last executing test programs: 59.235565884s ago: executing program 3 (id=2187): syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000ac0)={r2, 0xd0}, &(0x7f0000000b00)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000c000780080011400000001c050005000a000000050001000700000005000400000000000900020073794749aad509a30eab657400"/92], 0x5c}}, 0x0) sendto$inet(r0, &(0x7f0000000080)="30f25010ff2952387272ab91c9315a8a79b998c13bfe72090a9123b47864494c2831b9088792a8b645eb47ec12fb483d75d4d653a612fcd89ba8d2c6e9a01bc543db6d4f93b2d558845c98be281f891ae09ca9a6b1ef6d6a2141d80c0a053e7013715e70300e0b12af6e2a", 0x6b, 0x48000, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'gtp\x00'}, {}, {0x20, 'gtp\x00'}, {0x20, ')-'}], 0xa, "72f558fb221b770a782cbba29ff25e860dbf37327aef25aa5311b973d58c486d1c0c29cf386d35eb3223fcc71ac6c5b9654ba880425aee18d928d185aa370de4353fa8408fe4d4517b7849a1caa970f9ba2985d906ac4803ac26bfad71f66fa7e7c8f1888d541c4ec59ca6efdd515d491d7ffad6f76726ee84e68e"}, 0x94) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2}, 0x8) 59.234845523s ago: executing program 3 (id=2189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x14}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "2757bc44c8ce884c9b6d7b4bdf93d252"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 59.162940066s ago: executing program 3 (id=2190): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x8, 0x1000) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r7, r6, 0x0, 0x80009) fanotify_mark(r7, 0x8, 0x1000, r5, &(0x7f0000000000)='./file0\x00') syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0e"], 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) 57.675997926s ago: executing program 3 (id=2224): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201eb12b90b68e9e45fc91271e5ea7ec853e0d436068e58de80e316fb8a5c4eafbfd6357e24574713388c6ccb7e0b4c80e614c6ec48e47b712100bcf93ed8a9bc3f2288783e591e6c1b35659be8c7172f135a75d4a59e00a276edd7f995054e35623b03ac939f0405ea7fa9f580026c525b593c3f943c28e0664169b9eafa4b6863915d11de0969c7946b7fcdfc8e43696483bbd5ace9b4fbbf", 0xc6}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003", @ANYRES32=r2], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 57.675430365s ago: executing program 3 (id=2226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xa}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "2757bc44c8ce884c9b6d7b4bdf93d252"}]}, 0x3c}, 0x1, 0x20, 0x0, 0x4008000}, 0x40) 57.30240671s ago: executing program 3 (id=2233): r0 = socket(0xf, 0x3, 0xc) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x56, 0xd61, 0x2, "877786c241e5e99abfede0dba102728873e2f6884dc0947509f232cbadc4aea22daf4a22e1e460fd7513dc96abe920840773e297586fdc5b865f4c20ceca0f5fad15d333b1e1ada5f7e73f720d6a97720bb894e7aa6d"}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x0, 0x0, [0xf79, 0x2, 0x7fffffff, 0x3, 0x1000cf3c, 0x2, 0x4, 0x99]}) 57.244697382s ago: executing program 32 (id=2233): r0 = socket(0xf, 0x3, 0xc) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x56, 0xd61, 0x2, "877786c241e5e99abfede0dba102728873e2f6884dc0947509f232cbadc4aea22daf4a22e1e460fd7513dc96abe920840773e297586fdc5b865f4c20ceca0f5fad15d333b1e1ada5f7e73f720d6a97720bb894e7aa6d"}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x0, 0x0, [0xf79, 0x2, 0x7fffffff, 0x3, 0x1000cf3c, 0x2, 0x4, 0x99]}) 20.588033538s ago: executing program 2 (id=3117): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x0) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x8ab78b256b6dfa94, 0x0, 0xfffe, 0x2, 0x2, 0x0, 0x0, 0x20, 0x8}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 20.486487918s ago: executing program 2 (id=3120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x229b9, 0x6003}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}, 0x1, 0xfc, 0x0, 0x40801}, 0x4000000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0448"], 0xf) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) 20.482105247s ago: executing program 2 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x5000, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x1000446, {}, {0xfb, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 20.407866868s ago: executing program 2 (id=3122): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) getdents(r0, &(0x7f00000001c0)=""/240, 0xf0) getdents64(r0, 0x0, 0x0) r2 = eventfd(0x5b3e31c8) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x1, r2, 0x1}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x2d, 0x6, 0x0, {0x2, 0x5, 0x4, 0x0, 'syz\x00'}}, 0x2d) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans!virtio,cache=readahead,cachetag=@:(,debug=0']) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) getdents(r0, &(0x7f00000001c0)=""/240, 0xf0) (async) getdents64(r0, 0x0, 0x0) (async) eventfd(0x5b3e31c8) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x1, r2, 0x1}) (async) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x2d, 0x6, 0x0, {0x2, 0x5, 0x4, 0x0, 'syz\x00'}}, 0x2d) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans!virtio,cache=readahead,cachetag=@:(,debug=0']) (async) 20.323669513s ago: executing program 2 (id=3123): syz_io_uring_setup(0x1103, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "29f88877b15e7a424b1d252eea0b4c58e667cc6b30"}}]}]}, 0x58}, 0x1, 0x5800000000000000, 0x0, 0x4}, 0x4000004) 20.029992173s ago: executing program 2 (id=3130): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000d00), &(0x7f0000000d80)=0x60, 0x800) fcntl$setstatus(r0, 0x4, 0x6000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x387, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) write$char_usb(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r1, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe6) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) preadv(r6, &(0x7f0000000c40)=[{&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000bc0)=""/86, 0x56}], 0x9, 0x5, 0x7) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000000c0)={@hyper}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000080)) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000016c0)={&(0x7f0000001000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@my=0x0}, {@any, 0x5}, 0xfb, "884fbe2726aa0a32f3e65f908292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd16864207309a23cf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d010000001e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cf8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f303000000a640f1b038a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c607000000000000008e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411da80e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e699a142b9466bc0cbef1536519ca409876268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3006972397e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8e0002000068f606f16fcb00000000000000008a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65107b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c90000000000000100"}, 0x418, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 19.968399289s ago: executing program 33 (id=3130): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000d00), &(0x7f0000000d80)=0x60, 0x800) fcntl$setstatus(r0, 0x4, 0x6000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x387, &(0x7f0000001700)=ANY=[@ANYBLOB="0180c20000000000000000008100090008004d9f037500670000012f90780000000000000000442cc5b1e0000002000000f1640101000000000864010101f500008000000000000000290000000000000007441c9f110000000000000004ac1414aa000000077f0000010000000d9404010086110000000102042d03020733c47d06160000000c21880b00c3000200801a88c1be7d2f0ed3606975fef584c59ada864ad03f1dc288a30fc47411730b5b541d1f5158b8ffd77d26ff00e416000000000086926703d1d8ebc1bcc52f2102177a39f8aa9f5726995484a8326569e3ecda398f6152aa67265f1192cb92c6655eb38dbe62e9d84efb53c5a1a8957ca499da404cb376d3f8bc8919ddaf2de5ab1ee6ffcd4782cd1a367ecfed354a2fa3224514f304fb6c33f15b7f8c842b433dedc2c6625583f1e7f7033e12bded3c756de81b3b1b55cb01945a7c77f434306dfa6c1b5ce56c5855e38397821010e000ae0500080000eafffa07ff169091f212c5f401489d87330c5f5393b8de35827ee536ddbd8c1c799f00dd48fb0ae23b2829cd1ca3d99e129525d115b66e0b5b0d9a4148c74d862050337ca9ad24fa66d7dcd5d062d047e3ec557bdaaa2896f739cbadca8c57e3bf8375980f6214f4e5da84f918aa0c92990683175d3b25b493cd3d2b3c464c5f3638c92edfe1b48f2416a735dddc419c3955e86eb250eda1a03c3f457fb5e2885efd4e62733ae559a049bf26f0a649f5d50ffce43681cc90e9f7357561ac0474312cb489f0c1d9d400911e9b6826bf4a02c2e5116bb25797d701669d173509040086ddb6470c10699af497320aea295b31b661cbeb4e3fc786e0d44be4a0ab54bd1470c8f339e54e9703a21a770fb6896ddb6021547c920a4ff28dd6d3cc77129a5574ca67d44a4c4f68a9db73afa8742b75fdeba380144b1106884b9620c54e81d87dcccdaa1863a4fb82152828ed6c08d02ca59e5d18e9286aa435f380681ea6201af90a000000000000006e0f5a080088be00000004174643fd0100000000000001080022eb0000000021a308020200000000000009000e9b1a0800655800000004d954fc23f659ecebaa32540e9030007dada7a38c9dedc538d41fcdb18bb0b4a749c3ef8d5284741d4ab9ccbbe76f13df715c4db65d42cb330f15e42b126ed934b504d713141b60d28d8510d29a188c183f74d3e11b4cdcfdfeb00cf751e13b765e8664a707feea619080777f4506bc2fee0bfced5ea67e91079c2a0573adb1c0f6a463d80ca860fb2bd3b9ac12276a"], 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) write$char_usb(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r1, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe6) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) preadv(r6, &(0x7f0000000c40)=[{&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000bc0)=""/86, 0x56}], 0x9, 0x5, 0x7) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000000c0)={@hyper}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000080)) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000016c0)={&(0x7f0000001000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@my=0x0}, {@any, 0x5}, 0xfb, "884fbe2726aa0a32f3e65f908292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd16864207309a23cf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d010000001e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cf8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f303000000a640f1b038a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c607000000000000008e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411da80e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e699a142b9466bc0cbef1536519ca409876268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3006972397e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8e0002000068f606f16fcb00000000000000008a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65107b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c90000000000000100"}, 0x418, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 19.527566956s ago: executing program 4 (id=3137): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="fffffff0100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 19.456418906s ago: executing program 4 (id=3138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000280)={0xe, 0x4e36, {0x54, 0xfff7, 0x92, {0x8, 0x1000}, {0x5, 0xe}, @ramp={0xff, 0x0, {0xb, 0xe, 0x648c, 0x4}}}, {0x57, 0x4, 0x2, {0x5, 0x5000}, {0x6, 0x95c}, @cond=[{0xa90, 0x40, 0x0, 0xffff, 0xfff2, 0xc}, {0x2, 0x200, 0xec, 0x3ff, 0xc8c1, 0x200}]}}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x8000014) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x30bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x4000880) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r9, 0x0, 0x6}, 0x18) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x18}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r12 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$AUTOFS_IOC_EXPIRE(r12, 0x810c9365, &(0x7f0000000280)={{0x2, 0xd8}, 0x100, './file0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x38, r11, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x12, 0x2b, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 18.492118312s ago: executing program 4 (id=3143): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 18.024474704s ago: executing program 0 (id=3155): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="f0ffffff100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 17.960012318s ago: executing program 0 (id=3156): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$BTRFS_IOC_ADD_DEV(r2, 0xb701, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)="cfbd3eea802820d5c67337fe55f5bf1584678f413791ed07f6", 0x19}, 0x1, 0x0, 0x0, 0x60080d5}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000001000), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$I2C_TENBIT(r4, 0x704, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfff, 0x400) r6 = accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 17.800603553s ago: executing program 0 (id=3157): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000440)={0x0, 0xfffffffc, 0x0, 'queue1\x00', 0x4e}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x5, 0x2000000, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="a000bd7000fbdbdf251c040005ff03fe020000000084001300000f0fe300000000000008000000000000000000000000000000000000000000011100000000000000000000000000000000000000000000000000000006080000000000000f000000000000000000000000000000000000000000aeed0000000000000000000100000000000000000000000000000004000000000000000000"], 0xa0}, 0x1, 0x2000000000000000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x20}, {r3, 0x8419}, {0xffffffffffffffff, 0x8008}, {0xffffffffffffffff, 0x8}, {r1, 0x2040}], 0x5, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x7f]}, 0x8) 17.554309955s ago: executing program 1 (id=3160): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdir(0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 17.55349381s ago: executing program 1 (id=3161): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002800000000000690780a010100ac1414ff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078000049480200759f653020b1cd69775ad5ecd7ef2c71a00a64ac479a412bc935d3f5ec360a80f53f3058c334722e8a66"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 17.467007243s ago: executing program 1 (id=3162): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001fa, 0x82) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0x32c4, 0x1, 0x1, 0xd4}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x8) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000140)) r2 = dup(r0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ptrace$peeksig(0x4212, r4, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) timer_create(0x1, &(0x7f0000000200)={0x0, 0x8, 0x1, @tid=r4}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x42, 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0}) 17.281794109s ago: executing program 1 (id=3163): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.034230763s ago: executing program 4 (id=3164): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"6852ad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f36006e090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d077202b77f07227227b7ba67e0e78457cf6e8a9574e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d020000001c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fdffffffffffffff7fcc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841040014f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c24ffffffffffffff7fb70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000001d010000e8057a861fab891e8ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bed0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f643577590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbabb7f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4ed134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf175c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803918862063a9737d214060005ea6f1783e2bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfefe3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b0101c6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889bce3076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b7da2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b2105201b5cae0ef4128456bfa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a310000004b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b4229880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d55000024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427bf6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419ad54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa532faff86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63976e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769777c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd133d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27fa0400000000000000c5c97c45ac33eeec964c52f4bb3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76092839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c454e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce212659001cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575911d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f957d54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fcdd5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389722fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9916fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d902952b72c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b342526ff59554e502dc2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec0300068ea88067d905ea917bb03eefdac8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cd62ea3511a8075ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5db61ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0d69be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b67804cfa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000f700000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044dd000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100", 