008d003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100008c0030210 0008b00348100007 900300040002c403 00040002c0030004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002bc0316040002 b80300040002b403 00040002b0030000 000e080602a80300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040002a403000200 02a20300020002a0 0300080002980300 0800029003020400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b2985 RDI=ffffffff9b082320 RBP=ffffffff9b0822e0 RSP=ffffc9000078f880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0822e0 R15=ffffffff855b2920 RIP=ffffffff855b29af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d695a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d8ed9 CR3=000000005d286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000000c8 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765584488 00007f4765584480 00007f4765584478 00007f4765584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47660ed100 00007f4765584440 00007f4765580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4765584498 00007f4765584490 00007f4765584488 00007f4765584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819b8392 RDX=ffff88805aeb2440 RSI=ffffffff819b8380 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006347820 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000c68f06 R13=0000000000000000 R14=ffff88801c308000 R15=ffffc900063478e8 RIP=ffffffff819b8389 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555571909500 ffffffff 00c00000 GS =0000 ffff8880d6a5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc5cd5eae9c CR3=000000006265b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc969aa020 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc969a9fd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc969a9fd6 00007ffc969a9fdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0b0811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0b0811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0b0811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0b0811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0b0811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0b0811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000