0xffffffffffffff79}}, 0xf10) 16.923672211s ago: executing program 4 (id=3165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f00000009c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000140)=0x8) 16.923341913s ago: executing program 4 (id=3166): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="360000002200010695839080c9873426a8a0a910f1210f00"/40], 0x28}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 16.922911439s ago: executing program 0 (id=3167): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 32) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xef}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0xe7}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2}, 0x94) 16.708667744s ago: executing program 0 (id=3168): prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c686f657874656e642c6163638173733d616e792c63616368653d66736361636865"]) (async) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) (async) close(0x3) (async) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) (async) r3 = dup3(r0, r0, 0x0) recvmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000200)=@rc, 0x80, &(0x7f0000001640)=[{&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000500)=""/93, 0x5d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5, &(0x7f00000016c0)=""/249, 0xf9}, 0x40000063) (async) close_range(r1, r1, 0x0) (async) unlink(&(0x7f0000000040)='./file0\x00') 16.603208768s ago: executing program 0 (id=3169): syz_io_uring_setup(0x1103, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "29f88877b15e7a424b1d252eea0b4c58e667cc6b30"}}]}]}, 0x58}, 0x1, 0xffff000000000000, 0x0, 0x4}, 0x4000004) 16.356617661s ago: executing program 1 (id=3170): r0 = semget(0x1, 0x4, 0xc4bcb2ed5a6b6502) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001480)=""/194) 16.356467851s ago: executing program 1 (id=3171): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000080000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 481.469854ms ago: executing program 34 (id=3169): syz_io_uring_setup(0x1103, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "29f88877b15e7a424b1d252eea0b4c58e667cc6b30"}}]}]}, 0x58}, 0x1, 0xffff000000000000, 0x0, 0x4}, 0x4000004) 436.084572ms ago: executing program 35 (id=3166): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="360000002200010695839080c9873426a8a0a910f1210f00"/40], 0x28}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='securityfs\x00', 0x11, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 0s ago: executing program 36 (id=3171): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000080000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) kernel console output (not intermixed with test programs): No subsys list or none specified [ 111.859631][ T8239] cgroup: No subsys list or none specified [ 111.862576][ T8239] cgroup: No subsys list or none specified [ 111.865360][ T8239] cgroup: No subsys list or none specified [ 111.870124][ T8239] cgroup: No subsys list or none specified [ 111.872452][ T8239] cgroup: No subsys list or none specified [ 111.875052][ T8239] cgroup: No subsys list or none specified [ 111.877160][ T8239] cgroup: No subsys list or none specified [ 111.891662][ T8238] __nla_validate_parse: 12 callbacks suppressed [ 111.891674][ T8238] netlink: 348 bytes leftover after parsing attributes in process `syz.0.749'. [ 111.924756][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 111.977628][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 112.081238][ T8277] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 112.547234][ T8285] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 112.717141][ T8297] tipc: Enabling of bearer rejected, media not registered [ 112.718138][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 112.859514][ T8308] fuse: Bad value for 'fd' [ 112.973631][ T8324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.776'. [ 112.978240][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 112.987336][ T8326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.777'. [ 113.037855][ T8330] netlink: 'syz.0.779': attribute type 3 has an invalid length. [ 113.040861][ T8330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.779'. [ 113.082667][ T40] audit: type=1400 audit(1756197780.386:428): avc: denied { create } for pid=8331 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 113.093608][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 113.351095][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.356324][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.415154][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.504697][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 113.844810][ T40] audit: type=1400 audit(1756197781.097:429): avc: denied { getopt } for pid=8411 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.880506][ T8414] netlink: 292 bytes leftover after parsing attributes in process `syz.2.809'. [ 114.107626][ T40] audit: type=1400 audit(1756197781.340:430): avc: denied { watch } for pid=8411 comm="syz.0.814" path="/234/bus" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.117914][ T40] audit: type=1400 audit(1756197781.349:431): avc: denied { watch_sb } for pid=8411 comm="syz.0.814" path="/234/bus" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.328875][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.334058][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.398747][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.416336][ T40] audit: type=1400 audit(1756197781.630:432): avc: denied { accept } for pid=8450 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.420694][ T8451] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 114.426983][ T8451] PKCS7: Only support pkcs7_signedData type [ 114.600954][ T40] audit: type=1326 audit(1756197781.798:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.1.824" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x0 [ 114.667456][ T40] audit: type=1400 audit(1756197781.864:434): avc: denied { setopt } for pid=8458 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.730007][ T8465] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 115.459536][ T8495] overlayfs: failed to resolve './bus/file0': -2 [ 115.799263][ T40] audit: type=1400 audit(111.753:435): avc: denied { getopt } for pid=8519 comm="syz.2.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.923319][ T8523] IPv6: NLM_F_REPLACE set, but no existing node found! [ 116.311756][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 116.311770][ T40] audit: type=1400 audit(112.220:438): avc: denied { accept } for pid=8565 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 116.335679][ T40] audit: type=1400 audit(112.239:439): avc: denied { mounton } for pid=8570 comm="syz.2.866" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 116.335728][ T8571] overlay: filesystem on ./bus is read-only [ 116.427658][ T40] audit: type=1400 audit(112.333:440): avc: denied { ioctl } for pid=8575 comm="syz.1.869" path="socket:[17236]" dev="sockfs" ino=17236 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.506051][ T8585] overlayfs: failed to clone upperpath [ 116.645719][ T8601] netlink: 'syz.1.878': attribute type 7 has an invalid length. [ 116.648460][ T8601] netlink: 'syz.1.878': attribute type 8 has an invalid length. [ 116.694937][ T40] audit: type=1400 audit(112.585:441): avc: denied { mount } for pid=8600 comm="syz.1.878" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 116.768886][ T40] audit: type=1400 audit(112.651:442): avc: denied { getopt } for pid=8609 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.910242][ T40] audit: type=1400 audit(112.782:443): avc: denied { listen } for pid=8631 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.062847][ T40] audit: type=1400 audit(112.922:444): avc: denied { bind } for pid=8644 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.158534][ T8656] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 117.174535][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.531012][ T8682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8682 comm=syz.3.906 [ 117.590048][ T8686] __nla_validate_parse: 14 callbacks suppressed [ 117.590059][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 117.600424][ T8685] uprobe: syz.3.908:8685 failed to unregister, leaking uprobe [ 117.978784][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.914'. [ 117.982858][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.914'. [ 118.165175][ T8708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.915'. [ 118.194082][ T8710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8710 comm=syz.1.916 [ 118.230164][ T8714] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 118.275952][ T40] audit: type=1400 audit(114.063:445): avc: denied { getopt } for pid=8718 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 118.974347][ T8750] netlink: 156 bytes leftover after parsing attributes in process `syz.3.932'. [ 118.978740][ T5333] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 119.048581][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 119.135329][ T8754] hfs: unable to load iocharset "io#harset" [ 119.175473][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 119.189402][ T8759] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 119.222403][ T8761] veth3: entered promiscuous mode [ 119.296850][ T8769] fuse: Bad value for 'user_id' [ 119.299553][ T8769] fuse: Bad value for 'user_id' [ 119.303091][ T40] audit: type=1400 audit(115.017:446): avc: denied { listen } for pid=8768 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.407420][ T8773] 9pnet_fd: Insufficient options for proto=fd [ 119.461890][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 119.465706][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 119.562803][ T8790] netlink: 'syz.2.946': attribute type 39 has an invalid length. [ 119.877922][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 119.958934][ T40] audit: type=1400 audit(115.635:447): avc: denied { setopt } for pid=8809 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.797070][ T8874] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 120.851280][ T8880] "syz.3.978" (8880) uses obsolete ecb(arc4) skcipher [ 121.803563][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 121.803574][ T40] audit: type=1400 audit(117.365:455): avc: denied { nlmsg_read } for pid=8947 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.836533][ T8954] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 121.853541][ T8954] 8021q: adding VLAN 0 to HW filter on device bond7 [ 121.865588][ T8952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25373 sclass=netlink_route_socket pid=8952 comm=syz.2.1005 [ 121.880655][ T8954] veth5: entered promiscuous mode [ 121.887784][ T8954] bond7: (slave veth5): Enslaving as an active interface with a down link [ 121.895254][ T40] audit: type=1400 audit(117.440:456): avc: denied { name_connect } for pid=8959 comm="syz.2.1008" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 121.896550][ T8954] vlan1: entered allmulticast mode [ 121.903215][ T8954] bond7: entered allmulticast mode [ 121.905558][ T8954] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.022511][ T8970] overlayfs: failed to resolve './cgroup': -2 [ 122.022576][ T8971] overlayfs: failed to resolve './cgroup': -2 [ 122.028908][ T8970] overlay: Bad value for 'nfs_export' [ 122.124899][ T8980] netlink: 'syz.0.1015': attribute type 39 has an invalid length. [ 122.792936][ T9028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9028 comm=syz.0.1032 [ 122.801098][ T9028] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 122.820269][ T9028] bond3: (slave bridge3): making interface the new active one [ 122.823218][ T9028] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 122.845028][ T40] audit: type=1800 audit(118.329:457): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1035" name="bus" dev="tmpfs" ino=1293 res=0 errno=0 [ 122.857171][ T40] audit: type=1400 audit(118.338:458): avc: denied { getopt } for pid=9038 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 123.032032][ T40] audit: type=1400 audit(118.506:459): avc: denied { name_bind } for pid=9069 comm="syz.1.1047" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 123.039164][ T9070] __nla_validate_parse: 7 callbacks suppressed [ 123.039174][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1047'. [ 123.053050][ T9072] tipc: Enabling of bearer rejected, media not registered [ 123.066107][ T9074] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1049'. [ 123.117017][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1048'. [ 123.159770][ T9081] openvswitch: netlink: Key type 30 is not supported [ 123.220229][ T40] audit: type=1400 audit(118.684:460): avc: denied { getopt } for pid=9091 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.226116][ T9092] veth1: entered allmulticast mode [ 123.374323][ T9106] netlink: 'syz.0.1061': attribute type 29 has an invalid length. [ 123.401379][ T40] audit: type=1400 audit(118.852:461): avc: denied { connect } for pid=9108 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.460879][ T9111] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 123.661505][ T40] audit: type=1400 audit(119.086:462): avc: denied { bind } for pid=9124 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.730896][ T9129] overlayfs: failed to clone lowerpath [ 123.768162][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1070'. [ 123.981636][ T40] audit: type=1400 audit(119.404:463): avc: denied { map } for pid=9133 comm="syz.1.1072" path="pipe:[7450]" dev="pipefs" ino=7450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.221167][ T9152] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.298269][ T9159] netlink: 'syz.0.1080': attribute type 2 has an invalid length. [ 124.353115][ T9171] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.366419][ T9171] CIFS: Unable to determine destination address [ 124.410601][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 124.470710][ T9188] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1089'. [ 124.477379][ T9190] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 124.484117][ T9191] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 124.615287][ T9205] /dev/nullb0: Can't lookup blockdev [ 124.680069][ T40] audit: type=1400 audit(120.050:464): avc: denied { bind } for pid=9221 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.817162][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 124.821977][ T9243] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 124.830072][ T9244] syz.1.1104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.985407][ T9256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9256 comm=syz.2.1108 [ 126.053397][ T9266] netlink: 'syz.1.1112': attribute type 10 has an invalid length. [ 126.059734][ T9266] netlink: 'syz.1.1112': attribute type 28 has an invalid length. [ 126.063398][ T9266] netlink: 'syz.1.1112': attribute type 5 has an invalid length. [ 126.066862][ T9266] netlink: 'syz.1.1112': attribute type 8 has an invalid length. [ 126.070082][ T9266] netlink: 'syz.1.1112': attribute type 31 has an invalid length. [ 126.130049][ T9275] 8021q: VLANs not supported on ip_vti0 [ 126.274923][ T9292] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 126.278639][ T9292] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1123'. [ 126.317962][ T9292] bond0: entered promiscuous mode [ 126.320219][ T9292] bond_slave_0: entered promiscuous mode [ 126.323128][ T9292] bond_slave_1: entered promiscuous mode [ 126.410899][ T9309] fuse: Bad value for 'fd' [ 126.462559][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 126.465957][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 126.729148][ T9349] tmpfs: Invalid gid '0x00000000ffffffff' [ 126.776182][ T9358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=9358 comm=syz.0.1151 [ 127.323754][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9408 comm=syz.3.1170 [ 127.329065][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9408 comm=syz.3.1170 [ 127.333013][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9408 comm=syz.3.1170 [ 127.379106][ T9410] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.394016][ T9412] fuse: Bad value for 'fd' [ 127.396493][ T9412] overlayfs: failed to clone upperpath [ 127.464805][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 127.464820][ T40] audit: type=1400 audit(122.650:467): avc: denied { read } for pid=9416 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.546825][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 127.549398][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 127.551641][ T9437] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.554990][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 127.557299][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 127.586595][ T9442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9442 comm=syz.1.1183 [ 127.592443][ T9432] ceph: No mds server is up or the cluster is laggy [ 127.700353][ T40] audit: type=1400 audit(122.875:468): avc: denied { mount } for pid=9452 comm="syz.0.1186" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 127.802351][ T9461] vlan3: entered promiscuous mode [ 127.804562][ T9461] vlan3: entered allmulticast mode [ 127.806245][ T9461] hsr_slave_1: entered allmulticast mode [ 128.127945][ T40] audit: type=1400 audit(123.268:469): avc: denied { firmware_load } for pid=9475 comm="syz.1.1195" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 128.178770][ T9475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.606081][ T9534] __nla_validate_parse: 8 callbacks suppressed [ 128.606098][ T9534] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1217'. [ 128.634791][ T40] audit: type=1400 audit(123.754:470): avc: denied { ioctl } for pid=9536 comm="syz.0.1218" path="socket:[27234]" dev="sockfs" ino=27234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.728169][ T9476] syz.1.1195 (9476) used greatest stack depth: 19688 bytes left [ 128.744521][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1219'. [ 128.796735][ T9554] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1225'. [ 128.868177][ T40] audit: type=1326 audit(123.969:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063f18ebe9 code=0x7ffc0000 [ 128.877110][ T40] audit: type=1326 audit(123.969:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063f18ebe9 code=0x7ffc0000 [ 128.884966][ T40] audit: type=1326 audit(123.978:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f063f18ebe9 code=0x7ffc0000 [ 128.892354][ T40] audit: type=1326 audit(123.978:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063f18ebe9 code=0x7ffc0000 [ 128.900932][ T40] audit: type=1326 audit(123.978:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063f18ebe9 code=0x7ffc0000 [ 128.908052][ T9554] veth0: entered promiscuous mode [ 128.910197][ T40] audit: type=1326 audit(123.978:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f063f18ebe9 code=0x7ffc0000 [ 128.930652][ T9553] veth0: left promiscuous mode [ 129.023508][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 129.184369][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'. [ 129.206422][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 129.228726][ T9623] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.338679][ T9639] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1254'. [ 129.408608][ T9653] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1259'. [ 129.467344][ T9659] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 129.510207][ T9665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.514099][ T9665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.576285][ T9667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.986664][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1273'. [ 129.995731][ T9610] ceph: No mds server is up or the cluster is laggy [ 130.124738][ T9698] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1278'. [ 130.128090][ T9698] netlink: zone id is out of range [ 130.129786][ T9698] netlink: get zone limit has 8 unknown bytes [ 130.248430][ T9714] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 130.343762][ T9726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=9726 comm=syz.3.1288 [ 130.417027][ T9739] overlayfs: failed to resolve './cgroup': -2 [ 130.422073][ T9739] overlayfs: failed to clone lowerpath [ 130.464291][ T9736] : entered promiscuous mode [ 130.470944][ T9736] : left promiscuous mode [ 130.755003][ T9771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.782593][ T9773] overlayfs: failed to clone upperpath [ 130.934772][ T9794] netlink: zone id is out of range [ 130.937066][ T9794] netlink: get zone limit has 8 unknown bytes [ 130.992770][ T9799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.997851][ T9799] ======================================================= [ 130.997851][ T9799] WARNING: The mand mount option has been deprecated and [ 130.997851][ T9799] and is ignored by this kernel. Remove the mand [ 130.997851][ T9799] option from the mount to silence this warning. [ 130.997851][ T9799] ======================================================= [ 131.285374][ T9844] all: renamed from lo (while UP) [ 131.746387][ T9903] netlink: 'syz.3.1348': attribute type 2 has an invalid length. [ 132.105899][ T5333] Bluetooth: hci0: unexpected cc 0x1408 length: 9 > 4 [ 132.109549][ T5333] Bluetooth: hci0: failed to read key size for handle 200 [ 132.113610][ T5333] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 132.257092][ T9960] netlink: 'syz.2.1369': attribute type 11 has an invalid length. [ 132.276506][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.280473][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.317670][ T9969] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 132.339305][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.357136][ T9969] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 132.359651][ T9969] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 132.442408][ T9976] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.487241][ T9985] netlink: 'syz.0.1376': attribute type 21 has an invalid length. [ 132.491656][ T9985] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 132.573855][ T9991] overlayfs: failed to clone lowerpath [ 133.081004][T10027] /dev/nullb0: Can't lookup blockdev [ 133.165573][T10032] netlink: 'syz.3.1393': attribute type 30 has an invalid length. [ 133.172002][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.177128][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.181082][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.184121][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.442970][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 133.442981][ T40] audit: type=1400 audit(128.253:529): avc: denied { write } for pid=10051 comm="syz.3.1400" name="file0" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.451458][ T40] audit: type=1400 audit(128.253:530): avc: denied { open } for pid=10051 comm="syz.3.1400" path="/411/file0" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.459537][ T40] audit: type=1400 audit(128.253:531): avc: denied { ioctl } for pid=10051 comm="syz.3.1400" path="/411/file0" dev="tmpfs" ino=2166 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.651909][ T40] audit: type=1400 audit(128.440:532): avc: denied { ioctl } for pid=10062 comm="syz.2.1405" path="socket:[30021]" dev="sockfs" ino=30021 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.970396][ T40] audit: type=1400 audit(128.740:533): avc: denied { getopt } for pid=10101 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.062583][T10120] __nla_validate_parse: 21 callbacks suppressed [ 134.062593][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 134.072287][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 134.165592][T10136] netlink: 'syz.0.1432': attribute type 6 has an invalid length. [ 134.168482][T10136] netlink: 'syz.0.1432': attribute type 6 has an invalid length. [ 134.175162][T10141] netlink: 'syz.1.1434': attribute type 3 has an invalid length. [ 134.191579][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 134.271182][ T40] audit: type=1400 audit(129.020:534): avc: denied { bind } for pid=10151 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.335975][T10161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1441'. [ 134.463709][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1447'. [ 134.464893][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1447'. [ 134.471327][ T1207] bond0: (slave bond4): link status definitely down, disabling slave [ 134.737322][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 134.880610][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 135.065260][ T40] audit: type=1400 audit(129.759:535): avc: denied { shutdown } for pid=10212 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.268068][ T40] audit: type=1400 audit(129.946:536): avc: denied { read } for pid=10229 comm="syz.3.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.311275][T10238] overlayfs: failed to clone upperpath [ 135.318417][T10235] overlayfs: failed to clone upperpath [ 135.321350][T10235] fuse: Bad value for 'user_id' [ 135.324109][T10235] fuse: Bad value for 'user_id' [ 135.459035][T10253] overlayfs: failed to clone upperpath [ 135.588531][T10259] vxcan1: tx address claim with dlc 0 [ 135.629933][T10261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1475'. [ 135.669469][T10263] netlink: 'syz.0.1476': attribute type 4 has an invalid length. [ 136.261679][T10300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10300 comm=syz.3.1489 [ 136.365748][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1493'. [ 136.447362][ T40] audit: type=1400 audit(131.059:537): avc: denied { mount } for pid=10324 comm="syz.3.1499" name="/" dev="configfs" ino=2146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.482241][T10329] netlink: 'syz.1.1500': attribute type 3 has an invalid length. [ 136.486904][T10329] overlayfs: failed to clone upperpath [ 136.842848][ T40] audit: type=1400 audit(387.432:538): avc: denied { execute } for pid=10371 comm="syz.2.1515" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.994429][T10353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.093060][T10380] 8021q: adding VLAN 0 to HW filter on device bond8 [ 137.191056][T10380] bond8: (slave geneve2): making interface the new active one [ 137.202151][T10380] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 137.231254][T10380] syz.3.1517 (10380) used greatest stack depth: 19480 bytes left [ 137.634761][T10425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61459 sclass=netlink_route_socket pid=10425 comm=syz.3.1532 [ 137.992705][T10477] dvmrp1: entered allmulticast mode [ 138.035182][ T5333] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 138.150860][T10506] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 138.154083][T10506] overlayfs: missing 'lowerdir' [ 138.174546][T10506] wg2: entered promiscuous mode [ 138.178636][T10506] wg2: entered allmulticast mode [ 138.184176][T10510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=10510 comm=syz.0.1566 [ 138.237984][T10517] delete_channel: no stack [ 138.288128][T10523] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 138.289290][ T5333] Bluetooth: hci0: unexpected subevent 0x01 length: 37 > 18 [ 138.294372][ T5333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 138.298861][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 138.298878][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.298887][ T5333] Workqueue: hci0 hci_rx_work [ 138.298923][ T5333] Call Trace: [ 138.298927][ T5333] [ 138.298932][ T5333] dump_stack_lvl+0x16c/0x1f0 [ 138.298946][ T5333] sysfs_warn_dup+0x7f/0xa0 [ 138.298967][ T5333] sysfs_create_dir_ns+0x24b/0x2b0 [ 138.298982][ T5333] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 138.298996][ T5333] ? find_held_lock+0x2b/0x80 [ 138.299014][ T5333] ? do_raw_spin_unlock+0x172/0x230 [ 138.299028][ T5333] kobject_add_internal+0x2c4/0x9b0 [ 138.299046][ T5333] kobject_add+0x16e/0x240 [ 138.299061][ T5333] ? __pfx_kobject_add+0x10/0x10 [ 138.299083][ T5333] ? do_raw_spin_unlock+0x172/0x230 [ 138.299095][ T5333] ? kobject_put+0xab/0x5a0 [ 138.299112][ T5333] device_add+0x288/0x1aa0 [ 138.299194][ T5333] ? __pfx_dev_set_name+0x10/0x10 [ 138.299212][ T5333] ? __pfx_device_add+0x10/0x10 [ 138.299227][ T5333] ? mgmt_send_event_skb+0x2fb/0x460 [ 138.299250][ T5333] hci_conn_add_sysfs+0x17e/0x230 [ 138.299264][ T5333] le_conn_complete_evt+0x1075/0x1d70 [ 138.299283][ T5333] ? preempt_count_sub+0xe0/0x160 [ 138.299300][ T5333] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 138.299317][ T5333] ? bt_warn+0xe4/0x120 [ 138.299331][ T5333] ? __pfx_bt_warn+0x10/0x10 [ 138.299350][ T5333] hci_le_conn_complete_evt+0x23c/0x370 [ 138.299371][ T5333] hci_le_meta_evt+0x357/0x5e0 [ 138.299383][ T5333] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 138.299403][ T5333] hci_event_packet+0x682/0x11c0 [ 138.299419][ T5333] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 138.299431][ T5333] ? __pfx_hci_event_packet+0x10/0x10 [ 138.299449][ T5333] ? kcov_remote_start+0x3c9/0x6d0 [ 138.299461][ T5333] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.299489][ T5333] hci_rx_work+0x2c5/0x16b0 [ 138.299502][ T5333] ? rcu_is_watching+0x12/0xc0 [ 138.299519][ T5333] process_one_work+0x9cf/0x1b70 [ 138.299537][ T5333] ? __pfx_process_one_work+0x10/0x10 [ 138.299555][ T5333] ? assign_work+0x1a0/0x250 [ 138.299569][ T5333] worker_thread+0x6c8/0xf10 [ 138.299586][ T5333] ? __kthread_parkme+0x19e/0x250 [ 138.299604][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 138.299616][ T5333] kthread+0x3c5/0x780 [ 138.299628][ T5333] ? __pfx_kthread+0x10/0x10 [ 138.299639][ T5333] ? rcu_is_watching+0x12/0xc0 [ 138.299653][ T5333] ? __pfx_kthread+0x10/0x10 [ 138.299664][ T5333] ret_from_fork+0x5d7/0x6f0 [ 138.299675][ T5333] ? __pfx_kthread+0x10/0x10 [ 138.299686][ T5333] ret_from_fork_asm+0x1a/0x30 [ 138.299707][ T5333] [ 138.299724][ T5333] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.300990][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.302950][ T5333] Bluetooth: hci0: failed to register connection device [ 138.614107][T10553] overlayfs: failed to clone upperpath [ 138.682088][T10563] cgroup: none used incorrectly [ 138.692506][T10565] net_ratelimit: 1 callbacks suppressed [ 138.692516][T10565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.023598][T10593] validate_nla: 2 callbacks suppressed [ 139.023612][T10593] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 139.038572][T10599] overlayfs: failed to resolve './file1/file0': -2 [ 139.094405][T10599] bridge_slave_0: left allmulticast mode [ 139.097094][T10599] bridge_slave_0: left promiscuous mode [ 139.099818][T10599] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.439940][T10612] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 140.222556][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 140.222573][ T40] audit: type=1400 audit(390.594:544): avc: denied { ioctl } for pid=10666 comm="syz.2.1621" path="socket:[32191]" dev="sockfs" ino=32191 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.282500][T10672] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 140.284939][T10672] PKCS7: Only support pkcs7_signedData type [ 140.291048][T10672] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10672 comm=syz.2.1623 [ 140.298692][T10672] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.303422][T10672] __nla_validate_parse: 10 callbacks suppressed [ 140.303437][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 140.309176][T10672] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 140.311903][T10672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.395446][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'. [ 140.426934][T10685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1629'. [ 140.463358][T10685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1629'. [ 140.467907][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 140.788652][T10718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1641'. [ 141.247362][T10760] netlink: 'syz.1.1654': attribute type 5 has an invalid length. [ 141.421639][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 141.546070][T10797] lo speed is unknown, defaulting to 1000 [ 141.548395][T10797] lo speed is unknown, defaulting to 1000 [ 141.553294][T10797] lo speed is unknown, defaulting to 1000 [ 141.560412][T10797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.568303][T10797] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.594529][T10797] lo speed is unknown, defaulting to 1000 [ 141.604466][T10797] lo speed is unknown, defaulting to 1000 [ 141.611314][T10797] lo speed is unknown, defaulting to 1000 [ 141.615576][T10797] lo speed is unknown, defaulting to 1000 [ 141.745760][ T40] audit: type=1400 audit(392.006:545): avc: denied { wake_alarm } for pid=10817 comm="syz.0.1678" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.754481][T10819] openvswitch: netlink: Message has 8 unknown bytes. [ 141.860914][T10832] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1683'. [ 141.958817][T10838] netlink: 'syz.0.1686': attribute type 29 has an invalid length. [ 141.962045][T10838] netlink: 'syz.0.1686': attribute type 29 has an invalid length. [ 141.965286][T10838] netlink: 604 bytes leftover after parsing attributes in process `syz.0.1686'. [ 142.043295][T10838] lo speed is unknown, defaulting to 1000 [ 142.583961][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 142.585559][T10867] 9pnet_fd: p9_fd_create_unix (10867): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 142.661152][T10867] trusted_key: encrypted_key: insufficient parameters specified [ 143.249407][ T40] audit: type=1400 audit(393.419:546): avc: denied { accept } for pid=10906 comm="syz.3.1710" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.633682][T10961] lo speed is unknown, defaulting to 1000 [ 143.882235][ T40] audit: type=1326 audit(394.008:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.1.1737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 143.895645][ T40] audit: type=1326 audit(394.008:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.1.1737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 143.920123][T10991] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 144.086532][ T40] audit: type=1400 audit(394.205:549): avc: denied { watch watch_reads } for pid=11003 comm="syz.1.1743" path="pipe:[7450]" dev="pipefs" ino=7450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 144.148410][T11010] /dev/sr0: Can't lookup blockdev [ 144.260696][T11018] MPI: mpi too large (16392 bits) [ 144.398250][T11030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.628501][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 144.729993][T11044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11044 comm=syz.2.1758 [ 144.735226][T11044] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 144.747617][T11044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.764800][T11044] bond3: (slave geneve2): making interface the new active one [ 144.767979][T11044] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 144.849630][ T40] audit: type=1400 audit(394.923:550): avc: denied { watch_sb } for pid=11058 comm="syz.3.1763" path="/487" dev="tmpfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.034676][T11118] could not allocate digest TFM handle crc32 [ 145.047342][ T5333] Bluetooth: hci0: unexpected event for opcode 0x100a [ 145.147065][T11148] JFS: charset not found [ 146.284941][ T40] audit: type=1400 audit(396.261:551): avc: denied { listen } for pid=11217 comm="syz.1.1806" path=0000224E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 146.342031][T11230] __nla_validate_parse: 8 callbacks suppressed [ 146.342043][T11230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1809'. [ 146.348740][T11219] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1806'. [ 146.355356][T11219] 0·: renamed from hsr0 [ 146.361951][T11219] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.366594][T11219] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.371125][T11219] 0·: entered allmulticast mode [ 146.373120][T11219] hsr_slave_0: entered allmulticast mode [ 146.375440][T11219] hsr_slave_1: entered allmulticast mode [ 146.379836][T11219] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 146.449375][ T40] audit: type=1326 audit(396.411:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.3.1815" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f010638ebe9 code=0x0 [ 146.482096][ T40] audit: type=1400 audit(396.439:553): avc: denied { ioctl } for pid=11251 comm="syz.2.1817" path="socket:[32571]" dev="sockfs" ino=32571 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.566593][ T24] lo speed is unknown, defaulting to 1000 [ 146.970933][T11275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11275 comm=syz.0.1822 [ 146.975783][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 147.241168][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 147.419911][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 147.550517][T11313] geneve3: entered promiscuous mode [ 147.552863][T11313] geneve3: entered allmulticast mode [ 147.555644][T11123] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.559565][T11123] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.563156][T11123] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.566411][T11123] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.614108][T11319] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 147.628396][T11319] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 147.686249][T11330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1843'. [ 147.727620][T11337] netlink: 'syz.3.1845': attribute type 21 has an invalid length. [ 147.875718][T11354] 8021q: VLANs not supported on sit0 [ 147.932403][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1853'. [ 147.999532][T11366] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 148.003184][T11366] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 148.242590][T11381] netlink: 'syz.1.1861': attribute type 11 has an invalid length. [ 148.254914][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1862'. [ 148.272295][T11385] netlink: 'syz.1.1861': attribute type 11 has an invalid length. [ 148.302424][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 148.307525][T11389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.313109][T11389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.373044][T11402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.421672][T11399] could not allocate digest TFM handle crc32 [ 148.463113][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1871'. [ 148.602792][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.607397][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.661149][T11431] could not allocate digest TFM handle crc32 [ 148.667631][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.011400][ T5333] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 149.421326][T11486] bridge_slave_0: left allmulticast mode [ 149.425005][T11486] bridge_slave_0: left promiscuous mode [ 149.427308][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.431139][T11486] bridge_slave_1: left allmulticast mode [ 149.433379][T11486] bridge_slave_1: left promiscuous mode [ 149.435932][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.440396][T11486] bond0: (slave bond_slave_0): Releasing backup interface [ 149.444470][T11486] bond0: (slave bond_slave_1): Releasing backup interface [ 149.451669][T11486] team0: Port device team_slave_0 removed [ 149.456527][T11486] team0: Port device team_slave_1 removed [ 149.459302][T11486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.463058][T11486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.468308][T11486] bond0: (slave wlan1): Releasing backup interface [ 149.746304][T11494] could not allocate digest TFM handle crc32 [ 150.022037][T11516] Illegal XDP return value 4294967274 on prog (id 249) dev N/A, expect packet loss! [ 150.028727][T11516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.063427][ T40] audit: type=1326 audit(399.788:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.3.1910" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f010638ebe9 code=0x0 [ 150.065177][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.527316][T11545] netem: change failed [ 150.528252][T11537] 9pnet: Could not find request transport: unixt [ 150.623177][T11552] could not allocate digest TFM handle crc32 [ 150.625676][ T5983] Bluetooth: hci0: unexpected event for opcode 0x100a [ 150.837056][T11585] geneve3: entered promiscuous mode [ 150.839288][T11585] geneve3: entered allmulticast mode [ 151.033016][T11600] could not allocate digest TFM handle crc32 [ 151.123375][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.424598][T11629] overlayfs: failed to clone upperpath [ 151.500169][T11633] netlink: 'syz.0.1946': attribute type 12 has an invalid length. [ 151.901298][T11638] __nla_validate_parse: 8 callbacks suppressed [ 151.901314][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 151.982441][T11638] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 151.991744][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 152.022209][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'. [ 152.200114][T11660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=11660 comm=syz.1.1955 [ 152.218546][T11658] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 152.227242][T11662] netlink: 'syz.3.1956': attribute type 1 has an invalid length. [ 152.230625][T11662] netlink: 'syz.3.1956': attribute type 2 has an invalid length. [ 152.435505][T11685] netlink: 'syz.0.1965': attribute type 2 has an invalid length. [ 152.438057][T11685] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 152.588169][ T5333] Bluetooth: hci0: hardware error 0x84 [ 152.629078][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1974'. [ 152.856450][T11709] could not allocate digest TFM handle crc32 [ 152.859264][ T5983] Bluetooth: hci0: unexpected event for opcode 0x100a [ 153.279306][T11753] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 153.495907][T11774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=11774 comm=syz.3.2001 [ 154.230344][T11793] overlayfs: failed to clone upperpath [ 154.258012][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 154.433709][T11813] netlink: 'syz.0.2016': attribute type 15 has an invalid length. [ 154.537522][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 154.726187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.735506][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 154.801000][ T5333] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 155.760519][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 155.855511][T11889] openvswitch: netlink: Flow key attr not present in new flow. [ 155.988599][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.212935][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.565696][T11902] wg1: entered promiscuous mode [ 156.567277][T11902] wg1: entered allmulticast mode [ 156.797160][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 156.801154][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 156.804571][T11936] netlink: 'syz.1.2060': attribute type 18 has an invalid length. [ 156.817653][T11938] geneve2: entered allmulticast mode [ 156.888331][T11955] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 156.931193][ T40] audit: type=1400 audit(406.223:555): avc: denied { execute_no_trans } for pid=11963 comm="syz.1.2071" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=34631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 157.008995][T11978] netlink: 'syz.1.2077': attribute type 5 has an invalid length. [ 157.012055][T11980] netlink: 'syz.1.2077': attribute type 5 has an invalid length. [ 157.039384][T11988] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 157.072483][ T40] audit: type=1326 audit(406.354:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.080148][ T40] audit: type=1326 audit(406.354:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.087333][ T40] audit: type=1326 audit(406.363:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.096665][ T40] audit: type=1326 audit(406.363:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.106440][ T40] audit: type=1326 audit(406.363:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.114711][ T40] audit: type=1326 audit(406.363:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.122012][ T40] audit: type=1326 audit(406.363:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.129272][ T40] audit: type=1326 audit(406.363:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.136898][ T40] audit: type=1326 audit(406.363:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.1.2084" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 157.208031][T12011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=12011 comm=syz.3.2090 [ 157.404251][T12016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.409491][T12016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.591474][T12027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.597247][T12027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.655621][T12027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.730405][T12016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.733662][T12016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.809283][T12016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.812721][T12016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.910203][T12016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.913578][T12016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.023894][T11123] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.026915][T11123] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.037239][T11121] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.042355][T11121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.050503][T11121] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.053889][T11121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.067257][T11121] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.069970][T11121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.219569][T12044] __nla_validate_parse: 8 callbacks suppressed [ 158.219581][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 158.236107][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2102'. [ 158.239811][T12046] x_tables: ip_tables: udp match: only valid for protocol 17 [ 158.484515][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2113'. [ 158.534115][T12081] overlayfs: failed to clone lowerpath [ 158.537194][T12081] overlayfs: failed to clone upperpath [ 158.574801][T12085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.581658][T12085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.640171][T12085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.666064][T12095] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 158.700863][T12095] bond9: (slave geneve4): making interface the new active one [ 158.704938][T12095] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 158.708615][T11122] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 158.711424][T11122] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 158.715824][T11122] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 158.718556][T11122] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 158.795001][T12110] overlayfs: failed to clone upperpath [ 158.795207][T12108] overlayfs: failed to clone upperpath [ 158.847751][T12115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2122'. [ 159.055532][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2129'. [ 159.211141][T12178] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 159.332834][T12191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.336603][T12191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.341337][T12191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.344550][T12191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.347514][T12191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.350299][T12191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.827036][T12226] netlink: 'syz.0.2150': attribute type 15 has an invalid length. [ 159.827049][T12227] netlink: 'syz.0.2150': attribute type 15 has an invalid length. [ 159.829969][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2150'. [ 159.837377][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2150'. [ 159.843122][T12226] netlink: 'syz.0.2150': attribute type 10 has an invalid length. [ 160.010055][T12240] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 160.013566][T12240] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 160.089993][T12244] overlayfs: failed to clone upperpath [ 160.245883][T12260] geneve1: entered allmulticast mode [ 160.389080][T12278] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2169'. [ 160.392269][T12280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2170'. [ 160.619981][T12302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2179'. [ 160.894976][T12327] nft_compat: unsupported protocol 0 [ 161.075121][ T5333] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 161.080804][ T5333] Bluetooth: hci2: Unable to find connection for dst 00:00:00:ff:ff:ff sid 0x00 [ 161.891133][T12388] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 162.436346][T12424] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 162.439887][T12424] team0: entered promiscuous mode [ 162.442325][T12424] team_slave_0: entered promiscuous mode [ 162.445747][T12424] team_slave_1: entered promiscuous mode [ 162.911635][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 162.911675][ T40] audit: type=1400 audit(411.807:583): avc: denied { execute } for pid=12447 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 162.922945][ T40] audit: type=1400 audit(411.807:584): avc: denied { execute_no_trans } for pid=12447 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 163.138658][ T5983] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.142451][ T5983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.146534][ T5983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.150009][ T5983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.154440][ T5983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.177396][T12449] lo speed is unknown, defaulting to 1000 [ 163.292352][T12449] chnl_net:caif_netlink_parms(): no params data found [ 163.404695][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.407628][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.414164][T12449] bridge_slave_0: entered allmulticast mode [ 163.417071][T12449] bridge_slave_0: entered promiscuous mode [ 163.422307][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.427038][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.431992][T12449] bridge_slave_1: entered allmulticast mode [ 163.434974][T12462] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.435869][T12449] bridge_slave_1: entered promiscuous mode [ 163.490590][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.497136][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.532170][T12468] bridge0: entered promiscuous mode [ 163.534844][T12468] macsec3: entered promiscuous mode [ 163.538749][T12468] bridge0: port 1(macsec3) entered blocking state [ 163.541568][T12468] bridge0: port 1(macsec3) entered disabled state [ 163.543830][T12468] macsec3: entered allmulticast mode [ 163.545534][T12468] bridge0: entered allmulticast mode [ 163.549369][T12468] macsec3: left allmulticast mode [ 163.551052][T12468] bridge0: left allmulticast mode [ 163.553834][T12468] bridge0: left promiscuous mode [ 163.579859][T12449] team0: Port device team_slave_0 added [ 163.583106][T12449] team0: Port device team_slave_1 added [ 163.617293][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.619381][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.628718][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.633141][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.635256][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.643416][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.651472][T12474] overlayfs: failed to clone lowerpath [ 163.688962][T12474] __nla_validate_parse: 10 callbacks suppressed [ 163.688980][T12474] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2243'. [ 163.703838][T12474] netlink: zone id is out of range [ 163.706578][T12474] netlink: zone id is out of range [ 163.709014][T12449] hsr_slave_0: entered promiscuous mode [ 163.709135][T12474] netlink: zone id is out of range [ 163.711576][T12449] hsr_slave_1: entered promiscuous mode [ 163.712975][T12474] netlink: zone id is out of range [ 163.717516][T12474] netlink: zone id is out of range [ 163.719846][T12474] netlink: get zone limit has 8 unknown bytes [ 163.802042][T12483] overlayfs: unescaped trailing colons in lowerdir mount option. [ 163.900318][T12449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.902600][ T40] audit: type=1326 audit(412.743:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.1.2250" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x0 [ 163.914069][T12449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.917425][T12495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2251'. [ 163.922445][T12449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.929014][T12449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.955638][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.957879][T12449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.960233][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.963555][T12449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.991921][T12449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.005067][T12449] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.005097][T12507] can: request_module (can-proto-4) failed. [ 164.013882][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.018681][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.042827][T11123] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.045810][T11123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.054659][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 164.054667][T11120] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.060867][T11120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.120002][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 164.222812][T12449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.239195][ T40] audit: type=1800 audit(413.052:586): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2261" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 164.397960][T12449] veth0_vlan: entered promiscuous mode [ 164.401984][T12551] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.405118][T12551] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.418105][T12449] veth1_vlan: entered promiscuous mode [ 164.438343][T12449] veth0_macvtap: entered promiscuous mode [ 164.443049][T12449] veth1_macvtap: entered promiscuous mode [ 164.456399][T12449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.467235][T12449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.481222][T11120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.484957][T11120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.490002][T11120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.493648][T11120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.502228][T12551] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.505735][T12551] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.548399][T11121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.551611][T11121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.568313][T11120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.571743][T11120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.586761][ T40] audit: type=1400 audit(413.379:587): avc: denied { mounton } for pid=12449 comm="syz-executor" path="/syzkaller.D6XSxn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 164.598516][T12551] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.601628][T12551] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.673722][T12551] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.677225][T12551] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.736939][ T40] audit: type=1400 audit(413.519:588): avc: denied { create } for pid=12559 comm="syz.4.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.745747][ T40] audit: type=1400 audit(413.519:589): avc: denied { write } for pid=12559 comm="syz.4.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.764839][T11120] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.768341][T11120] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.780869][T11123] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.783680][T11123] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.791078][T12567] could not open pipe file descriptor [ 164.793765][T11123] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.797006][T11123] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.807102][T11120] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.815123][T11120] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.819269][T12571] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2273'. [ 164.822164][T12571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.824422][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 164.826755][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 164.872859][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 164.875679][T12577] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2275'. [ 164.878470][T12577] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2275'. [ 164.978382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.041223][T12585] netlink: 1107 bytes leftover after parsing attributes in process `syz.1.2278'. [ 165.098706][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 165.161813][ T40] audit: type=1400 audit(413.921:590): avc: denied { getopt } for pid=12602 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 165.258736][T12610] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 165.331497][ T5983] Bluetooth: hci2: command tx timeout [ 165.512736][T12622] IPv6: sit2: Disabled Multicast RS [ 165.515268][T12622] sit2: entered allmulticast mode [ 165.611155][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.615174][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.673783][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.886578][T12643] autofs4:pid:12643:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 165.886602][ T40] audit: type=1400 audit(414.595:591): avc: denied { ioctl } for pid=12642 comm="syz.4.2299" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.208663][ T40] audit: type=1400 audit(414.894:592): avc: denied { checkpoint_restore } for pid=12663 comm="syz.2.2308" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.299368][T12659] block nbd4: Unsupported socket: shutdown callout must be supported. [ 166.392725][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.398402][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.456314][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.567391][T12690] openvswitch: netlink: Key type 8463 is out of range max 32 [ 166.696558][T12722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=12722 comm=syz.2.2328 [ 167.544250][ T5983] Bluetooth: hci2: command tx timeout [ 167.781739][T12801] overlayfs: statfs failed on './file0' [ 167.794204][T12799] lo speed is unknown, defaulting to 1000 [ 167.937406][T12815] fuse: Unknown parameter 'fd?0x0000000000000003' [ 168.305028][T12846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=12846 comm=syz.4.2379 [ 168.340382][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 168.340400][ T40] audit: type=1400 audit(416.887:599): avc: denied { read } for pid=12849 comm="syz.4.2380" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.353796][ T40] audit: type=1400 audit(416.887:600): avc: denied { open } for pid=12849 comm="syz.4.2380" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.362038][ T40] audit: type=1400 audit(416.887:601): avc: denied { ioctl } for pid=12849 comm="syz.4.2380" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.393196][T12852] veth1_to_batadv: entered promiscuous mode [ 168.422738][T12857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=12857 comm=syz.2.2382 [ 168.459360][T12862] kernel profiling enabled (shift: 63) [ 168.461942][T12862] profiling shift: 63 too large [ 168.492770][ T40] audit: type=1400 audit(417.027:602): avc: denied { create } for pid=12870 comm="syz.4.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 168.498842][ T40] audit: type=1400 audit(417.027:603): avc: denied { connect } for pid=12870 comm="syz.4.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 168.934722][T12893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12893 comm=syz.0.2395 [ 169.398654][T12926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24688 sclass=netlink_route_socket pid=12926 comm=syz.1.2406 [ 169.588207][T12952] __nla_validate_parse: 19 callbacks suppressed [ 169.588225][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 169.594263][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2416'. [ 169.767992][ T5983] Bluetooth: hci2: command tx timeout [ 169.888701][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2426'. [ 169.891603][T12986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2426'. [ 169.894929][T12980] netlink: 'syz.0.2423': attribute type 21 has an invalid length. [ 169.894942][T12980] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2423'. [ 169.894985][T12980] netlink: 'syz.0.2423': attribute type 6 has an invalid length. [ 169.894993][T12980] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2423'. [ 169.931933][ T40] audit: type=1400 audit(418.383:604): avc: denied { cmd } for pid=12990 comm="syz.1.2428" path="socket:[41047]" dev="sockfs" ino=41047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.046387][T13008] autofs: Bad value for 'fd' [ 170.080943][T13015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61552 sclass=netlink_route_socket pid=13015 comm=syz.4.2435 [ 170.121177][ T40] audit: type=1326 audit(418.561:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.4.2437" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dc518ebe9 code=0x0 [ 170.177708][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2440'. [ 170.240160][ T40] audit: type=1400 audit(418.673:606): avc: denied { setopt } for pid=13032 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 170.246538][ T40] audit: type=1400 audit(418.673:607): avc: denied { read } for pid=13032 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 170.539287][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 170.542376][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'. [ 170.565196][ T40] audit: type=1800 audit(418.973:608): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2455" name="nullb0" dev="tmpfs" ino=298 res=0 errno=0 [ 170.796417][ T5983] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 170.799141][ T5983] Bluetooth: hci3: Injecting HCI hardware error event [ 170.802151][ T5983] Bluetooth: hci3: hardware error 0x00 [ 170.813874][T13077] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 170.817279][T13077] overlayfs: failed to set xattr on upper [ 170.821027][T13077] overlayfs: ...falling back to redirect_dir=nofollow. [ 170.823499][T13077] overlayfs: ...falling back to index=off. [ 170.825704][T13077] overlayfs: ...falling back to uuid=null. [ 170.830552][T13077] overlayfs: ...falling back to xino=off. [ 170.837051][T13077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'. [ 170.986254][T13094] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 171.053857][T13102] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 171.058387][T13102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13102 comm=syz.4.2469 [ 171.321082][T13125] team_slave_0: entered promiscuous mode [ 171.323603][T13125] team_slave_1: entered promiscuous mode [ 171.326443][T13125] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 171.464311][T13140] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 171.991618][ T5333] Bluetooth: hci2: command tx timeout [ 172.489516][T13170] tipc: Enabled bearer , priority 10 [ 172.635052][T13193] binder: 13192:13193 ioctl c0306201 0 returned -14 [ 172.637630][T13193] binder: 13192:13193 ioctl c0306201 2000000000c0 returned -11 [ 172.640160][T13193] binder: 13192:13193 ioctl c0306201 0 returned -14 [ 173.017827][ T5983] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 173.567596][T13217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13217 comm=syz.2.2511 [ 173.575454][T13217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=13217 comm=syz.2.2511 [ 173.622835][T13223] securityfs: Unknown parameter 'grpquota' [ 173.741616][T13236] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 173.758123][T13236] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 173.761596][T13236] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 174.079637][T13269] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 175.233875][T13316] __nla_validate_parse: 5 callbacks suppressed [ 175.233892][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 175.240622][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 175.244853][T13316] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2549'. [ 175.301382][T13322] team_slave_0: left promiscuous mode [ 175.303678][T13322] team_slave_1: left promiscuous mode [ 175.321596][T13322] veth0_virt_wifi: entered promiscuous mode [ 175.324407][T13322] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 175.366738][T13326] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 175.437075][T13339] netlink: 'syz.2.2558': attribute type 12 has an invalid length. [ 175.495887][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2557'. [ 175.821845][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 175.821857][ T40] audit: type=1400 audit(423.893:615): avc: denied { mount } for pid=13375 comm="syz.1.2570" name="/" dev="pstore" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 175.977231][T13382] bond2: entered promiscuous mode [ 176.008521][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2574'. [ 176.067226][ T40] audit: type=1400 audit(424.117:616): avc: denied { setopt } for pid=13387 comm="syz.1.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.104143][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 176.406089][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.411727][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.470728][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.707030][T13431] netlink: 'syz.4.2592': attribute type 10 has an invalid length. [ 176.718829][T13431] team0: Port device netdevsim0 added [ 176.914054][T13444] overlayfs: failed to clone upperpath [ 177.118574][T13469] lo speed is unknown, defaulting to 1000 [ 177.161981][T13469] overlayfs: failed to clone upperpath [ 177.240619][ T838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 177.365190][T13485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2608'. [ 177.369179][T13485] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2608'. [ 177.373071][T13485] netlink: 'syz.2.2608': attribute type 5 has an invalid length. [ 177.376295][T13485] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2608'. [ 177.400869][ T838] usb 9-1: Using ep0 maxpacket: 32 [ 177.404709][ T838] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 177.407969][ T838] usb 9-1: config 0 has no interface number 0 [ 177.412790][ T838] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.416408][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.419664][ T838] usb 9-1: Product: syz [ 177.421624][ T838] usb 9-1: Manufacturer: syz [ 177.424625][ T838] usb 9-1: SerialNumber: syz [ 177.428826][ T838] usb 9-1: config 0 descriptor?? [ 177.439308][ T838] smsc95xx v2.0.0 [ 177.640762][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 177.766961][T13490] netlink: 'syz.0.2610': attribute type 3 has an invalid length. [ 177.773820][ T40] audit: type=1400 audit(425.708:617): avc: denied { execute } for pid=13489 comm="syz.0.2610" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=39726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 177.804344][ T40] audit: type=1400 audit(425.745:618): avc: denied { read open } for pid=13494 comm="syz.0.2611" path="/" dev="configfs" ino=2146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.938386][T13501] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 178.012370][T13512] overlayfs: failed to clone upperpath [ 178.080074][T13458] nfs: Unknown parameter 'subj_role' [ 178.082620][ T838] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 178.086160][ T838] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.089622][ T838] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 178.094370][ T838] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 178.100835][ T838] usb 9-1: USB disconnect, device number 2 [ 178.205139][T13535] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.208226][T13535] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.249142][T13537] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 178.636623][T13542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13542 comm=syz.0.2631 [ 178.725345][ T40] audit: type=1400 audit(426.606:619): avc: denied { unmount } for pid=12449 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 178.812737][T13564] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 178.818329][ T40] audit: type=1400 audit(426.690:620): avc: denied { map } for pid=13563 comm="syz.0.2639" path="socket:[42237]" dev="sockfs" ino=42237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 178.827350][ T40] audit: type=1800 audit(426.699:621): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2639" name="bus" dev="tmpfs" ino=3717 res=0 errno=0 [ 179.006823][ T6054] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 179.151046][T13576] lo speed is unknown, defaulting to 1000 [ 179.177640][ T6054] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.181492][ T6054] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.182559][T13578] lo speed is unknown, defaulting to 1000 [ 179.184786][ T6054] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.184803][ T6054] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.184831][ T6054] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.205382][ T6054] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.210266][ T6054] usb 9-1: config 0 descriptor?? [ 179.259476][T13580] overlayfs: failed to clone upperpath [ 179.294139][T13578] overlayfs: failed to clone upperpath [ 179.383221][T13592] 9p: Unknown access argument uäÆ3: -22 [ 179.512843][ T6054] usbhid 9-1:0.0: can't add hid device: -71 [ 179.514923][ T6054] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 179.524640][ T6054] usb 9-1: USB disconnect, device number 3 [ 179.760866][T13614] lo speed is unknown, defaulting to 1000 [ 179.791838][T13621] overlayfs: statfs failed on './file0' [ 179.829263][T13623] cgroup: noprefix used incorrectly [ 179.831671][T13623] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 179.972801][T13636] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.168781][T13661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.176258][T13664] netlink: 'syz.4.2674': attribute type 27 has an invalid length. [ 180.260778][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.263273][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.358989][T13664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.370672][T13664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.549053][T13669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.553542][T13669] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.562134][T13669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.569457][T11121] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.572702][T11121] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.579713][T11121] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.583120][T11121] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.632396][ T40] audit: type=1400 audit(428.392:622): avc: denied { bind } for pid=13693 comm="syz.4.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.643102][ T40] audit: type=1400 audit(428.392:623): avc: denied { execmem } for pid=13685 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 180.653567][ T40] audit: type=1400 audit(428.392:624): avc: denied { rename } for pid=13693 comm="syz.4.2683" name="file0" dev="9p" ino=35913904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.663534][T13698] 9pnet_virtio: no channels available for device syz [ 180.910057][T13722] debugfs: 'ttyS3' already exists in 'caif_serial' [ 181.460010][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 181.460027][ T40] audit: type=1400 audit(429.159:630): avc: denied { shutdown } for pid=13783 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.578964][ T40] audit: type=1400 audit(429.271:631): avc: denied { accept } for pid=13791 comm="syz.1.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.587560][T13795] netlink: 'syz.2.2708': attribute type 1 has an invalid length. [ 181.588226][T13796] netlink: 'syz.2.2708': attribute type 1 has an invalid length. [ 181.598748][T13796] __nla_validate_parse: 12 callbacks suppressed [ 181.598761][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 181.604512][T13796] netlink: 'syz.2.2708': attribute type 1 has an invalid length. [ 181.607072][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 181.757919][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 181.760832][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'. [ 181.764972][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 181.767756][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'. [ 181.795322][T13799] netlink: 'syz.1.2709': attribute type 13 has an invalid length. [ 181.798506][T13799] netlink: 'syz.1.2709': attribute type 17 has an invalid length. [ 181.860969][T13799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.918129][T13825] lo speed is unknown, defaulting to 1000 [ 181.944792][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 182.080698][T13847] netlink: 'syz.0.2726': attribute type 4 has an invalid length. [ 182.091137][ T40] audit: type=1326 audit(429.748:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.4.2725" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc518ebe9 code=0x0 [ 182.255655][T13865] tmpfs: Unknown parameter 'grpquota…' [ 183.277341][T13907] nfs: Unknown parameter 'acl' [ 183.332995][ T40] audit: type=1400 audit(430.908:633): avc: denied { write } for pid=13913 comm="syz.0.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.384094][T13928] Only authenc() type AEADs are supported by ESSIV [ 183.424735][T13937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13937 comm=syz.1.2754 [ 183.429631][T13937] CIFS mount error: No usable UNC path provided in device string! [ 183.429631][T13937] [ 183.435688][T13937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.468381][T13941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2756'. [ 183.594246][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2763'. [ 183.725427][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2770'. [ 183.774949][ T40] audit: type=1400 audit(431.329:634): avc: denied { create } for pid=13994 comm="syz.0.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 184.146966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.496766][ T40] audit: type=1400 audit(432.003:635): avc: denied { create } for pid=14002 comm="syz.4.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.538602][T14008] lo speed is unknown, defaulting to 1000 [ 184.663941][ T40] audit: type=1400 audit(432.162:636): avc: denied { mount } for pid=14031 comm="syz.1.2783" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 184.705862][T14020] bond3: (slave bridge3): Releasing active interface [ 184.821007][T14046] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 184.879312][T14049] cgroup: noprefix used incorrectly [ 185.010041][T14063] lo speed is unknown, defaulting to 1000 [ 185.055442][T14068] overlayfs: failed to clone upperpath [ 185.106167][T14073] bridge: RTM_NEWNEIGH with invalid ether address [ 185.599126][T14094] lo speed is unknown, defaulting to 1000 [ 185.627761][ T40] audit: type=1400 audit(433.060:637): avc: denied { write } for pid=14097 comm="syz.2.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.635167][ T40] audit: type=1400 audit(433.060:638): avc: denied { nlmsg_write } for pid=14097 comm="syz.2.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.658750][T14101] tmpfs: Bad value for 'size' [ 185.668016][T14103] cgroup: noprefix used incorrectly [ 185.789776][T14119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.794531][T14123] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 185.796260][T14119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.956654][T14128] lo speed is unknown, defaulting to 1000 [ 186.000801][T14130] overlayfs: failed to clone upperpath [ 186.071197][ T838] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 186.220765][ T838] usb 9-1: device descriptor read/64, error -71 [ 186.498539][ T838] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 186.637593][ T838] usb 9-1: device descriptor read/64, error -71 [ 186.710213][T14156] overlayfs: failed to clone upperpath [ 186.755497][ T838] usb usb9-port1: attempt power cycle [ 186.791493][ T40] audit: type=1400 audit(434.154:639): avc: denied { setopt } for pid=14159 comm="syz.2.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.946682][T14177] trusted_key: encrypted_key: master key parameter '¡ñlH+•×‹í(%“„䙩ð)âð}ü§œ—j' is invalid [ 186.954623][ T40] audit: type=1400 audit(434.304:640): avc: denied { nlmsg_write } for pid=14176 comm="syz.0.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 187.055715][ T40] audit: type=1400 audit(434.397:641): avc: denied { lock } for pid=14166 comm="syz.2.2831" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.118617][ T838] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 187.140684][ T838] usb 9-1: device descriptor read/8, error -71 [ 187.396851][ T838] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 187.421940][ T838] usb 9-1: device descriptor read/8, error -71 [ 187.517650][ T40] audit: type=1400 audit(434.828:642): avc: denied { setattr } for pid=14208 comm="syz.1.2845" name="file0" dev="tmpfs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.519505][T14209] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 187.538294][ T838] usb usb9-port1: unable to enumerate USB device [ 187.547045][T14209] bridge_slave_0: default FDB implementation only supports local addresses [ 187.548411][T14212] Invalid source name [ 187.551639][T14209] __nla_validate_parse: 3 callbacks suppressed [ 187.551649][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 187.552209][T14212] UBIFS error (pid: 14212): cannot open "./file0", error -22 [ 187.554150][T14209] bridge_slave_0: default FDB implementation only supports local addresses [ 187.826177][T14236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14236 comm=syz.2.2855 [ 187.826625][T14237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14237 comm=syz.2.2855 [ 187.838332][T14236] netlink: 'syz.2.2855': attribute type 1 has an invalid length. [ 188.123325][ T55] libceph: connect (1)[b::]:6789 error -22 [ 188.126688][ T55] libceph: mon0 (1)[b::]:6789 connect error [ 188.232933][T14281] /dev/nbd0: Can't lookup blockdev [ 188.404388][ T55] libceph: connect (1)[b::]:6789 error -22 [ 188.406369][ T55] libceph: mon0 (1)[b::]:6789 connect error [ 188.782524][T14290] netlink: set zone limit has 4 unknown bytes [ 188.951281][ T55] libceph: connect (1)[b::]:6789 error -22 [ 188.954529][ T55] libceph: mon0 (1)[b::]:6789 connect error [ 188.959862][ T40] audit: type=1326 audit(436.184:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14304 comm="syz.1.2878" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x0 [ 189.070126][T14275] ceph: No mds server is up or the cluster is laggy [ 189.204605][T14316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.320703][T14332] lo speed is unknown, defaulting to 1000 [ 189.448591][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 189.494162][T14340] FAULT_INJECTION: forcing a failure. [ 189.494162][T14340] name failslab, interval 1, probability 0, space 0, times 1 [ 189.499589][T14340] CPU: 2 UID: 0 PID: 14340 Comm: syz.4.2891 Not tainted syzkaller #0 PREEMPT(full) [ 189.499615][T14340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.499626][T14340] Call Trace: [ 189.499634][T14340] [ 189.499642][T14340] dump_stack_lvl+0x16c/0x1f0 [ 189.499667][T14340] should_fail_ex+0x512/0x640 [ 189.499687][T14340] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 189.499710][T14340] should_failslab+0xc2/0x120 [ 189.499731][T14340] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 189.499749][T14340] ? __alloc_skb+0x2b2/0x380 [ 189.499771][T14340] __alloc_skb+0x2b2/0x380 [ 189.499788][T14340] ? __pfx___alloc_skb+0x10/0x10 [ 189.499808][T14340] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 189.499834][T14340] netlink_alloc_large_skb+0x69/0x130 [ 189.499857][T14340] netlink_sendmsg+0x6a1/0xdd0 [ 189.499882][T14340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.499913][T14340] ____sys_sendmsg+0xa98/0xc70 [ 189.499945][T14340] ? copy_msghdr_from_user+0x10a/0x160 [ 189.499964][T14340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.500000][T14340] ___sys_sendmsg+0x134/0x1d0 [ 189.500021][T14340] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.500072][T14340] __sys_sendmsg+0x16d/0x220 [ 189.500091][T14340] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.500128][T14340] do_syscall_64+0xcd/0x4c0 [ 189.500151][T14340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.500170][T14340] RIP: 0033:0x7f1dc518ebe9 [ 189.500185][T14340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.500203][T14340] RSP: 002b:00007f1dc5f2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.500222][T14340] RAX: ffffffffffffffda RBX: 00007f1dc53b5fa0 RCX: 00007f1dc518ebe9 [ 189.500233][T14340] RDX: 0000000002000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 189.500245][T14340] RBP: 00007f1dc5f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 189.500255][T14340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.500266][T14340] R13: 00007f1dc53b6038 R14: 00007f1dc53b5fa0 R15: 00007fff43f36708 [ 189.500290][T14340] [ 189.628400][ T40] audit: type=1400 audit(436.801:644): avc: denied { create } for pid=14341 comm="syz.4.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.874708][T14361] fuse: Unknown parameter 'A6' [ 189.892655][ T40] audit: type=1400 audit(437.054:645): avc: denied { read write } for pid=14362 comm="syz.4.2902" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.901997][ T40] audit: type=1400 audit(437.054:646): avc: denied { open } for pid=14362 comm="syz.4.2902" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.911953][ T40] audit: type=1400 audit(437.073:647): avc: denied { map } for pid=14362 comm="syz.4.2902" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.988660][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'. [ 190.074153][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.089625][T14391] sctp: [Deprecated]: syz.2.2910 (pid 14391) Use of int in maxseg socket option. [ 190.089625][T14391] Use struct sctp_assoc_value instead [ 190.128532][ T40] audit: type=1400 audit(437.269:648): avc: denied { getopt } for pid=14392 comm="syz.1.2912" lport=50193 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.733049][ T40] audit: type=1400 audit(437.840:649): avc: denied { firmware_load } for pid=14405 comm="syz.0.2917" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 190.857377][T14408] netlink: 'syz.0.2918': attribute type 2 has an invalid length. [ 190.894292][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 191.121677][T14423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.174484][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2928'. [ 191.242114][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2931'. [ 191.361347][T14450] netlink: 'syz.1.2936': attribute type 58 has an invalid length. [ 191.643373][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 191.766662][T14467] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2941'. [ 191.806462][T14471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2943'. [ 191.879989][T14474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2944'. [ 192.068388][ T53] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 192.206150][T14478] lo speed is unknown, defaulting to 1000 [ 192.228801][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 192.232633][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.236029][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.239170][ T53] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 192.242741][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.248297][T14479] overlayfs: failed to resolve './file0': -2 [ 192.250633][ T53] usb 9-1: config 0 descriptor?? [ 192.620194][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 192.620211][ T40] audit: type=1400 audit(439.598:652): avc: denied { create } for pid=14489 comm="syz.2.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 192.631831][ T40] audit: type=1400 audit(439.608:653): avc: denied { write } for pid=14489 comm="syz.2.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 192.714468][ T53] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 192.900445][T14520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.907314][T14520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.913704][ T53] usb 9-1: USB disconnect, device number 8 [ 192.953196][T14524] netlink: 'syz.0.2962': attribute type 2 has an invalid length. [ 192.967534][T14520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.221224][T14536] __nla_validate_parse: 2 callbacks suppressed [ 193.221236][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 193.226884][T14536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'. [ 193.234496][T14536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2966'. [ 193.239351][T14536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2966'. [ 193.562650][T14545] FAULT_INJECTION: forcing a failure. [ 193.562650][T14545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.568655][T14545] CPU: 2 UID: 0 PID: 14545 Comm: syz.4.2970 Not tainted syzkaller #0 PREEMPT(full) [ 193.568672][T14545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.568679][T14545] Call Trace: [ 193.568683][T14545] [ 193.568688][T14545] dump_stack_lvl+0x16c/0x1f0 [ 193.568705][T14545] should_fail_ex+0x512/0x640 [ 193.568721][T14545] _copy_to_user+0x32/0xd0 [ 193.568736][T14545] semctl_main+0xa34/0x2a30 [ 193.568751][T14545] ? find_held_lock+0x2b/0x80 [ 193.568767][T14545] ? __pfx_semctl_main+0x10/0x10 [ 193.568802][T14545] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 193.568819][T14545] ksys_semctl.constprop.0+0x27a/0x2f0 [ 193.568833][T14545] ? __fget_files+0x20e/0x3c0 [ 193.568847][T14545] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 193.568876][T14545] do_syscall_64+0xcd/0x4c0 [ 193.568901][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.568917][T14545] RIP: 0033:0x7f1dc518ebe9 [ 193.568933][T14545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.568949][T14545] RSP: 002b:00007f1dc5f2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 193.568966][T14545] RAX: ffffffffffffffda RBX: 00007f1dc53b5fa0 RCX: 00007f1dc518ebe9 [ 193.568977][T14545] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 193.568985][T14545] RBP: 00007f1dc5f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 193.568999][T14545] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000001 [ 193.569010][T14545] R13: 00007f1dc53b6038 R14: 00007f1dc53b5fa0 R15: 00007fff43f36708 [ 193.569033][T14545] [ 193.970281][T14574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2981'. [ 194.614260][ T40] audit: type=1400 audit(441.469:654): avc: denied { relabelfrom } for pid=14644 comm="syz.4.3006" name="SCTPv6" dev="sockfs" ino=44699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.614437][T14645] SELinux: Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped). [ 194.626289][ T40] audit: type=1400 audit(441.478:655): avc: denied { relabelto } for pid=14644 comm="syz.4.3006" name="SCTPv6" dev="sockfs" ino=44699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:dpkg_exec_t:s0" [ 194.661363][T14648] fuse: blksize only supported for fuseblk [ 195.419463][ T40] audit: type=1326 audit(442.217:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.1.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7fc00000 [ 195.427255][T14681] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 195.434503][T14681] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 195.478543][ T40] audit: type=1400 audit(442.273:657): avc: denied { read } for pid=14686 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 195.739681][ T40] audit: type=1400 audit(442.517:658): avc: denied { getopt } for pid=14704 comm="syz.1.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.977872][ T40] audit: type=1107 audit(442.741:659): pid=14728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 195.983642][ T40] audit: type=1400 audit(442.751:660): avc: denied { listen } for pid=14726 comm="syz.1.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.021973][ T40] audit: type=1400 audit(442.751:661): avc: denied { accept } for pid=14726 comm="syz.1.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.175121][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 196.346449][T14762] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 196.353495][T14762] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 196.563594][T14776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3053'. [ 196.970242][T14788] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3057'. [ 197.129578][T14799] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3062'. [ 197.194659][T14805] netlink: 'syz.2.3064': attribute type 15 has an invalid length. [ 197.197941][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3064'. [ 197.201635][T14807] netlink: 'syz.1.3065': attribute type 10 has an invalid length. [ 197.202517][T14807] bond0: (slave wlan1): Opening slave failed [ 197.214481][T14806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.348969][T14821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14821 comm=syz.2.3066 [ 197.563590][T14830] netlink: 'syz.4.3071': attribute type 2 has an invalid length. [ 197.603443][T14832] netlink: 'syz.4.3072': attribute type 21 has an invalid length. [ 197.607254][T14832] netlink: 'syz.4.3072': attribute type 6 has an invalid length. [ 197.612508][T14832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14832 comm=syz.4.3072 [ 197.729574][T14848] netlink: 'syz.4.3076': attribute type 153 has an invalid length. [ 197.807207][T14856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.811452][T14856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.869869][T14856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.890431][T14862] overlayfs: statfs failed on './file0' [ 198.160633][ T40] audit: type=1400 audit(444.780:662): avc: denied { bind } for pid=14873 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.705014][T14901] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 198.709581][ T40] audit: type=1400 audit(445.304:663): avc: denied { relabelto } for pid=14900 comm="syz.1.3098" name="nullb0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 198.720260][ T40] audit: type=1400 audit(445.304:664): avc: denied { associate } for pid=14900 comm="syz.1.3098" name="nullb0" dev="tmpfs" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 198.798285][T14904] macvlan0: entered promiscuous mode [ 198.800246][T14904] macvlan0: entered allmulticast mode [ 198.802668][T14904] bond0: (slave macvlan0): Opening slave failed [ 199.002931][ T40] audit: type=1400 audit(445.575:665): avc: denied { read } for pid=14910 comm="syz.1.3102" name="nullb0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 199.012020][ T40] audit: type=1400 audit(445.575:666): avc: denied { open } for pid=14910 comm="syz.1.3102" path="/dev/nullb0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0" [ 199.142336][T14923] nft_compat: unsupported protocol 1 [ 199.143224][ T40] audit: type=1400 audit(445.697:667): avc: denied { accept } for pid=14921 comm="syz.4.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.198208][T14926] overlayfs: statfs failed on './file0' [ 199.425641][T14942] batman_adv: batadv0: Adding interface: gretap1 [ 199.428327][T14942] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.439575][T14942] batman_adv: batadv0: Interface activated: gretap1 [ 199.477790][ T40] audit: type=1400 audit(446.024:668): avc: denied { accept } for pid=14935 comm="syz.4.3108" path="socket:[46476]" dev="sockfs" ino=46476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.571992][ T40] audit: type=1400 audit(446.099:669): avc: denied { setattr } for pid=14953 comm="syz.2.3117" name="file0" dev="tmpfs" ino=3713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.645015][T14960] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.673983][T14960] kvm: pic: non byte read [ 199.679004][T14960] kvm: pic: level sensitive irq not supported [ 199.679967][T14960] kvm: pic: non byte read [ 199.692428][T14960] kvm: pic: level sensitive irq not supported [ 199.692963][T14960] kvm: pic: non byte read [ 199.704471][T14960] kvm: pic: level sensitive irq not supported [ 199.705217][T14960] kvm: pic: non byte read [ 199.712543][T14960] kvm: pic: level sensitive irq not supported [ 199.712985][T14960] kvm: pic: non byte read [ 199.719409][T14960] kvm: pic: level sensitive irq not supported [ 199.720182][T14960] kvm: pic: non byte read [ 199.727968][T14960] kvm: pic: level sensitive irq not supported [ 199.728582][T14960] kvm: pic: non byte read [ 199.737132][T14960] kvm: pic: level sensitive irq not supported [ 199.737525][T14960] kvm: pic: non byte read [ 199.892656][T14973] __nla_validate_parse: 4 callbacks suppressed [ 199.892674][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3124'. [ 199.899452][T14973] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 199.902179][T14973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.137561][T11113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.145697][T11113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.255675][T11113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.261079][T11113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.341429][T11113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.346625][T11113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.355183][ T5333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.361414][ T5333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.361719][T15000] dummy0: entered promiscuous mode [ 200.366313][ T5333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.372295][ T5333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.376035][ T5333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.405325][T14999] lo speed is unknown, defaulting to 1000 [ 200.446879][T11113] netdevsim netdevsim2 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.455572][T11113] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.520828][T15005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3135'. [ 200.604057][T14999] chnl_net:caif_netlink_parms(): no params data found [ 200.673739][T11113] bridge_slave_1: left allmulticast mode [ 200.678288][T11113] bridge_slave_1: left promiscuous mode [ 200.682704][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.689355][T11113] bridge_slave_0: left allmulticast mode [ 200.689466][T15022] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3138'. [ 200.691502][T11113] bridge_slave_0: left promiscuous mode [ 200.697661][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.700003][T15022] xt_socket: unknown flags 0xd0 [ 200.712894][T11113] batman_adv: batadv0: Interface deactivated: gretap1 [ 200.921579][T15030] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 200.978801][T11113] batman_adv: batadv0: Removing interface: gretap1 [ 201.054146][T11113] bond3 (unregistering): (slave geneve2): Releasing active interface [ 201.317821][T15033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 201.555346][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.559752][T11113] bond_slave_0: left promiscuous mode [ 201.564466][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.569153][T11113] bond_slave_1: left promiscuous mode [ 201.576403][T11113] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 201.581230][T11113] veth0_virt_wifi: left promiscuous mode [ 201.589010][T11113] bond0 (unregistering): Released all slaves [ 201.599378][T11113] bond1 (unregistering): Released all slaves [ 201.610406][T11113] bond2 (unregistering): Released all slaves [ 201.729428][T11113] bond3 (unregistering): Released all slaves [ 201.740307][T11113] bond4 (unregistering): Released all slaves [ 201.751649][T11113] bond5 (unregistering): Released all slaves [ 201.766122][T11113] bond6 (unregistering): Released all slaves [ 201.779685][T11113] bond7 (unregistering): Released all slaves [ 201.850122][T15063] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.3148'. [ 201.859263][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.861881][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.864535][T14999] bridge_slave_0: entered allmulticast mode [ 201.868217][T14999] bridge_slave_0: entered promiscuous mode [ 201.878873][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.881931][T14999] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.885401][T14999] bridge_slave_1: entered allmulticast mode [ 201.896619][T14999] bridge_slave_1: entered promiscuous mode [ 201.907244][ T40] audit: type=1326 audit(448.288:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.1.3150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 201.919436][ T40] audit: type=1326 audit(448.288:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.1.3150" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe667f8ebe9 code=0x7ffc0000 [ 202.024249][T11113] tipc: Disabling bearer [ 202.031748][T11113] tipc: Left network mode [ 202.062454][T14999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.069599][T14999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.138977][T14999] team0: Port device team_slave_0 added [ 202.161766][T14999] team0: Port device team_slave_1 added [ 202.193460][T15073] lo speed is unknown, defaulting to 1000 [ 202.218305][T15074] lo speed is unknown, defaulting to 1000 [ 202.218918][T14999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.222952][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.233112][T14999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.240351][T14999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.243512][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.256733][T14999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.273017][T15041] team0: Port device netdevsim0 removed [ 202.324986][T15091] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 202.403730][T14999] hsr_slave_0: entered promiscuous mode [ 202.407035][T14999] hsr_slave_1: entered promiscuous mode [ 202.409268][T14999] debugfs: 'hsr0' already exists in 'hsr' [ 202.411625][T14999] Cannot create hsr debugfs directory [ 202.524168][ T5333] Bluetooth: hci3: command tx timeout [ 202.576695][T15108] overlayfs: failed to resolve './file0': -2 [ 202.693582][T14999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.701872][T14999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.706821][T14999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.717325][T14999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.734251][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.737098][T14999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.740533][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.743727][T14999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.767413][T11113] hsr_slave_0: left promiscuous mode [ 202.771992][T11113] hsr_slave_1: left promiscuous mode [ 202.774899][T11113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.777993][T11113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.783741][T11113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.786418][T11113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.809172][T11113] veth1_macvtap: left promiscuous mode [ 202.811238][T11113] veth0_macvtap: left promiscuous mode [ 203.121638][T15134] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 203.465886][T11113] team0 (unregistering): Port device team_slave_1 removed [ 203.564577][T11113] team0 (unregistering): Port device team_slave_0 removed [ 203.981455][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.862802][ T5983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.867072][ T5983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.870768][ T5983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.874425][ T5983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.878135][ T5983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.926881][ T5333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.934316][ T5333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.939004][ T5333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.945449][ T5333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.949944][ T5333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.202167][ T1423] ================================================================== [ 220.205115][ T1423] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 220.207497][ T1423] Read of size 1 at addr ffff888026446490 by task aoe_tx0/1423 [ 220.210629][ T1423] [ 220.212640][ T1423] CPU: 0 UID: 0 PID: 1423 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.212656][ T1423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.212663][ T1423] Call Trace: [ 220.212667][ T1423] [ 220.212672][ T1423] dump_stack_lvl+0x116/0x1f0 [ 220.212688][ T1423] print_report+0xcd/0x630 [ 220.212704][ T1423] ? __virt_addr_valid+0x81/0x610 [ 220.212720][ T1423] ? __phys_addr+0xe8/0x180 [ 220.212734][ T1423] ? handle_tx+0x5dc/0x630 [ 220.212749][ T1423] kasan_report+0xe0/0x110 [ 220.212761][ T1423] ? handle_tx+0x5dc/0x630 [ 220.212778][ T1423] handle_tx+0x5dc/0x630 [ 220.212797][ T1423] dev_hard_start_xmit+0x97/0x740 [ 220.212815][ T1423] __dev_queue_xmit+0xa46/0x4490 [ 220.212833][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.212844][ T1423] ? finish_task_switch.isra.0+0x221/0xc10 [ 220.212859][ T1423] ? rcu_is_watching+0x12/0xc0 [ 220.212873][ T1423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 220.212889][ T1423] ? __schedule+0x11a3/0x5de0 [ 220.212900][ T1423] ? __lock_acquire+0xb97/0x1ce0 [ 220.212920][ T1423] ? do_raw_spin_lock+0x12c/0x2b0 [ 220.212934][ T1423] ? rcu_is_watching+0x12/0xc0 [ 220.212948][ T1423] tx+0xcc/0x190 [ 220.212959][ T1423] ? __pfx_tx+0x10/0x10 [ 220.212969][ T1423] kthread+0x1e1/0x3e0 [ 220.212986][ T1423] ? find_held_lock+0x2b/0x80 [ 220.212999][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.213016][ T1423] ? __pfx_default_wake_function+0x10/0x10 [ 220.213030][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.213041][ T1423] ? __kthread_parkme+0x19e/0x250 [ 220.213058][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.213074][ T1423] kthread+0x3c5/0x780 [ 220.213085][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.213095][ T1423] ? rcu_is_watching+0x12/0xc0 [ 220.213108][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.213119][ T1423] ret_from_fork+0x5d7/0x6f0 [ 220.213130][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.213140][ T1423] ret_from_fork_asm+0x1a/0x30 [ 220.213158][ T1423] [ 220.213161][ T1423] [ 220.278480][ T1423] Allocated by task 6161: [ 220.279941][ T1423] kasan_save_stack+0x33/0x60 [ 220.281450][ T1423] kasan_save_track+0x14/0x30 [ 220.282927][ T1423] __kasan_kmalloc+0xaa/0xb0 [ 220.284356][ T1423] alloc_tty_struct+0x96/0x8c0 [ 220.285870][ T1423] tty_init_dev.part.0+0x1e/0x500 [ 220.287472][ T1423] tty_open+0xa50/0xf90 [ 220.288788][ T1423] chrdev_open+0x234/0x6a0 [ 220.290390][ T1423] do_dentry_open+0x97f/0x1530 [ 220.292085][ T1423] vfs_open+0x82/0x3f0 [ 220.293409][ T1423] path_openat+0x1de4/0x2cb0 [ 220.294869][ T1423] do_filp_open+0x20b/0x470 [ 220.296331][ T1423] do_sys_openat2+0x11b/0x1d0 [ 220.297805][ T1423] __x64_sys_openat+0x174/0x210 [ 220.299359][ T1423] do_syscall_64+0xcd/0x4c0 [ 220.300802][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.302727][ T1423] [ 220.303504][ T1423] Freed by task 13679: [ 220.304785][ T1423] kasan_save_stack+0x33/0x60 [ 220.306265][ T1423] kasan_save_track+0x14/0x30 [ 220.307748][ T1423] kasan_save_free_info+0x3b/0x60 [ 220.309335][ T1423] __kasan_slab_free+0x60/0x70 [ 220.310855][ T1423] kfree+0x2b4/0x4d0 [ 220.312102][ T1423] process_one_work+0x9cf/0x1b70 [ 220.313655][ T1423] worker_thread+0x6c8/0xf10 [ 220.315111][ T1423] kthread+0x3c5/0x780 [ 220.316427][ T1423] ret_from_fork+0x5d7/0x6f0 [ 220.317880][ T1423] ret_from_fork_asm+0x1a/0x30 [ 220.319399][ T1423] [ 220.320186][ T1423] Last potentially related work creation: [ 220.321960][ T1423] kasan_save_stack+0x33/0x60 [ 220.323457][ T1423] kasan_record_aux_stack+0xa7/0xc0 [ 220.325182][ T1423] insert_work+0x36/0x230 [ 220.326584][ T1423] __queue_work+0x97e/0x1160 [ 220.328101][ T1423] queue_work_on+0x1a4/0x1f0 [ 220.329582][ T1423] release_tty+0x4de/0x5d0 [ 220.331094][ T1423] tty_release_struct+0xb7/0xe0 [ 220.332653][ T1423] tty_release+0xe2d/0x1430 [ 220.334108][ T1423] __fput+0x402/0xb70 [ 220.335389][ T1423] task_work_run+0x14d/0x240 [ 220.336890][ T1423] do_exit+0x86f/0x2bf0 [ 220.338233][ T1423] do_group_exit+0xd3/0x2a0 [ 220.339800][ T1423] get_signal+0x2673/0x26d0 [ 220.341889][ T1423] arch_do_signal_or_restart+0x8f/0x7d0 [ 220.343639][ T1423] exit_to_user_mode_loop+0x84/0x110 [ 220.345302][ T1423] do_syscall_64+0x3f6/0x4c0 [ 220.346777][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.348653][ T1423] [ 220.349432][ T1423] The buggy address belongs to the object at ffff888026446000 [ 220.349432][ T1423] which belongs to the cache kmalloc-cg-2k of size 2048 [ 220.354313][ T1423] The buggy address is located 1168 bytes inside of [ 220.354313][ T1423] freed 2048-byte region [ffff888026446000, ffff888026446800) [ 220.358613][ T1423] [ 220.359399][ T1423] The buggy address belongs to the physical page: [ 220.361455][ T1423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26440 [ 220.364184][ T1423] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.366797][ T1423] memcg:ffff8880295ab101 [ 220.368147][ T1423] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 220.371075][ T1423] page_type: f5(slab) [ 220.372701][ T1423] raw: 00fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 220.376115][ T1423] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880295ab101 [ 220.379422][ T1423] head: 00fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 220.382487][ T1423] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880295ab101 [ 220.385288][ T1423] head: 00fff00000000003 ffffea0000991001 00000000ffffffff 00000000ffffffff [ 220.388030][ T1423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 220.390788][ T1423] page dumped because: kasan: bad access detected [ 220.392804][ T1423] page_owner tracks the page as allocated [ 220.394587][ T1423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5975, tgid 5975 (syz-executor), ts 53551670802, free_ts 53526934259 [ 220.401764][ T1423] post_alloc_hook+0x1c0/0x230 [ 220.403414][ T1423] get_page_from_freelist+0x132b/0x38e0 [ 220.405250][ T1423] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 220.407115][ T1423] alloc_pages_mpol+0x1fb/0x550 [ 220.408678][ T1423] new_slab+0x247/0x330 [ 220.410020][ T1423] ___slab_alloc+0xcf2/0x1740 [ 220.411560][ T1423] __slab_alloc.constprop.0+0x56/0xb0 [ 220.413436][ T1423] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 220.416200][ T1423] kmemdup_noprof+0x29/0x60 [ 220.418016][ T1423] neigh_sysctl_register+0xb2/0x670 [ 220.420092][ T1423] addrconf_sysctl_register+0xb9/0x1f0 [ 220.422262][ T1423] ipv6_add_dev+0xb31/0x15f0 [ 220.424210][ T1423] addrconf_notify+0x53e/0x19e0 [ 220.426155][ T1423] notifier_call_chain+0xbc/0x410 [ 220.428003][ T1423] call_netdevice_notifiers_info+0xbe/0x140 [ 220.430376][ T1423] register_netdevice+0x182e/0x2270 [ 220.432461][ T1423] page last free pid 5975 tgid 5975 stack trace: [ 220.434944][ T1423] __free_frozen_pages+0x7d5/0x10f0 [ 220.437046][ T1423] qlist_free_all+0x4d/0x120 [ 220.438893][ T1423] kasan_quarantine_reduce+0x195/0x1e0 [ 220.441208][ T1423] __kasan_slab_alloc+0x69/0x90 [ 220.443176][ T1423] __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 220.445705][ T1423] kstrdup+0x53/0x100 [ 220.447346][ T1423] kstrdup_const+0x63/0x80 [ 220.449117][ T1423] kvasprintf_const+0x10f/0x1a0 [ 220.451080][ T1423] kobject_set_name_vargs+0x5a/0x140 [ 220.453200][ T1423] dev_set_name+0xc7/0x100 [ 220.454987][ T1423] netdev_register_kobject+0xc5/0x3d0 [ 220.457141][ T1423] register_netdevice+0x13dc/0x2270 [ 220.459282][ T1423] geneve_configure+0x785/0xaf0 [ 220.461254][ T1423] geneve_newlink+0x1af/0x3a0 [ 220.463260][ T1423] rtnl_newlink+0xc45/0x2000 [ 220.465096][ T1423] rtnetlink_rcv_msg+0x95b/0xe90 [ 220.467017][ T1423] [ 220.468000][ T1423] Memory state around the buggy address: [ 220.470235][ T1423] ffff888026446380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.473412][ T1423] ffff888026446400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.476586][ T1423] >ffff888026446480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.479722][ T1423] ^ [ 220.481588][ T1423] ffff888026446500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.484744][ T1423] ffff888026446580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.487897][ T1423] ================================================================== [ 220.491179][ T1423] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.494048][ T1423] CPU: 0 UID: 0 PID: 1423 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 220.497611][ T1423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.501896][ T1423] Call Trace: [ 220.503308][ T1423] [ 220.504540][ T1423] dump_stack_lvl+0x3d/0x1f0 [ 220.506411][ T1423] vpanic+0x6e8/0x7a0 [ 220.508026][ T1423] ? __pfx_vpanic+0x10/0x10 [ 220.509849][ T1423] ? handle_tx+0x5dc/0x630 [ 220.511658][ T1423] panic+0xca/0xd0 [ 220.513198][ T1423] ? __pfx_panic+0x10/0x10 [ 220.514977][ T1423] ? check_panic_on_warn+0x1f/0xb0 [ 220.517122][ T1423] check_panic_on_warn+0xab/0xb0 [ 220.519463][ T1423] end_report+0x107/0x170 [ 220.521179][ T1423] kasan_report+0xee/0x110 [ 220.523060][ T1423] ? handle_tx+0x5dc/0x630 [ 220.524900][ T1423] handle_tx+0x5dc/0x630 [ 220.526307][ T1423] dev_hard_start_xmit+0x97/0x740 [ 220.527932][ T1423] __dev_queue_xmit+0xa46/0x4490 [ 220.529569][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.531524][ T1423] ? finish_task_switch.isra.0+0x221/0xc10 [ 220.533381][ T1423] ? rcu_is_watching+0x12/0xc0 [ 220.534904][ T1423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 220.536671][ T1423] ? __schedule+0x11a3/0x5de0 [ 220.538181][ T1423] ? __lock_acquire+0xb97/0x1ce0 [ 220.539786][ T1423] ? do_raw_spin_lock+0x12c/0x2b0 [ 220.541701][ T1423] ? rcu_is_watching+0x12/0xc0 [ 220.543263][ T1423] tx+0xcc/0x190 [ 220.544425][ T1423] ? __pfx_tx+0x10/0x10 [ 220.545763][ T1423] kthread+0x1e1/0x3e0 [ 220.547122][ T1423] ? find_held_lock+0x2b/0x80 [ 220.548667][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.550182][ T1423] ? __pfx_default_wake_function+0x10/0x10 [ 220.552480][ T1423] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.554251][ T1423] ? __kthread_parkme+0x19e/0x250 [ 220.555935][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.557526][ T1423] kthread+0x3c5/0x780 [ 220.558850][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.560375][ T1423] ? rcu_is_watching+0x12/0xc0 [ 220.561908][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.563402][ T1423] ret_from_fork+0x5d7/0x6f0 [ 220.564885][ T1423] ? __pfx_kthread+0x10/0x10 [ 220.566362][ T1423] ret_from_fork_asm+0x1a/0x30 [ 220.567850][ T1423] [ 220.569617][ T1423] Kernel Offset: disabled [ 220.571006][ T1423] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:40:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90006f2f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555592799808 CR3=0000000037e91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 306bcc67e6584c0b ea2e251d4b427a5e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe07065096 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe07065096 00007ffe0706509c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29736561286d6367 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29736561286d6367 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063feed100 00007f063f387460 00007f063f380004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f063f3874b8 00007f063f3874b0 00007f063f3874a8 00007f063f3874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000111d50 RCX=ffffffff822d8fe8 RDX=ffff88801eaa4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900067b77a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880fb700000 R13=ffff88817ffef400 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81bb8591 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560e97500 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc54c7b6038 CR3=0000000052fe7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc54d2ed100 00007fc54c787460 00007fc54c787478 00007fc54c7874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001d85e9 RBX=0000000000000002 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f93561da450 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000010000000 Opmask02=000000001fffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562d0a71f7b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562d0a71f020 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373255e79014483 7373255b1bed6e59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae9cfa911b9afcf9 7373737611a3d45d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33367974746d7367 2f7974742f6c6175 747269762f736563 697665642f737973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003336797474 6d73672f7974742f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddef89e268e98f8a 0000000562d0a730 00000000000000e1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001b0a79 RBX=0000000000000003 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f63d8a00218 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99945d6a6b3088e5 a7bd28ce4d40234f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d51bc9975476706 f21e8f55aebf44a4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ea6aeee829d7410 63fbbae0d822107d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 075273e058100a57 033e50e88f4d6113 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000011d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000086 86d99322009c6b9f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008600000086 0000000000000086 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000082244418 09a6e2b28200e3b2 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8764ef1a00a9254e 0000000005175faf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf1b84cd66e67dff 879ecfbe25a528c2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af81b209f88c7621 ddc2872b69e9c6c4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7890060000000000 28000045000800aa 000000000000000b 0000555000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0894928d88080002 d4030894928d8808 000000010000001e ff1414ac00000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2cefd7ecd55a7769 cdb12030659f7500 0000000200000021 0000506c00000001 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060172dc668a2e 7234c358303ff580 000000030000000a 419a47ac00000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc048c0800021000 041000060170fc00 000000040000000d ffff040200000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001018010 000a800401000001 0108000180040401 73ec004300000007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 f508018003000404 a4e6080001000000 0806060100000006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76646174616201ff ffffffffffffffdf 0000000500000007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000041000000001 fc048c0800021000 041000060170fc00 000000040000000d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000